$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa File: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (raw, json) Hash identifier: pKw5LGAwZ02j8bp/435WnbI3b3bMVBsuwWMCKuHmspo= Subject key identifier: 9C:6C:22:2B:5B:E4:5C:A2:A7:8E:00:6C:97:07:21:29:87:E3:99:32 Certificate issuer: /CN=C00163880F235714759920507217F2A7D557C953 Certificate serial: 41A17E5589615337850327EF7374BD4ECDD54519 Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa Signing time: Mon 02 Jun 2025 02:05:08 +0000 ROA not before: Mon 02 Jun 2025 02:00:08 +0000 ROA not after: Mon 01 Jun 2026 02:05:08 +0000 asID: 55666 IP address blocks: 103.17.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a1:7e:55:89:61:53:37:85:03:27:ef:73:74:bd:4e:cd:d5:45:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00163880F235714759920507217F2A7D557C953 Validity Not Before: Jun 2 02:00:08 2025 GMT Not After : Jun 1 02:05:08 2026 GMT Subject: CN=9C6C222B5BE45CA2A78E006C9707212987E39932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:7c:81:68:b1:f8:b0:32:48:25:3b:aa:d6: b6:6b:07:7c:11:c4:43:f3:3b:96:fd:2b:d4:b8:63: 61:ef:b6:a9:19:15:60:93:3d:1f:5e:74:34:7e:83: b1:95:f1:0c:b2:c4:54:a7:3d:39:76:e0:f1:b4:db: ef:a9:de:1a:89:62:4a:6e:31:6b:c6:61:f9:63:de: 93:28:45:2a:b9:79:58:1f:05:3a:2c:36:01:93:3f: b2:88:1d:40:e8:83:fa:b8:1d:4a:71:0e:1a:ca:7e: 14:26:7a:e8:dd:19:5f:c3:6b:f4:c5:1b:88:72:b9: 2a:66:09:8c:3b:c5:db:74:64:cb:97:67:d3:7f:a2: c2:a8:33:23:76:80:c0:4d:51:2f:ac:67:d2:de:ab: 28:81:71:20:1c:28:30:f8:d0:ca:8f:25:39:5a:59: f5:0e:1b:14:d8:d0:5a:60:a4:57:e1:85:0a:80:02: 32:4b:5b:c8:1d:e9:e9:b1:6c:1a:c4:2c:db:bd:17: 78:26:c1:e5:0e:cf:1d:b3:9f:ec:74:39:8d:f1:3b: e7:f7:c9:93:1d:e7:92:3c:4e:83:4a:df:d4:d1:ea: 7c:ea:a6:eb:34:7b:ce:47:d7:54:00:26:48:db:11: b3:03:8d:94:e1:40:01:8b:bd:16:37:f2:c2:3a:cf: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6C:22:2B:5B:E4:5C:A2:A7:8E:00:6C:97:07:21:29:87:E3:99:32 X509v3 Authority Key Identifier: keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.244.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:54:8a:2c:99:42:a1:cf:8a:49:b5:03:16:0f:ae:ee:ef:f3: fe:22:08:69:d4:ae:36:d3:60:a6:80:36:d0:36:6b:de:a0:e3: 2e:06:04:a6:2d:27:3b:34:d6:e8:68:aa:9a:54:84:9f:64:6a: 48:e5:97:0e:42:ee:30:0e:d4:1a:a2:72:a2:f3:10:de:f9:e2: 8b:5e:ea:a8:09:73:ee:5a:9e:81:b9:a5:00:93:72:fc:94:03: 81:5b:d5:c3:bd:72:87:b9:ea:a6:7d:81:fa:a4:2f:41:8d:aa: 36:fa:94:c4:bd:1e:95:d0:ac:72:24:59:83:41:90:33:09:ec: 06:5a:65:1d:fc:d8:16:1a:f2:60:52:60:3d:5a:75:84:19:3a: 67:a7:0b:a9:2b:b6:32:db:a1:24:a5:bf:a0:a4:dd:0c:6f:44: de:55:42:a7:b3:b8:b8:cd:e2:92:96:97:f0:20:24:96:74:eb: 88:7b:3b:57:ab:13:41:0d:0f:8d:df:c2:5e:11:bc:ed:84:10: de:d9:2f:cc:27:8a:27:d1:31:6c:d1:1d:e8:36:b4:4b:74:81: 6c:33:c6:01:7a:32:e3:55:40:d8:d7:47:e1:65:d1:5a:7b:8c: 24:ae:06:15:32:00:2b:ae:41:12:34:d5:c1:2e:28:04:b1:85: 57:9d:56:71 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQaF+VYlhUzeFAyfvc3S9Ts3VRRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE NTU3Qzk1MzAeFw0yNTA2MDIwMjAwMDhaFw0yNjA2MDEwMjA1MDhaMDMxMTAvBgNV BAMTKDlDNkMyMjJCNUJFNDVDQTJBNzhFMDA2Qzk3MDcyMTI5ODdFMzk5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpnyBaLH4sDJIJTuq1rZrB3wR xEPzO5b9K9S4Y2HvtqkZFWCTPR9edDR+g7GV8QyyxFSnPTl24PG02++p3hqJYkpu MWvGYflj3pMoRSq5eVgfBTosNgGTP7KIHUDog/q4HUpxDhrKfhQmeujdGV/Da/TF G4hyuSpmCYw7xdt0ZMuXZ9N/osKoMyN2gMBNUS+sZ9LeqyiBcSAcKDD40MqPJTla WfUOGxTY0FpgpFfhhQqAAjJLW8gd6emxbBrELNu9F3gmweUOzx2zn+x0OY3xO+f3 yZMd55I8ToNK39TR6nzqpus0e85H11QAJkjbEbMDjZThQAGLvRY38sI6zxXfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUnGwiK1vkXKKnjgBslwchKYfjmTIwHwYDVR0j BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3 Qzk1My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04 MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzAzMzJlMzEzNzJlMzIzNDM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcR9DANBgkqhkiG 9w0BAQsFAAOCAQEADlSKLJlCoc+KSbUDFg+u7u/z/iIIadSuNtNgpoA20DZr3qDj LgYEpi0nOzTW6GiqmlSEn2RqSOWXDkLuMA7UGqJyovMQ3vnii17qqAlz7lqegbml AJNy/JQDgVvVw71yh7nqpn2B+qQvQY2qNvqUxL0eldCsciRZg0GQMwnsBlplHfzY FhryYFJgPVp1hBk6Z6cLqSu2MtuhJKW/oKTdDG9E3lVCp7O4uM3ikpaX8CAklnTr iHs7V6sTQQ0Pjd/CXhG87YQQ3tkvzCeKJ9ExbNEd6Da0S3SBbDPGAXoy41VA2NdH 4WXRWnuMJK4GFTIAK65BEjTVwS4oBLGFV51WcQ== -----END CERTIFICATE-----Generated at Tue Nov 4 23:48:32 2025 by rpki-client