$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa File: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (raw, json) Hash identifier: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU= Subject key identifier: 95:CA:81:73:DD:01:E9:89:3E:82:B3:2F:10:69:3F:42:97:3B:FB:E4 Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 7F3639A663BD1984A104AEBBB0569BAFF8FAF691 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa Signing time: Sat 14 Jun 2025 13:02:24 +0000 ROA not before: Sat 14 Jun 2025 12:57:24 +0000 ROA not after: Sat 13 Jun 2026 13:02:24 +0000 asID: 138131 IP address blocks: 103.164.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:36:39:a6:63:bd:19:84:a1:04:ae:bb:b0:56:9b:af:f8:fa:f6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Jun 14 12:57:24 2025 GMT Not After : Jun 13 13:02:24 2026 GMT Subject: CN=95CA8173DD01E9893E82B32F10693F42973BFBE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:ca:02:39:92:ec:63:ce:d2:37:e3:11:5b: 36:48:15:ca:76:2e:81:46:91:30:0c:65:7e:40:3a: 99:7c:a8:53:fb:8c:0c:a8:74:ed:5d:ed:bd:30:2f: 00:ba:ad:8f:ec:47:88:26:fc:81:4d:94:b6:ad:61: f2:51:94:4f:5f:89:08:7e:50:c1:89:01:f6:ac:c8: 8a:17:23:26:78:3c:8e:de:4d:13:61:9f:24:07:81: 88:16:e4:51:6e:a5:45:f9:7b:6b:e4:0f:a6:4a:4e: 73:16:13:0c:99:28:af:9d:53:fa:72:8e:e9:09:c1: 6c:ed:00:38:5d:13:36:47:20:90:39:a4:0a:d6:bc: f7:f3:1c:fd:0e:82:b0:bf:d5:a0:a8:eb:b4:d7:e5: e3:19:4f:ad:4b:18:ec:4c:7e:10:3e:41:63:14:2c: ed:06:56:70:d4:2e:43:e0:10:72:cb:43:a5:a6:9b: 27:4e:44:52:f3:c4:72:71:fc:7c:62:b8:cb:9c:b0: 35:ce:e2:4a:9b:c6:ec:95:0b:1d:e3:30:10:1a:06: 89:a2:60:69:7a:7d:d6:02:e9:48:46:a4:4f:c5:d8: 54:c4:31:57:1a:db:f6:b2:de:3a:da:f3:8f:94:ca: d9:9f:f9:34:79:e5:cf:76:e4:54:d3:b4:80:80:c4: 25:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CA:81:73:DD:01:E9:89:3E:82:B3:2F:10:69:3F:42:97:3B:FB:E4 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.172.0/24 Signature Algorithm: sha256WithRSAEncryption 02:95:21:e4:dc:41:05:b4:ee:a7:0b:1f:f4:f6:b1:1a:c0:d6: 5c:48:05:47:92:ae:b9:6b:1c:0b:45:43:9c:96:55:08:38:43: 91:a8:ef:a5:eb:8f:92:12:e5:96:7f:dd:d4:bc:b8:fb:c7:dd: 0b:9d:52:6c:53:a7:5e:76:6f:9a:03:de:35:a2:08:10:d1:53: 43:91:7f:7a:af:d2:23:ca:32:3c:77:eb:9c:ea:bd:19:64:14: 82:81:83:50:48:3f:da:31:32:df:72:96:5a:05:cd:34:32:76: 22:ab:4a:a1:6f:8d:0f:ec:22:8f:99:40:59:c3:d6:d9:a3:1c: 0b:70:85:c9:a8:02:73:0f:42:a5:c6:39:64:cd:7e:1a:8b:e2: d6:da:0b:c6:eb:01:ef:28:85:be:8b:c1:89:a3:74:47:59:b0: 4b:dd:aa:e4:50:00:d0:f0:f7:1e:7a:58:b8:a3:98:e2:f7:f8: 2f:3a:26:3f:71:28:d3:a3:5c:24:5c:eb:bb:4b:c0:22:f3:a0: 15:07:9f:3d:02:77:13:f9:f7:55:62:e0:1e:be:58:58:25:f1: 3b:c9:35:9a:30:e3:15:d1:00:6b:90:79:bc:58:f9:4d:ae:25: 58:95:e2:ca:6f:94:db:ff:24:96:d5:bb:40:24:f3:c8:13:2c: bb:b5:7f:cf -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUfzY5pmO9GYShBK67sFabr/j69pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTA2MTQxMjU3MjRaFw0yNjA2MTMxMzAyMjRaMDMxMTAvBgNV BAMTKDk1Q0E4MTczREQwMUU5ODkzRTgyQjMyRjEwNjkzRjQyOTczQkZCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72MoCOZLsY87SN+MRWzZIFcp2 LoFGkTAMZX5AOpl8qFP7jAyodO1d7b0wLwC6rY/sR4gm/IFNlLatYfJRlE9fiQh+ UMGJAfasyIoXIyZ4PI7eTRNhnyQHgYgW5FFupUX5e2vkD6ZKTnMWEwyZKK+dU/py jukJwWztADhdEzZHIJA5pArWvPfzHP0OgrC/1aCo67TX5eMZT61LGOxMfhA+QWMU LO0GVnDULkPgEHLLQ6WmmydORFLzxHJx/HxiuMucsDXO4kqbxuyVCx3jMBAaBomi YGl6fdYC6UhGpE/F2FTEMVca2/ay3jra84+Uytmf+TR55c925FTTtICAxCW9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUlcqBc90B6Yk+grMvEGk/Qpc7++QwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODlmMWI0LWVmNjMtNDUzOS04 NDU1LTk4YzY3MTk5NWNjZi8wLzMxMzAzMzJlMzEzNjM0MmUzMTM3MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpKwwDQYJ KoZIhvcNAQELBQADggEBAAKVIeTcQQW07qcLH/T2sRrA1lxIBUeSrrlrHAtFQ5yW VQg4Q5Go76Xrj5IS5ZZ/3dS8uPvH3QudUmxTp152b5oD3jWiCBDRU0ORf3qv0iPK Mjx365zqvRlkFIKBg1BIP9oxMt9ylloFzTQydiKrSqFvjQ/sIo+ZQFnD1tmjHAtw hcmoAnMPQqXGOWTNfhqL4tbaC8brAe8ohb6LwYmjdEdZsEvdquRQANDw9x56WLij mOL3+C86Jj9xKNOjXCRc67tLwCLzoBUHnz0CdxP591Vi4B6+WFgl8TvJNZow4xXR AGuQebxY+U2uJViV4spvlNv/JJbVu0Ak88gTLLu1f88= -----END CERTIFICATE-----Generated at Tue Jun 17 01:27:01 2025 by rpki-client