$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa File: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: fW5qne1R9fTa45nGDciUROmSkAV8mbUeGR9m/oXMOAw= Subject key identifier: E4:94:6F:CE:D1:24:E1:F0:04:8D:BE:2A:91:FA:7E:29:EB:6F:2B:EC Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 54B17220AC6BCEDCB2ECD9A2F133FB5FCB9FF614 Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa Signing time: Mon 05 May 2025 10:00:00 +0000 ROA not before: Mon 05 May 2025 09:55:00 +0000 ROA not after: Mon 04 May 2026 10:00:00 +0000 asID: 45305 IP address blocks: 103.142.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 02:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b1:72:20:ac:6b:ce:dc:b2:ec:d9:a2:f1:33:fb:5f:cb:9f:f6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: May 5 09:55:00 2025 GMT Not After : May 4 10:00:00 2026 GMT Subject: CN=E4946FCED124E1F0048DBE2A91FA7E29EB6F2BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:93:2d:46:f5:77:2e:43:84:fd:53:79:8d:09: a3:5e:08:64:f2:78:57:cd:7d:6e:e0:bd:51:76:d1: fb:7b:0f:7f:b2:f1:eb:56:f1:91:0a:bf:d7:98:43: 03:ae:37:a8:bc:a3:04:fa:fc:79:e6:54:6d:da:84: 0e:ed:c7:71:8f:07:82:cc:ef:68:91:ff:6c:82:7c: 23:f3:18:20:88:ee:f1:b2:f0:05:b8:2c:85:bd:87: 3f:73:ea:be:3b:5d:25:ba:9c:75:a3:b8:1c:2a:92: 89:cf:7c:2e:eb:31:71:df:93:89:c0:4e:08:1e:2c: db:98:c3:46:4a:e5:e8:1f:40:40:ce:a5:1a:9e:d6: 35:69:f8:61:9c:b5:aa:55:8e:4d:a3:08:37:62:c6: 9c:bf:29:f5:fa:bf:5c:5b:ba:66:62:16:fb:38:ef: 7a:f3:7f:12:e2:49:53:df:69:37:63:35:d9:4c:7e: 31:c4:16:0a:d3:41:3f:2a:b1:9d:f9:39:5d:35:82: 15:64:ac:e9:12:4b:1a:66:40:55:20:cf:0a:72:fe: e4:9a:37:fd:46:19:be:65:f1:61:d4:d4:61:18:1b: 4f:a0:50:28:a7:f5:af:5f:2d:2a:c7:9e:e3:83:f7: c3:9f:a7:d8:67:48:5b:d5:cb:59:73:32:75:18:cc: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:94:6F:CE:D1:24:E1:F0:04:8D:BE:2A:91:FA:7E:29:EB:6F:2B:EC X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.255.0/24 Signature Algorithm: sha256WithRSAEncryption 48:be:2a:47:97:9f:19:e8:3c:3d:b6:2e:48:0e:10:a4:86:e6: f3:be:d8:91:47:d4:8d:03:94:a6:4e:3f:08:95:cc:1c:f7:39: 4b:28:bb:37:65:5e:00:69:9c:f0:35:63:02:c5:ef:2f:74:dc: 14:c3:8f:99:1f:ba:30:78:e1:d5:87:36:27:9b:5e:6d:2a:4c: 0f:6f:fa:cf:d1:6f:c3:62:a8:a6:c3:23:81:5e:0b:c3:2b:c1: 1e:1a:0f:ba:b5:5f:8c:6a:5a:01:8d:14:13:69:e0:0a:4d:7a: b4:77:95:81:9d:4e:ff:aa:8f:da:34:b3:80:8f:72:b6:20:a7: 2a:82:5e:40:ea:e2:61:a3:31:af:74:5c:a6:29:ae:8c:9f:01: 7a:71:37:37:6f:14:06:65:b7:81:84:6a:43:bb:25:20:05:b1: d5:9d:fc:aa:cd:8d:6f:0c:cb:0c:e2:36:a0:9c:66:d7:5a:e0: 81:f1:73:e6:46:92:d1:21:14:68:64:c3:3b:e8:ea:94:e6:ec: 58:0e:bf:a8:de:c6:05:65:fc:c7:75:5b:52:30:31:41:7b:23: 95:c5:c7:ae:98:0c:9c:e7:02:be:d7:32:49:6f:f8:f8:5e:2b: d0:cf:9b:89:8e:2e:7c:f5:d5:d0:ba:f4:e8:9e:68:07:87:10: a8:04:30:26 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVLFyIKxrztyy7Nmi8TP7X8uf9hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTA1MDUwOTU1MDBaFw0yNjA1MDQxMDAwMDBaMDMxMTAvBgNV BAMTKEU0OTQ2RkNFRDEyNEUxRjAwNDhEQkUyQTkxRkE3RTI5RUI2RjJCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYky1G9XcuQ4T9U3mNCaNeCGTy eFfNfW7gvVF20ft7D3+y8etW8ZEKv9eYQwOuN6i8owT6/HnmVG3ahA7tx3GPB4LM 72iR/2yCfCPzGCCI7vGy8AW4LIW9hz9z6r47XSW6nHWjuBwqkonPfC7rMXHfk4nA TggeLNuYw0ZK5egfQEDOpRqe1jVp+GGctapVjk2jCDdixpy/KfX6v1xbumZiFvs4 73rzfxLiSVPfaTdjNdlMfjHEFgrTQT8qsZ35OV01ghVkrOkSSxpmQFUgzwpy/uSa N/1GGb5l8WHU1GEYG0+gUCin9a9fLSrHnuOD98Ofp9hnSFvVy1lzMnUYzO75AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU5JRvztEk4fAEjb4qkfp+KetvK+wwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZGMxZGQ4LTZkMjUtNDdjNy1h YWE0LWJkZGYxYjlkNjc3ZS8wLzMxMzAzMzJlMzEzNDMyMmUzMjM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ47/MA0GCSqG SIb3DQEBCwUAA4IBAQBIvipHl58Z6Dw9ti5IDhCkhubzvtiRR9SNA5SmTj8Ilcwc 9zlLKLs3ZV4AaZzwNWMCxe8vdNwUw4+ZH7oweOHVhzYnm15tKkwPb/rP0W/DYqim wyOBXgvDK8EeGg+6tV+MaloBjRQTaeAKTXq0d5WBnU7/qo/aNLOAj3K2IKcqgl5A 6uJhozGvdFymKa6MnwF6cTc3bxQGZbeBhGpDuyUgBbHVnfyqzY1vDMsM4jagnGbX WuCB8XPmRpLRIRRoZMM76OqU5uxYDr+o3sYFZfzHdVtSMDFBeyOVxceumAyc5wK+ 1zJJb/j4XivQz5uJji589dXQuvTonmgHhxCoBDAm -----END CERTIFICATE-----Generated at Fri May 9 00:35:44 2025 by rpki-client