$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa File: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (raw, json) Hash identifier: XFDD1vzbK3fH2oVTZT7/I8pF/szQ/Q1UsEfrzMZOTGI= Subject key identifier: FD:12:51:E7:39:95:51:B9:2C:F4:4D:67:6A:2D:10:AF:53:90:CC:B4 Certificate issuer: /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Certificate serial: 5D5E15C0BE625246D119F0AEC580F1F636E7117D Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa Signing time: Tue 06 May 2025 16:00:01 +0000 ROA not before: Tue 06 May 2025 15:55:01 +0000 ROA not after: Tue 05 May 2026 16:00:01 +0000 asID: 140397 IP address blocks: 103.150.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 12:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5e:15:c0:be:62:52:46:d1:19:f0:ae:c5:80:f1:f6:36:e7:11:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Validity Not Before: May 6 15:55:01 2025 GMT Not After : May 5 16:00:01 2026 GMT Subject: CN=FD1251E7399551B92CF44D676A2D10AF5390CCB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:74:b5:5d:c7:d4:17:01:52:6b:9d:3d:27: 89:d3:8a:15:5f:d1:0e:1d:96:fe:c2:d8:d8:7c:3b: 05:bc:d3:f0:b1:13:43:ba:ee:38:1e:42:08:32:0c: 6b:ec:df:ac:95:d4:e6:9e:32:d7:c3:66:4f:2f:f5: b4:c8:ae:4a:58:6f:fe:9d:82:01:3b:c1:3e:fe:28: 7e:39:e0:01:07:c4:d2:eb:d5:35:49:ec:ed:bc:0a: 89:12:4e:e8:9f:d7:95:f9:ad:f3:19:6b:a6:46:44: fa:d0:3a:00:ce:6d:94:46:fc:54:96:6b:39:6d:15: 53:d0:be:d3:e5:d9:6e:81:2a:f5:ae:67:d1:27:d7: 6a:fe:a3:fb:63:d5:27:83:45:c3:ea:0b:2e:f8:53: 7b:44:cb:66:5b:7d:0f:49:4f:68:29:ad:fe:61:ce: 31:b4:20:99:eb:ce:b6:16:08:56:11:c2:63:39:1c: 03:4e:84:51:1f:e9:cd:f1:a0:0d:67:c6:21:cf:dd: ab:8b:6a:3f:87:56:75:be:ae:fd:84:d9:60:35:cc: 41:90:24:0f:f7:aa:9a:ed:da:d0:c5:22:e8:f8:d0: 4f:16:7c:09:9c:ea:8c:c5:e7:80:2f:7d:e6:39:3f: 03:3f:c6:a1:a9:0b:6c:c9:46:6f:70:cf:1e:07:d2: de:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:12:51:E7:39:95:51:B9:2C:F4:4D:67:6A:2D:10:AF:53:90:CC:B4 X509v3 Authority Key Identifier: keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.158.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:89:54:0c:90:f8:f1:72:ab:d6:1e:91:b2:fc:73:02:f0:9a: 88:07:c4:06:02:1e:93:67:c3:d5:3f:b0:f1:a9:45:84:45:f2: 05:e7:3b:3d:f4:11:95:44:51:07:c0:b6:74:a8:d1:d1:76:ac: 35:99:5a:d9:25:7b:2a:e5:9f:88:0f:95:b8:68:d3:d0:a3:50: 1c:c2:aa:af:e9:80:14:60:8c:98:40:e9:ac:f6:5b:8a:b3:c6: bb:16:19:b1:1b:a5:b8:13:8a:00:32:6d:dc:19:1a:ad:df:61: 53:86:85:a8:e9:1f:8d:00:ca:8b:6a:91:c4:1d:9c:cc:e1:5b: 3c:d1:26:46:9e:56:88:a1:5f:2a:cb:1e:9a:ea:72:ea:5e:57: 5f:2d:09:ff:63:09:fe:3d:59:92:e4:20:44:f6:ee:4d:15:4c: b6:57:da:aa:85:bf:c1:94:a2:40:5e:bc:50:fc:af:f6:f7:1c: 00:67:88:f6:79:a6:0c:3d:d2:8f:c8:40:c1:17:fa:31:57:73: 3b:e1:14:82:00:2f:0e:70:bc:3a:30:10:8d:67:76:d7:fe:d8: d5:2b:13:b3:8b:5d:22:c5:0d:ae:c1:8c:6f:bf:35:31:50:f8: 57:79:06:0f:dd:77:c1:ae:bb:80:b7:d7:b1:98:ef:a9:75:8d: 5d:bf:a6:f4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXV4VwL5iUkbRGfCuxYDx9jbnEX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUz MTdEN0U5NDAeFw0yNTA1MDYxNTU1MDFaFw0yNjA1MDUxNjAwMDFaMDMxMTAvBgNV BAMTKEZEMTI1MUU3Mzk5NTUxQjkyQ0Y0NEQ2NzZBMkQxMEFGNTM5MENDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgKXS1XcfUFwFSa509J4nTihVf 0Q4dlv7C2Nh8OwW80/CxE0O67jgeQggyDGvs36yV1OaeMtfDZk8v9bTIrkpYb/6d ggE7wT7+KH454AEHxNLr1TVJ7O28CokSTuif15X5rfMZa6ZGRPrQOgDObZRG/FSW azltFVPQvtPl2W6BKvWuZ9En12r+o/tj1SeDRcPqCy74U3tEy2ZbfQ9JT2gprf5h zjG0IJnrzrYWCFYRwmM5HANOhFEf6c3xoA1nxiHP3auLaj+HVnW+rv2E2WA1zEGQ JA/3qprt2tDFIuj40E8WfAmc6ozF54AvfeY5PwM/xqGpC2zJRm9wzx4H0t7HAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU/RJR5zmVUbks9E1nai0Qr1OQzLQwHwYDVR0j BBgwFoAUuTdZsZ5MH4/7bp0eLmdOTjF9fpQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzYwZjA3OC04YTIwLTQ4ZDEtODJiOC1lMWY1MGExNTUyMDEvMC9COTM3NTlCMTlF NEMxRjhGRkI2RTlEMUUyRTY3NEU0RTMxN0Q3RTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUzMTdE N0U5NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzNjBmMDc4LThhMjAtNDhkMS04 MmI4LWUxZjUwYTE1NTIwMS8wLzMxMzAzMzJlMzEzNTMwMmUzMTM1MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMzM5Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlp4wDQYJ KoZIhvcNAQELBQADggEBAF6JVAyQ+PFyq9YekbL8cwLwmogHxAYCHpNnw9U/sPGp RYRF8gXnOz30EZVEUQfAtnSo0dF2rDWZWtkleyrln4gPlbho09CjUBzCqq/pgBRg jJhA6az2W4qzxrsWGbEbpbgTigAybdwZGq3fYVOGhajpH40AyotqkcQdnMzhWzzR JkaeVoihXyrLHprqcupeV18tCf9jCf49WZLkIET27k0VTLZX2qqFv8GUokBevFD8 r/b3HABniPZ5pgw90o/IQMEX+jFXczvhFIIALw5wvDowEI1ndtf+2NUrE7OLXSLF Da7BjG+/NTFQ+Fd5Bg/dd8Guu4C317GY76l1jV2/pvQ= -----END CERTIFICATE-----Generated at Tue May 13 06:38:38 2025 by rpki-client