$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa File: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (raw, json) Hash identifier: nbSzLxkTgg1Fhd955VZ38kl51XuK78f19xIlXEphedE= Subject key identifier: 84:7B:A8:1A:17:F6:13:CD:4B:06:00:05:E4:EE:10:26:18:C1:C9:4B Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Certificate serial: 1CFA6799F01BA9563D164FF8716B91DCBF28A819 Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa Signing time: Mon 03 Mar 2025 11:00:01 +0000 ROA not before: Mon 03 Mar 2025 10:55:01 +0000 ROA not after: Mon 02 Mar 2026 11:00:01 +0000 asID: 141673 IP address blocks: 103.163.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fa:67:99:f0:1b:a9:56:3d:16:4f:f8:71:6b:91:dc:bf:28:a8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Validity Not Before: Mar 3 10:55:01 2025 GMT Not After : Mar 2 11:00:01 2026 GMT Subject: CN=847BA81A17F613CD4B060005E4EE102618C1C94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c8:72:1f:eb:8a:7e:86:eb:ab:0d:d5:07:f8: 9f:c6:d6:c6:1d:ee:55:b0:59:0d:63:36:23:af:f0: d9:23:68:21:0a:f4:ce:9f:04:15:28:d2:2b:81:ea: 05:4a:27:82:68:b5:15:4c:e4:16:e5:5c:87:02:65: a9:1d:16:64:3f:24:27:47:d3:05:5a:b0:d8:65:98: 3b:99:ae:c1:ec:69:83:4b:2a:c5:10:74:5c:5f:03: d8:af:e9:ef:25:25:42:be:88:68:e3:2e:c9:d5:d6: ff:d3:7f:85:32:90:5a:77:28:8b:c0:8d:89:3a:bd: 63:ac:d0:f3:f8:7c:b2:e4:7d:fc:72:24:42:73:4e: 8a:be:df:38:e1:26:48:5f:28:b3:06:68:eb:27:6a: 39:6b:95:4e:b8:8f:28:f4:f6:68:9e:97:53:7d:00: 73:5b:01:76:58:9d:fe:15:05:9d:38:18:0e:f6:41: 3f:d8:3c:f0:95:ac:7a:a3:38:c2:2f:9f:09:db:73: a5:3c:8b:91:ae:71:d6:a5:b8:db:9b:17:8e:8a:63: 60:60:98:84:2c:f6:d2:cf:62:2a:f9:99:8c:ff:35: cb:dd:ed:af:f5:a9:64:a4:bc:0c:f3:a1:36:27:8e: 37:87:ba:a7:7e:01:5c:27:33:82:39:cc:4c:2f:8c: 3c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7B:A8:1A:17:F6:13:CD:4B:06:00:05:E4:EE:10:26:18:C1:C9:4B X509v3 Authority Key Identifier: keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.103.0/24 Signature Algorithm: sha256WithRSAEncryption 85:57:26:ce:52:4d:19:66:e1:5a:2c:09:b2:5c:7c:92:7e:ce: 18:e5:dc:52:ac:4f:5a:fe:2f:11:9f:27:16:37:d7:85:38:f9: 90:4a:62:71:35:ad:6b:af:99:da:67:11:8a:84:49:8c:6a:f8: 03:5b:d9:31:e1:f8:99:a3:76:ff:63:65:2f:67:8b:49:75:6a: 98:c2:a5:51:f2:40:e3:3b:82:ba:91:8b:d6:a5:2d:ce:93:88: 05:64:7d:c1:75:6e:28:43:15:7f:93:90:49:e8:65:e1:4d:8f: a9:de:90:6b:e7:b7:2f:14:9c:fe:59:01:bb:c3:b7:27:69:3a: f4:e5:e7:f4:8e:89:45:97:b2:bb:cf:3b:5c:3b:4e:81:6a:a3: 8a:ea:1d:e6:91:3b:a2:50:bd:bb:0b:49:13:cc:6d:dc:ee:0b: 56:61:52:67:d5:a3:37:5d:6c:09:df:c1:ff:7e:fd:d5:82:e8: 0f:7a:df:0a:d1:37:97:f3:2e:03:79:16:21:f8:30:bc:71:4d: bb:8a:ef:b1:b9:e3:49:a7:27:d3:b0:5e:7c:8b:74:5d:00:a0: 1c:aa:44:3f:4d:79:06:4d:5b:88:8f:0d:57:7f:bd:1d:e0:95: 24:00:41:3c:1a:98:67:dc:b0:36:90:2b:91:d3:8b:6f:91:0c: b6:cb:fe:97 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHPpnmfAbqVY9Fk/4cWuR3L8oqBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx RUY0MTJFMDAeFw0yNTAzMDMxMDU1MDFaFw0yNjAzMDIxMTAwMDFaMDMxMTAvBgNV BAMTKDg0N0JBODFBMTdGNjEzQ0Q0QjA2MDAwNUU0RUUxMDI2MThDMUM5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZyHIf64p+huurDdUH+J/G1sYd 7lWwWQ1jNiOv8NkjaCEK9M6fBBUo0iuB6gVKJ4JotRVM5BblXIcCZakdFmQ/JCdH 0wVasNhlmDuZrsHsaYNLKsUQdFxfA9iv6e8lJUK+iGjjLsnV1v/Tf4UykFp3KIvA jYk6vWOs0PP4fLLkffxyJEJzToq+3zjhJkhfKLMGaOsnajlrlU64jyj09miel1N9 AHNbAXZYnf4VBZ04GA72QT/YPPCVrHqjOMIvnwnbc6U8i5GucdaluNubF46KY2Bg mIQs9tLPYir5mYz/Ncvd7a/1qWSkvAzzoTYnjjeHuqd+AVwnM4I5zEwvjDzNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhHuoGhf2E81LBgAF5O4QJhjByUswHwYDVR0j BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4 Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0 MTJFMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMWU0OWFiLTUwY2EtNGIzZS04 MjNjLThiM2QzMWJhODVmMi8wLzMxMzAzMzJlMzEzNjMzMmUzMTMwMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABno2cwDQYJ KoZIhvcNAQELBQADggEBAIVXJs5STRlm4VosCbJcfJJ+zhjl3FKsT1r+LxGfJxY3 14U4+ZBKYnE1rWuvmdpnEYqESYxq+ANb2THh+Jmjdv9jZS9ni0l1apjCpVHyQOM7 grqRi9alLc6TiAVkfcF1bihDFX+TkEnoZeFNj6nekGvnty8UnP5ZAbvDtydpOvTl 5/SOiUWXsrvPO1w7ToFqo4rqHeaRO6JQvbsLSRPMbdzuC1ZhUmfVozddbAnfwf9+ /dWC6A963wrRN5fzLgN5FiH4MLxxTbuK77G540mnJ9OwXnyLdF0AoByqRD9NeQZN W4iPDVd/vR3glSQAQTwamGfcsDaQK5HTi2+RDLbL/pc= -----END CERTIFICATE-----Generated at Sun May 11 11:34:13 2025 by rpki-client