$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa File: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (raw, json) Hash identifier: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo= Subject key identifier: 6F:F6:12:3D:78:23:E3:C2:72:39:D8:E5:E6:B5:62:69:AE:3A:88:2F Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Certificate serial: 3303390D2356817F5BBF5261702D2196189246BC Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa Signing time: Fri 01 Aug 2025 08:03:00 +0000 ROA not before: Fri 01 Aug 2025 07:58:00 +0000 ROA not after: Fri 31 Jul 2026 08:03:00 +0000 asID: 138115 IP address blocks: 103.191.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:03:39:0d:23:56:81:7f:5b:bf:52:61:70:2d:21:96:18:92:46:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Validity Not Before: Aug 1 07:58:00 2025 GMT Not After : Jul 31 08:03:00 2026 GMT Subject: CN=6FF6123D7823E3C27239D8E5E6B56269AE3A882F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:86:69:b5:f2:e4:b3:2b:88:54:bb:e5:d2: 2c:9d:f3:7d:03:fb:f4:07:4a:28:50:17:79:97:5f: 6a:5c:e8:7a:49:80:00:7c:af:4f:77:27:b5:6c:9e: 2a:6f:3b:b0:68:5e:c0:2f:cd:2d:78:fd:7b:db:1b: e7:c0:65:50:1e:9a:23:ea:60:a5:90:66:04:e2:97: c3:63:10:d8:72:5e:2c:40:eb:90:23:3c:f0:08:4e: 28:4c:29:fc:ad:12:54:01:aa:69:7a:66:c4:9c:b6: 21:3b:ae:08:0b:a7:b1:f6:22:02:07:6f:ea:88:e4: b8:26:da:59:df:0e:31:b3:44:96:75:da:ea:b2:20: cb:f7:b8:99:b0:0e:f0:5c:1d:23:e3:b9:ef:36:53: 4e:70:96:87:1f:90:7d:1d:e3:4a:32:3d:c5:11:1a: 97:65:97:24:8c:27:6e:fa:00:aa:9c:3b:bf:31:1d: f3:cf:bf:aa:fb:92:61:4b:71:9d:77:6b:de:ea:8e: ac:90:8d:0e:0c:98:2c:4c:20:22:66:ae:41:32:18: 9f:e7:93:23:f8:4c:75:aa:ab:39:53:69:55:a5:fe: 26:e9:41:99:92:d4:69:49:ba:f1:c3:61:96:fa:e2: 99:0e:d9:d8:d6:fe:a4:f6:5f:c0:3f:ed:c8:dc:22: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F6:12:3D:78:23:E3:C2:72:39:D8:E5:E6:B5:62:69:AE:3A:88:2F X509v3 Authority Key Identifier: keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.63.0/24 Signature Algorithm: sha256WithRSAEncryption aa:91:44:b8:de:a3:e2:3e:cb:ea:b1:ca:a9:24:8a:ab:87:fc: 72:05:60:e2:41:43:69:1b:a1:0e:2c:f8:25:01:6c:7e:aa:7d: 26:cc:a9:98:47:24:10:35:a7:d1:cf:13:18:d9:70:af:06:a1: 0e:9b:7c:36:b4:bd:4d:01:51:e1:f2:b1:e8:52:78:57:04:8d: 87:fe:4d:d7:ea:65:b4:04:7f:82:bf:9e:a5:87:4f:b1:e5:c4: 28:68:3f:42:60:d6:08:bf:fb:4d:55:99:63:d6:c6:cf:48:9f: ec:f0:3b:b9:37:2b:6e:17:cf:ad:75:de:f8:7e:7e:4a:bb:6e: b5:1f:ad:99:55:19:68:66:1c:2a:e6:b5:79:1a:99:c2:76:1c: 71:f4:30:25:9b:69:1e:14:06:5e:2d:25:df:64:51:09:25:46: d8:1f:9d:be:8d:8a:52:52:2d:d3:98:65:9a:27:45:0a:2f:27: 8b:e2:58:43:de:a7:8d:9a:fa:4a:e2:d5:fb:6d:10:59:5b:46: 51:99:11:f2:56:6e:8b:7f:f1:98:dd:e4:a1:b3:61:fd:fa:89: 09:24:18:3c:a5:e2:8a:b1:c8:f3:2d:f7:6d:43:37:4c:05:31: ff:80:64:11:f8:70:ec:4e:f5:25:51:f0:fa:9a:07:a1:47:c2: d2:8d:4e:5e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMwM5DSNWgX9bv1JhcC0hlhiSRrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF RTA2NEIzOTAeFw0yNTA4MDEwNzU4MDBaFw0yNjA3MzEwODAzMDBaMDMxMTAvBgNV BAMTKDZGRjYxMjNENzgyM0UzQzI3MjM5RDhFNUU2QjU2MjY5QUUzQTg4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6soZptfLksyuIVLvl0iyd830D +/QHSihQF3mXX2pc6HpJgAB8r093J7VsnipvO7BoXsAvzS14/XvbG+fAZVAemiPq YKWQZgTil8NjENhyXixA65AjPPAITihMKfytElQBqml6ZsSctiE7rggLp7H2IgIH b+qI5Lgm2lnfDjGzRJZ12uqyIMv3uJmwDvBcHSPjue82U05wlocfkH0d40oyPcUR GpdllySMJ276AKqcO78xHfPPv6r7kmFLcZ13a97qjqyQjQ4MmCxMICJmrkEyGJ/n kyP4THWqqzlTaVWl/ibpQZmS1GlJuvHDYZb64pkO2djW/qT2X8A/7cjcIuRvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUb/YSPXgj48JyOdjl5rViaa46iC8wHwYDVR0j BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2 NEIzOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IzMzI3ZmZkLTFlMmUtNGM1Mi05 NzE3LTY1Zjg1ZTYzNTllNS8wLzMxMzAzMzJlMzEzOTMxMmUzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ78/MA0GCSqG SIb3DQEBCwUAA4IBAQCqkUS43qPiPsvqscqpJIqrh/xyBWDiQUNpG6EOLPglAWx+ qn0mzKmYRyQQNafRzxMY2XCvBqEOm3w2tL1NAVHh8rHoUnhXBI2H/k3X6mW0BH+C v56lh0+x5cQoaD9CYNYIv/tNVZlj1sbPSJ/s8Du5NytuF8+tdd74fn5Ku261H62Z VRloZhwq5rV5GpnCdhxx9DAlm2keFAZeLSXfZFEJJUbYH52+jYpSUi3TmGWaJ0UK LyeL4lhD3qeNmvpK4tX7bRBZW0ZRmRHyVm6Lf/GY3eShs2H9+okJJBg8peKKscjz LfdtQzdMBTH/gGQR+HDsTvUlUfD6mgehR8LSjU5e -----END CERTIFICATE-----Generated at Wed Aug 6 12:32:47 2025 by rpki-client