$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/3130332e37332e37322e302f32322d3234203d3e20313335343638.roa File: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (raw, json) Hash identifier: KaaHy0cR6xA7/7fhA1scnNnAkCNoe5f7kq1dVSYxDCg= Subject key identifier: FA:0A:17:48:E6:8F:E2:8D:9E:DF:C7:79:0E:40:28:53:1C:4B:ED:73 Certificate issuer: /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Certificate serial: 2CA55509202435B586374672B01734FA8D5FFC8D Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/3130332e37332e37322e302f32322d3234203d3e20313335343638.roa Signing time: Tue 15 Jul 2025 08:00:02 +0000 ROA not before: Tue 15 Jul 2025 07:55:02 +0000 ROA not after: Tue 14 Jul 2026 08:00:02 +0000 asID: 135468 IP address blocks: 103.73.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a5:55:09:20:24:35:b5:86:37:46:72:b0:17:34:fa:8d:5f:fc:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Validity Not Before: Jul 15 07:55:02 2025 GMT Not After : Jul 14 08:00:02 2026 GMT Subject: CN=FA0A1748E68FE28D9EDFC7790E4028531C4BED73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:ca:d0:70:45:b9:a9:98:19:18:e1:18:38: aa:d4:1a:c9:9e:53:14:c1:07:d6:0f:e1:a4:ad:28: 89:e8:6d:5a:36:37:f9:33:e8:94:ab:3d:04:bd:cf: 93:c8:19:b5:d7:01:0d:89:41:cf:e9:0d:e9:ea:51: 7d:9d:79:6c:cb:fb:1c:a3:2b:cd:30:75:02:83:fc: 4d:61:d1:0d:29:59:18:14:85:9f:e3:31:b5:a5:1f: a2:64:cc:46:fb:35:73:36:c0:7e:73:05:95:22:b8: d2:c5:13:a6:88:40:60:1e:02:59:1e:2f:6c:6f:98: fc:46:a3:06:7d:30:03:1f:fa:4b:09:c0:22:15:aa: a4:12:b9:4a:60:c6:02:c4:99:69:08:97:cb:39:f7: 74:1c:83:39:b1:21:73:66:3e:4e:48:29:7c:1d:2a: 80:cb:ed:c5:1f:89:53:9c:91:ca:2f:2c:f4:36:38: 0e:78:54:8e:2e:2b:51:a7:80:c5:58:ee:d7:30:08: d1:ea:31:bf:03:58:29:9c:e6:96:d7:cc:4c:24:40: eb:3e:c4:bb:59:5a:f0:e4:3b:14:39:e8:5d:04:46: 04:09:0a:ec:33:8a:30:5e:f0:14:6a:e0:29:71:dd: 1f:9b:b6:6c:12:b4:9a:67:20:7d:45:00:7c:bf:3d: 6c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0A:17:48:E6:8F:E2:8D:9E:DF:C7:79:0E:40:28:53:1C:4B:ED:73 X509v3 Authority Key Identifier: keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/3130332e37332e37322e302f32322d3234203d3e20313335343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.72.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:ed:91:20:05:fd:b6:0c:56:50:de:b2:fc:d9:13:6a:ed:68: 3e:9e:b0:8c:a4:e3:1b:86:2a:0b:75:9d:26:f7:cf:c6:3e:4d: d9:fd:24:9c:ac:5c:21:90:46:f2:31:4a:78:40:25:93:b9:b1: c5:15:8b:f0:a4:0d:18:88:ce:36:ba:fe:77:5a:5c:a0:3f:67: ce:78:19:5f:bd:32:6f:fd:7b:8c:70:15:41:15:da:e8:27:38: 36:b9:c5:37:26:cb:24:9c:17:5c:b3:72:9b:2b:e8:cc:68:fc: f2:c7:36:28:4b:31:f6:09:fa:30:18:57:42:67:84:5a:b2:96: ca:f3:5e:9b:cb:70:14:31:1d:c0:7e:18:d0:e9:81:11:9c:c5: 70:1f:d2:62:3d:5e:44:c5:69:12:33:7e:91:e3:5a:d2:6b:b4: fa:2f:c1:c2:6c:ee:5c:2c:b5:1b:13:fe:01:e3:ce:32:ce:b7: cd:b7:68:9a:d9:b0:8e:2f:33:f2:00:6c:63:ed:25:06:dc:79: 6a:a4:c9:84:c3:36:6c:ca:62:87:57:f2:ca:5f:91:eb:18:e3: 96:5a:80:d3:99:a3:c9:33:5b:ba:67:08:22:a6:f5:61:7a:ea: 07:39:79:7c:e0:7a:a9:c4:a6:19:c7:54:da:01:f9:45:b0:9b: b7:9c:c8:82 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULKVVCSAkNbWGN0ZysBc0+o1f/I0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZD Qjk2NkJEMzAeFw0yNTA3MTUwNzU1MDJaFw0yNjA3MTQwODAwMDJaMDMxMTAvBgNV BAMTKEZBMEExNzQ4RTY4RkUyOEQ5RURGQzc3OTBFNDAyODUzMUM0QkVENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQMrQcEW5qZgZGOEYOKrUGsme UxTBB9YP4aStKInobVo2N/kz6JSrPQS9z5PIGbXXAQ2JQc/pDenqUX2deWzL+xyj K80wdQKD/E1h0Q0pWRgUhZ/jMbWlH6JkzEb7NXM2wH5zBZUiuNLFE6aIQGAeAlke L2xvmPxGowZ9MAMf+ksJwCIVqqQSuUpgxgLEmWkIl8s593QcgzmxIXNmPk5IKXwd KoDL7cUfiVOckcovLPQ2OA54VI4uK1GngMVY7tcwCNHqMb8DWCmc5pbXzEwkQOs+ xLtZWvDkOxQ56F0ERgQJCuwzijBe8BRq4Clx3R+btmwStJpnIH1FAHy/PWz5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU+goXSOaP4o2e38d5DkAoUxxL7XMwHwYDVR0j BBgwFoAUVGHqvIYuTJCzJ5DbohzV/8uWa9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmVjYzcyYS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC81NDYxRUFCQzg2 MkU0QzkwQjMyNzkwREJBMjFDRDVGRkNCOTY2QkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZDQjk2 NkJEMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2ZWNjNzJhLWU5NTQtNDMwMi05 MmM0LWY0ZjIzMDcwYjk5Ny8wLzMxMzAzMzJlMzczMzJlMzczMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdJSDANBgkqhkiG 9w0BAQsFAAOCAQEAbO2RIAX9tgxWUN6y/NkTau1oPp6wjKTjG4YqC3WdJvfPxj5N 2f0knKxcIZBG8jFKeEAlk7mxxRWL8KQNGIjONrr+d1pcoD9nzngZX70yb/17jHAV QRXa6Cc4NrnFNybLJJwXXLNymyvozGj88sc2KEsx9gn6MBhXQmeEWrKWyvNem8tw FDEdwH4Y0OmBEZzFcB/SYj1eRMVpEjN+keNa0mu0+i/BwmzuXCy1GxP+AePOMs63 zbdomtmwji8z8gBsY+0lBtx5aqTJhMM2bMpih1fyyl+R6xjjllqA05mjyTNbumcI Iqb1YXrqBzl5fOB6qcSmGcdU2gH5RbCbt5zIgg== -----END CERTIFICATE-----Generated at Sat Aug 9 22:39:51 2025 by rpki-client