$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa File: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (raw, json) Hash identifier: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU= Subject key identifier: 78:BE:9A:E4:85:F9:A0:7D:05:0B:CF:3D:D1:58:AA:CC:A6:08:72:F8 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 269FA3F30570B745BB09A536D72FBA060FA825D5 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa Signing time: Thu 08 May 2025 05:00:00 +0000 ROA not before: Thu 08 May 2025 04:55:00 +0000 ROA not after: Thu 07 May 2026 05:00:00 +0000 asID: 149712 IP address blocks: 103.186.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 07:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9f:a3:f3:05:70:b7:45:bb:09:a5:36:d7:2f:ba:06:0f:a8:25:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: May 8 04:55:00 2025 GMT Not After : May 7 05:00:00 2026 GMT Subject: CN=78BE9AE485F9A07D050BCF3DD158AACCA60872F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:92:47:26:ce:d0:8d:ff:70:0c:11:b3:0b: 3b:7f:5e:60:45:2e:14:58:9c:0e:6c:85:ec:c0:93: c3:6a:02:87:c0:ee:1f:06:1d:a5:e3:4e:c6:2b:7b: 70:9d:80:56:d7:98:68:1f:8a:41:fd:34:69:f0:b2: 50:c2:e7:a5:06:2a:43:e4:0b:7c:b8:21:8a:4a:32: 5e:0c:d0:49:a9:72:cc:71:ed:d3:48:0d:4d:f1:5e: c0:e2:02:de:57:c3:d1:0a:be:fc:57:9a:61:d1:79: 43:e8:3c:6b:2a:a3:25:bb:be:9a:fe:54:81:3b:14: e5:8f:82:d9:89:0b:d9:89:55:d7:74:18:f8:34:6b: e1:61:7b:c6:c9:63:4d:63:a8:08:66:86:f4:4c:fe: 14:be:e8:ff:6a:59:0b:be:29:96:b1:40:b3:be:9f: c9:97:ab:14:97:0c:8a:1e:d2:2e:6a:90:65:f7:74: ac:24:c3:49:2b:fa:84:e5:60:66:5d:da:95:61:a4: 4e:99:f5:54:e3:a3:17:00:fc:91:9b:ee:07:fe:6b: c0:40:76:b5:bd:ac:1f:12:32:34:b6:29:41:c0:8f: 72:58:50:b2:81:6a:6e:bd:ac:df:b9:9e:b8:85:f0: 04:b1:4f:ef:71:e1:94:64:c3:5e:1f:c3:c9:7c:a8: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BE:9A:E4:85:F9:A0:7D:05:0B:CF:3D:D1:58:AA:CC:A6:08:72:F8 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.194.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:90:d6:8c:9b:7b:7c:88:9b:a6:15:6d:e1:70:1d:89:4c:14: 3c:78:7b:a0:9a:84:06:4d:83:04:10:50:b9:e7:ad:86:01:e8: c0:3f:c0:c8:bd:d8:0c:16:cd:a1:52:cc:6f:7c:e0:c0:fd:4f: 4c:26:e4:45:28:89:54:1b:bc:51:68:de:5f:39:61:36:a4:d7: f5:b7:f8:21:5c:78:13:f2:fd:0f:33:53:91:76:ec:b7:05:ac: 94:3e:22:75:05:56:7f:76:5b:68:a6:a3:1f:9d:84:c0:89:97: bb:21:99:95:c4:ec:e0:a0:35:32:7c:57:44:63:7f:4a:bc:3f: 82:ee:74:35:3e:a5:19:f0:71:74:d0:6a:55:21:b3:6b:af:51: 61:89:e0:33:a0:3d:00:b0:c8:18:11:10:24:1d:6f:ac:39:af: c8:52:2b:5a:b0:d1:25:97:80:ed:6c:42:f7:ea:10:38:b1:e9: d5:71:3b:42:75:20:12:4c:4c:bd:bc:1d:73:48:c1:2d:7b:05: 78:2b:4d:c5:f3:bb:79:00:5a:c9:05:56:7d:5f:e7:71:5d:19: eb:b1:31:36:70:f7:6a:28:6c:34:17:1d:43:1b:c6:a6:44:b0: 87:39:93:7d:de:b8:4e:78:e7:9c:17:6f:a5:32:f2:7b:77:74: c7:89:d5:10 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJp+j8wVwt0W7CaU21y+6Bg+oJdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTA1MDgwNDU1MDBaFw0yNjA1MDcwNTAwMDBaMDMxMTAvBgNV BAMTKDc4QkU5QUU0ODVGOUEwN0QwNTBCQ0YzREQxNThBQUNDQTYwODcyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzJJHJs7Qjf9wDBGzCzt/XmBF LhRYnA5shezAk8NqAofA7h8GHaXjTsYre3CdgFbXmGgfikH9NGnwslDC56UGKkPk C3y4IYpKMl4M0Empcsxx7dNIDU3xXsDiAt5Xw9EKvvxXmmHReUPoPGsqoyW7vpr+ VIE7FOWPgtmJC9mJVdd0GPg0a+Fhe8bJY01jqAhmhvRM/hS+6P9qWQu+KZaxQLO+ n8mXqxSXDIoe0i5qkGX3dKwkw0kr+oTlYGZd2pVhpE6Z9VTjoxcA/JGb7gf+a8BA drW9rB8SMjS2KUHAj3JYULKBam69rN+5nriF8ASxT+9x4ZRkw14fw8l8qK2FAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUeL6a5IX5oH0FC8890ViqzKYIcvgwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyNTJlYWQzLWRjOGYtNGQ4Ni1h ZmNmLWExNDBlNWI4NzUzMi8wLzMxMzAzMzJlMzEzODM2MmUzMTM5MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnusIwDQYJ KoZIhvcNAQELBQADggEBAI2Q1oybe3yIm6YVbeFwHYlMFDx4e6CahAZNgwQQULnn rYYB6MA/wMi92AwWzaFSzG984MD9T0wm5EUoiVQbvFFo3l85YTak1/W3+CFceBPy /Q8zU5F27LcFrJQ+InUFVn92W2imox+dhMCJl7shmZXE7OCgNTJ8V0Rjf0q8P4Lu dDU+pRnwcXTQalUhs2uvUWGJ4DOgPQCwyBgRECQdb6w5r8hSK1qw0SWXgO1sQvfq EDix6dVxO0J1IBJMTL28HXNIwS17BXgrTcXzu3kAWskFVn1f53FdGeuxMTZw92oo bDQXHUMbxqZEsIc5k33euE5455wXb6Uy8nt3dMeJ1RA= -----END CERTIFICATE-----Generated at Fri May 9 23:43:58 2025 by rpki-client