$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e342e302f32332d3233203d3e203338373533.roa File: 3130332e32392e342e302f32332d3233203d3e203338373533.roa (raw, json) Hash identifier: ZkhYkzVtq81XABJqvLnT7l2LGdKJfgSAWlXb3DM5Me8= Subject key identifier: 10:DE:EE:8B:FB:7C:84:9D:0E:EC:83:08:BD:D2:14:8A:A0:52:41:39 Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 286A4249D6B9D4A6E332A6E5F33B77B06228AF0C Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e342e302f32332d3233203d3e203338373533.roa Signing time: Tue 03 Jun 2025 08:03:23 +0000 ROA not before: Tue 03 Jun 2025 07:58:23 +0000 ROA not after: Tue 02 Jun 2026 08:03:23 +0000 asID: 38753 IP address blocks: 103.29.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 09:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6a:42:49:d6:b9:d4:a6:e3:32:a6:e5:f3:3b:77:b0:62:28:af:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Jun 3 07:58:23 2025 GMT Not After : Jun 2 08:03:23 2026 GMT Subject: CN=10DEEE8BFB7C849D0EEC8308BDD2148AA0524139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c5:93:98:23:20:e7:50:90:b3:ad:b3:aa:bf: a0:48:2a:34:a2:6a:a3:45:88:28:24:77:53:f4:c3: 28:59:8c:87:38:e7:22:25:20:30:52:90:78:6d:09: 9e:67:4a:c2:10:39:d0:37:b0:89:c4:85:fe:d2:78: be:ad:e9:76:84:bb:f2:23:cc:5a:ab:af:a9:c5:8b: 57:b2:47:f1:d8:7f:89:d3:27:08:27:5e:29:29:ff: 3c:af:da:25:0d:41:2f:af:02:49:c6:02:22:b6:40: 27:a1:df:9c:73:34:e2:2e:c8:3b:b2:18:66:9b:aa: 95:f6:74:d2:64:21:d2:47:2c:87:db:e2:8e:1d:90: eb:4e:0c:31:f3:e1:ef:04:5b:bb:6f:8b:49:0f:3c: bb:4c:a5:4b:fb:f2:7f:1a:5b:1e:53:7f:11:5b:6b: 96:e8:b9:d8:da:04:a3:f3:1e:11:5f:b7:6d:37:51: 7e:99:31:ba:50:46:45:4f:5d:f6:6a:8f:f3:d2:0f: 3c:88:e8:26:47:ef:72:c9:b2:76:68:11:5d:4b:0e: 8e:08:90:cd:a7:fa:42:16:78:80:c2:3b:fa:28:01: 8f:f6:c3:a3:f9:3e:e6:16:91:72:79:14:c2:11:96: d1:c4:1f:b5:c0:13:cb:23:3c:a9:ed:61:3f:6c:ee: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DE:EE:8B:FB:7C:84:9D:0E:EC:83:08:BD:D2:14:8A:A0:52:41:39 X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e342e302f32332d3233203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.4.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:5e:1e:0c:c8:fa:81:41:bd:18:3c:59:89:e1:b8:92:15:69: 78:f9:44:c4:8c:bf:8c:82:6e:99:d3:38:29:92:1c:ba:13:2d: f1:c7:74:4e:b9:86:77:1b:9b:06:59:9a:1c:8c:a7:da:3b:c2: 82:4b:7c:69:27:e7:df:b4:cc:c2:60:2c:b8:30:00:96:65:46: 31:82:78:db:81:38:f1:2f:79:87:74:12:4f:e7:72:c0:6c:0b: 50:cb:97:50:c9:ca:99:1d:90:cc:39:cb:af:3a:b9:4f:aa:e5: e9:7a:b0:8c:7a:1c:09:cb:8a:19:df:d3:7f:74:72:47:0e:d2: ae:02:4f:fd:f5:b2:b7:37:17:65:60:a9:34:da:28:38:85:71: 0d:d2:ec:25:a7:c0:9a:d1:a0:4e:cd:93:e8:b1:ed:f1:3f:61: 2c:a8:ae:4d:97:49:4b:9b:e6:8e:15:a1:64:1b:22:f1:df:76: c7:0a:93:fd:82:79:d0:89:80:24:54:7b:b8:a6:19:24:89:43: 94:d6:b0:6f:78:ec:71:ae:8d:f8:9b:86:4d:e7:68:73:27:28: bb:8f:f3:b8:dc:d4:f0:56:c9:83:3f:4f:07:8a:a3:83:b7:f1: ae:25:3a:e9:ba:f0:b3:72:0f:44:d8:c8:bb:b6:99:38:bf:87: 97:9d:3f:6e -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUKGpCSda51KbjMqbl8zt3sGIorwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNTA2MDMwNzU4MjNaFw0yNjA2MDIwODAzMjNaMDMxMTAvBgNV BAMTKDEwREVFRThCRkI3Qzg0OUQwRUVDODMwOEJERDIxNDhBQTA1MjQxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqxZOYIyDnUJCzrbOqv6BIKjSi aqNFiCgkd1P0wyhZjIc45yIlIDBSkHhtCZ5nSsIQOdA3sInEhf7SeL6t6XaEu/Ij zFqrr6nFi1eyR/HYf4nTJwgnXikp/zyv2iUNQS+vAknGAiK2QCeh35xzNOIuyDuy GGabqpX2dNJkIdJHLIfb4o4dkOtODDHz4e8EW7tvi0kPPLtMpUv78n8aWx5TfxFb a5boudjaBKPzHhFft203UX6ZMbpQRkVPXfZqj/PSDzyI6CZH73LJsnZoEV1LDo4I kM2n+kIWeIDCO/ooAY/2w6P5PuYWkXJ5FMIRltHEH7XAE8sjPKntYT9s7kexAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUEN7ui/t8hJ0O7IMIvdIUiqBSQTkwHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2 YzItNDJhYjhiNDc2MjQ5LzAvMzEzMDMzMmUzMjM5MmUzNDJlMzAyZjMyMzMyZDMy MzMyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnHQQwDQYJKoZIhvcNAQEL BQADggEBAFxeHgzI+oFBvRg8WYnhuJIVaXj5RMSMv4yCbpnTOCmSHLoTLfHHdE65 hncbmwZZmhyMp9o7woJLfGkn59+0zMJgLLgwAJZlRjGCeNuBOPEveYd0Ek/ncsBs C1DLl1DJypkdkMw5y686uU+q5el6sIx6HAnLihnf0390ckcO0q4CT/31src3F2Vg qTTaKDiFcQ3S7CWnwJrRoE7Nk+ix7fE/YSyork2XSUub5o4VoWQbIvHfdscKk/2C edCJgCRUe7imGSSJQ5TWsG947HGujfibhk3naHMnKLuP87jc1PBWyYM/TweKo4O3 8a4lOum68LNyD0TYyLu2mTi/h5edP24= -----END CERTIFICATE-----Generated at Mon Jun 16 19:08:11 2025 by rpki-client