$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa File: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (raw, json) Hash identifier: YytRpirPqYvlv61GjwTryxF750xDHjrR2dBNAMmlTNg= Subject key identifier: 11:CA:3E:85:0C:95:74:E5:E4:31:07:05:0A:A6:F8:48:04:48:6F:08 Certificate issuer: /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B Certificate serial: 2355820A9D7E22EBD06E1D2F79ED0CC4BD29DECF Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa Signing time: Tue 17 Jun 2025 03:15:02 +0000 ROA not before: Tue 17 Jun 2025 03:10:02 +0000 ROA not after: Tue 16 Jun 2026 03:15:02 +0000 asID: 53356 IP address blocks: 103.144.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:55:82:0a:9d:7e:22:eb:d0:6e:1d:2f:79:ed:0c:c4:bd:29:de:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B Validity Not Before: Jun 17 03:10:02 2025 GMT Not After : Jun 16 03:15:02 2026 GMT Subject: CN=11CA3E850C9574E5E43107050AA6F84804486F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:e5:33:cd:e9:dd:40:9c:93:7a:f6:cc:f2: 54:8c:9d:06:f9:a0:19:d7:7b:c0:2c:dd:b0:23:e0: 98:4a:35:bc:ff:e5:25:4d:ce:55:85:60:25:b1:8b: e0:3b:be:de:0b:56:c8:76:84:b2:8b:38:02:9e:57: e8:8f:df:12:2e:c3:6a:c9:3f:50:c5:9c:16:c6:45: fb:bc:ed:eb:da:d0:46:c6:6f:6f:81:4f:83:c5:60: 77:d1:50:2b:57:fc:df:df:3f:90:97:b3:0b:2e:5b: bd:5e:b2:31:3c:6c:27:36:73:1e:5b:a1:9a:fc:4c: 49:47:42:6e:1a:a4:e7:99:20:fc:54:f5:04:4b:55: f3:3e:c9:d3:ec:81:87:54:9a:cd:50:d0:59:2b:13: c7:e5:54:ca:fc:c6:60:7b:d2:ab:16:2b:7f:30:c2: 63:32:27:12:fb:7f:49:dc:0f:84:d7:93:e6:aa:49: 78:7b:c9:d1:25:4e:46:88:08:54:d8:55:d1:76:ee: 26:31:d9:e9:58:00:e8:e2:45:61:72:e5:9c:1c:f3: 27:56:53:6e:4b:44:9b:17:fe:0f:4f:c9:dd:6a:8f: 01:c2:67:c0:68:fc:11:e8:db:c7:59:63:7a:ab:1b: d4:a9:cb:0c:78:a1:62:64:47:cd:81:75:0d:f1:f2: 45:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CA:3E:85:0C:95:74:E5:E4:31:07:05:0A:A6:F8:48:04:48:6F:08 X509v3 Authority Key Identifier: keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.176.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:75:9c:95:da:25:1c:fa:93:e7:c2:56:d3:02:54:77:12:2c: 24:a6:1b:86:64:fb:8f:64:85:ac:d2:66:3e:cb:60:10:83:d0: f2:44:53:68:f3:e6:e2:aa:ca:25:51:1d:84:79:c7:e4:2a:91: 92:15:0b:a7:89:ab:0b:11:34:fd:e9:fb:4e:f6:48:24:1a:c7: fd:5f:3c:f2:23:aa:f2:e6:5a:ac:8b:eb:fe:89:21:a6:49:79: ca:3a:7f:22:da:a2:da:ab:9d:7d:a7:d2:b5:a7:25:fa:3f:5b: 57:cf:7a:c2:70:dd:1b:c4:59:8d:8a:eb:76:2f:ee:74:f5:6a: 1b:cc:01:ec:b5:6b:a9:2d:ad:4f:8c:77:20:42:12:9e:04:c1: 8b:07:57:48:1f:6d:d7:ad:77:61:c6:89:4f:a5:28:28:43:b9: f1:87:f2:a4:8f:85:99:8e:28:c7:e5:0b:6a:b0:44:f3:ac:1e: a7:69:c7:9a:5f:63:66:2e:d4:87:7b:e8:26:32:61:e3:b1:39: 19:55:89:22:2e:24:a0:cf:46:b5:04:3d:6b:6f:5e:a7:0c:a7: 15:d1:bf:53:4e:41:d9:6f:96:af:ba:19:f1:ff:69:38:92:1b: a5:07:8b:f8:5b:d6:c8:52:37:dd:f2:0a:ae:f2:53:33:60:d2: 10:b6:f3:c4 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgIUI1WCCp1+IuvQbh0vee0MxL0p3s8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkM4MzYwMDAwMTEwLwYDVQQFEyg1RDM1OTM5NTU3 MTEwQ0M0MzQyOUFFMzAxRjdDRUYwRTU4ODk5NDJCMB4XDTI1MDYxNzAzMTAwMloX DTI2MDYxNjAzMTUwMlowMzExMC8GA1UEAxMoMTFDQTNFODUwQzk1NzRFNUU0MzEw NzA1MEFBNkY4NDgwNDQ4NkYwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALC15TPN6d1AnJN69szyVIydBvmgGdd7wCzdsCPgmEo1vP/lJU3OVYVgJbGL 4Du+3gtWyHaEsos4Ap5X6I/fEi7Dask/UMWcFsZF+7zt69rQRsZvb4FPg8Vgd9FQ K1f8398/kJezCy5bvV6yMTxsJzZzHluhmvxMSUdCbhqk55kg/FT1BEtV8z7J0+yB h1SazVDQWSsTx+VUyvzGYHvSqxYrfzDCYzInEvt/SdwPhNeT5qpJeHvJ0SVORogI VNhV0XbuJjHZ6VgA6OJFYXLlnBzzJ1ZTbktEmxf+D0/J3WqPAcJnwGj8Eejbx1lj eqsb1KnLDHihYmRHzYF1DfHyRQUCAwEAAaOCAhIwggIOMB0GA1UdDgQWBBQRyj6F DJV05eQxBwUKpvhIBEhvCDAfBgNVHSMEGDAWgBRdNZOVVxEMxDQprjAffO8OWImU KzAOBgNVHQ8BAf8EBAMCB4AwcQYDVR0fBGowaDBmoGSgYoZgcnN5bmM6Ly9ycGtp LmFkbWluLmZyZWVyYW5nZWNsb3VkLmNvbS9yZXBvL0ZSQy1DQS8yLzVEMzU5Mzk1 NTcxMTBDQzQzNDI5QUUzMDFGN0NFRjBFNTg4OTk0MkIuY3JsMH4GCCsGAQUFBwEB BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1hUV1RsVmNSRE1R MEthNHdIM3p2RGxpSmxDcy5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUH MAuGcHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9G UkMtQ0EvMi8zMTMwMzMyZTMxMzQzNDJlMzEzNzM2MmUzMDJmMzIzMzJkMzIzNDIw M2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeQsDANBgkqhkiG9w0BAQsFAAOC AQEAC3WcldolHPqT58JW0wJUdxIsJKYbhmT7j2SFrNJmPstgEIPQ8kRTaPPm4qrK JVEdhHnH5CqRkhULp4mrCxE0/en7TvZIJBrH/V888iOq8uZarIvr/okhpkl5yjp/ Itqi2qudfafStacl+j9bV896wnDdG8RZjYrrdi/udPVqG8wB7LVrqS2tT4x3IEIS ngTBiwdXSB9t1613YcaJT6UoKEO58YfypI+FmY4ox+ULarBE86wep2nHml9jZi7U h3voJjJh47E5GVWJIi4koM9GtQQ9a29epwynFdG/U05B2W+Wr7oZ8f9pOJIbpQeL +FvWyFI33fIKrvJTM2DSELbzxA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:07 2025 by rpki-client