$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa File: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (raw, json) Hash identifier: ob6mRc06BCeBAj0X28E3a80wGp9aApab42pA+hcHgrk= Subject key identifier: 48:2D:D0:DA:9A:BC:D4:BC:16:A2:4D:21:8E:AA:A4:DF:1F:9C:60:2A Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 232DA1BE0AFA93D42A74B10F60F156BFBDAFF840 Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa Signing time: Wed 07 May 2025 11:19:27 +0000 ROA not before: Wed 07 May 2025 11:14:27 +0000 ROA not after: Wed 06 May 2026 11:19:27 +0000 asID: 141071 IP address blocks: 103.97.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 21:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2d:a1:be:0a:fa:93:d4:2a:74:b1:0f:60:f1:56:bf:bd:af:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: May 7 11:14:27 2025 GMT Not After : May 6 11:19:27 2026 GMT Subject: CN=482DD0DA9ABCD4BC16A24D218EAAA4DF1F9C602A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1c:27:bf:83:d2:e9:6c:ce:30:ae:85:74:ad: d3:ac:7b:db:d4:94:da:45:28:e9:d6:98:bd:ed:59: 3d:4f:81:65:a2:77:4a:80:ca:b5:de:89:f3:6b:20: 8c:9d:f4:f8:4d:91:81:69:5b:08:a5:bf:f1:23:20: c6:dd:c9:dd:55:02:af:b1:8f:0b:9a:60:bd:44:26: f9:70:33:b8:ab:42:9b:7e:6e:6c:1a:07:c7:b0:96: d4:b1:05:42:03:2c:5e:3e:ae:54:41:7a:ac:a6:ed: 11:98:cb:f2:6d:31:6b:74:f8:ae:c8:71:04:d3:06: de:c3:f4:c6:52:f1:97:2b:84:4e:35:d2:43:fb:24: ae:e1:cd:8b:b0:b6:b8:72:6a:a4:37:a0:62:6d:fd: 40:91:1e:a7:81:38:09:98:86:ac:18:75:a8:d8:12: 31:b7:84:bc:f4:12:fd:9a:32:d9:d5:af:69:c3:3d: ed:08:01:e2:58:48:52:f8:00:59:20:88:cb:fd:c3: ab:54:03:ba:b4:da:7c:ba:71:d5:52:3d:33:80:a1: 66:6d:35:5d:81:0d:c9:fd:2b:a2:8d:de:26:2a:3b: d1:80:f3:4d:32:a0:f9:16:2d:2c:f9:a6:31:28:18: b3:73:1a:6e:bf:b0:79:61:87:40:48:a5:5e:20:b5: fb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2D:D0:DA:9A:BC:D4:BC:16:A2:4D:21:8E:AA:A4:DF:1F:9C:60:2A X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.141.0/24 Signature Algorithm: sha256WithRSAEncryption 20:20:2c:05:5a:95:4d:ca:f9:c3:e8:73:4b:bb:16:42:81:65: 08:9b:14:b6:b1:93:ee:11:b3:7e:a9:16:f3:af:d0:8c:08:06: a4:2e:80:4a:f6:fc:94:44:9c:36:bd:6b:42:a4:db:3e:e3:1c: da:33:13:2b:d3:05:9c:f1:e6:b1:88:26:62:2d:31:08:91:05: ac:99:af:b1:ec:58:8c:bf:28:93:f1:08:a9:a6:2b:36:44:64: 2d:78:f2:2e:83:c9:d9:e1:a6:5c:42:75:5a:e9:56:a1:6b:2c: 00:57:56:14:80:59:44:0d:e9:8c:7a:90:56:88:bd:a7:84:83: bd:c1:cb:a7:32:cc:49:8e:bd:a0:55:52:3f:4e:4e:e9:75:43: 34:d8:38:9b:37:f9:df:4e:dd:11:ae:6d:93:4a:d6:dd:68:c0: 47:f4:d8:2f:b7:94:1c:ae:36:20:8d:31:f9:98:aa:7b:ea:b5: 16:a0:dd:aa:bc:e2:98:e3:f2:fa:be:97:2c:a7:79:56:27:47: e7:f2:37:b6:bb:cd:20:2e:05:08:fd:3c:a2:4e:8b:73:b3:17: 79:63:fa:f2:f5:7e:a2:d1:f8:a8:cd:2d:f5:15:96:5d:c1:c6: 7b:38:46:a9:07:10:e4:bd:1a:c5:9a:ba:61:f1:b1:e1:7a:6b: c6:35:9b:86 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIy2hvgr6k9QqdLEPYPFWv72v+EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNTA1MDcxMTE0MjdaFw0yNjA1MDYxMTE5MjdaMDMxMTAvBgNV BAMTKDQ4MkREMERBOUFCQ0Q0QkMxNkEyNEQyMThFQUFBNERGMUY5QzYwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuHCe/g9LpbM4wroV0rdOse9vU lNpFKOnWmL3tWT1PgWWid0qAyrXeifNrIIyd9PhNkYFpWwilv/EjIMbdyd1VAq+x jwuaYL1EJvlwM7irQpt+bmwaB8ewltSxBUIDLF4+rlRBeqym7RGYy/JtMWt0+K7I cQTTBt7D9MZS8ZcrhE410kP7JK7hzYuwtrhyaqQ3oGJt/UCRHqeBOAmYhqwYdajY EjG3hLz0Ev2aMtnVr2nDPe0IAeJYSFL4AFkgiMv9w6tUA7q02ny6cdVSPTOAoWZt NV2BDcn9K6KN3iYqO9GA800yoPkWLSz5pjEoGLNzGm6/sHlhh0BIpV4gtfsbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSC3Q2pq81LwWok0hjqqk3x+cYCowHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E0MDE0MzZiLTAyNjctNDY2Yi1h MzQwLWUyODhkMmU5MzRhOC8wLzMxMzAzMzJlMzkzNzJlMzEzNDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2GNMA0GCSqG SIb3DQEBCwUAA4IBAQAgICwFWpVNyvnD6HNLuxZCgWUImxS2sZPuEbN+qRbzr9CM CAakLoBK9vyURJw2vWtCpNs+4xzaMxMr0wWc8eaxiCZiLTEIkQWsma+x7FiMvyiT 8Qippis2RGQtePIug8nZ4aZcQnVa6VahaywAV1YUgFlEDemMepBWiL2nhIO9wcun MsxJjr2gVVI/Tk7pdUM02DibN/nfTt0Rrm2TStbdaMBH9Ngvt5QcrjYgjTH5mKp7 6rUWoN2qvOKY4/L6vpcsp3lWJ0fn8je2u80gLgUI/TyiTotzsxd5Y/ry9X6i0fio zS31FZZdwcZ7OEapBxDkvRrFmrph8bHhemvGNZuG -----END CERTIFICATE-----Generated at Thu May 8 10:04:29 2025 by rpki-client