$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203438343635.roa File: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: WBg+Oj5FDShLbz1I5ijbkQnlP4hqNRkJwhL0ngYl8bg= Subject key identifier: FC:13:07:E4:F6:08:91:64:B6:46:48:9B:F2:E2:5A:73:77:1C:86:31 Certificate issuer: /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Certificate serial: 60646CBE3B4DAF24438649DDD0D7FDFE2B6C824E Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203438343635.roa Signing time: Mon 16 Jun 2025 03:02:56 +0000 ROA not before: Mon 16 Jun 2025 02:57:56 +0000 ROA not after: Mon 15 Jun 2026 03:02:56 +0000 asID: 48465 IP address blocks: 103.13.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 09:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:64:6c:be:3b:4d:af:24:43:86:49:dd:d0:d7:fd:fe:2b:6c:82:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Validity Not Before: Jun 16 02:57:56 2025 GMT Not After : Jun 15 03:02:56 2026 GMT Subject: CN=FC1307E4F6089164B646489BF2E25A73771C8631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:55:9f:47:bb:af:44:29:09:f3:f7:14:df: 8b:30:a5:ac:be:f5:5b:d6:7b:19:f9:c7:76:35:3f: d1:db:50:56:d3:e5:04:20:21:01:66:d5:43:63:e5: ca:ff:da:37:a7:2f:78:3a:80:f4:14:fc:de:44:b2: 50:71:15:6a:84:e7:b0:3d:6c:38:03:8e:05:69:d6: 9d:a9:27:f6:df:70:8d:5f:15:5b:e7:84:46:15:94: e1:a9:e1:64:e4:94:e5:1a:88:b9:7d:16:47:f8:dd: 1b:39:b9:86:a6:b5:7d:97:f9:4f:71:e8:23:70:15: 45:7f:9a:fc:38:c3:12:55:bd:6b:c2:8d:f8:5b:78: 31:03:60:64:b0:07:e1:4b:85:d5:c1:61:3c:41:e4: 0e:05:4f:02:3e:af:2e:08:c4:20:d7:8e:d2:ef:5e: f2:5a:7d:08:5e:7e:68:12:cf:96:75:46:c5:0a:28: 9e:e8:03:2d:38:9e:8c:e4:7e:27:2a:f5:4f:6f:64: b7:ac:f0:20:c4:af:68:7b:9a:40:4e:45:20:1d:bb: 66:f0:97:70:fe:ca:55:fb:d2:72:b3:ef:3a:75:c7: e5:cc:94:b5:74:cf:6b:ac:c6:11:e1:77:3b:52:7b: 97:23:d4:9c:fd:4c:a7:5d:9b:06:51:44:c8:24:95: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:13:07:E4:F6:08:91:64:B6:46:48:9B:F2:E2:5A:73:77:1C:86:31 X509v3 Authority Key Identifier: keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.204.0/24 Signature Algorithm: sha256WithRSAEncryption ba:0c:ff:21:84:c8:45:49:62:e2:ae:28:31:63:a6:b9:ee:d3: 73:95:97:61:29:32:b7:ce:11:a9:c5:f0:37:4f:a9:da:bb:9c: 74:bb:cd:22:85:9a:19:92:1e:42:27:d9:e6:57:ca:5b:86:21: 73:7e:de:9d:6b:f0:d7:c3:9e:30:71:07:7a:29:a8:a2:9f:f6: 83:40:82:7d:10:f4:45:db:3b:31:63:94:b1:67:50:22:24:d8: ad:3d:5c:62:42:38:53:6b:76:54:fd:c3:a1:35:15:92:86:d7: d4:6c:d0:b3:7a:01:a4:08:a8:1d:aa:46:00:26:f4:a5:a3:95: ea:90:59:1d:c3:80:e5:1c:23:56:68:54:4b:aa:cb:a2:cd:17: 74:20:4f:fe:84:30:d8:39:0d:56:98:44:6a:fc:a7:65:8c:54: f0:fe:fa:5c:84:ec:ef:79:fd:19:63:05:de:7b:b6:40:6e:9e: e8:61:b2:48:51:3b:50:b2:3f:46:1e:c9:80:34:f6:3f:05:e7: ff:6a:57:bf:6b:02:12:3d:37:a5:c5:fb:8a:39:90:76:2d:d3: 21:f3:ca:27:46:00:fb:86:1f:9b:95:ac:0d:51:f7:05:98:34: cc:4f:32:bc:eb:28:df:4f:5f:2c:e5:40:30:2a:07:fc:6e:01: 7d:a9:a8:99 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYGRsvjtNryRDhknd0Nf9/itsgk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky QzQwNkQ5QjAeFw0yNTA2MTYwMjU3NTZaFw0yNjA2MTUwMzAyNTZaMDMxMTAvBgNV BAMTKEZDMTMwN0U0RjYwODkxNjRCNjQ2NDg5QkYyRTI1QTczNzcxQzg2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXlVWfR7uvRCkJ8/cU34swpay+ 9VvWexn5x3Y1P9HbUFbT5QQgIQFm1UNj5cr/2jenL3g6gPQU/N5EslBxFWqE57A9 bDgDjgVp1p2pJ/bfcI1fFVvnhEYVlOGp4WTklOUaiLl9Fkf43Rs5uYamtX2X+U9x 6CNwFUV/mvw4wxJVvWvCjfhbeDEDYGSwB+FLhdXBYTxB5A4FTwI+ry4IxCDXjtLv XvJafQhefmgSz5Z1RsUKKJ7oAy04nozkficq9U9vZLes8CDEr2h7mkBORSAdu2bw l3D+ylX70nKz7zp1x+XMlLV0z2usxhHhdztSe5cj1Jz9TKddmwZRRMgklef7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU/BMH5PYIkWS2Rkib8uJac3cchjEwHwYDVR0j BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2 QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw NkQ5Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzkwOTZjLTI4ZGMtNDRlNC1i NGNmLTk2ZDYzMWI3M2FjMC8wLzMxMzAzMzJlMzEzMzJlMzIzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcNzDANBgkqhkiG 9w0BAQsFAAOCAQEAugz/IYTIRUli4q4oMWOmue7Tc5WXYSkyt84RqcXwN0+p2ruc dLvNIoWaGZIeQifZ5lfKW4Yhc37enWvw18OeMHEHeimoop/2g0CCfRD0Rds7MWOU sWdQIiTYrT1cYkI4U2t2VP3DoTUVkobX1GzQs3oBpAioHapGACb0paOV6pBZHcOA 5RwjVmhUS6rLos0XdCBP/oQw2DkNVphEavynZYxU8P76XITs73n9GWMF3nu2QG6e 6GGySFE7ULI/Rh7JgDT2PwXn/2pXv2sCEj03pcX7ijmQdi3TIfPKJ0YA+4Yfm5Ws DVH3BZg0zE8yvOso309fLOVAMCoH/G4BfamomQ== -----END CERTIFICATE-----Generated at Mon Jun 16 12:19:51 2025 by rpki-client