$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa File: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (raw, json) Hash identifier: F7Hvn3nr15WKTOMp+UJFZvJVrdndxdoOm2ecLXQTtiA= Subject key identifier: A2:3E:68:CC:98:21:C7:1C:62:80:D0:4B:13:2F:DA:3D:54:FB:54:29 Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Certificate serial: 67A478C79D8ACB12E4086154A82E182F7EEE1819 Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa Signing time: Tue 10 Jun 2025 11:00:00 +0000 ROA not before: Tue 10 Jun 2025 10:55:00 +0000 ROA not after: Tue 09 Jun 2026 11:00:00 +0000 asID: 141621 IP address blocks: 103.161.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a4:78:c7:9d:8a:cb:12:e4:08:61:54:a8:2e:18:2f:7e:ee:18:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Validity Not Before: Jun 10 10:55:00 2025 GMT Not After : Jun 9 11:00:00 2026 GMT Subject: CN=A23E68CC9821C71C6280D04B132FDA3D54FB5429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:d5:56:f4:ff:4d:a5:8a:3a:5b:d1:43:30: 52:df:1c:1b:bf:66:c2:9c:11:c4:99:0f:29:a6:74: f4:b3:e6:d5:92:25:86:69:2d:53:e3:ca:5b:9f:42: 0b:c1:bf:03:6f:93:29:5c:cf:24:b9:03:f3:2a:e6: 5e:ef:ff:4e:b0:c0:8b:60:4c:2d:df:30:fe:3f:c9: d1:18:11:fd:8f:e2:a7:e2:40:6f:93:14:e1:2c:13: 94:90:83:dd:bd:48:e0:82:1d:8f:d9:c1:77:51:24: 54:56:84:35:31:c4:fe:9b:05:10:14:ce:5a:11:d3: 17:7c:b5:71:37:44:5e:50:95:26:18:7f:e6:8d:81: b1:cb:41:dd:d0:84:ba:86:52:98:79:b2:68:32:4b: 0b:d1:12:b1:b7:a7:83:ba:fb:94:4c:b6:27:80:ad: 41:24:57:af:03:ea:59:5b:dc:c2:52:f2:48:a0:eb: 97:de:ee:f2:c1:d3:09:99:b4:eb:a2:47:32:3a:63: 16:08:06:93:03:f3:1b:59:58:23:34:8b:5d:6c:ca: 9f:5d:84:16:d0:2e:50:df:45:93:14:f4:a8:19:22: 9a:02:9b:70:a0:8d:2a:d9:db:16:06:22:dc:43:36: 66:19:ce:46:23:f5:f5:6d:8a:08:2b:5a:13:ab:fd: a0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3E:68:CC:98:21:C7:1C:62:80:D0:4B:13:2F:DA:3D:54:FB:54:29 X509v3 Authority Key Identifier: keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.164.0/24 Signature Algorithm: sha256WithRSAEncryption 43:20:13:34:1d:bf:fa:3e:0b:b3:57:d3:c3:26:c3:2c:32:9c: ef:bb:76:f6:ca:37:85:38:9f:fe:d3:92:ee:5d:d5:22:bb:b5: f3:eb:2a:fe:4c:a5:da:0d:3d:f6:ea:12:59:53:22:57:b0:40: 2c:9b:2a:be:4a:7a:a1:96:4c:7f:94:5b:e3:bf:91:65:06:83: 93:37:e7:b9:76:5e:61:c3:b1:d3:ef:24:c3:0b:fb:5d:b6:25: f1:55:8e:d5:71:0c:bc:f6:84:6c:e5:6a:d3:45:1f:f3:99:ae: b3:1e:27:b6:ec:45:6b:72:43:a0:be:e5:e3:64:31:e9:57:09: 53:ff:2f:a0:1b:8a:91:ac:7b:db:06:ab:ec:9d:7c:c3:ef:81: 53:19:a9:cb:f5:36:61:53:c3:db:84:76:ea:bd:75:84:29:ef: fc:1d:4f:58:3c:e8:ad:19:80:0a:2e:98:00:17:4a:25:42:98: 7e:72:56:82:ec:27:9b:44:63:ef:80:44:25:00:c2:21:34:d3: 3e:98:62:de:da:68:81:e0:68:8a:c9:da:19:67:e8:3f:82:66: 07:fd:04:46:d2:0d:37:26:ac:d2:94:81:a4:45:10:85:81:2e: 65:28:eb:6e:a5:db:da:95:ee:2c:6f:45:af:fd:47:8b:28:54: e7:d4:fa:68 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZ6R4x52KyxLkCGFUqC4YL37uGBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz OTE3OTJFQTAeFw0yNTA2MTAxMDU1MDBaFw0yNjA2MDkxMTAwMDBaMDMxMTAvBgNV BAMTKEEyM0U2OENDOTgyMUM3MUM2MjgwRDA0QjEzMkZEQTNENTRGQjU0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3tVW9P9NpYo6W9FDMFLfHBu/ ZsKcEcSZDymmdPSz5tWSJYZpLVPjylufQgvBvwNvkylczyS5A/Mq5l7v/06wwItg TC3fMP4/ydEYEf2P4qfiQG+TFOEsE5SQg929SOCCHY/ZwXdRJFRWhDUxxP6bBRAU zloR0xd8tXE3RF5QlSYYf+aNgbHLQd3QhLqGUph5smgySwvRErG3p4O6+5RMtieA rUEkV68D6llb3MJS8kig65fe7vLB0wmZtOuiRzI6YxYIBpMD8xtZWCM0i11syp9d hBbQLlDfRZMU9KgZIpoCm3CgjSrZ2xYGItxDNmYZzkYj9fVtiggrWhOr/aD1AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUoj5ozJghxxxigNBLEy/aPVT7VCkwHwYDVR0j BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0 N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3 OTJFQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1MTdmZTk4LThmNTgtNDk3Zi1i ZTU3LTg2NjVhN2EwNGJiMC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMyMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoaQwDQYJ KoZIhvcNAQELBQADggEBAEMgEzQdv/o+C7NX08MmwywynO+7dvbKN4U4n/7Tku5d 1SK7tfPrKv5MpdoNPfbqEllTIlewQCybKr5KeqGWTH+UW+O/kWUGg5M357l2XmHD sdPvJMML+122JfFVjtVxDLz2hGzlatNFH/OZrrMeJ7bsRWtyQ6C+5eNkMelXCVP/ L6AbipGse9sGq+ydfMPvgVMZqcv1NmFTw9uEduq9dYQp7/wdT1g86K0ZgAoumAAX SiVCmH5yVoLsJ5tEY++ARCUAwiE00z6YYt7aaIHgaIrJ2hln6D+CZgf9BEbSDTcm rNKUgaRFEIWBLmUo626l29qV7ixvRa/9R4soVOfU+mg= -----END CERTIFICATE-----Generated at Mon Jun 16 12:22:11 2025 by rpki-client