$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e32332e3230302e302f32322d3234203d3e203435323837.roa File: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (raw, json) Hash identifier: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY= Subject key identifier: D1:1B:66:0B:FE:5F:60:22:FE:85:2E:4E:14:B7:3D:14:49:09:96:69 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 67DFA01BDF75B42B7E56D927E1CBEC4146853EF5 Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e32332e3230302e302f32322d3234203d3e203435323837.roa Signing time: Mon 02 Jun 2025 01:02:34 +0000 ROA not before: Mon 02 Jun 2025 00:57:34 +0000 ROA not after: Mon 01 Jun 2026 01:02:34 +0000 asID: 45287 IP address blocks: 103.23.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 21:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:df:a0:1b:df:75:b4:2b:7e:56:d9:27:e1:cb:ec:41:46:85:3e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Jun 2 00:57:34 2025 GMT Not After : Jun 1 01:02:34 2026 GMT Subject: CN=D11B660BFE5F6022FE852E4E14B73D1449099669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:8b:9a:9e:e9:2f:f6:1a:48:85:40:7a:2c: 83:ca:80:fe:ad:1d:21:0e:c6:ce:6a:2e:b5:a0:24: aa:96:e3:a2:7c:21:34:9c:d8:6a:bf:72:67:ce:bf: 54:9a:dd:31:51:42:46:03:0c:f7:cd:39:52:97:21: e7:88:27:c4:49:ca:8b:b7:92:a8:51:b4:9c:70:3b: 86:6f:54:23:2a:26:1a:fa:3b:f5:86:27:b3:a6:92: 90:ac:03:50:d6:09:e4:9d:43:b6:c8:b2:a4:16:ef: f7:6d:03:da:d1:83:6f:ff:15:d9:97:0a:82:1e:56: aa:fa:29:2d:b9:9e:71:ff:fc:e4:90:c6:d7:9e:5e: e3:d3:b8:4d:30:d3:42:61:bd:63:1a:b4:71:32:5b: 6c:f5:ee:fa:0c:be:d9:6e:fb:df:14:23:62:bf:71: 1b:c6:36:7d:08:4f:a7:ce:99:41:c4:f6:13:aa:87: bc:b3:c8:61:10:08:c1:45:86:50:3f:5c:8b:e2:13: 96:03:cb:44:16:13:9f:3a:6e:48:24:9a:28:e4:c8: 45:51:3f:88:95:9f:cd:96:fb:30:df:7c:57:51:6a: 4e:23:a4:37:33:28:e4:2c:3e:70:ff:eb:49:e4:1f: 58:d9:3f:61:5d:28:5f:fd:b4:5a:e6:b1:58:e4:d0: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1B:66:0B:FE:5F:60:22:FE:85:2E:4E:14:B7:3D:14:49:09:96:69 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e32332e3230302e302f32322d3234203d3e203435323837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.200.0/22 Signature Algorithm: sha256WithRSAEncryption 76:7f:37:83:ca:a6:fb:96:d9:64:e6:35:69:b5:8e:4f:6f:79: ae:94:3e:ac:4b:b9:f0:3b:02:ef:dc:7d:63:9c:cf:30:9b:83: 04:fd:1d:33:41:ba:93:da:cc:3d:e5:38:87:8d:13:f1:f1:68: cb:3e:3f:10:17:c8:82:68:c5:34:ff:12:09:c4:31:4b:ee:8e: 2e:9f:a7:eb:2f:ee:9c:e5:d9:14:57:71:8e:66:ea:95:e2:53: 99:2a:91:3c:3c:34:ed:9f:3b:3e:02:e9:7a:5e:75:77:54:fe: 4a:c9:fc:51:58:48:28:00:e4:8b:61:b5:3d:33:38:89:08:6c: 1b:c0:f4:57:80:e1:d5:c0:1b:80:70:66:f1:f2:5b:f2:34:5e: f3:8f:e2:6a:88:3e:27:2d:76:13:4a:2a:52:7e:a3:3d:19:bf: bf:74:e9:76:64:a9:eb:e4:41:02:e3:86:a7:9c:95:92:cf:0f: 35:c5:44:f5:bc:a4:55:ed:7c:84:df:2e:c0:e7:2a:82:29:49: bd:41:17:a0:e5:dc:30:9a:1b:87:39:3f:ba:77:f6:b0:34:d2: e5:60:cd:41:69:29:02:f4:f5:71:39:94:7c:4d:f5:cd:08:74: 2b:50:16:6e:78:95:a5:15:75:b9:e1:42:42:7b:b8:7e:ed:f5: 7e:8d:4c:51 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZ9+gG991tCt+Vtkn4cvsQUaFPvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNTA2MDIwMDU3MzRaFw0yNjA2MDEwMTAyMzRaMDMxMTAvBgNV BAMTKEQxMUI2NjBCRkU1RjYwMjJGRTg1MkU0RTE0QjczRDE0NDkwOTk2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1ouanukv9hpIhUB6LIPKgP6t HSEOxs5qLrWgJKqW46J8ITSc2Gq/cmfOv1Sa3TFRQkYDDPfNOVKXIeeIJ8RJyou3 kqhRtJxwO4ZvVCMqJhr6O/WGJ7OmkpCsA1DWCeSdQ7bIsqQW7/dtA9rRg2//FdmX CoIeVqr6KS25nnH//OSQxteeXuPTuE0w00JhvWMatHEyW2z17voMvtlu+98UI2K/ cRvGNn0IT6fOmUHE9hOqh7yzyGEQCMFFhlA/XIviE5YDy0QWE586bkgkmijkyEVR P4iVn82W+zDffFdRak4jpDczKOQsPnD/60nkH1jZP2FdKF/9tFrmsVjk0DBnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU0RtmC/5fYCL+hS5OFLc9FEkJlmkwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4MjQ5ZmMzLTZjODQtNGU5MS1i MDY3LWEwYzZhODQwYTNhOS8wLzMxMzAzMzJlMzIzMzJlMzIzMDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcXyDANBgkqhkiG 9w0BAQsFAAOCAQEAdn83g8qm+5bZZOY1abWOT295rpQ+rEu58DsC79x9Y5zPMJuD BP0dM0G6k9rMPeU4h40T8fFoyz4/EBfIgmjFNP8SCcQxS+6OLp+n6y/unOXZFFdx jmbqleJTmSqRPDw07Z87PgLpel51d1T+Ssn8UVhIKADki2G1PTM4iQhsG8D0V4Dh 1cAbgHBm8fJb8jRe84/iaog+Jy12E0oqUn6jPRm/v3TpdmSp6+RBAuOGp5yVks8P NcVE9bykVe18hN8uwOcqgilJvUEXoOXcMJobhzk/unf2sDTS5WDNQWkpAvT1cTmU fE31zQh0K1AWbniVpRV1ueFCQnu4fu31fo1MUQ== -----END CERTIFICATE-----Generated at Tue Jun 17 22:31:55 2025 by rpki-client