$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa File: 3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: hO3TYxAXzw/V6r86wSfpnoCd/PGvTd9QJNT7S4oiXc4= Subject key identifier: 64:55:EF:F7:8F:2E:96:93:5F:ED:F7:66:1B:5B:AC:1D:6A:79:0B:B1 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 35C0A5C436D7CB79C909C9F88646F5B1062B343C Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa Signing time: Mon 16 Jun 2025 03:02:57 +0000 ROA not before: Mon 16 Jun 2025 02:57:57 +0000 ROA not after: Mon 15 Jun 2026 03:02:57 +0000 asID: 48465 IP address blocks: 103.147.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c0:a5:c4:36:d7:cb:79:c9:09:c9:f8:86:46:f5:b1:06:2b:34:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Jun 16 02:57:57 2025 GMT Not After : Jun 15 03:02:57 2026 GMT Subject: CN=6455EFF78F2E96935FEDF7661B5BAC1D6A790BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:c6:29:02:5a:72:44:cf:fa:8b:00:37:85: bf:fb:3f:ac:27:77:26:a1:9d:3c:90:b0:e4:d0:31: d4:96:61:96:71:e8:68:01:f0:ba:6d:f4:61:12:6d: f5:66:bd:b7:61:59:32:c3:4e:3d:fb:7c:ea:83:02: 90:55:6f:cc:b4:8e:a8:98:41:82:82:cb:d0:8e:2f: c5:ae:f6:0f:66:0b:3e:3a:25:8b:c8:f9:a9:af:8f: 9a:cc:b6:17:35:e6:82:78:a3:c8:2e:af:24:0d:46: 96:79:8c:d4:9b:c9:06:31:d2:58:2d:23:67:c7:7b: e2:1a:5f:50:63:5d:20:4b:00:b3:c6:eb:9b:21:e7: e2:b3:c2:c0:f0:07:bd:6c:15:30:1a:90:a3:d0:70: 09:6c:7c:a2:cc:b7:6e:d1:f9:ce:0e:f5:54:7d:03: 49:d1:8c:e7:a9:c9:ed:75:34:a6:aa:07:38:05:a3: b4:10:39:0f:98:49:d6:96:fd:56:20:40:24:03:b3: 30:52:2c:f7:29:d5:a9:b3:c6:3d:53:7a:91:c3:e9: ba:34:b7:eb:f9:26:ae:07:b7:43:e5:1b:0a:49:6c: 43:aa:3f:f8:f9:a3:f8:7e:2f:da:ac:4f:2f:da:b9: 99:08:ee:d4:88:84:d7:4b:91:42:49:20:1b:96:89: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:55:EF:F7:8F:2E:96:93:5F:ED:F7:66:1B:5B:AC:1D:6A:79:0B:B1 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.115.0/24 Signature Algorithm: sha256WithRSAEncryption 43:91:c6:ae:bf:c8:f9:c6:aa:f2:90:3b:aa:95:8e:fd:45:68: 44:3e:44:ac:41:25:e8:12:df:e3:8f:59:4c:f2:a6:ec:94:fc: f2:b7:cc:76:a2:2a:67:3c:9a:7a:53:e4:5b:4d:bd:37:4a:b8: ac:63:e4:ad:36:1b:b3:86:9c:0f:e6:22:06:55:af:f5:53:40: 03:28:61:06:f7:5f:51:33:ba:e8:b5:3f:21:b6:c1:8b:96:67: 8e:47:df:4d:6b:01:9d:d0:69:84:a6:cf:6e:60:a5:4a:92:7c: 6b:28:11:ce:33:e9:f8:57:ff:1b:00:fb:eb:f4:35:24:ae:5e: 8a:ec:8d:8c:a2:8b:04:a2:47:eb:a9:25:0b:01:b4:68:b1:4c: be:a3:b6:08:ae:4e:b9:6a:2f:f0:b0:70:63:1a:39:17:e0:59: 7d:b9:42:f8:b1:e8:e4:1e:3d:55:00:8f:04:89:95:5e:53:62: 16:65:fe:c4:77:df:3a:7e:6a:12:bf:0e:d8:cd:02:84:aa:7c: 5f:8d:6a:a0:f1:ea:dd:ab:97:9a:aa:2d:bd:94:03:19:68:b8: 1d:48:a7:17:da:2b:06:ea:ad:16:42:7f:e4:11:e1:d3:ac:fd: 86:cf:97:c6:c3:a7:ae:22:0c:bb:ff:69:bc:83:5c:c9:38:6c: b3:01:97:5a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNcClxDbXy3nJCcn4hkb1sQYrNDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTA2MTYwMjU3NTdaFw0yNjA2MTUwMzAyNTdaMDMxMTAvBgNV BAMTKDY0NTVFRkY3OEYyRTk2OTM1RkVERjc2NjFCNUJBQzFENkE3OTBCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChu8YpAlpyRM/6iwA3hb/7P6wn dyahnTyQsOTQMdSWYZZx6GgB8Lpt9GESbfVmvbdhWTLDTj37fOqDApBVb8y0jqiY QYKCy9COL8Wu9g9mCz46JYvI+amvj5rMthc15oJ4o8guryQNRpZ5jNSbyQYx0lgt I2fHe+IaX1BjXSBLALPG65sh5+KzwsDwB71sFTAakKPQcAlsfKLMt27R+c4O9VR9 A0nRjOepye11NKaqBzgFo7QQOQ+YSdaW/VYgQCQDszBSLPcp1amzxj1TepHD6bo0 t+v5Jq4Ht0PlGwpJbEOqP/j5o/h+L9qsTy/auZkI7tSIhNdLkUJJIBuWibndAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZFXv948ulpNf7fdmG1usHWp5C7EwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2OGNjMDU5LTVlNmMtNDUwMS1i ODk0LTE0YTgyZDE4ZDIxZS8wLzMxMzAzMzJlMzEzNDM3MmUzMTMxMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5NzMA0GCSqG SIb3DQEBCwUAA4IBAQBDkcauv8j5xqrykDuqlY79RWhEPkSsQSXoEt/jj1lM8qbs lPzyt8x2oipnPJp6U+RbTb03SrisY+StNhuzhpwP5iIGVa/1U0ADKGEG919RM7ro tT8htsGLlmeOR99NawGd0GmEps9uYKVKknxrKBHOM+n4V/8bAPvr9DUkrl6K7I2M oosEokfrqSULAbRosUy+o7YIrk65ai/wsHBjGjkX4Fl9uUL4sejkHj1VAI8EiZVe U2IWZf7Ed986fmoSvw7YzQKEqnxfjWqg8erdq5eaqi29lAMZaLgdSKcX2isG6q0W Qn/kEeHTrP2Gz5fGw6euIgy7/2m8g1zJOGyzAZda -----END CERTIFICATE-----Generated at Mon Jun 30 14:12:47 2025 by rpki-client