$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa File: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (raw, json) Hash identifier: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA= Subject key identifier: 8A:8B:79:6D:12:B7:27:E0:4E:FE:49:E7:08:70:E8:E4:F8:FF:8A:1A Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 2C8512872CCA51DDF38C4E6B4689BC494ADC9FE7 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa Signing time: Fri 13 Jun 2025 15:02:30 +0000 ROA not before: Fri 13 Jun 2025 14:57:30 +0000 ROA not after: Fri 12 Jun 2026 15:02:30 +0000 asID: 141947 IP address blocks: 103.166.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 01:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:85:12:87:2c:ca:51:dd:f3:8c:4e:6b:46:89:bc:49:4a:dc:9f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Jun 13 14:57:30 2025 GMT Not After : Jun 12 15:02:30 2026 GMT Subject: CN=8A8B796D12B727E04EFE49E70870E8E4F8FF8A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:d9:b4:dd:14:8a:e5:b7:78:ee:00:11:39: f4:2d:1d:d9:f5:5f:32:5d:82:b7:00:30:bf:a3:72: 3f:f7:e7:42:80:a5:ec:84:31:87:f0:c2:29:bf:6a: 76:a0:9d:e2:75:23:8d:3c:0f:56:03:ee:65:7b:f0: 2e:a1:0b:03:f0:fe:a0:dd:ad:06:9b:fc:b9:34:17: c2:b9:fd:93:ef:9e:17:3c:d3:be:b3:a3:c1:82:e5: 7c:f5:aa:c0:e1:4a:89:d7:45:f4:20:23:a9:d2:ac: b1:25:0e:2f:0f:f0:7b:9f:14:6c:3a:47:31:f5:07: 29:01:98:66:30:57:b0:0e:b0:d9:80:64:2c:bd:16: 6f:ff:b2:14:0e:51:33:3b:c3:4b:aa:5f:ee:e6:c5: 71:06:17:10:c2:28:55:44:2f:b3:3e:8a:47:71:74: 29:81:b9:9f:cc:89:94:3b:75:cc:3a:07:9d:f9:9c: 24:28:c7:ca:d3:97:05:56:f2:ba:0c:6c:a0:a3:f7: 00:ed:b1:f0:64:7e:0a:8b:72:ea:3b:c1:70:f4:93: cd:57:ca:71:ed:95:41:ed:f6:6f:7e:83:be:8a:31: 59:26:1e:bd:38:7f:78:24:51:8a:4d:ec:73:05:ac: 8f:11:5a:4d:6d:ff:15:ef:5f:35:17:a4:29:82:2f: 5a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8B:79:6D:12:B7:27:E0:4E:FE:49:E7:08:70:E8:E4:F8:FF:8A:1A X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.124.0/24 Signature Algorithm: sha256WithRSAEncryption 35:8d:5e:d1:3d:22:36:23:45:74:cc:12:f1:2a:d0:ce:34:01: 61:34:c0:44:4b:39:c2:4c:b0:6c:8f:b4:84:cb:e6:81:ef:3f: 7c:f2:71:e8:86:ff:f2:2d:9e:8a:91:b3:05:91:c6:a0:79:9a: ac:8c:e4:15:22:e9:9b:d2:e8:62:71:2b:54:a8:6a:fa:f7:a9: b9:d0:84:d3:2d:be:be:8e:af:7e:38:17:ac:1a:69:f1:00:ea: c7:7b:1c:9d:0e:8e:d4:8e:9f:66:d6:15:1b:27:a1:54:15:40: 87:3f:a7:dd:1b:ac:70:78:73:7b:62:f4:b8:85:7e:ca:5c:23: 0e:3c:56:a0:ca:d2:1e:2e:23:b2:3d:43:97:38:0b:e0:89:81: 90:fa:0d:3c:7d:22:07:35:ce:b1:fd:97:4d:c7:2e:94:14:99: 9a:45:81:1d:ed:14:4b:c5:91:b4:da:ac:6a:ef:2e:e6:34:a9: 91:0d:70:5a:84:a7:e6:33:1a:88:03:d7:24:53:cf:93:8c:cc: 3f:21:cf:63:12:b7:6d:de:62:78:b8:13:30:1b:97:63:a1:28: 2e:59:f6:2e:1f:47:75:d0:a9:8b:fc:70:d8:14:b5:4f:98:07: e8:10:d3:3b:ea:73:6a:bc:df:9f:96:31:db:24:85:42:32:62: ee:c4:3f:27 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULIUShyzKUd3zjE5rRom8SUrcn+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTA2MTMxNDU3MzBaFw0yNjA2MTIxNTAyMzBaMDMxMTAvBgNV BAMTKDhBOEI3OTZEMTJCNzI3RTA0RUZFNDlFNzA4NzBFOEU0RjhGRjhBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFtm03RSK5bd47gAROfQtHdn1 XzJdgrcAML+jcj/350KApeyEMYfwwim/anagneJ1I408D1YD7mV78C6hCwPw/qDd rQab/Lk0F8K5/ZPvnhc8076zo8GC5Xz1qsDhSonXRfQgI6nSrLElDi8P8HufFGw6 RzH1BykBmGYwV7AOsNmAZCy9Fm//shQOUTM7w0uqX+7mxXEGFxDCKFVEL7M+ikdx dCmBuZ/MiZQ7dcw6B535nCQox8rTlwVW8roMbKCj9wDtsfBkfgqLcuo7wXD0k81X ynHtlUHt9m9+g76KMVkmHr04f3gkUYpN7HMFrI8RWk1t/xXvXzUXpCmCL1pNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUiot5bRK3J+BO/knnCHDo5Pj/ihowHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q1NGU0NTZkLWRiZTItNDYwYy04 NmQ0LWViYzJkMTE1NjE3Ni8wLzMxMzAzMzJlMzEzNjM2MmUzMTMyMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM0Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpnwwDQYJ KoZIhvcNAQELBQADggEBADWNXtE9IjYjRXTMEvEq0M40AWE0wERLOcJMsGyPtITL 5oHvP3zyceiG//ItnoqRswWRxqB5mqyM5BUi6ZvS6GJxK1Soavr3qbnQhNMtvr6O r344F6waafEA6sd7HJ0OjtSOn2bWFRsnoVQVQIc/p90brHB4c3ti9LiFfspcIw48 VqDK0h4uI7I9Q5c4C+CJgZD6DTx9Igc1zrH9l03HLpQUmZpFgR3tFEvFkbTarGrv LuY0qZENcFqEp+YzGogD1yRTz5OMzD8hz2MSt23eYni4EzAbl2OhKC5Z9i4fR3XQ qYv8cNgUtU+YB+gQ0zvqc2q835+WMdskhUIyYu7EPyc= -----END CERTIFICATE-----Generated at Mon Jun 30 02:38:16 2025 by rpki-client