$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa File: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (raw, json) Hash identifier: BdsS4s7jPHig7lZYR1kjJB8vTutisx05tJ8qnuC/vHI= Subject key identifier: 02:41:63:0C:2D:23:98:C2:5C:72:42:6E:D3:15:B6:EC:80:3C:F6:0C Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 5E6A98CE5EB1C278DA2E0D63BAD8CBFED1C865B4 Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa Signing time: Thu 17 Apr 2025 04:02:19 +0000 ROA not before: Thu 17 Apr 2025 03:57:19 +0000 ROA not after: Thu 16 Apr 2026 04:02:19 +0000 asID: 38320 IP address blocks: 103.161.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6a:98:ce:5e:b1:c2:78:da:2e:0d:63:ba:d8:cb:fe:d1:c8:65:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Apr 17 03:57:19 2025 GMT Not After : Apr 16 04:02:19 2026 GMT Subject: CN=0241630C2D2398C25C72426ED315B6EC803CF60C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:4e:e3:25:c8:1d:05:47:7a:8e:a3:89:c0: 8e:a6:3b:15:c0:6d:1e:6c:b8:a6:9b:4a:f6:67:0e: 49:fe:6e:0f:2d:34:94:c6:30:63:fd:71:27:7e:2b: 4a:3e:f0:86:f1:82:9d:67:a2:ac:f4:10:42:47:c7: 4d:21:86:70:b5:de:5a:c8:a4:4f:23:0e:b4:7c:57: 99:2e:4e:bd:15:8d:b0:ae:a6:df:02:96:49:66:40: c9:81:f0:38:d8:f6:9b:c6:16:a4:f0:bb:2c:0a:36: 16:c7:d1:c5:c7:6b:0f:26:af:4f:d5:6a:8e:f9:f8: fe:66:b8:05:21:a2:f8:e7:53:45:a6:c0:f2:e7:3d: 05:62:c3:26:4f:58:28:91:70:b4:f3:86:30:bd:f8: 8a:f3:53:7d:7f:b1:32:3c:df:b8:28:3e:59:06:95: bf:30:17:7f:4f:20:4f:aa:2f:cf:1b:58:7e:61:2f: 1c:aa:a9:dc:d2:15:b8:c4:52:01:8c:d8:bd:1e:9e: 8d:21:9e:3b:86:8d:d1:1f:22:13:5f:64:3f:8f:4f: ec:d6:d2:2f:3f:95:6a:98:64:0b:d8:a2:0d:31:3a: b3:a1:06:28:ce:06:d7:9d:f7:24:12:07:20:01:1d: 8b:ec:ed:d7:d1:cb:f2:33:0f:ff:47:b0:b8:d7:07: a7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:41:63:0C:2D:23:98:C2:5C:72:42:6E:D3:15:B6:EC:80:3C:F6:0C X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.202.0/23 Signature Algorithm: sha256WithRSAEncryption b0:24:1d:10:47:29:38:70:21:85:b1:4f:f8:b5:f7:37:a5:b6: 3b:a1:e2:b2:39:32:0f:c7:01:52:bb:c4:84:95:52:e8:52:31: 9e:24:79:2d:97:bf:1f:35:08:4c:08:69:b2:77:e5:a0:fa:68: a3:84:64:3b:c6:96:17:75:af:b7:b0:ca:a5:f4:9b:54:32:91: 0c:d6:e9:e7:e3:a5:1c:ae:3b:f4:68:b7:c8:da:cb:21:de:3d: 28:18:9c:60:4e:4d:38:67:dd:2d:41:ae:5f:64:41:dd:17:f1: 9e:71:3a:50:ef:54:22:dd:8b:3b:1e:8c:9b:1b:d1:1b:42:63: e6:d1:fc:10:07:50:48:0b:8f:52:88:17:15:68:9c:e6:8d:26: 09:6e:ef:e6:b6:59:20:34:8d:2b:a8:7b:3d:b0:f1:45:54:16: e9:c9:c6:31:4d:72:46:91:ca:d3:ff:c5:40:9f:77:89:bc:00: cd:cd:ee:07:33:41:f0:71:9b:62:db:23:10:dd:58:b7:76:e8: 44:bd:86:da:70:3b:e2:82:48:b3:47:d7:cf:d3:f5:7d:c4:1a: 7f:8f:f6:88:24:f2:60:1c:52:94:b1:6a:ad:d0:16:a6:1a:46: 69:6f:f8:a9:aa:4f:53:96:cd:0a:6f:5a:41:70:e5:37:14:7e: 36:79:61:a3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXmqYzl6xwnjaLg1jutjL/tHIZbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNTA0MTcwMzU3MTlaFw0yNjA0MTYwNDAyMTlaMDMxMTAvBgNV BAMTKDAyNDE2MzBDMkQyMzk4QzI1QzcyNDI2RUQzMTVCNkVDODAzQ0Y2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmq07jJcgdBUd6jqOJwI6mOxXA bR5suKabSvZnDkn+bg8tNJTGMGP9cSd+K0o+8Ibxgp1noqz0EEJHx00hhnC13lrI pE8jDrR8V5kuTr0VjbCupt8ClklmQMmB8DjY9pvGFqTwuywKNhbH0cXHaw8mr0/V ao75+P5muAUhovjnU0WmwPLnPQViwyZPWCiRcLTzhjC9+IrzU31/sTI837goPlkG lb8wF39PIE+qL88bWH5hLxyqqdzSFbjEUgGM2L0eno0hnjuGjdEfIhNfZD+PT+zW 0i8/lWqYZAvYog0xOrOhBijOBted9yQSByABHYvs7dfRy/IzD/9HsLjXB6dfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAkFjDC0jmMJcckJu0xW27IA89gwwHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY3ZjlmNTYyLTcyOTItNDRmMS04 ZTJjLTQ0MGEwNTMxYzM5Ni8wLzMxMzAzMzJlMzEzNjMxMmUzMjMwMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6HKMA0GCSqG SIb3DQEBCwUAA4IBAQCwJB0QRyk4cCGFsU/4tfc3pbY7oeKyOTIPxwFSu8SElVLo UjGeJHktl78fNQhMCGmyd+Wg+mijhGQ7xpYXda+3sMql9JtUMpEM1unn46Ucrjv0 aLfI2ssh3j0oGJxgTk04Z90tQa5fZEHdF/GecTpQ71Qi3Ys7HoybG9EbQmPm0fwQ B1BIC49SiBcVaJzmjSYJbu/mtlkgNI0rqHs9sPFFVBbpycYxTXJGkcrT/8VAn3eJ vADNze4HM0HwcZti2yMQ3Vi3duhEvYbacDvigkizR9fP0/V9xBp/j/aIJPJgHFKU sWqt0BamGkZpb/ipqk9Tls0Kb1pBcOU3FH42eWGj -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:38 2025 by rpki-client