$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35332e302f32342d3234203d3e20313339393730.roa File: 3130332e3134372e35332e302f32342d3234203d3e20313339393730.roa (raw, json) Hash identifier: lCO4dBzU8QlNehADwjvKlKyAnMc64cSgqE/nhYWymAE= Subject key identifier: DF:3D:A3:B7:17:FF:6A:21:9B:1C:06:BB:A9:72:C6:2F:4B:73:39:84 Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 6F6C72F4DF32182D42B50EEA3EA27F88DFDA6E1B Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35332e302f32342d3234203d3e20313339393730.roa Signing time: Thu 08 May 2025 06:32:05 +0000 ROA not before: Thu 08 May 2025 06:27:05 +0000 ROA not after: Thu 07 May 2026 06:32:05 +0000 asID: 139970 IP address blocks: 103.147.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 12:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6c:72:f4:df:32:18:2d:42:b5:0e:ea:3e:a2:7f:88:df:da:6e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: May 8 06:27:05 2025 GMT Not After : May 7 06:32:05 2026 GMT Subject: CN=DF3DA3B717FF6A219B1C06BBA972C62F4B733984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:cd:e4:f4:c9:31:7b:aa:5d:1d:b8:d0:92: c8:c1:1a:53:0f:22:a0:fd:f6:f8:ab:cd:b2:cd:69: a3:d9:44:fd:4b:d7:24:b2:c2:58:b7:94:eb:64:38: 8b:96:4e:4f:bc:ba:10:8a:53:2d:6d:a0:57:b8:89: 8a:9c:01:3d:fc:ec:24:f8:09:50:6d:0d:d6:32:3c: 0e:66:f7:91:ff:66:e5:ff:5a:a8:67:80:bd:8d:95: b5:97:df:da:eb:0b:a5:1a:5b:2a:49:da:44:39:6e: 46:6f:73:40:b7:49:b0:69:96:30:f0:5a:50:e6:f9: 71:51:7e:8c:b8:e7:1d:d3:0c:62:69:25:04:ef:fe: b9:30:3a:34:de:6c:6f:b7:b3:a5:d2:8a:0d:fa:c5: 48:f6:45:0e:73:a8:67:59:f7:08:48:38:24:5e:c0: 21:b0:34:97:20:4a:d3:82:fe:43:80:78:e8:67:2c: d1:14:a5:91:2e:15:ec:9f:df:28:d3:67:f9:45:08: 77:17:e1:f8:c6:1e:eb:ea:65:d3:8e:11:f9:10:17: 18:81:0c:3c:92:a9:71:b3:26:60:fe:f7:8d:04:1b: 37:1c:c1:5b:1f:41:5f:60:a1:27:e4:92:05:7e:34: bf:89:03:e1:67:da:27:e2:67:23:69:b9:60:c0:dc: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3D:A3:B7:17:FF:6A:21:9B:1C:06:BB:A9:72:C6:2F:4B:73:39:84 X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35332e302f32342d3234203d3e20313339393730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.53.0/24 Signature Algorithm: sha256WithRSAEncryption b5:cf:5c:81:7e:bc:f9:de:1c:74:a7:19:91:64:b4:df:9c:e2: 67:53:5c:74:77:57:28:a0:3f:39:9f:58:43:d0:ce:58:00:f1: cb:8d:c1:07:0a:c2:ef:25:c7:ce:78:af:d2:1a:9e:17:3b:31: 61:c0:02:dd:d1:29:f8:56:8b:97:89:29:f5:4a:15:81:72:9c: 6b:ac:75:b9:f9:f1:14:06:61:41:49:90:49:c5:53:7a:04:75: a8:d4:6c:b3:2b:94:4d:7a:c2:b3:36:e5:7e:92:e7:0a:b5:02: d8:f6:1e:08:98:08:5f:a3:28:ff:f6:e2:4e:fb:47:8e:96:9c: fe:df:47:83:cf:64:9f:bd:b0:ea:27:ca:39:c3:eb:a4:76:45: af:44:f4:3d:fa:21:f0:39:98:23:4d:f9:84:65:e7:59:6b:f2: 17:65:96:cc:21:2a:7c:75:2f:91:cb:2e:7b:00:72:5d:3b:72: a1:b6:76:b6:32:18:fc:77:5d:c5:1c:ca:e6:11:c2:84:93:8d: a2:ea:a4:83:4c:1a:ea:0a:cb:95:fe:5b:73:18:78:b5:20:9d: a8:65:bc:4d:09:f2:f8:4c:0c:f8:43:22:7c:5f:7b:31:a0:8f: 34:aa:2e:75:6c:57:66:b1:cb:ae:c8:ed:30:3d:51:5c:3b:a8: e3:6d:5d:ef -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUb2xy9N8yGC1CtQ7qPqJ/iN/abhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNTA1MDgwNjI3MDVaFw0yNjA1MDcwNjMyMDVaMDMxMTAvBgNV BAMTKERGM0RBM0I3MTdGRjZBMjE5QjFDMDZCQkE5NzJDNjJGNEI3MzM5ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvic3k9Mkxe6pdHbjQksjBGlMP IqD99virzbLNaaPZRP1L1ySywli3lOtkOIuWTk+8uhCKUy1toFe4iYqcAT387CT4 CVBtDdYyPA5m95H/ZuX/WqhngL2NlbWX39rrC6UaWypJ2kQ5bkZvc0C3SbBpljDw WlDm+XFRfoy45x3TDGJpJQTv/rkwOjTebG+3s6XSig36xUj2RQ5zqGdZ9whIOCRe wCGwNJcgStOC/kOAeOhnLNEUpZEuFeyf3yjTZ/lFCHcX4fjGHuvqZdOOEfkQFxiB DDySqXGzJmD+940EGzccwVsfQV9goSfkkgV+NL+JA+Fn2ifiZyNpuWDA3HjzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3z2jtxf/aiGbHAa7qXLGL0tzOYQwHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMxMzAzMzJlMzEzNDM3MmUzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5M1MA0GCSqG SIb3DQEBCwUAA4IBAQC1z1yBfrz53hx0pxmRZLTfnOJnU1x0d1cooD85n1hD0M5Y APHLjcEHCsLvJcfOeK/SGp4XOzFhwALd0Sn4VouXiSn1ShWBcpxrrHW5+fEUBmFB SZBJxVN6BHWo1GyzK5RNesKzNuV+kucKtQLY9h4ImAhfoyj/9uJO+0eOlpz+30eD z2SfvbDqJ8o5w+ukdkWvRPQ9+iHwOZgjTfmEZedZa/IXZZbMISp8dS+Ryy57AHJd O3Khtna2Mhj8d13FHMrmEcKEk42i6qSDTBrqCsuV/ltzGHi1IJ2oZbxNCfL4TAz4 QyJ8X3sxoI80qi51bFdmscuuyO0wPVFcO6jjbV3v -----END CERTIFICATE-----Generated at Sun May 11 11:49:41 2025 by rpki-client