$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa File: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (raw, json) Hash identifier: ZpF/KGxPbErqJ8VSz1WkiCybrFY70jeXAIswB/bXwuI= Subject key identifier: C8:D1:1F:B9:1B:93:77:29:FB:04:0D:95:CF:1B:CC:ED:77:E7:93:D4 Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 4E9DB155E9DBACBEAA5B3C8A7D1AA1A552D9B8D5 Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa Signing time: Mon 02 Jun 2025 01:03:14 +0000 ROA not before: Mon 02 Jun 2025 00:58:14 +0000 ROA not after: Mon 01 Jun 2026 01:03:14 +0000 asID: 132164 IP address blocks: 103.50.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 20:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9d:b1:55:e9:db:ac:be:aa:5b:3c:8a:7d:1a:a1:a5:52:d9:b8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: Jun 2 00:58:14 2025 GMT Not After : Jun 1 01:03:14 2026 GMT Subject: CN=C8D11FB91B937729FB040D95CF1BCCED77E793D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:bc:32:f3:84:2f:06:0c:1e:a3:e1:a4:27: 9b:e9:0e:37:71:d3:67:6d:61:56:cd:48:33:81:9d: c2:49:92:5f:b6:a4:25:b1:a0:79:69:5b:71:5d:ef: 09:fa:42:b8:35:26:8f:76:d4:06:86:b9:0b:20:a3: b1:eb:d6:5c:b1:33:79:f6:73:74:dc:c4:19:bd:af: ca:0f:b9:ae:a6:53:d6:13:5b:44:8e:c0:80:28:59: a6:60:54:1f:9b:14:88:4b:68:f2:89:8a:1a:69:0c: 45:c0:d1:b8:a6:8e:ed:ac:d7:cc:cf:59:2c:2f:fd: 0e:c7:d2:1f:81:ff:47:2d:3b:cf:75:1e:81:8e:2f: 5e:50:33:93:e3:a4:47:0a:6d:e7:ee:20:4d:f4:3b: 76:f0:37:38:b3:af:32:21:e4:32:6c:94:2a:5d:7e: 8a:40:78:68:3c:97:47:da:1b:3f:87:83:30:6b:e8: a4:3a:fb:02:c9:4d:27:5a:44:49:47:18:ca:9a:c5: 5e:4a:4d:86:c7:87:49:8f:70:fd:a1:dd:56:96:dd: 7e:40:c4:8c:d3:e3:cf:69:f1:e4:55:19:28:46:ec: b1:8b:11:e6:fb:e2:79:36:7a:27:1d:28:7e:77:1c: 39:c2:fa:67:ec:b1:96:02:24:a1:3e:c0:5e:a4:ae: 3f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D1:1F:B9:1B:93:77:29:FB:04:0D:95:CF:1B:CC:ED:77:E7:93:D4 X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.50.216.0/24 Signature Algorithm: sha256WithRSAEncryption b4:fd:51:fe:dd:f6:96:66:29:a2:52:b8:f1:21:84:b0:7a:18: cf:38:ef:53:5c:49:9a:ae:77:1e:d7:17:9f:9d:23:56:07:a5: 2b:48:98:fe:8c:47:e3:e4:c6:50:1f:1c:11:d5:e4:0a:54:0c: 27:4d:f9:9f:2a:48:45:62:05:f0:5c:2a:50:0d:de:c0:c1:6a: 09:55:c9:b5:7b:f2:f9:6e:af:32:00:9c:4b:f8:92:d9:14:b1: 40:5c:9b:4b:6c:ed:a1:01:83:b7:c7:44:a7:94:2a:70:ff:3e: 83:74:85:e0:84:80:d3:99:55:ab:bb:6e:c9:7a:10:27:5a:5d: fa:63:d8:56:4b:b9:7d:d8:29:76:bd:cc:75:dd:61:62:fc:f2: 17:4f:92:7d:c8:42:6d:ea:f7:db:6c:af:55:cf:aa:62:56:39: a5:ea:aa:bd:e5:dc:0f:84:6d:8a:4e:e6:08:47:2f:aa:3d:59: a5:e5:8d:a7:47:e2:25:f2:12:ae:cb:8b:29:7e:19:98:5d:db: 9e:7b:6d:0e:fc:51:8f:bf:8e:bb:10:37:f4:3a:ad:33:1b:9d: 5d:5e:de:5d:f4:ad:c6:12:67:26:df:72:9f:31:a2:39:b8:7d: c0:31:81:bf:e3:51:27:01:e5:a1:7a:61:2e:cd:84:25:23:36: 72:45:ef:21 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTp2xVenbrL6qWzyKfRqhpVLZuNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNTA2MDIwMDU4MTRaFw0yNjA2MDEwMTAzMTRaMDMxMTAvBgNV BAMTKEM4RDExRkI5MUI5Mzc3MjlGQjA0MEQ5NUNGMUJDQ0VENzdFNzkzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQAbwy84QvBgweo+GkJ5vpDjdx 02dtYVbNSDOBncJJkl+2pCWxoHlpW3Fd7wn6Qrg1Jo921AaGuQsgo7Hr1lyxM3n2 c3TcxBm9r8oPua6mU9YTW0SOwIAoWaZgVB+bFIhLaPKJihppDEXA0bimju2s18zP WSwv/Q7H0h+B/0ctO891HoGOL15QM5PjpEcKbefuIE30O3bwNzizrzIh5DJslCpd fopAeGg8l0faGz+HgzBr6KQ6+wLJTSdaRElHGMqaxV5KTYbHh0mPcP2h3VaW3X5A xIzT489p8eRVGShG7LGLEeb74nk2eicdKH53HDnC+mfssZYCJKE+wF6krj81AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyNEfuRuTdyn7BA2VzxvM7Xfnk9QwHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxNDFmODg0LWQ1YzktNDMzNi05 YTVjLTc3NzQxOWU1NmRjZS8wLzMxMzAzMzJlMzUzMDJlMzIzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzEzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzLYMA0GCSqG SIb3DQEBCwUAA4IBAQC0/VH+3faWZimiUrjxIYSwehjPOO9TXEmarnce1xefnSNW B6UrSJj+jEfj5MZQHxwR1eQKVAwnTfmfKkhFYgXwXCpQDd7AwWoJVcm1e/L5bq8y AJxL+JLZFLFAXJtLbO2hAYO3x0SnlCpw/z6DdIXghIDTmVWru27JehAnWl36Y9hW S7l92Cl2vcx13WFi/PIXT5J9yEJt6vfbbK9Vz6piVjml6qq95dwPhG2KTuYIRy+q PVml5Y2nR+Il8hKuy4spfhmYXduee20O/FGPv467EDf0Oq0zG51dXt5d9K3GEmcm 33KfMaI5uH3AMYG/41EnAeWhemEuzYQlIzZyRe8h -----END CERTIFICATE-----Generated at Tue Jun 17 12:25:48 2025 by rpki-client