$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa File: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (raw, json) Hash identifier: gj/8lggfR8myqoNqzBWaOnMDIVL5S0r8bZN2DAfp+nY= Subject key identifier: 4A:A3:B2:F5:2C:0D:E0:28:61:00:6B:EA:A7:3C:BE:CE:67:EE:61:6D Certificate issuer: /CN=74D4F2785CA261D018C909BA622D8244292BCB3E Certificate serial: 74D17764CD2FA809975410E70DB8EF8DB48A78C0 Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa Signing time: Wed 07 May 2025 11:15:20 +0000 ROA not before: Wed 07 May 2025 11:10:20 +0000 ROA not after: Wed 06 May 2026 11:15:20 +0000 asID: 136861 IP address blocks: 103.103.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 22:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d1:77:64:cd:2f:a8:09:97:54:10:e7:0d:b8:ef:8d:b4:8a:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E Validity Not Before: May 7 11:10:20 2025 GMT Not After : May 6 11:15:20 2026 GMT Subject: CN=4AA3B2F52C0DE02861006BEAA73CBECE67EE616D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:aa:57:f8:b8:52:28:7d:61:1a:49:99:99: d8:22:a9:20:28:89:cd:b2:e9:3e:4d:4d:88:ac:18: ec:59:0d:44:15:83:91:a0:05:20:ad:89:b1:42:36: 37:2a:98:4f:9d:61:af:42:48:c3:30:e2:0d:d2:7f: c3:cf:3a:eb:32:3e:95:10:d6:50:fa:7d:cf:21:56: d5:1d:bc:f6:e7:43:76:94:47:bf:eb:20:f6:a2:d6: fb:fa:62:35:23:03:a1:a6:19:b7:e1:b0:aa:88:02: ea:7c:cc:89:42:ac:80:4d:a5:68:a7:8a:67:f1:9a: 9f:18:a5:88:35:ea:68:f2:95:69:c1:09:98:1a:f8: 6b:f9:8c:c4:0c:e8:ef:cd:74:35:50:77:e9:b2:45: de:76:f8:2f:79:3e:e4:ac:b7:65:52:e9:33:5d:13: c0:5d:40:9c:ad:ba:fb:a1:37:3f:da:15:bb:c1:ac: 43:f9:a3:1f:37:8a:5b:9d:9d:15:40:41:65:1e:60: 24:63:46:63:7a:09:61:54:ba:07:d3:68:6d:12:ff: f6:47:72:60:1b:ee:fb:f9:22:b9:0e:f7:ae:ec:22: 27:a4:1f:da:f2:8f:2b:c2:0f:3b:18:e8:ec:3c:be: 73:1a:3f:44:87:c2:f4:41:a1:4a:27:34:e1:ac:e1: da:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A3:B2:F5:2C:0D:E0:28:61:00:6B:EA:A7:3C:BE:CE:67:EE:61:6D X509v3 Authority Key Identifier: keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.103.146.0/24 Signature Algorithm: sha256WithRSAEncryption 61:ca:75:1b:bb:67:41:d1:98:b4:5a:68:9b:47:eb:2a:38:53: 9d:ca:dd:91:18:c3:68:ae:f0:a6:6a:1a:c6:e1:da:62:0f:5f: 0f:a1:65:2b:51:b6:c6:93:35:ce:91:be:c5:03:4c:72:06:ee: b4:91:67:1e:f6:50:93:2e:4c:f2:1d:9b:d7:8c:6a:e7:c9:16: b1:03:72:96:a0:9d:16:c4:ff:90:86:40:c4:35:b3:4b:86:0c: 57:31:15:0d:34:4e:09:66:6f:96:2a:10:dd:66:38:e9:63:7e: 99:f4:62:0b:a4:86:92:71:f2:f7:98:24:de:ad:a0:c7:22:18: 24:20:c6:02:38:7b:ff:ef:24:02:17:33:13:fa:2e:db:51:aa: 4f:15:bd:95:f5:01:01:91:9f:cb:1f:79:4e:65:26:d0:6f:e8: 54:ba:32:0b:62:77:0e:66:7c:7f:8c:65:28:76:fc:dd:4f:c6: 13:a6:b8:7a:49:54:28:91:63:4c:38:e5:f2:04:86:e4:9f:d0: eb:ff:f2:c4:15:ea:65:54:6d:e1:84:6e:15:27:1d:87:cc:71: ea:de:2c:fb:65:58:df:02:98:21:42:8a:43:87:58:7e:67:a9: 49:a1:a7:79:cf:e9:1f:9e:b8:d1:a3:2d:de:c5:e2:5a:6d:f7: 8e:87:86:44 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUdNF3ZM0vqAmXVBDnDbjvjbSKeMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQy OTJCQ0IzRTAeFw0yNTA1MDcxMTEwMjBaFw0yNjA1MDYxMTE1MjBaMDMxMTAvBgNV BAMTKDRBQTNCMkY1MkMwREUwMjg2MTAwNkJFQUE3M0NCRUNFNjdFRTYxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//6pX+LhSKH1hGkmZmdgiqSAo ic2y6T5NTYisGOxZDUQVg5GgBSCtibFCNjcqmE+dYa9CSMMw4g3Sf8PPOusyPpUQ 1lD6fc8hVtUdvPbnQ3aUR7/rIPai1vv6YjUjA6GmGbfhsKqIAup8zIlCrIBNpWin imfxmp8YpYg16mjylWnBCZga+Gv5jMQM6O/NdDVQd+myRd52+C95PuSst2VS6TNd E8BdQJytuvuhNz/aFbvBrEP5ox83iludnRVAQWUeYCRjRmN6CWFUugfTaG0S//ZH cmAb7vv5IrkO967sIiekH9ryjyvCDzsY6Ow8vnMaP0SHwvRBoUonNOGs4dq3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUSqOy9SwN4ChhAGvqpzy+zmfuYW0wHwYDVR0j BBgwFoAUdNTyeFyiYdAYyQm6Yi2CRCkryz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmVhNzdiNS04OGY3LTQwODUtYjMzMS05NzUwMjRjZDA0NmQvMC83NEQ0RjI3ODVD QTI2MUQwMThDOTA5QkE2MjJEODI0NDI5MkJDQjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQyOTJC Q0IzRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyZWE3N2I1LTg4ZjctNDA4NS1i MzMxLTk3NTAyNGNkMDQ2ZC8wLzMxMzAzMzJlMzEzMDMzMmUzMTM0MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM2MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZ5IwDQYJ KoZIhvcNAQELBQADggEBAGHKdRu7Z0HRmLRaaJtH6yo4U53K3ZEYw2iu8KZqGsbh 2mIPXw+hZStRtsaTNc6RvsUDTHIG7rSRZx72UJMuTPIdm9eMaufJFrEDcpagnRbE /5CGQMQ1s0uGDFcxFQ00Tglmb5YqEN1mOOljfpn0YgukhpJx8veYJN6toMciGCQg xgI4e//vJAIXMxP6LttRqk8VvZX1AQGRn8sfeU5lJtBv6FS6Mgtidw5mfH+MZSh2 /N1PxhOmuHpJVCiRY0w45fIEhuSf0Ov/8sQV6mVUbeGEbhUnHYfMcereLPtlWN8C mCFCikOHWH5nqUmhp3nP6R+euNGjLd7F4lpt946HhkQ= -----END CERTIFICATE-----Generated at Sun May 11 02:49:07 2025 by rpki-client