$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa File: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (raw, json) Hash identifier: 09EcthFcc0U294qSUk1qjMUpfEmQzlaHp9ePt/3ow3Q= Subject key identifier: F4:F1:42:1E:B6:C1:D8:E1:00:DD:63:05:3B:D5:F0:0A:48:4D:C3:76 Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 1067FA339D237EB8BA5C3E018934DFBD0A843430 Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa Signing time: Mon 05 May 2025 06:00:00 +0000 ROA not before: Mon 05 May 2025 05:55:00 +0000 ROA not after: Mon 04 May 2026 06:00:00 +0000 asID: 45305 IP address blocks: 103.142.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 02:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:67:fa:33:9d:23:7e:b8:ba:5c:3e:01:89:34:df:bd:0a:84:34:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: May 5 05:55:00 2025 GMT Not After : May 4 06:00:00 2026 GMT Subject: CN=F4F1421EB6C1D8E100DD63053BD5F00A484DC376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:0e:7c:ff:f3:62:43:10:0f:6b:16:42:80: 18:72:aa:06:68:3e:bb:24:46:0c:b4:6f:c6:80:b6: 64:96:9e:34:54:aa:6e:af:c1:f1:21:57:67:9e:f5: b9:0f:2d:3a:94:92:61:07:d3:5d:21:06:30:98:b0: fe:2e:04:bd:b0:0f:76:b4:df:fb:58:76:ab:fe:1f: d6:8a:65:fe:ef:91:f0:a0:8a:6f:02:db:1e:04:f3: 04:9d:1e:52:46:d6:90:27:4e:ef:c9:fa:37:4f:f1: 5a:9c:76:de:4f:ed:a4:d0:54:da:aa:f8:e0:39:4e: ec:2c:58:ab:ba:97:f1:60:36:c0:ef:f3:06:f2:82: d3:c7:dc:ef:30:89:1a:85:d9:96:f8:a8:f7:e5:22: 89:9f:04:ab:3a:a0:47:f9:2f:a0:cd:e9:c7:44:1a: b7:00:04:50:8d:81:6b:b9:5a:22:47:b7:19:2b:48: 19:8e:3c:17:cc:e7:85:b6:c4:23:4b:62:33:d4:4a: 6c:81:1d:f5:a5:2b:89:e9:81:cc:d7:45:81:7b:d3: bb:84:bf:4e:40:14:fd:55:f9:45:8c:a4:af:84:e2: b1:35:0b:7e:54:26:a1:7c:5e:8c:50:37:bf:8f:5d: ba:cf:f3:e6:ce:2b:dd:9b:fc:da:7c:09:1c:57:71: b9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F1:42:1E:B6:C1:D8:E1:00:DD:63:05:3B:D5:F0:0A:48:4D:C3:76 X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.254.0/23 Signature Algorithm: sha256WithRSAEncryption 99:9f:3b:fe:08:45:c9:78:39:e2:b2:7c:cf:00:3b:84:4e:6d: 1b:f0:6d:95:cb:2b:5e:78:4b:ae:00:58:e0:9c:cf:c3:16:50: 99:d1:63:ef:16:08:fa:f3:4a:eb:78:43:d4:62:d7:5c:8c:1f: 88:fe:02:17:68:e2:79:d3:02:bf:31:57:11:79:a2:29:8c:52: ff:47:c9:99:d9:d7:3f:db:20:f1:39:38:f4:10:51:02:95:ea: 63:4b:ff:17:01:d0:f9:af:b1:96:2f:6a:95:88:b5:5a:a1:4a: ac:94:50:cb:a2:5f:ea:94:00:39:d4:fc:ff:16:4b:73:09:29: 35:ee:5e:c3:17:c5:2d:c1:59:40:f8:f2:8d:88:33:b4:db:0e: 3e:40:39:f8:4d:45:a0:57:18:7d:37:f6:1e:d8:e2:af:4c:bc: 6b:35:b3:37:8c:d3:5f:14:9f:1b:8d:e6:ad:c0:31:ff:b9:3e: d7:ee:62:7d:a7:56:44:50:a7:fc:7f:9c:49:a9:de:21:5a:f8: d0:35:eb:ae:a9:c4:e2:90:77:0a:8e:2a:fe:f4:69:f8:dd:0c: 39:c6:c5:e4:88:72:19:bb:a6:bd:f2:ca:b5:ca:d8:06:2a:88: 2b:f0:18:67:6f:e4:78:88:d8:2a:42:59:22:53:30:77:40:7c: 97:b7:50:ad -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEGf6M50jfri6XD4BiTTfvQqENDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTA1MDUwNTU1MDBaFw0yNjA1MDQwNjAwMDBaMDMxMTAvBgNV BAMTKEY0RjE0MjFFQjZDMUQ4RTEwMERENjMwNTNCRDVGMDBBNDg0REMzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgg58//NiQxAPaxZCgBhyqgZo PrskRgy0b8aAtmSWnjRUqm6vwfEhV2ee9bkPLTqUkmEH010hBjCYsP4uBL2wD3a0 3/tYdqv+H9aKZf7vkfCgim8C2x4E8wSdHlJG1pAnTu/J+jdP8Vqcdt5P7aTQVNqq +OA5TuwsWKu6l/FgNsDv8wbygtPH3O8wiRqF2Zb4qPflIomfBKs6oEf5L6DN6cdE GrcABFCNgWu5WiJHtxkrSBmOPBfM54W2xCNLYjPUSmyBHfWlK4npgczXRYF707uE v05AFP1V+UWMpK+E4rE1C35UJqF8XoxQN7+PXbrP8+bOK92b/Np8CRxXcbnBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9PFCHrbB2OEA3WMFO9XwCkhNw3YwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZGMxZGQ4LTZkMjUtNDdjNy1h YWE0LWJkZGYxYjlkNjc3ZS8wLzMxMzAzMzJlMzEzNDMyMmUzMjM1MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ47+MA0GCSqG SIb3DQEBCwUAA4IBAQCZnzv+CEXJeDnisnzPADuETm0b8G2VyyteeEuuAFjgnM/D FlCZ0WPvFgj680rreEPUYtdcjB+I/gIXaOJ50wK/MVcReaIpjFL/R8mZ2dc/2yDx OTj0EFEClepjS/8XAdD5r7GWL2qViLVaoUqslFDLol/qlAA51Pz/FktzCSk17l7D F8UtwVlA+PKNiDO02w4+QDn4TUWgVxh9N/Ye2OKvTLxrNbM3jNNfFJ8bjeatwDH/ uT7X7mJ9p1ZEUKf8f5xJqd4hWvjQNeuuqcTikHcKjir+9Gn43Qw5xsXkiHIZu6a9 8sq1ytgGKogr8Bhnb+R4iNgqQlkiUzB3QHyXt1Ct -----END CERTIFICATE-----Generated at Fri May 9 20:38:53 2025 by rpki-client