$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa File: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (raw, json) Hash identifier: qaTsYAuDwYq3vmdm+MP/d1P3xUHxCKcLJsCvSBVNIeQ= Subject key identifier: E2:09:E5:17:90:00:26:54:0F:0D:A1:DF:DC:D4:57:1D:92:52:B1:3A Certificate issuer: /CN=74D4F2785CA261D018C909BA622D8244292BCB3E Certificate serial: 2E94760216252994D47FCA5D45D7BFC8723232C3 Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa Signing time: Wed 07 May 2025 11:14:46 +0000 ROA not before: Wed 07 May 2025 11:09:46 +0000 ROA not after: Wed 06 May 2026 11:14:46 +0000 asID: 136861 IP address blocks: 103.103.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 22:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:94:76:02:16:25:29:94:d4:7f:ca:5d:45:d7:bf:c8:72:32:32:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E Validity Not Before: May 7 11:09:46 2025 GMT Not After : May 6 11:14:46 2026 GMT Subject: CN=E209E517900026540F0DA1DFDCD4571D9252B13A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:f8:76:0b:ff:74:02:1a:6e:c5:be:4a:82: 1b:fe:6b:01:12:12:06:e4:bf:bf:ef:6a:b6:1a:3a: f5:13:60:a5:bd:cb:5f:31:44:9b:98:8e:99:13:b4: f5:dc:62:df:c9:29:62:bc:ca:b3:f7:b8:91:1c:54: 7c:31:8a:92:0b:1e:29:96:0e:ea:98:5b:6a:09:7c: 18:d4:fb:15:ca:cd:e3:bf:2c:76:8b:1d:b5:bd:a2: e1:6b:93:ff:ba:f0:a7:79:ad:1f:04:1f:31:5e:e3: a3:dc:6a:3d:3d:18:2f:31:96:bc:dd:fe:f0:78:29: de:b7:ff:4f:8f:7b:eb:40:5a:0c:d7:b5:3f:52:38: 16:8c:43:43:06:59:fd:cc:2c:b7:8b:ff:c2:55:9a: 9a:d0:f6:64:0a:01:46:7d:89:9f:1f:8a:4e:9c:08: 7f:23:49:03:3c:86:08:59:01:aa:b5:fd:26:0d:93: 94:e0:b3:f5:35:e4:ba:4a:81:02:62:2c:82:4f:e5: 9c:dd:4b:98:94:21:75:4a:ea:23:f3:8c:1b:e2:2a: dc:12:31:8a:26:fd:91:32:fa:e1:10:3d:e9:a0:00: 93:31:21:27:03:99:45:75:fd:85:63:f6:37:3a:6a: 39:8e:06:f9:53:47:fd:81:56:3b:6a:6e:8c:1c:c9: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:09:E5:17:90:00:26:54:0F:0D:A1:DF:DC:D4:57:1D:92:52:B1:3A X509v3 Authority Key Identifier: keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.103.144.0/24 Signature Algorithm: sha256WithRSAEncryption 05:5f:82:b9:7e:20:9b:38:cb:9f:44:bb:1d:9b:e1:9f:45:61: fb:a1:4c:b6:91:b5:d6:2c:55:51:3b:54:63:34:a9:d5:c5:be: 84:a5:25:cc:e2:c5:18:97:f7:41:2c:61:05:1e:96:47:ac:67: 23:a2:8a:41:b4:c0:cb:a7:74:39:4a:0d:80:59:80:81:82:14: 87:27:4d:95:f8:16:59:3d:c0:91:13:4c:09:14:5b:37:c0:a3: be:d7:84:41:a7:12:f0:53:2e:07:f7:87:3d:88:ee:41:8e:2d: 21:54:a6:75:66:dc:5b:f2:cb:d7:b4:db:ea:92:96:15:58:fc: b1:ed:89:4a:87:7d:01:2c:e3:c6:df:89:eb:38:08:9d:9a:13: 83:ee:f4:c3:88:93:5c:a9:58:fb:69:63:8c:b3:76:d8:45:d8: 4b:dd:6b:4c:ea:04:c4:4d:bc:63:71:16:23:9d:df:9d:fc:d9: 8d:bf:de:5a:b2:b3:8c:a3:24:07:92:81:7f:4a:e8:45:00:57: c5:51:27:d2:55:a2:e2:c1:4a:f4:83:9b:78:ce:d7:a7:c7:db: 26:85:7b:5f:e0:94:47:2a:a2:d9:e2:68:17:ee:c1:f5:fe:10: dd:22:45:62:68:30:89:91:78:e7:f3:bd:57:82:6c:74:d7:85: 4b:0a:ff:74 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULpR2AhYlKZTUf8pdRde/yHIyMsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQy OTJCQ0IzRTAeFw0yNTA1MDcxMTA5NDZaFw0yNjA1MDYxMTE0NDZaMDMxMTAvBgNV BAMTKEUyMDlFNTE3OTAwMDI2NTQwRjBEQTFERkRDRDQ1NzFEOTI1MkIxM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkNfh2C/90Ahpuxb5Kghv+awES Egbkv7/varYaOvUTYKW9y18xRJuYjpkTtPXcYt/JKWK8yrP3uJEcVHwxipILHimW DuqYW2oJfBjU+xXKzeO/LHaLHbW9ouFrk/+68Kd5rR8EHzFe46Pcaj09GC8xlrzd /vB4Kd63/0+Pe+tAWgzXtT9SOBaMQ0MGWf3MLLeL/8JVmprQ9mQKAUZ9iZ8fik6c CH8jSQM8hghZAaq1/SYNk5Tgs/U15LpKgQJiLIJP5ZzdS5iUIXVK6iPzjBviKtwS MYom/ZEy+uEQPemgAJMxIScDmUV1/YVj9jc6ajmOBvlTR/2BVjtqbowcyV1RAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU4gnlF5AAJlQPDaHf3NRXHZJSsTowHwYDVR0j BBgwFoAUdNTyeFyiYdAYyQm6Yi2CRCkryz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmVhNzdiNS04OGY3LTQwODUtYjMzMS05NzUwMjRjZDA0NmQvMC83NEQ0RjI3ODVD QTI2MUQwMThDOTA5QkE2MjJEODI0NDI5MkJDQjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQyOTJC Q0IzRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyZWE3N2I1LTg4ZjctNDA4NS1i MzMxLTk3NTAyNGNkMDQ2ZC8wLzMxMzAzMzJlMzEzMDMzMmUzMTM0MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM2MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZ5AwDQYJ KoZIhvcNAQELBQADggEBAAVfgrl+IJs4y59Eux2b4Z9FYfuhTLaRtdYsVVE7VGM0 qdXFvoSlJczixRiX90EsYQUelkesZyOiikG0wMundDlKDYBZgIGCFIcnTZX4Flk9 wJETTAkUWzfAo77XhEGnEvBTLgf3hz2I7kGOLSFUpnVm3Fvyy9e02+qSlhVY/LHt iUqHfQEs48bfies4CJ2aE4Pu9MOIk1ypWPtpY4yzdthF2Evda0zqBMRNvGNxFiOd 35382Y2/3lqys4yjJAeSgX9K6EUAV8VRJ9JVouLBSvSDm3jO16fH2yaFe1/glEcq otniaBfuwfX+EN0iRWJoMImReOfzvVeCbHTXhUsK/3Q= -----END CERTIFICATE-----Generated at Sun May 11 08:34:30 2025 by rpki-client