$ rpki-client -vvf repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa File: 3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (raw, json) Hash identifier: 4N3xCB2x4rBoMiXQaq1TIxjQcspdHHBn4voGBhoXwMQ= Subject key identifier: 45:6C:C5:AB:89:75:70:F9:91:A8:20:8F:1E:51:BD:DD:5E:54:1D:83 Certificate issuer: /CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF Certificate serial: 3666C53415B870DC7E0A12A57DC0AABF02EB460F Authority key identifier: 8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa Signing time: Fri 20 Jun 2025 07:00:00 +0000 ROA not before: Fri 20 Jun 2025 06:55:00 +0000 ROA not after: Fri 19 Jun 2026 07:00:00 +0000 asID: 138139 IP address blocks: 103.133.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.crl rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 15:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:66:c5:34:15:b8:70:dc:7e:0a:12:a5:7d:c0:aa:bf:02:eb:46:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF Validity Not Before: Jun 20 06:55:00 2025 GMT Not After : Jun 19 07:00:00 2026 GMT Subject: CN=456CC5AB897570F991A8208F1E51BDDD5E541D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f2:88:87:33:b4:bf:ad:a0:32:8f:08:3a:39: a0:f5:c6:70:f6:fc:4e:80:f4:c9:f2:f4:b8:2c:e6: 56:4d:aa:6c:67:78:db:17:2d:8d:0a:dc:cb:39:f4: 54:f5:0e:8e:ee:65:24:58:4f:13:e7:6c:7f:59:45: f1:d9:6b:16:8b:7c:f0:bc:33:7e:a5:d2:e4:d1:ca: 70:56:de:be:df:44:a4:f8:61:5e:a8:8f:8f:57:6b: 57:53:d9:66:bf:69:b9:3b:a2:4a:89:2c:9e:d8:80: 0d:07:c1:f2:89:f0:79:9c:ef:35:d8:8f:ad:82:2d: 12:70:7b:85:06:87:b0:fd:f7:4a:71:ac:90:4c:0b: 6f:ef:7d:98:6b:c0:aa:0b:54:5b:99:3f:e7:00:f3: d7:56:59:53:9c:8c:0d:fc:0d:be:a4:2c:47:a4:0b: d2:76:1e:dd:90:2a:5e:79:e0:c0:f5:e1:6c:99:cb: ca:b1:9e:29:4f:ba:75:18:7d:3a:05:d8:5f:c7:97: 41:5a:ed:62:30:d8:36:4d:05:3c:7b:23:ca:2f:5d: 48:cb:b8:91:e5:82:80:10:45:a9:81:b6:09:ca:1b: 05:13:ee:3c:4c:e7:45:b3:f0:ad:49:86:d0:10:8a: dc:87:fd:c8:69:ad:36:44:2b:4c:ae:ff:5f:98:a2: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6C:C5:AB:89:75:70:F9:91:A8:20:8F:1E:51:BD:DD:5E:54:1D:83 X509v3 Authority Key Identifier: keyid:8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.144.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:9b:ce:c2:3b:d6:e2:cb:b9:cb:8f:a6:40:10:b1:e0:4c:18: 20:a1:33:0b:1e:72:4b:b4:4e:85:f0:1a:45:9b:84:65:3f:9a: ac:0c:35:bc:dd:61:8a:6d:0f:d3:89:79:ec:4c:6d:cc:3b:38: 90:bf:e8:3b:70:97:36:41:19:d4:63:8d:16:cb:17:57:42:62: eb:7a:07:ab:d7:91:d5:43:4f:34:1e:27:b2:4f:77:8c:dd:6f: 78:b2:33:38:86:68:42:f9:67:eb:9d:38:ab:a7:6d:99:0f:39: 1a:33:76:24:b9:e1:88:11:6b:06:0f:97:19:a7:a9:44:90:3d: 2d:57:bb:4a:7a:14:4a:56:9c:4e:99:f2:e1:64:68:08:5b:ea: 0e:64:8c:cb:c1:a2:ce:47:77:d7:90:3b:e3:7a:5e:ed:71:31: c9:31:3e:e8:9b:32:40:1f:36:69:d8:57:e1:a0:9a:6d:db:b3: c5:90:4f:db:5f:3e:fc:c9:5a:7a:95:d0:d1:47:32:d8:6e:32: 6b:34:30:ee:28:f3:e2:7c:77:af:41:9a:92:62:7d:e3:17:ee: 35:78:8f:a9:01:9b:3c:8c:0b:58:e1:ad:06:d6:f8:32:39:d9: f0:10:ce:9e:bd:ae:83:67:75:fd:72:93:62:72:dd:85:4a:76: d7:68:b3:f2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNmbFNBW4cNx+ChKlfcCqvwLrRg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBMkI1RTA3RkFENTcyOEM3REVGQkY0RkMxMEJEMDQ0 MzUzRjZGRjAeFw0yNTA2MjAwNjU1MDBaFw0yNjA2MTkwNzAwMDBaMDMxMTAvBgNV BAMTKDQ1NkNDNUFCODk3NTcwRjk5MUE4MjA4RjFFNTFCRERENUU1NDFEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD08oiHM7S/raAyjwg6OaD1xnD2 /E6A9Mny9Lgs5lZNqmxneNsXLY0K3Ms59FT1Do7uZSRYTxPnbH9ZRfHZaxaLfPC8 M36l0uTRynBW3r7fRKT4YV6oj49Xa1dT2Wa/abk7okqJLJ7YgA0HwfKJ8Hmc7zXY j62CLRJwe4UGh7D990pxrJBMC2/vfZhrwKoLVFuZP+cA89dWWVOcjA38Db6kLEek C9J2Ht2QKl554MD14WyZy8qxnilPunUYfToF2F/Hl0Fa7WIw2DZNBTx7I8ovXUjL uJHlgoAQRamBtgnKGwUT7jxM50Wz8K1JhtAQityH/chprTZEK0yu/1+Yot3TAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQURWzFq4l1cPmRqCCPHlG93V5UHYMwHwYDVR0j BBgwFoAUi6K14H+tVyjH3vv0/BC9BENT9v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Yzc2Yzg1Zi05YTRmLTRhZmMtOTY5Yi04ZGEyNTM2YzVjMjQvMC84QkEyQjVFMDdG QUQ1NzI4QzdERUZCRjRGQzEwQkQwNDQzNTNGNkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJBMkI1RTA3RkFENTcyOEM3REVGQkY0RkMxMEJEMDQ0MzUz RjZGRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjNzZjODVmLTlhNGYtNGFmYy05 NjliLThkYTI1MzZjNWMyNC8wLzMxMzAzMzJlMzEzMzMzMmUzMTM0MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMzMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnhZAwDQYJ KoZIhvcNAQELBQADggEBAFubzsI71uLLucuPpkAQseBMGCChMwsecku0ToXwGkWb hGU/mqwMNbzdYYptD9OJeexMbcw7OJC/6DtwlzZBGdRjjRbLF1dCYut6B6vXkdVD TzQeJ7JPd4zdb3iyMziGaEL5Z+udOKunbZkPORozdiS54YgRawYPlxmnqUSQPS1X u0p6FEpWnE6Z8uFkaAhb6g5kjMvBos5Hd9eQO+N6Xu1xMckxPuibMkAfNmnYV+Gg mm3bs8WQT9tfPvzJWnqV0NFHMthuMms0MO4o8+J8d69BmpJifeMX7jV4j6kBmzyM C1jhrQbW+DI52fAQzp69roNndf1yk2Jy3YVKdtdos/I= -----END CERTIFICATE-----Generated at Mon Jun 30 07:32:44 2025 by rpki-client