$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa File: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (raw, json) Hash identifier: 0MTgOgopjubbvpZEDfvpwMMJjT0ePI0/y4zgrFp+eQo= Subject key identifier: 34:DC:85:CC:99:10:01:55:49:48:03:0B:B9:F0:CB:B1:32:2E:9A:10 Certificate issuer: /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3 Certificate serial: 287F0EB634DF464E0648396EC5F3E8A05E9739A2 Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa Signing time: Fri 27 Jun 2025 10:00:02 +0000 ROA not before: Fri 27 Jun 2025 09:55:02 +0000 ROA not after: Fri 26 Jun 2026 10:00:02 +0000 asID: 149943 IP address blocks: 103.191.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7f:0e:b6:34:df:46:4e:06:48:39:6e:c5:f3:e8:a0:5e:97:39:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3 Validity Not Before: Jun 27 09:55:02 2025 GMT Not After : Jun 26 10:00:02 2026 GMT Subject: CN=34DC85CC991001554948030BB9F0CBB1322E9A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:2d:cd:76:d9:55:3f:18:93:d5:7b:ec:7d: a8:02:62:a3:37:f3:9f:cc:e7:be:38:e5:c6:51:a4: bf:a5:ab:68:9f:5c:46:cf:80:e4:94:4d:2d:ca:dc: e8:f7:5f:25:b2:e4:88:ec:80:6e:8f:ba:7e:a8:33: f5:03:ac:a5:9f:ad:cc:a8:d5:61:a4:ed:13:d8:e1: ea:4b:3a:43:1a:23:a9:4f:a3:a7:23:0c:c9:dc:3d: 06:f8:80:fd:f3:19:56:1e:37:05:1e:d3:bf:67:cf: ca:3a:83:86:f8:3c:e6:33:f7:3f:63:13:0d:4e:89: 77:01:57:da:03:5d:c8:8e:fc:58:e8:ab:ba:e6:c5: c9:fd:f9:c1:52:eb:3c:47:6e:e0:32:41:f1:9b:14: 6a:71:e3:ae:88:eb:74:1e:c1:f2:fe:db:e5:ed:09: 86:36:44:9d:39:05:c4:27:a5:3c:12:27:2b:c3:63: cd:40:77:e3:24:3b:82:5c:6a:79:c8:19:c1:41:e0: 2e:79:04:a2:4c:9a:31:55:b2:87:54:22:5e:6a:5f: 02:00:eb:07:30:8e:2d:0e:fa:21:90:2d:bd:3c:59: 24:cc:94:89:bc:af:ab:61:1f:46:15:50:c5:53:bd: 85:68:fb:75:6e:b2:00:ec:b1:30:2d:8e:ab:d7:d7: 50:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DC:85:CC:99:10:01:55:49:48:03:0B:B9:F0:CB:B1:32:2E:9A:10 X509v3 Authority Key Identifier: keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.255.0/24 Signature Algorithm: sha256WithRSAEncryption 47:1e:e3:98:59:86:f7:5e:e2:aa:9b:5f:40:5d:f7:31:6e:85: 24:2b:c8:38:6e:17:6f:f0:fc:e8:f5:30:1e:5b:61:78:d5:b2: 26:77:81:1c:e6:1a:b1:30:11:0d:f0:b7:49:da:ca:a5:0c:53: 83:40:c9:82:73:8b:01:24:bd:c2:ca:ca:c1:71:ed:4f:dc:b9: 6b:c1:68:89:cb:6a:96:12:8a:c1:08:21:bb:0e:2e:93:ad:1b: e1:12:36:36:44:4b:a8:bd:00:26:74:a1:c4:5f:37:1b:a0:ca: e2:92:53:2c:84:f3:7a:30:af:22:af:91:37:22:8e:3e:be:e8: 30:0c:6a:86:eb:f4:22:4c:69:af:6f:cc:f8:ee:5f:6d:c7:2d: dc:06:e0:fd:4c:a4:a2:fc:78:02:b7:1d:98:45:98:ca:aa:a8: 56:60:4c:a7:c7:55:14:9d:b1:4e:e2:1c:c3:d6:c9:de:48:b5: 6c:fc:4c:be:f9:3b:9e:cc:2f:c2:4b:a3:8f:17:cb:73:ca:55: 33:5e:2b:14:ef:ea:03:93:c3:13:1c:fb:c2:39:a7:e6:14:ce: de:f1:0e:87:46:6c:ef:14:97:9b:92:34:e4:a9:71:56:06:4c: f4:4a:60:98:3a:89:72:a5:94:c6:7a:b7:76:44:64:5e:23:98: d0:3b:85:f1 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKH8OtjTfRk4GSDluxfPooF6XOaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVF MDY2RUZGMzAeFw0yNTA2MjcwOTU1MDJaFw0yNjA2MjYxMDAwMDJaMDMxMTAvBgNV BAMTKDM0REM4NUNDOTkxMDAxNTU0OTQ4MDMwQkI5RjBDQkIxMzIyRTlBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIYi3NdtlVPxiT1XvsfagCYqM3 85/M57445cZRpL+lq2ifXEbPgOSUTS3K3Oj3XyWy5IjsgG6Pun6oM/UDrKWfrcyo 1WGk7RPY4epLOkMaI6lPo6cjDMncPQb4gP3zGVYeNwUe079nz8o6g4b4POYz9z9j Ew1OiXcBV9oDXciO/Fjoq7rmxcn9+cFS6zxHbuAyQfGbFGpx466I63QewfL+2+Xt CYY2RJ05BcQnpTwSJyvDY81Ad+MkO4JcannIGcFB4C55BKJMmjFVsodUIl5qXwIA 6wcwji0O+iGQLb08WSTMlIm8r6thH0YVUMVTvYVo+3VusgDssTAtjqvX11DZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNNyFzJkQAVVJSAMLufDLsTIumhAwHwYDVR0j BBgwFoAUreDUYkhZpNZC2MB/0Ae07uBm7/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDk4ZjkyNC05ZjJlLTQ5OWItODEwMS0wMmY3NTA2OTMyYmYvMC9BREUwRDQ2MjQ4 NTlBNEQ2NDJEOEMwN0ZEMDA3QjRFRUUwNjZFRkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVFMDY2 RUZGMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOThmOTI0LTlmMmUtNDk5Yi04 MTAxLTAyZjc1MDY5MzJiZi8wLzMxMzAzMzJlMzEzOTMxMmUzMjM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM0MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv/8wDQYJ KoZIhvcNAQELBQADggEBAEce45hZhvde4qqbX0Bd9zFuhSQryDhuF2/w/Oj1MB5b YXjVsiZ3gRzmGrEwEQ3wt0nayqUMU4NAyYJziwEkvcLKysFx7U/cuWvBaInLapYS isEIIbsOLpOtG+ESNjZES6i9ACZ0ocRfNxugyuKSUyyE83owryKvkTcijj6+6DAM aobr9CJMaa9vzPjuX23HLdwG4P1MpKL8eAK3HZhFmMqqqFZgTKfHVRSdsU7iHMPW yd5ItWz8TL75O57ML8JLo48Xy3PKVTNeKxTv6gOTwxMc+8I5p+YUzt7xDodGbO8U l5uSNOSpcVYGTPRKYJg6iXKllMZ6t3ZEZF4jmNA7hfE= -----END CERTIFICATE-----Generated at Tue Jul 1 21:50:44 2025 by rpki-client