$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35322e302f32332d3233203d3e20313530353535.roa File: 3130332e38352e35322e302f32332d3233203d3e20313530353535.roa (raw, json) Hash identifier: +9CDenNH43oJ9XkYbEWMdjfmnpMvrt7QWdKjYHPJebM= Subject key identifier: 49:65:E0:07:89:96:60:37:06:9E:A2:90:9F:BB:00:9E:D5:70:4A:12 Certificate issuer: /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Certificate serial: 52C4FA530AA3B52AA3B50DA24FFB9BB5B6C2B498 Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35322e302f32332d3233203d3e20313530353535.roa Signing time: Thu 12 Jun 2025 04:00:00 +0000 ROA not before: Thu 12 Jun 2025 03:55:00 +0000 ROA not after: Thu 11 Jun 2026 04:00:00 +0000 asID: 150555 IP address blocks: 103.85.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c4:fa:53:0a:a3:b5:2a:a3:b5:0d:a2:4f:fb:9b:b5:b6:c2:b4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Validity Not Before: Jun 12 03:55:00 2025 GMT Not After : Jun 11 04:00:00 2026 GMT Subject: CN=4965E00789966037069EA2909FBB009ED5704A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:98:cf:9a:74:5a:61:48:ec:a0:35:e6:9b: bf:51:69:84:f9:5d:01:a7:dd:c8:c0:89:20:77:d2: 63:39:1b:6b:f4:3c:9a:60:a1:bf:27:8d:5a:80:26: 35:4e:76:c3:22:d7:16:d9:1a:cd:ba:ef:83:9f:33: 14:ea:70:03:1d:d1:54:9b:65:1e:28:22:35:db:2e: 86:4e:46:57:6f:f6:71:50:89:58:3f:5c:7a:16:cb: 6a:bb:78:19:6b:85:ac:7f:c6:f4:7e:c8:64:c4:e5: 4b:0b:d4:17:ff:87:81:ab:05:d8:7a:8b:5a:cd:fa: ed:28:6c:c4:53:a8:a3:7f:79:df:74:54:56:35:7f: c7:f5:92:db:11:d7:ae:27:24:d7:ef:fa:50:78:f0: 24:af:d7:fc:1d:3b:8f:5e:28:c4:c8:7f:e9:53:67: 27:43:db:6c:85:a8:0d:7d:fb:4e:a1:a8:ac:dd:db: ab:e2:44:4f:7b:fe:ae:32:76:e3:bb:d2:4f:72:3b: ad:18:6f:2e:b5:17:cf:2e:fc:0a:59:02:7d:4a:92: 5b:76:73:86:2f:3a:06:a7:b6:45:70:0e:bd:31:47: 1b:e5:c1:94:18:73:d3:9c:be:bd:39:2c:d1:fb:fe: dd:f0:86:12:06:c0:d0:ea:cd:45:e5:4c:f3:4d:40: c2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:65:E0:07:89:96:60:37:06:9E:A2:90:9F:BB:00:9E:D5:70:4A:12 X509v3 Authority Key Identifier: keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35322e302f32332d3233203d3e20313530353535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.85.52.0/23 Signature Algorithm: sha256WithRSAEncryption 32:4b:c6:88:36:49:7a:fa:90:d2:da:03:e7:09:51:1f:fd:c5: c3:85:7a:fb:7f:26:3e:c4:cd:1e:43:3a:fb:71:72:57:84:f7: 31:ae:77:f8:16:98:42:8e:a9:62:32:79:73:7a:ab:82:74:e8: 73:e1:25:44:84:95:37:51:60:5b:88:24:63:d6:12:1e:86:69: ed:cd:fb:d1:af:9d:4c:1b:55:e5:0c:56:2b:76:a7:21:59:e0: f3:2b:2c:38:13:e7:18:35:cf:bd:00:c0:5d:0b:03:76:ee:2f: 95:bb:f8:20:fe:31:92:b2:d0:dc:7e:f7:4f:e9:a5:0f:98:69: 8b:7d:3d:6a:26:5f:19:86:de:96:71:e1:a6:ff:cb:51:ca:47: 33:fd:da:c3:97:e4:02:70:94:55:c2:d0:fd:dd:04:45:dd:7a: a1:09:65:5f:08:8e:4f:80:c4:cf:ee:15:eb:4c:b6:ab:45:3a: 7d:79:4d:4e:94:df:b1:56:7c:7b:7a:90:26:be:5b:36:fe:37: 17:e1:68:5a:6c:7b:a5:93:a6:08:31:e5:a9:7d:01:db:b6:02: 79:36:6e:af:d4:26:dc:fa:8b:ff:4e:29:3c:a0:db:f4:cd:1a: 29:f2:3f:15:53:25:a6:2f:a7:1b:bf:7b:29:14:ba:f4:48:fc: 03:ca:96:ba -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUsT6UwqjtSqjtQ2iT/ubtbbCtJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3 MkUwRjJDMzAeFw0yNTA2MTIwMzU1MDBaFw0yNjA2MTEwNDAwMDBaMDMxMTAvBgNV BAMTKDQ5NjVFMDA3ODk5NjYwMzcwNjlFQTI5MDlGQkIwMDlFRDU3MDRBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OZjPmnRaYUjsoDXmm79RaYT5 XQGn3cjAiSB30mM5G2v0PJpgob8njVqAJjVOdsMi1xbZGs2674OfMxTqcAMd0VSb ZR4oIjXbLoZORldv9nFQiVg/XHoWy2q7eBlrhax/xvR+yGTE5UsL1Bf/h4GrBdh6 i1rN+u0obMRTqKN/ed90VFY1f8f1ktsR164nJNfv+lB48CSv1/wdO49eKMTIf+lT ZydD22yFqA19+06hqKzd26viRE97/q4yduO70k9yO60Yby61F88u/ApZAn1Kklt2 c4YvOgantkVwDr0xRxvlwZQYc9Ocvr05LNH7/t3whhIGwNDqzUXlTPNNQMLJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUSWXgB4mWYDcGnqKQn7sAntVwShIwHwYDVR0j BBgwFoAU7hLxeaXR9S7AM2dygq5+LnLg8sMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMC9FRTEyRjE3OUE1 RDFGNTJFQzAzMzY3NzI4MkFFN0UyRTcyRTBGMkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3MkUw RjJDMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwZDFmNGNlLTE2OWItNDMxYS04 Mjg2LWM1ZjNhMDdiYmJlMy8wLzMxMzAzMzJlMzgzNTJlMzUzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMDM1MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdVNDANBgkqhkiG 9w0BAQsFAAOCAQEAMkvGiDZJevqQ0toD5wlRH/3Fw4V6+38mPsTNHkM6+3FyV4T3 Ma53+BaYQo6pYjJ5c3qrgnToc+ElRISVN1FgW4gkY9YSHoZp7c370a+dTBtV5QxW K3anIVng8yssOBPnGDXPvQDAXQsDdu4vlbv4IP4xkrLQ3H73T+mlD5hpi309aiZf GYbelnHhpv/LUcpHM/3aw5fkAnCUVcLQ/d0ERd16oQllXwiOT4DEz+4V60y2q0U6 fXlNTpTfsVZ8e3qQJr5bNv43F+FoWmx7pZOmCDHlqX0B27YCeTZur9Qm3PqL/04p PKDb9M0aKfI/FVMlpi+nG797KRS69Ej8A8qWug== -----END CERTIFICATE-----Generated at Tue Jun 17 09:32:26 2025 by rpki-client