$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa File: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (raw, json) Hash identifier: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws= Subject key identifier: 37:BF:AD:52:BC:C2:1B:9F:41:B1:95:A2:C8:D8:83:97:C0:02:A0:CF Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 7377EFE17CF798A421000F554FE18A8FCC8FE74D Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa Signing time: Thu 03 Apr 2025 01:00:00 +0000 ROA not before: Thu 03 Apr 2025 00:55:00 +0000 ROA not after: Thu 02 Apr 2026 01:00:00 +0000 asID: 138090 IP address blocks: 103.124.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 15:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:77:ef:e1:7c:f7:98:a4:21:00:0f:55:4f:e1:8a:8f:cc:8f:e7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: Apr 3 00:55:00 2025 GMT Not After : Apr 2 01:00:00 2026 GMT Subject: CN=37BFAD52BCC21B9F41B195A2C8D88397C002A0CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:fe:0c:66:a9:ef:21:e3:01:b6:6d:06:21: 14:9d:3a:d6:ed:3b:1c:4e:e4:af:60:e9:ad:b9:de: dc:fc:81:f7:02:a8:d6:79:b5:a5:28:42:2b:ac:d4: 6a:54:1e:8a:e1:3c:b4:36:aa:2b:af:2f:66:27:40: 70:ea:19:aa:20:14:de:ab:66:a8:d9:e0:80:b2:91: 35:11:cc:21:ab:8a:ea:59:2d:c2:37:b0:26:cb:75: 4d:9f:19:21:4e:ff:b5:dc:ef:59:df:47:13:e4:02: 72:a1:7f:05:d2:c5:34:43:85:cf:1e:25:e2:6b:4c: cc:7e:04:d7:66:45:3a:15:bf:06:74:36:02:55:52: 4d:3e:db:7a:97:ba:26:f0:7c:14:4f:5e:d5:65:d5: 2a:69:dc:ed:79:2e:5b:23:15:4f:3c:39:97:87:bd: 8c:bf:f0:a5:a7:84:c7:fb:b8:4f:4c:f6:d1:80:8d: 6f:f8:1c:29:09:f0:b2:80:28:08:68:de:79:90:cb: fa:cc:ab:ce:6b:7d:55:df:5a:a0:e0:e0:5f:35:07: f3:f9:8a:f4:92:f5:25:05:d8:af:91:55:8f:5e:c7: b6:fa:dc:6a:02:07:f5:e4:80:f8:0a:82:0b:38:88: a8:7e:18:dc:7c:ed:a2:09:c2:9b:50:4e:86:4f:8d: a2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BF:AD:52:BC:C2:1B:9F:41:B1:95:A2:C8:D8:83:97:C0:02:A0:CF X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.245.0/24 Signature Algorithm: sha256WithRSAEncryption 51:aa:85:a9:bc:94:ec:35:7f:5d:62:fb:30:ee:ea:ba:bc:c7: 3b:ad:da:b6:89:b3:2f:07:b7:9e:16:b7:98:8d:fd:80:b7:3d: 76:a4:8a:ac:a3:76:91:c4:98:30:49:c2:c5:c3:05:82:11:e3: 73:bf:5b:d8:37:ca:bc:dc:05:53:ab:50:75:49:96:2f:91:e4: 4e:52:b3:45:13:c1:69:67:b9:60:41:83:b1:83:28:8b:52:52: fe:31:83:78:0d:b3:f0:ab:ca:da:bb:6e:34:4c:ea:e1:23:20: 51:f2:6c:10:85:c6:d7:a6:0e:a5:56:a4:5a:9e:54:59:05:7b: af:01:55:1a:15:3f:e7:ec:04:41:08:5a:90:e5:b6:b7:8f:43: 58:f6:45:1f:94:e1:ce:4b:cc:a7:d0:35:46:d8:1e:8f:f0:11: c5:c9:17:cf:d0:91:e2:db:80:4d:45:a4:a3:c3:ce:4f:52:ac: c3:b5:95:c3:29:d8:25:c0:b7:ac:7d:88:13:f3:97:ab:9a:1e: de:f7:75:81:c7:81:8e:1e:a9:96:9c:6a:e6:4b:cb:9b:f4:67: b7:76:8e:f3:bb:9d:df:45:91:ac:d9:51:26:d2:3c:32:0f:8f: 3f:9e:41:79:b3:8b:2d:e3:e1:fb:7b:63:8b:9b:cf:6e:58:22: 36:1f:41:af -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUc3fv4Xz3mKQhAA9VT+GKj8yP500wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNTA0MDMwMDU1MDBaFw0yNjA0MDIwMTAwMDBaMDMxMTAvBgNV BAMTKDM3QkZBRDUyQkNDMjFCOUY0MUIxOTVBMkM4RDg4Mzk3QzAwMkEwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjP4MZqnvIeMBtm0GIRSdOtbt OxxO5K9g6a253tz8gfcCqNZ5taUoQius1GpUHorhPLQ2qiuvL2YnQHDqGaogFN6r ZqjZ4ICykTURzCGriupZLcI3sCbLdU2fGSFO/7Xc71nfRxPkAnKhfwXSxTRDhc8e JeJrTMx+BNdmRToVvwZ0NgJVUk0+23qXuibwfBRPXtVl1Spp3O15LlsjFU88OZeH vYy/8KWnhMf7uE9M9tGAjW/4HCkJ8LKAKAho3nmQy/rMq85rfVXfWqDg4F81B/P5 ivSS9SUF2K+RVY9ex7b63GoCB/XkgPgKggs4iKh+GNx87aIJwptQToZPjaKlAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUN7+tUrzCG59BsZWiyNiDl8ACoM8wHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlMmM5Mjg1LWMwOWEtNDUwNi1h MzIwLWZkYTFhMDdmZDllYy8wLzMxMzAzMzJlMzEzMjM0MmUzMjM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM5MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfPUwDQYJ KoZIhvcNAQELBQADggEBAFGqham8lOw1f11i+zDu6rq8xzut2raJsy8Ht54Wt5iN /YC3PXakiqyjdpHEmDBJwsXDBYIR43O/W9g3yrzcBVOrUHVJli+R5E5Ss0UTwWln uWBBg7GDKItSUv4xg3gNs/Crytq7bjRM6uEjIFHybBCFxtemDqVWpFqeVFkFe68B VRoVP+fsBEEIWpDltrePQ1j2RR+U4c5LzKfQNUbYHo/wEcXJF8/QkeLbgE1FpKPD zk9SrMO1lcMp2CXAt6x9iBPzl6uaHt73dYHHgY4eqZacauZLy5v0Z7d2jvO7nd9F kazZUSbSPDIPjz+eQXmziy3j4ft7Y4ubz25YIjYfQa8= -----END CERTIFICATE-----Generated at Sun May 11 18:42:24 2025 by rpki-client