$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa File: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (raw, json) Hash identifier: oZleMN4XSuVHyPBpWgeFkCol07oh2xMRlYa+Uzesyrw= Subject key identifier: BE:92:9B:61:B9:8F:26:72:D7:55:49:40:43:AD:9D:3A:A3:2F:00:6E Certificate issuer: /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Certificate serial: 3EFB01DC653F931BEA0DF1152EE90C739384E1B5 Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa Signing time: Fri 13 Jun 2025 15:00:00 +0000 ROA not before: Fri 13 Jun 2025 14:55:00 +0000 ROA not after: Fri 12 Jun 2026 15:00:00 +0000 asID: 141622 IP address blocks: 103.161.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 05:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:fb:01:dc:65:3f:93:1b:ea:0d:f1:15:2e:e9:0c:73:93:84:e1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Validity Not Before: Jun 13 14:55:00 2025 GMT Not After : Jun 12 15:00:00 2026 GMT Subject: CN=BE929B61B98F2672D755494043AD9D3AA32F006E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:36:4f:fc:06:c7:08:2a:4a:29:3e:af:e0:43: b5:04:ba:33:87:ee:bc:53:9e:68:c0:7b:81:9a:0e: f5:22:05:63:ec:a0:56:db:52:7e:1c:bd:c8:1e:ca: d3:dd:10:9d:a9:d5:54:d1:d8:14:50:a8:5a:34:78: b7:25:59:44:87:98:20:75:0d:9f:a8:b0:08:1e:95: 58:ca:1a:b8:bd:8a:e2:71:92:9e:bf:10:a2:71:a9: b7:0a:79:b4:50:08:bf:c3:f8:9f:18:76:c4:f4:42: 8e:a5:03:50:f7:2b:53:d8:e7:45:64:0e:c0:82:f7: 83:ab:40:b2:a9:55:52:00:33:ee:45:cd:0e:ef:54: a0:77:80:ce:13:af:fc:5e:38:0d:81:dc:68:c1:46: c0:83:21:3d:d1:b3:6f:3b:16:c3:5d:96:06:da:d9: dd:e9:be:dc:24:72:17:bf:b9:b6:18:56:52:a5:cb: 89:2c:1b:55:d8:8d:e2:bc:a3:b4:7a:27:be:17:24: 97:a5:2b:53:af:d7:4d:2c:3e:b0:e4:2e:b6:ee:51: b7:7d:fe:4d:26:3a:08:22:b3:03:43:5f:ff:f9:ab: 10:b7:94:32:71:5f:00:a4:1b:e4:9d:47:6e:fb:38: 68:d9:14:c1:87:f0:88:3d:26:4e:0b:14:e2:e4:87: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:92:9B:61:B9:8F:26:72:D7:55:49:40:43:AD:9D:3A:A3:2F:00:6E X509v3 Authority Key Identifier: keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.194.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:52:da:8b:25:5c:9b:3b:a2:94:9f:5b:49:b6:07:55:92:4a: 4b:bc:82:ae:f3:00:2b:44:10:8a:f6:27:c4:9e:90:cf:e1:56: 44:80:43:e5:48:5b:d6:31:aa:5f:29:2c:22:81:fe:39:9f:db: b9:9f:41:9b:fc:bd:86:ca:07:17:f0:02:be:27:5c:5a:0e:31: 1d:63:a5:9b:42:4d:d1:43:9e:87:8c:80:4e:14:7d:4a:0a:0b: 00:6f:f1:16:32:d0:40:a5:1f:5a:ec:c8:f8:09:ca:ec:9e:d1: 79:42:51:a2:cd:8b:bd:05:93:b2:aa:d4:b7:3a:87:c4:0d:4b: 84:52:e6:28:9b:d7:40:98:3b:de:dc:dd:07:f2:93:04:f1:03: c6:5a:d7:bc:00:79:3f:e7:55:ae:c7:26:bc:b4:60:7c:9d:ce: 14:6f:24:25:8f:b3:26:0e:54:f5:7f:77:c5:dc:b1:f9:b6:66: bb:9a:ee:b0:97:ff:52:32:05:57:74:89:2c:0c:b1:c9:eb:6b: dc:40:3b:d0:c2:77:37:39:8c:29:29:28:9a:63:df:2b:99:38: fa:c4:4b:9c:bb:f7:e5:86:a7:ea:7a:ba:dc:d6:38:df:69:ff: 32:b7:75:6d:31:4c:4c:5b:26:a7:db:46:04:1b:53:87:4b:7e: 06:24:be:19 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPvsB3GU/kxvqDfEVLukMc5OE4bUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENE QkM1RkY0QzAeFw0yNTA2MTMxNDU1MDBaFw0yNjA2MTIxNTAwMDBaMDMxMTAvBgNV BAMTKEJFOTI5QjYxQjk4RjI2NzJENzU1NDk0MDQzQUQ5RDNBQTMyRjAwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjNk/8BscIKkopPq/gQ7UEujOH 7rxTnmjAe4GaDvUiBWPsoFbbUn4cvcgeytPdEJ2p1VTR2BRQqFo0eLclWUSHmCB1 DZ+osAgelVjKGri9iuJxkp6/EKJxqbcKebRQCL/D+J8YdsT0Qo6lA1D3K1PY50Vk DsCC94OrQLKpVVIAM+5FzQ7vVKB3gM4Tr/xeOA2B3GjBRsCDIT3Rs287FsNdlgba 2d3pvtwkche/ubYYVlKly4ksG1XYjeK8o7R6J74XJJelK1Ov100sPrDkLrbuUbd9 /k0mOggiswNDX//5qxC3lDJxXwCkG+SdR277OGjZFMGH8Ig9Jk4LFOLkh6wnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUvpKbYbmPJnLXVUlAQ62dOqMvAG4wHwYDVR0j BBgwFoAUBS7lnB1BSad98VVTEcBW3NvF/0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMC8wNTJFRTU5QzFE NDE0OUE3N0RGMTU1NTMxMUMwNTZEQ0RCQzVGRjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENEQkM1 RkY0Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmZiMjI4LWZkMDUtNGFmZC04 N2JkLWVkNTgwYjU1MDM2Zi8wLzMxMzAzMzJlMzEzNjMxMmUzMTM5MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnocIwDQYJ KoZIhvcNAQELBQADggEBAD1S2oslXJs7opSfW0m2B1WSSku8gq7zACtEEIr2J8Se kM/hVkSAQ+VIW9Yxql8pLCKB/jmf27mfQZv8vYbKBxfwAr4nXFoOMR1jpZtCTdFD noeMgE4UfUoKCwBv8RYy0EClH1rsyPgJyuye0XlCUaLNi70Fk7Kq1Lc6h8QNS4RS 5iib10CYO97c3QfykwTxA8Za17wAeT/nVa7HJry0YHydzhRvJCWPsyYOVPV/d8Xc sfm2Zrua7rCX/1IyBVd0iSwMscnra9xAO9DCdzc5jCkpKJpj3yuZOPrES5y79+WG p+p6utzWON9p/zK3dW0xTExbJqfbRgQbU4dLfgYkvhk= -----END CERTIFICATE-----Generated at Thu Jun 19 23:10:34 2025 by rpki-client