$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa File: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (raw, json) Hash identifier: m681LM1ItdW4dx+wPJxInCtAMds6i/b/AFLjGDvuwL4= Subject key identifier: 85:D4:F6:94:CF:1F:C9:63:21:65:D4:DB:94:5D:0D:DF:06:32:BA:35 Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 3F8150580AAF85E543E92A31C7488C4D62ECE4DB Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa Signing time: Wed 16 Jul 2025 08:00:01 +0000 ROA not before: Wed 16 Jul 2025 07:55:01 +0000 ROA not after: Wed 15 Jul 2026 08:00:01 +0000 asID: 147112 IP address blocks: 103.169.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 15:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:81:50:58:0a:af:85:e5:43:e9:2a:31:c7:48:8c:4d:62:ec:e4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Jul 16 07:55:01 2025 GMT Not After : Jul 15 08:00:01 2026 GMT Subject: CN=85D4F694CF1FC9632165D4DB945D0DDF0632BA35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:31:4b:9f:39:c6:cf:98:b5:18:25:c4:66: 52:5a:b8:e9:5d:c2:48:ab:1a:34:0e:1b:21:71:ca: ca:8b:ea:1e:1b:c4:61:68:66:d5:41:1b:4d:15:e6: 2d:11:af:11:01:bb:96:c4:6b:77:3d:3c:23:33:25: e1:0c:7e:e7:d0:ef:ab:fc:af:d4:4f:cf:32:cc:fd: 30:74:dd:a6:e1:22:fc:6f:0a:27:76:9e:27:79:d0: 69:7d:6d:de:1b:ea:6c:83:9b:a7:43:10:85:15:1c: f4:7e:89:27:4f:e3:05:32:cc:e7:4c:72:32:bd:81: a4:40:f0:cb:29:85:0a:d8:d7:fc:f8:25:29:93:e9: d4:6b:09:a5:c3:49:00:70:6d:32:c7:21:2b:c4:b7: bf:67:b5:96:a9:27:79:f9:d8:31:54:73:e0:fb:e5: 6c:68:7b:24:a8:13:ae:3f:14:9e:d9:32:a8:db:04: f1:bb:4b:96:16:70:79:da:72:73:d2:12:4b:af:b9: a5:9f:cf:cf:b7:04:e7:94:0b:42:7d:68:91:ed:f9: b2:63:42:33:9d:39:a4:3e:4f:52:22:92:2e:c7:f7: 65:35:e2:6e:fb:ee:a6:b5:5a:fc:95:b7:80:9f:b4: e2:1f:68:19:dd:87:31:d9:76:be:7c:14:78:68:d4: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D4:F6:94:CF:1F:C9:63:21:65:D4:DB:94:5D:0D:DF:06:32:BA:35 X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.199.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:82:08:f3:40:c0:ac:8a:f5:c5:c6:ce:24:a1:3c:3b:0f:12: 8f:fc:72:a4:bc:f8:5d:09:d2:c2:da:ae:74:25:ec:d9:9f:01: ed:fb:82:6e:ac:e6:ef:56:e7:a5:54:e5:58:66:0b:3d:4f:7c: 48:9a:20:fd:c6:c4:38:fe:24:7a:74:ab:c3:8a:11:7e:f0:21: 8f:93:27:d2:e7:01:b7:03:03:e8:1b:59:6f:67:8e:48:5e:26: d1:c3:5c:97:00:9e:5c:c8:83:8b:d6:d8:9c:bc:82:8c:6d:43: 6a:9a:f3:51:3e:3a:d7:25:5c:f4:fc:c2:ed:09:42:f3:b0:58: dc:9f:67:2b:86:af:94:38:14:f8:92:59:65:01:6d:1b:76:94: f1:3a:e7:db:06:2f:bd:81:bb:d7:a1:db:45:b2:88:bd:83:f6: ac:c2:f4:fd:8c:02:b6:0c:99:7e:87:7e:16:6c:c5:11:c3:5c: 6a:c8:62:32:f5:5c:66:16:3e:eb:c0:4f:91:d1:64:1e:15:c1: 20:94:50:a6:b7:03:72:31:89:a3:da:bd:76:29:4e:67:c8:15: 01:ba:ac:18:fb:d1:c2:d9:b6:4f:48:48:04:bd:16:27:28:76: bc:22:65:e9:ae:4d:44:14:03:04:19:db:5a:e8:9e:47:ac:60: 46:93:2d:ec -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUP4FQWAqvheVD6Soxx0iMTWLs5NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNTA3MTYwNzU1MDFaFw0yNjA3MTUwODAwMDFaMDMxMTAvBgNV BAMTKDg1RDRGNjk0Q0YxRkM5NjMyMTY1RDREQjk0NUQwRERGMDYzMkJBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YDFLnznGz5i1GCXEZlJauOld wkirGjQOGyFxysqL6h4bxGFoZtVBG00V5i0RrxEBu5bEa3c9PCMzJeEMfufQ76v8 r9RPzzLM/TB03abhIvxvCid2nid50Gl9bd4b6myDm6dDEIUVHPR+iSdP4wUyzOdM cjK9gaRA8MsphQrY1/z4JSmT6dRrCaXDSQBwbTLHISvEt79ntZapJ3n52DFUc+D7 5WxoeySoE64/FJ7ZMqjbBPG7S5YWcHnacnPSEkuvuaWfz8+3BOeUC0J9aJHt+bJj QjOdOaQ+T1Iiki7H92U14m777qa1WvyVt4CftOIfaBndhzHZdr58FHho1K2hAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhdT2lM8fyWMhZdTblF0N3wYyujUwHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTRhOGNlLTE4ZjQtNDk4OC1h OTUxLTk2NjRkZDE3NmNkOS8wLzMxMzAzMzJlMzEzNjM5MmUzMTM5MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqccwDQYJ KoZIhvcNAQELBQADggEBAAyCCPNAwKyK9cXGziShPDsPEo/8cqS8+F0J0sLarnQl 7NmfAe37gm6s5u9W56VU5VhmCz1PfEiaIP3GxDj+JHp0q8OKEX7wIY+TJ9LnAbcD A+gbWW9njkheJtHDXJcAnlzIg4vW2Jy8goxtQ2qa81E+OtclXPT8wu0JQvOwWNyf ZyuGr5Q4FPiSWWUBbRt2lPE659sGL72Bu9eh20WyiL2D9qzC9P2MArYMmX6HfhZs xRHDXGrIYjL1XGYWPuvAT5HRZB4VwSCUUKa3A3IxiaPavXYpTmfIFQG6rBj70cLZ tk9ISAS9FicodrwiZemuTUQUAwQZ21ronkesYEaTLew= -----END CERTIFICATE-----Generated at Thu Aug 7 20:24:56 2025 by rpki-client