$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa File: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (raw, json) Hash identifier: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No= Subject key identifier: 57:EA:CE:BD:E7:3F:31:0A:21:15:25:B1:79:3A:9F:C0:A1:A4:18:A5 Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 7187FF9B39DA42A36C53B9BB7DBA3720CE3EC7D9 Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa Signing time: Tue 29 Apr 2025 02:02:25 +0000 ROA not before: Tue 29 Apr 2025 01:57:25 +0000 ROA not after: Tue 28 Apr 2026 02:02:25 +0000 asID: 141935 IP address blocks: 103.166.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 18:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:87:ff:9b:39:da:42:a3:6c:53:b9:bb:7d:ba:37:20:ce:3e:c7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Apr 29 01:57:25 2025 GMT Not After : Apr 28 02:02:25 2026 GMT Subject: CN=57EACEBDE73F310A211525B1793A9FC0A1A418A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:92:bd:ad:99:13:d4:16:61:48:3f:74:64:ca: fe:41:77:81:dd:a8:9a:45:1a:49:dd:4c:02:99:fc: fe:a8:01:a9:52:f2:c8:48:36:a7:c7:e8:1e:da:af: 1a:9e:04:db:f7:8b:c7:f0:f0:29:a7:49:ac:bf:0a: c6:39:f9:2e:f0:cd:47:07:a6:80:47:52:41:4f:7a: 27:cd:91:9a:7d:22:8f:d8:ba:ae:39:d8:1c:35:5e: cd:9c:e3:9d:70:40:13:8a:cb:56:bd:85:38:49:9a: 7b:16:0b:63:4c:d8:f9:0e:66:92:56:b0:64:ed:06: 02:7d:30:e3:70:4a:73:b4:3b:2e:ce:4f:70:0c:e5: e7:d6:3f:07:83:50:1d:c4:d2:2e:4d:92:63:c4:16: aa:b7:cc:85:30:72:24:32:37:52:f5:a2:4c:c3:03: ff:0a:00:e5:ab:7a:98:1e:82:ec:cf:9b:1d:0d:cf: 79:6e:59:1e:3f:65:13:6a:2f:fe:39:84:6d:66:ea: d6:1e:eb:4a:d4:47:03:66:47:55:0c:86:49:4f:9d: cc:f9:2f:f8:b5:59:35:6e:dd:95:3d:c4:53:e5:66: 6a:85:e7:61:87:de:9a:49:0b:0b:ef:47:d6:2c:c8: 0e:21:c4:ae:83:4d:a5:96:49:bd:6d:64:c8:c8:9a: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EA:CE:BD:E7:3F:31:0A:21:15:25:B1:79:3A:9F:C0:A1:A4:18:A5 X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.44.0/24 Signature Algorithm: sha256WithRSAEncryption a8:fc:a6:e2:7b:8a:75:b0:cd:a0:cb:7f:53:8c:2e:be:74:5e: 89:5d:98:7e:27:35:80:1a:d4:eb:4d:7a:46:7f:40:53:a0:3b: d9:47:af:67:64:b4:32:c2:3a:3e:56:07:63:18:5e:f1:4d:88: 31:61:bb:7d:39:ff:2e:36:ad:da:b4:82:63:dc:24:6f:70:2c: a1:81:b0:04:fa:65:4a:c7:a9:5a:83:30:83:06:5f:7a:d5:60: 90:bd:0d:f1:c7:75:8e:2d:66:be:35:04:1f:bc:cc:d7:1c:bc: 82:92:40:17:4b:e4:9d:fc:3b:e5:42:2e:06:b2:b8:ec:16:8b: 8b:6e:ee:ca:18:e1:ae:82:10:4a:ce:cc:87:38:e6:28:9b:ce: 68:ce:5b:90:ee:07:0e:0f:df:73:86:92:09:be:80:95:aa:98: 2b:0d:64:5f:28:7d:e2:4a:a3:1a:0c:a9:fb:18:9d:7c:e5:db: 71:69:2f:e6:af:71:ff:fb:5c:ff:b0:b2:13:15:82:e3:01:9e: ab:b7:df:dd:94:8f:9a:13:8b:5b:d8:86:df:66:3c:d3:5a:33: 4e:1f:7b:92:f9:d6:64:0b:f2:9a:18:1f:37:e7:6b:9c:20:cf: d0:4b:84:36:64:7e:99:ef:f8:89:6f:9f:e1:5c:8d:73:94:4b: 9c:94:63:7a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcYf/mznaQqNsU7m7fbo3IM4+x9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNTA0MjkwMTU3MjVaFw0yNjA0MjgwMjAyMjVaMDMxMTAvBgNV BAMTKDU3RUFDRUJERTczRjMxMEEyMTE1MjVCMTc5M0E5RkMwQTFBNDE4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrkr2tmRPUFmFIP3Rkyv5Bd4Hd qJpFGkndTAKZ/P6oAalS8shINqfH6B7arxqeBNv3i8fw8CmnSay/CsY5+S7wzUcH poBHUkFPeifNkZp9Io/Yuq452Bw1Xs2c451wQBOKy1a9hThJmnsWC2NM2PkOZpJW sGTtBgJ9MONwSnO0Oy7OT3AM5efWPweDUB3E0i5NkmPEFqq3zIUwciQyN1L1okzD A/8KAOWrepgeguzPmx0Nz3luWR4/ZRNqL/45hG1m6tYe60rURwNmR1UMhklPncz5 L/i1WTVu3ZU9xFPlZmqF52GH3ppJCwvvR9YsyA4hxK6DTaWWSb1tZMjImjaHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUV+rOvec/MQohFSWxeTqfwKGkGKUwHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0OWRjNWViLTMyNjAtNDI4YS1h NmMwLWRjMGY2MzZiMzMwNy8wLzMxMzAzMzJlMzEzNjM2MmUzNDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6YsMA0GCSqG SIb3DQEBCwUAA4IBAQCo/Kbie4p1sM2gy39TjC6+dF6JXZh+JzWAGtTrTXpGf0BT oDvZR69nZLQywjo+VgdjGF7xTYgxYbt9Of8uNq3atIJj3CRvcCyhgbAE+mVKx6la gzCDBl961WCQvQ3xx3WOLWa+NQQfvMzXHLyCkkAXS+Sd/DvlQi4GsrjsFouLbu7K GOGughBKzsyHOOYom85ozluQ7gcOD99zhpIJvoCVqpgrDWRfKH3iSqMaDKn7GJ18 5dtxaS/mr3H/+1z/sLITFYLjAZ6rt9/dlI+aE4tb2IbfZjzTWjNOH3uS+dZkC/Ka GB8352ucIM/QS4Q2ZH6Z7/iJb5/hXI1zlEuclGN6 -----END CERTIFICATE-----Generated at Sun May 11 03:46:10 2025 by rpki-client