$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32342d3234203d3e203338373838.roa File: 3130332e372e302e302f32342d3234203d3e203338373838.roa (raw, json) Hash identifier: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo= Subject key identifier: EC:42:11:08:4F:F2:FA:16:A9:42:33:03:EA:1E:21:A6:BB:CD:49:5D Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 759BAF6562F65BD7E678B1210D53977E6FBECB90 Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32342d3234203d3e203338373838.roa Signing time: Sat 14 Jun 2025 06:00:02 +0000 ROA not before: Sat 14 Jun 2025 05:55:02 +0000 ROA not after: Sat 13 Jun 2026 06:00:02 +0000 asID: 38788 IP address blocks: 103.7.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9b:af:65:62:f6:5b:d7:e6:78:b1:21:0d:53:97:7e:6f:be:cb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Jun 14 05:55:02 2025 GMT Not After : Jun 13 06:00:02 2026 GMT Subject: CN=EC4211084FF2FA16A9423303EA1E21A6BBCD495D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:b5:22:1d:a4:27:14:49:1a:62:ff:5e:3a: 51:53:38:8d:77:ce:ba:06:96:29:35:36:a0:5c:a4: 4e:6f:60:c5:5d:5d:bd:66:f1:bc:32:84:52:72:20: 7d:6c:12:9e:0f:8d:5c:2c:84:88:39:9d:8d:9d:9f: 3c:d1:1d:96:ff:9a:8f:52:5b:39:50:83:1f:16:02: 49:a8:9e:5a:61:81:bd:a0:3d:e1:a2:b8:7a:d7:d4: 77:c1:56:8e:da:bb:4c:6c:73:a9:2e:a7:78:99:41: 9c:f8:87:27:bd:b6:4d:3d:92:78:3f:a4:70:32:72: df:6b:e9:74:f3:4d:84:32:1d:19:ea:40:d8:10:d8: 43:d2:cc:f1:ed:67:dd:5d:97:2a:65:ed:ad:5b:0a: 67:9e:b2:4a:67:97:a7:64:ec:67:83:58:04:16:94: 6d:71:79:56:2b:09:23:47:7d:ba:7c:65:4f:f8:f1: 7f:3b:63:05:73:b9:5f:9d:e6:0d:84:e7:aa:5b:bd: 90:f9:84:88:c4:fe:46:9c:8c:2e:98:3b:89:21:cf: 47:5a:77:7f:64:4e:5a:68:3d:eb:fb:8e:d9:c3:a4: 00:2e:a4:54:d1:44:fa:92:a9:4b:8f:2b:a3:bf:55: b3:d1:1d:0f:d6:9d:07:1d:82:fa:cf:11:84:6d:a0: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:42:11:08:4F:F2:FA:16:A9:42:33:03:EA:1E:21:A6:BB:CD:49:5D X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32342d3234203d3e203338373838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.0.0/24 Signature Algorithm: sha256WithRSAEncryption 65:3f:df:d8:01:b5:39:58:d5:5c:85:f0:e6:77:8e:dd:ac:51: 5a:ec:be:4c:e0:41:2e:cc:1d:6e:1e:72:96:bf:88:58:3c:41: 4e:2b:fd:74:e6:6d:a0:73:bc:f9:75:18:53:56:13:0d:1c:29: 27:ac:fd:34:15:cc:28:ab:cf:67:43:16:77:b9:b6:d4:e0:d3: bd:ef:57:95:99:88:07:2a:3c:7c:73:5a:9a:3c:f9:f1:7d:f8: 35:d7:6e:da:0e:87:4c:69:e2:c0:e6:71:1b:dd:71:4b:bf:0e: 1f:59:98:1d:4c:70:fb:13:ea:2a:94:e1:58:41:28:95:31:c1: 87:9a:32:5e:50:66:63:46:6d:d8:95:f6:25:cb:b8:57:a0:01: 23:28:8a:7d:88:f2:63:84:61:6a:94:1d:7b:b3:d8:b0:9c:0b: 66:b1:8b:8d:b8:8e:31:22:7a:9d:19:6f:c0:1c:0c:57:33:4d: 94:f8:4d:05:45:0b:87:e0:b7:91:ca:0a:ff:62:17:95:c8:a8: 87:69:a8:d4:57:97:04:b9:22:00:68:b4:96:32:50:a0:df:61: 4b:c9:bc:3a:7e:87:45:9b:46:f9:97:0c:43:eb:82:7c:ee:a0: 09:0f:c3:75:4f:d5:cf:65:4e:c7:97:cd:ad:a9:01:c1:08:fe: 37:cd:40:6d -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUdZuvZWL2W9fmeLEhDVOXfm++y5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNTA2MTQwNTU1MDJaFw0yNjA2MTMwNjAwMDJaMDMxMTAvBgNV BAMTKEVDNDIxMTA4NEZGMkZBMTZBOTQyMzMwM0VBMUUyMUE2QkJDRDQ5NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAabUiHaQnFEkaYv9eOlFTOI13 zroGlik1NqBcpE5vYMVdXb1m8bwyhFJyIH1sEp4PjVwshIg5nY2dnzzRHZb/mo9S WzlQgx8WAkmonlphgb2gPeGiuHrX1HfBVo7au0xsc6kup3iZQZz4hye9tk09kng/ pHAyct9r6XTzTYQyHRnqQNgQ2EPSzPHtZ91dlypl7a1bCmeeskpnl6dk7GeDWAQW lG1xeVYrCSNHfbp8ZU/48X87YwVzuV+d5g2E56pbvZD5hIjE/kacjC6YO4khz0da d39kTlpoPev7jtnDpAAupFTRRPqSqUuPK6O/VbPRHQ/WnQcdgvrPEYRtoPV9AgMB AAGjggIrMIICJzAdBgNVHQ4EFgQU7EIRCE/y+hapQjMD6h4hprvNSV0wHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvMzEzMDMzMmUzNzJlMzAyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzMzM4MzczODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZwcAMA0GCSqGSIb3DQEBCwUA A4IBAQBlP9/YAbU5WNVchfDmd47drFFa7L5M4EEuzB1uHnKWv4hYPEFOK/105m2g c7z5dRhTVhMNHCknrP00Fcwoq89nQxZ3ubbU4NO971eVmYgHKjx8c1qaPPnxffg1 127aDodMaeLA5nEb3XFLvw4fWZgdTHD7E+oqlOFYQSiVMcGHmjJeUGZjRm3YlfYl y7hXoAEjKIp9iPJjhGFqlB17s9iwnAtmsYuNuI4xInqdGW/AHAxXM02U+E0FRQuH 4LeRygr/YheVyKiHaajUV5cEuSIAaLSWMlCg32FLybw6fodFm0b5lwxD64J87qAJ D8N1T9XPZU7Hl82tqQHBCP43zUBt -----END CERTIFICATE-----Generated at Mon Jun 16 06:19:26 2025 by rpki-client