$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32322d3232203d3e203539323733.roa File: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (raw, json) Hash identifier: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs= Subject key identifier: C2:76:80:04:86:2C:06:74:A0:BB:C5:CB:4E:1E:30:33:9E:FB:09:D5 Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 88303F1A67ED6A4C81252D9E9C8C48BAAFD4F8 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32322d3232203d3e203539323733.roa Signing time: Wed 04 Jun 2025 19:00:00 +0000 ROA not before: Wed 04 Jun 2025 18:55:00 +0000 ROA not after: Wed 03 Jun 2026 19:00:00 +0000 asID: 59273 IP address blocks: 103.226.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88:30:3f:1a:67:ed:6a:4c:81:25:2d:9e:9c:8c:48:ba:af:d4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Jun 4 18:55:00 2025 GMT Not After : Jun 3 19:00:00 2026 GMT Subject: CN=C2768004862C0674A0BBC5CB4E1E30339EFB09D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:08:90:13:29:17:96:f1:81:0b:3b:20:78: f4:10:03:d1:41:ae:0b:9d:74:dc:af:0c:7d:9d:b3: 52:ab:20:7d:fd:57:9d:6a:9a:96:1b:96:6e:9f:65: b0:79:70:d3:0e:24:14:11:3f:7a:9c:47:70:4b:0f: ac:0e:9a:a0:59:32:d9:6f:95:e6:0c:be:88:06:98: 52:b9:8e:50:e0:f4:90:6c:7c:70:f4:21:e9:a9:e2: 06:31:18:db:de:ad:56:59:5d:3b:9e:9b:13:9b:b2: b5:b0:22:72:0a:4c:62:a4:5a:20:53:57:2a:fd:db: 38:23:ad:9c:36:27:b7:ae:18:20:54:91:0b:e4:1f: 1c:d0:0b:94:e0:56:7f:27:0b:4b:ff:aa:20:fe:7c: 34:39:7f:9e:ca:a9:50:7d:5a:dc:7e:a9:ad:69:c7: 0b:ed:d6:cb:b8:75:8d:60:6a:96:a5:a7:98:46:34: 24:0b:ec:e9:29:47:76:7c:63:48:31:51:18:0c:dd: e6:1e:45:a0:86:a8:de:db:1f:e3:1a:e4:2e:93:85: 31:d1:df:16:23:fb:d3:58:96:e1:50:dd:dd:0b:63: ac:a3:33:80:8b:e9:73:cb:10:85:e4:1a:db:63:a2: 8b:72:a6:88:1e:58:88:15:c0:76:53:c0:73:66:46: 32:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:76:80:04:86:2C:06:74:A0:BB:C5:CB:4E:1E:30:33:9E:FB:09:D5 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32322d3232203d3e203539323733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.226.48.0/22 Signature Algorithm: sha256WithRSAEncryption b3:04:c0:1e:99:97:db:89:10:50:5c:f2:d0:d1:94:23:13:90: eb:97:9f:e8:d9:d2:9e:7a:f1:1c:31:57:ad:f6:af:c1:ef:eb: b4:a5:6e:99:f3:d8:5e:af:a3:9a:39:8d:18:b6:10:ef:3f:b6: 67:5e:6b:11:cd:8a:48:b0:e7:22:94:69:2b:1f:52:d6:2c:9a: d1:55:b9:42:09:0a:3f:ff:b4:cb:bd:17:fa:61:24:aa:89:21: 4f:22:30:de:06:1a:9b:f3:f1:61:db:56:ad:aa:19:fc:7b:5a: fc:4e:9b:f0:aa:95:cb:3b:46:86:1e:5a:c2:f1:68:81:2b:e5: 69:45:b7:10:8d:0b:eb:8f:4f:b8:a6:0f:ff:41:fc:a1:8b:aa: 83:a5:c7:9d:65:24:fd:42:0a:73:25:4b:b9:df:db:07:5b:d2: e5:88:e2:3f:52:60:23:04:74:11:39:b6:0c:c3:55:70:24:14: 9f:a0:20:b2:b0:d1:64:0f:8b:61:26:6e:36:0a:1a:1b:4c:7c: 92:39:e0:d8:50:c1:98:40:71:88:46:0d:15:5c:77:e4:b9:03: a7:ac:e0:59:4c:67:5d:90:d7:0b:da:8b:4e:bb:3a:70:30:b0: 3a:44:9d:47:e6:09:ea:62:19:dc:59:28:71:9e:90:b1:aa:05: 23:a5:eb:c5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAIgwPxpn7WpMgSUtnpyMSLqv1PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTA2MDQxODU1MDBaFw0yNjA2MDMxOTAwMDBaMDMxMTAvBgNV BAMTKEMyNzY4MDA0ODYyQzA2NzRBMEJCQzVDQjRFMUUzMDMzOUVGQjA5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52QiQEykXlvGBCzsgePQQA9FB rguddNyvDH2ds1KrIH39V51qmpYblm6fZbB5cNMOJBQRP3qcR3BLD6wOmqBZMtlv leYMvogGmFK5jlDg9JBsfHD0Iemp4gYxGNverVZZXTuemxObsrWwInIKTGKkWiBT Vyr92zgjrZw2J7euGCBUkQvkHxzQC5TgVn8nC0v/qiD+fDQ5f57KqVB9Wtx+qa1p xwvt1su4dY1gapalp5hGNCQL7OkpR3Z8Y0gxURgM3eYeRaCGqN7bH+Ma5C6ThTHR 3xYj+9NYluFQ3d0LY6yjM4CL6XPLEIXkGttjootypogeWIgVwHZTwHNmRjLfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwnaABIYsBnSgu8XLTh4wM577CdUwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MGNlNzMzLTc3ZjQtNGUxZC1i NWVjLTYxZWRlNGRhMDc0ZC8wLzMxMzAzMzJlMzIzMjM2MmUzNDM4MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzUzOTMyMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfiMDANBgkqhkiG 9w0BAQsFAAOCAQEAswTAHpmX24kQUFzy0NGUIxOQ65ef6NnSnnrxHDFXrfavwe/r tKVumfPYXq+jmjmNGLYQ7z+2Z15rEc2KSLDnIpRpKx9S1iya0VW5QgkKP/+0y70X +mEkqokhTyIw3gYam/PxYdtWraoZ/Hta/E6b8KqVyztGhh5awvFogSvlaUW3EI0L 649PuKYP/0H8oYuqg6XHnWUk/UIKcyVLud/bB1vS5YjiP1JgIwR0ETm2DMNVcCQU n6AgsrDRZA+LYSZuNgoaG0x8kjng2FDBmEBxiEYNFVx35LkDp6zgWUxnXZDXC9qL Trs6cDCwOkSdR+YJ6mIZ3FkocZ6QsaoFI6XrxQ== -----END CERTIFICATE-----Generated at Mon Jun 16 21:35:32 2025 by rpki-client