$ rpki-client -vvf repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa File: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (raw, json) Hash identifier: oudTGBDalRCfCvgYs+K0jORqoSv3XWEHAn8WI/m8myE= Subject key identifier: 0D:C2:2A:9A:C8:5F:68:39:EC:D9:51:A9:2F:B4:C1:BF:DD:23:22:95 Certificate issuer: /CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Certificate serial: 75179A3A2C484FD3F0BE8330B4FCD6AAB110F558 Authority key identifier: 73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa Signing time: Tue 08 Jul 2025 05:00:01 +0000 ROA not before: Tue 08 Jul 2025 04:55:01 +0000 ROA not after: Tue 07 Jul 2026 05:00:01 +0000 asID: 147105 IP address blocks: 103.174.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 18:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:17:9a:3a:2c:48:4f:d3:f0:be:83:30:b4:fc:d6:aa:b1:10:f5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Validity Not Before: Jul 8 04:55:01 2025 GMT Not After : Jul 7 05:00:01 2026 GMT Subject: CN=0DC22A9AC85F6839ECD951A92FB4C1BFDD232295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1a:12:78:78:0f:13:8d:0e:60:63:a0:6d:99: 83:f0:78:e0:8b:9d:98:5b:43:be:03:ad:b1:d4:9e: 2d:e4:9c:82:67:c1:b5:44:d5:44:e0:ee:3f:f5:b5: ad:65:18:37:64:a6:13:f5:1a:36:e7:17:8a:59:67: b2:c8:0f:67:51:ce:97:d7:70:6d:36:a1:a5:c0:c0: aa:cd:a1:34:b7:30:62:8a:38:4d:e3:33:58:fa:26: 4c:23:64:35:38:2b:ab:6f:9a:bd:de:7e:8f:5e:cb: be:bf:37:01:93:bb:1d:6a:ac:0d:a9:14:52:db:02: b1:2e:5a:72:3a:58:33:1e:9d:42:ec:69:c1:91:58: 64:ea:38:c5:07:af:b3:1f:d5:17:eb:52:ee:14:4f: 21:4e:3f:ed:5f:32:f6:8e:14:a4:07:89:2f:6a:da: 72:7c:e5:c0:6e:29:f5:f7:e2:0e:98:07:26:c5:9e: dc:25:5c:e1:72:56:a8:4f:54:c8:f4:64:73:a9:8d: 30:bf:14:2e:40:2a:05:c7:fc:ab:e3:97:07:96:d9: 56:b0:70:ed:41:99:ea:3d:84:02:67:87:6b:5c:35: 98:62:f1:cc:2a:8e:16:87:4a:f1:44:93:46:0b:39: 28:fc:6f:ba:d0:23:88:23:e1:f3:0e:67:91:84:ea: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C2:2A:9A:C8:5F:68:39:EC:D9:51:A9:2F:B4:C1:BF:DD:23:22:95 X509v3 Authority Key Identifier: keyid:73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.232.0/23 Signature Algorithm: sha256WithRSAEncryption c0:30:1d:57:db:ad:b5:3b:cd:67:33:82:3f:85:3b:1e:76:91: f8:8e:68:9e:62:9c:0a:e1:f0:e9:76:43:2b:2d:9a:b9:56:f4: de:a4:0e:d4:ea:22:98:d7:1a:5c:ce:2f:06:1a:25:52:c0:d3: 80:cf:56:85:49:38:6d:b7:fe:00:eb:25:1e:61:3b:17:50:ff: 8d:84:ac:20:c6:65:ea:46:30:8c:36:18:4c:6d:bb:97:f2:fa: 5a:ea:e9:63:a2:83:46:86:a5:57:bf:cb:7e:c9:57:9c:03:d9: 69:85:2c:71:09:98:b5:85:5a:1c:63:57:77:e4:3f:4c:b2:a0: a7:80:84:c1:5e:20:4e:c5:a6:9b:99:02:c2:23:3f:6a:34:cb: ee:0e:ac:fe:a7:2a:30:62:80:15:a6:57:fc:00:72:b4:f6:5e: 4c:ec:af:43:8b:86:1c:fe:c4:db:be:4e:0e:fc:43:a7:54:d9: 73:dd:2f:47:5d:0a:01:be:a1:7c:b7:fd:ab:6a:79:1c:91:53: bd:26:ff:e8:30:89:b5:59:2c:e3:c4:95:86:cc:ce:4b:81:c9: a5:de:a9:40:c0:ab:32:3e:12:0c:0a:6e:3b:51:2a:3c:9b:71: ae:a1:d8:a2:13:c3:b2:96:1b:2f:e8:79:55:9c:a5:f7:e9:68: 33:fe:d9:70 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUdReaOixIT9PwvoMwtPzWqrEQ9VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIy RTgwMUQ5MDAeFw0yNTA3MDgwNDU1MDFaFw0yNjA3MDcwNTAwMDFaMDMxMTAvBgNV BAMTKDBEQzIyQTlBQzg1RjY4MzlFQ0Q5NTFBOTJGQjRDMUJGREQyMzIyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqGhJ4eA8TjQ5gY6BtmYPweOCL nZhbQ74DrbHUni3knIJnwbVE1UTg7j/1ta1lGDdkphP1GjbnF4pZZ7LID2dRzpfX cG02oaXAwKrNoTS3MGKKOE3jM1j6JkwjZDU4K6tvmr3efo9ey76/NwGTux1qrA2p FFLbArEuWnI6WDMenULsacGRWGTqOMUHr7Mf1RfrUu4UTyFOP+1fMvaOFKQHiS9q 2nJ85cBuKfX34g6YBybFntwlXOFyVqhPVMj0ZHOpjTC/FC5AKgXH/KvjlweW2Vaw cO1Bmeo9hAJnh2tcNZhi8cwqjhaHSvFEk0YLOSj8b7rQI4gj4fMOZ5GE6j9dAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUDcIqmshfaDns2VGpL7TBv90jIpUwHwYDVR0j BBgwFoAUc7lvWsQ6QhJ2DWYp+zayGy6AHZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2JlYTgxZC04NWFjLTQwYTUtYTdmNS0zZmEzNjJiMTdiY2IvMC83M0I5NkY1QUM0 M0E0MjEyNzYwRDY2MjlGQjM2QjIxQjJFODAxRDkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIyRTgw MUQ5MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYmVhODFkLTg1YWMtNDBhNS1h N2Y1LTNmYTM2MmIxN2JjYi8wLzMxMzAzMzJlMzEzNzM0MmUzMjMzMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzczMTMwMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnrugwDQYJ KoZIhvcNAQELBQADggEBAMAwHVfbrbU7zWczgj+FOx52kfiOaJ5inArh8Ol2Qyst mrlW9N6kDtTqIpjXGlzOLwYaJVLA04DPVoVJOG23/gDrJR5hOxdQ/42ErCDGZepG MIw2GExtu5fy+lrq6WOig0aGpVe/y37JV5wD2WmFLHEJmLWFWhxjV3fkP0yyoKeA hMFeIE7FppuZAsIjP2o0y+4OrP6nKjBigBWmV/wAcrT2Xkzsr0OLhhz+xNu+Tg78 Q6dU2XPdL0ddCgG+oXy3/atqeRyRU70m/+gwibVZLOPElYbMzkuByaXeqUDAqzI+ EgwKbjtRKjybca6h2KITw7KWGy/oeVWcpffpaDP+2XA= -----END CERTIFICATE-----Generated at Sun Aug 10 19:48:26 2025 by rpki-client