$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa File: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: ebXS+Tyb8iuyOHa8yQE2FE8hZAgaawDNcd7a/TUN4jY= Subject key identifier: 3E:FA:5D:8A:72:54:E9:EF:ED:80:4B:00:E5:00:24:F0:BC:4E:7A:A5 Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 44AC72A1386C2191BCF2D5F415AC43066F17F59F Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa Signing time: Mon 05 May 2025 10:00:00 +0000 ROA not before: Mon 05 May 2025 09:55:00 +0000 ROA not after: Mon 04 May 2026 10:00:00 +0000 asID: 45305 IP address blocks: 103.142.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 02:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ac:72:a1:38:6c:21:91:bc:f2:d5:f4:15:ac:43:06:6f:17:f5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: May 5 09:55:00 2025 GMT Not After : May 4 10:00:00 2026 GMT Subject: CN=3EFA5D8A7254E9EFED804B00E50024F0BC4E7AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:93:bf:36:b0:26:cb:ca:a1:a3:7b:75:4e:ba: a9:1e:d2:c9:e7:ad:a2:f4:92:fd:3b:88:fb:14:b5: 75:e8:f0:61:05:52:f8:72:0d:77:3b:25:53:d3:02: 87:05:8e:f7:cb:a8:20:42:c6:2f:12:75:0c:5b:1e: 55:00:20:72:70:63:c2:2f:c5:3a:53:50:87:25:86: eb:43:80:ff:db:41:63:b1:cf:ae:5c:6e:1e:be:90: 63:fa:8e:2f:c9:e8:32:e2:ea:c9:06:ec:be:86:49: 39:2b:9f:d8:4d:3c:1d:d7:c1:4b:54:95:7c:9d:62: 02:3b:ba:39:cf:35:c3:64:c6:85:aa:b5:36:f2:b4: de:c9:11:42:17:0f:b1:cc:df:ef:db:86:44:a6:ee: 7a:9b:ab:ef:fe:21:2c:73:eb:36:77:a0:32:a0:12: f7:33:15:d9:2c:4d:9c:60:b0:26:ae:a1:13:44:2a: 5a:17:19:ef:6e:2e:8d:e1:78:87:c2:5b:7b:57:ce: 85:3a:1f:7b:14:0e:36:55:d8:7d:55:e5:00:f6:57: 03:0b:f5:d3:48:0a:dd:f3:ce:cb:f7:39:43:7b:e2: 58:af:e6:98:2c:b0:01:2b:a4:df:39:cc:1c:60:b9: 53:6d:e0:5d:04:83:fe:b0:c5:d8:3c:9e:20:75:46: 94:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FA:5D:8A:72:54:E9:EF:ED:80:4B:00:E5:00:24:F0:BC:4E:7A:A5 X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.254.0/24 Signature Algorithm: sha256WithRSAEncryption 73:a7:f5:8d:da:f4:06:f1:df:bb:29:f3:f6:7e:b4:ef:4a:ee: 18:64:af:3f:61:2c:25:b1:4f:10:ef:a0:b2:4b:5e:50:92:61: 56:08:a2:c7:fb:3c:1b:40:81:01:aa:3f:21:bf:4b:ef:ea:79: c8:fd:f5:d3:a6:4e:cb:92:f2:e7:a1:d8:33:9e:6a:43:c3:dd: df:2e:28:6e:35:6c:73:47:ce:b6:58:72:c9:9f:ac:b8:14:43: 0f:86:e8:35:2b:cd:7c:37:ee:43:98:82:ed:3d:73:7e:45:b1: f6:d8:5c:e5:45:60:60:be:64:34:77:f3:75:ba:fb:95:4c:a3: ed:61:96:65:1d:2f:b5:c3:53:d8:ff:5a:da:0b:50:0a:c7:e5: fd:65:15:7b:c1:71:2b:ed:9b:27:54:0d:c7:ff:18:1c:a2:44: f9:af:93:cb:db:30:3b:6b:c1:c5:f9:93:78:01:af:63:e2:35: d1:54:c4:20:e5:59:b9:65:7d:58:73:97:24:7d:fb:e2:72:cc: 1d:b4:d9:6d:f7:8e:d6:ca:36:6b:8d:42:69:8b:29:ce:96:14: 68:e7:0f:e7:10:4f:93:cd:6e:8a:b1:74:47:cd:14:53:d3:3f: 12:b6:b9:7a:0f:c2:1a:03:dd:e1:c5:40:b1:a7:6f:ff:5d:61: 51:d0:8f:99 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURKxyoThsIZG88tX0FaxDBm8X9Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTA1MDUwOTU1MDBaFw0yNjA1MDQxMDAwMDBaMDMxMTAvBgNV BAMTKDNFRkE1RDhBNzI1NEU5RUZFRDgwNEIwMEU1MDAyNEYwQkM0RTdBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuk782sCbLyqGje3VOuqke0snn raL0kv07iPsUtXXo8GEFUvhyDXc7JVPTAocFjvfLqCBCxi8SdQxbHlUAIHJwY8Iv xTpTUIclhutDgP/bQWOxz65cbh6+kGP6ji/J6DLi6skG7L6GSTkrn9hNPB3XwUtU lXydYgI7ujnPNcNkxoWqtTbytN7JEUIXD7HM3+/bhkSm7nqbq+/+ISxz6zZ3oDKg EvczFdksTZxgsCauoRNEKloXGe9uLo3heIfCW3tXzoU6H3sUDjZV2H1V5QD2VwML 9dNICt3zzsv3OUN74liv5pgssAErpN85zBxguVNt4F0Eg/6wxdg8niB1RpRTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPvpdinJU6e/tgEsA5QAk8LxOeqUwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZGMxZGQ4LTZkMjUtNDdjNy1h YWE0LWJkZGYxYjlkNjc3ZS8wLzMxMzAzMzJlMzEzNDMyMmUzMjM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ47+MA0GCSqG SIb3DQEBCwUAA4IBAQBzp/WN2vQG8d+7KfP2frTvSu4YZK8/YSwlsU8Q76CyS15Q kmFWCKLH+zwbQIEBqj8hv0vv6nnI/fXTpk7LkvLnodgznmpDw93fLihuNWxzR862 WHLJn6y4FEMPhug1K818N+5DmILtPXN+RbH22FzlRWBgvmQ0d/N1uvuVTKPtYZZl HS+1w1PY/1raC1AKx+X9ZRV7wXEr7ZsnVA3H/xgcokT5r5PL2zA7a8HF+ZN4Aa9j 4jXRVMQg5Vm5ZX1Yc5ckffvicswdtNlt947WyjZrjUJpiynOlhRo5w/nEE+TzW6K sXRHzRRT0z8Strl6D8IaA93hxUCxp2//XWFR0I+Z -----END CERTIFICATE-----Generated at Thu May 8 19:19:35 2025 by rpki-client