$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa File: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (raw, json) Hash identifier: DmjamGqZJwfby4ZsZWwAD877kDOxqIbRWEyViTJ9Klo= Subject key identifier: 64:FF:F2:2A:12:0F:24:18:09:0E:B7:5E:56:F2:51:7B:2D:7C:4B:58 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 2B8E55D09C39C139C468EEDEA8133194629665D7 Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa Signing time: Sat 10 May 2025 13:00:01 +0000 ROA not before: Sat 10 May 2025 12:55:01 +0000 ROA not after: Sat 09 May 2026 13:00:01 +0000 asID: 149705 IP address blocks: 103.158.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:8e:55:d0:9c:39:c1:39:c4:68:ee:de:a8:13:31:94:62:96:65:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: May 10 12:55:01 2025 GMT Not After : May 9 13:00:01 2026 GMT Subject: CN=64FFF22A120F2418090EB75E56F2517B2D7C4B58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:f8:69:f8:50:9c:61:d5:bf:b6:7f:ef:76: 33:1c:2a:cc:eb:e1:59:6e:fb:a6:9e:73:c4:71:28: 62:8f:c0:a6:fa:ed:f9:48:79:b7:91:61:40:da:e5: 65:40:c1:e9:7b:2b:67:28:8d:26:dd:9a:12:ca:bf: 4d:0e:f5:46:09:a2:ce:cd:5c:5b:f2:f1:85:bf:57: 8e:a1:44:b3:ed:27:b2:9b:56:56:cd:b3:91:04:5a: 26:0e:22:a5:29:f0:86:67:9c:81:55:49:ca:f2:89: f4:91:9c:ce:2b:d2:36:4f:c0:01:25:c2:aa:36:e6: 08:b8:61:9f:cf:2b:36:a5:72:05:06:6e:00:ee:2a: 33:70:8f:a7:5b:76:00:ab:5b:0f:2f:cb:cd:90:72: 23:66:81:ad:a4:24:b2:98:f3:63:a2:2a:50:88:c3: 48:6e:c9:ea:50:e0:6f:af:f1:8d:83:ae:8e:b6:88: 85:ae:6e:0c:f6:b2:eb:82:86:00:b0:8d:fb:de:38: ea:62:a2:da:1b:49:86:57:74:fa:2c:8b:0e:66:27: 2c:85:94:17:a3:29:5f:be:de:8f:fd:f4:6e:ee:4e: 05:c8:e1:f8:c1:88:4e:29:df:6c:61:72:d3:25:54: 46:80:bf:33:f4:b1:89:40:b5:23:9f:35:66:0e:e2: 8b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FF:F2:2A:12:0F:24:18:09:0E:B7:5E:56:F2:51:7B:2D:7C:4B:58 X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.193.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:96:45:0c:ea:8b:fe:12:d7:f5:2f:12:b1:de:bd:f2:bc:ac: b5:ab:58:ec:3e:7f:3a:32:38:9c:67:89:8e:4b:99:91:12:bf: 66:6f:e1:43:57:a8:80:b1:b5:4f:f2:b5:b0:fd:1c:0c:13:ea: 33:f4:aa:b6:91:3f:f1:4a:59:33:21:58:6b:c0:ce:6b:a4:b0: ab:9f:95:71:90:f7:f7:d4:71:47:37:8b:df:3f:6a:a5:47:c1: 2a:70:4e:83:04:68:d4:4e:39:f2:1c:80:dc:4f:3b:bb:3c:5f: d8:44:20:2b:56:56:c5:95:04:d7:ec:06:a1:74:68:6c:60:6a: ed:b0:11:fd:a9:a5:88:c3:51:27:9a:78:9f:92:b8:b3:ea:b3: 80:2a:65:fd:a5:71:07:c1:5c:73:ca:71:1b:3b:81:0b:e5:97: 53:b2:fd:93:d2:ab:65:80:6c:07:bd:5c:eb:7e:52:e6:1a:80: b1:b8:0e:5d:90:8d:86:1b:08:50:30:71:e4:a7:a7:2e:88:cb: 0b:ef:bc:b4:89:a1:c6:5c:65:d9:85:e6:d1:f2:24:51:41:23: 39:27:dc:7f:6c:03:13:23:9c:aa:91:55:ae:58:9f:26:73:b0: fb:db:69:db:0e:5d:dd:5f:55:25:26:29:28:58:51:7f:3f:22: ca:df:0d:7a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUK45V0Jw5wTnEaO7eqBMxlGKWZdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNTA1MTAxMjU1MDFaFw0yNjA1MDkxMzAwMDFaMDMxMTAvBgNV BAMTKDY0RkZGMjJBMTIwRjI0MTgwOTBFQjc1RTU2RjI1MTdCMkQ3QzRCNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/vhp+FCcYdW/tn/vdjMcKszr 4Vlu+6aec8RxKGKPwKb67flIebeRYUDa5WVAwel7K2cojSbdmhLKv00O9UYJos7N XFvy8YW/V46hRLPtJ7KbVlbNs5EEWiYOIqUp8IZnnIFVScryifSRnM4r0jZPwAEl wqo25gi4YZ/PKzalcgUGbgDuKjNwj6dbdgCrWw8vy82QciNmga2kJLKY82OiKlCI w0huyepQ4G+v8Y2Dro62iIWubgz2suuChgCwjfveOOpiotobSYZXdPosiw5mJyyF lBejKV++3o/99G7uTgXI4fjBiE4p32xhctMlVEaAvzP0sYlAtSOfNWYO4ovlAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUZP/yKhIPJBgJDrdeVvJRey18S1gwHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNmM2MTRmLWQwZmYtNDFhOS05 MmQwLTNhMjEzNTgxNTM3Yi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM5MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMwMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnsEwDQYJ KoZIhvcNAQELBQADggEBAH2WRQzqi/4S1/UvErHevfK8rLWrWOw+fzoyOJxniY5L mZESv2Zv4UNXqICxtU/ytbD9HAwT6jP0qraRP/FKWTMhWGvAzmuksKuflXGQ9/fU cUc3i98/aqVHwSpwToMEaNROOfIcgNxPO7s8X9hEICtWVsWVBNfsBqF0aGxgau2w Ef2ppYjDUSeaeJ+SuLPqs4AqZf2lcQfBXHPKcRs7gQvll1Oy/ZPSq2WAbAe9XOt+ UuYagLG4Dl2QjYYbCFAwceSnpy6IywvvvLSJocZcZdmF5tHyJFFBIzkn3H9sAxMj nKqRVa5YnyZzsPvbadsOXd1fVSUmKShYUX8/IsrfDXo= -----END CERTIFICATE-----Generated at Sat May 10 15:17:27 2025 by rpki-client