$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa File: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (raw, json) Hash identifier: zzYEb/fwe0SxrS/0Hgs2jLEQVjX3qR9GD9AYVGEuUXM= Subject key identifier: C6:D2:14:67:1E:E2:D3:17:BF:4D:E6:4D:50:F6:23:EF:BF:76:BA:88 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 2F336EC671173FA45034AA299DABCE84B22CD93C Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa Signing time: Sat 10 May 2025 12:00:01 +0000 ROA not before: Sat 10 May 2025 11:55:01 +0000 ROA not after: Sat 09 May 2026 12:00:01 +0000 asID: 149705 IP address blocks: 103.158.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:33:6e:c6:71:17:3f:a4:50:34:aa:29:9d:ab:ce:84:b2:2c:d9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: May 10 11:55:01 2025 GMT Not After : May 9 12:00:01 2026 GMT Subject: CN=C6D214671EE2D317BF4DE64D50F623EFBF76BA88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:c3:df:9f:08:b2:0f:0a:27:5b:67:8c:f2: d4:43:c6:50:b6:ea:78:02:a5:ce:46:1b:20:99:75: 5e:0e:6c:7e:d9:a4:8a:0c:95:39:32:cb:a0:94:da: 18:ac:5c:a3:6f:24:2c:1a:75:9c:d0:55:33:6f:ca: b3:5c:95:15:c5:b3:6e:4a:5c:38:4b:4e:ef:18:76: bf:1c:d4:da:9c:1b:20:e1:2e:f7:55:e8:84:f4:b6: c9:46:24:5d:15:07:f1:be:1d:4a:66:8b:31:8a:06: 8c:7f:7b:a0:3a:54:5b:38:fe:2d:ce:32:8a:56:95: 9c:a7:28:3b:2f:6e:f0:b9:b1:9f:2a:99:2c:f7:5b: f4:ef:be:f9:65:b3:33:f3:d0:6c:f2:66:39:9d:4c: fd:c7:df:b7:fd:80:98:fb:27:ea:f5:44:2a:50:fb: 80:81:85:10:0a:a9:46:bf:68:64:9b:4f:71:0d:f7: e3:4d:c3:b7:4c:c6:3a:8d:35:df:74:d0:7c:1f:50: 60:8e:a7:ab:3f:ea:63:7b:af:46:90:52:b0:08:80: 5d:17:32:4e:84:62:d0:28:6c:07:09:0d:7b:e4:90: 02:43:8f:55:6b:64:5a:e2:12:b0:b8:bc:fc:db:55: ce:f3:10:89:ff:c7:83:c4:87:b5:c4:37:5d:f3:a6: f1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D2:14:67:1E:E2:D3:17:BF:4D:E6:4D:50:F6:23:EF:BF:76:BA:88 X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.192.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:ef:40:06:56:26:8e:3a:0a:82:51:36:2f:fb:16:52:5d:fe: 16:2e:89:4f:2a:b8:24:65:40:4a:56:4b:29:20:aa:78:38:4b: 81:d2:08:5d:49:24:03:f3:ab:7a:6c:9a:d1:d0:1d:4c:7a:ea: bd:4f:a8:00:e9:1b:cd:5f:61:1e:c0:ae:69:b6:58:ca:6b:cc: df:92:07:c7:3e:ca:01:01:54:e7:4e:74:58:ea:4f:f3:04:36: f2:01:27:2b:93:31:95:a2:fc:b9:35:16:58:bd:a7:77:81:5b: e3:67:44:c3:b8:fa:a8:e9:9b:09:7f:48:99:67:2a:c9:8b:34: 4c:01:fb:a1:43:00:97:97:9d:b5:2f:ec:42:87:df:0b:09:61: 9c:1b:f6:be:b5:d7:df:56:c4:d3:ab:93:6c:52:ad:e5:f1:19: e3:e0:85:b2:92:32:b0:41:ba:33:93:72:06:ef:ef:45:eb:56: 5f:85:72:a2:3e:f2:53:a8:2e:1a:d9:a4:0f:0e:1a:d7:e8:c1: ee:5a:08:9f:e7:1a:80:e8:d9:66:75:6e:61:9b:33:71:de:21: 2b:2d:9c:ee:9b:68:13:77:5e:b9:50:29:3b:54:48:24:5e:c4: 58:12:b8:10:8e:6e:8f:0f:f5:4e:30:f8:4b:0b:83:f1:2d:ab: 16:5d:64:0a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULzNuxnEXP6RQNKopnavOhLIs2TwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNTA1MTAxMTU1MDFaFw0yNjA1MDkxMjAwMDFaMDMxMTAvBgNV BAMTKEM2RDIxNDY3MUVFMkQzMTdCRjRERTY0RDUwRjYyM0VGQkY3NkJBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXksPfnwiyDwonW2eM8tRDxlC2 6ngCpc5GGyCZdV4ObH7ZpIoMlTkyy6CU2hisXKNvJCwadZzQVTNvyrNclRXFs25K XDhLTu8Ydr8c1NqcGyDhLvdV6IT0tslGJF0VB/G+HUpmizGKBox/e6A6VFs4/i3O MopWlZynKDsvbvC5sZ8qmSz3W/TvvvllszPz0GzyZjmdTP3H37f9gJj7J+r1RCpQ +4CBhRAKqUa/aGSbT3EN9+NNw7dMxjqNNd900HwfUGCOp6s/6mN7r0aQUrAIgF0X Mk6EYtAobAcJDXvkkAJDj1VrZFriErC4vPzbVc7zEIn/x4PEh7XEN13zpvF9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUxtIUZx7i0xe/TeZNUPYj7792uogwHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNmM2MTRmLWQwZmYtNDFhOS05 MmQwLTNhMjEzNTgxNTM3Yi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM5MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMwMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnsAwDQYJ KoZIhvcNAQELBQADggEBACrvQAZWJo46CoJRNi/7FlJd/hYuiU8quCRlQEpWSykg qng4S4HSCF1JJAPzq3psmtHQHUx66r1PqADpG81fYR7Armm2WMprzN+SB8c+ygEB VOdOdFjqT/MENvIBJyuTMZWi/Lk1Fli9p3eBW+NnRMO4+qjpmwl/SJlnKsmLNEwB +6FDAJeXnbUv7EKH3wsJYZwb9r61199WxNOrk2xSreXxGePghbKSMrBBujOTcgbv 70XrVl+FcqI+8lOoLhrZpA8OGtfowe5aCJ/nGoDo2WZ1bmGbM3HeISstnO6baBN3 XrlQKTtUSCRexFgSuBCObo8P9U4w+EsLg/EtqxZdZAo= -----END CERTIFICATE-----Generated at Sat May 10 15:02:22 2025 by rpki-client