$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32342d3234203d3e203435333035.roa File: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM= Subject key identifier: 42:A4:37:A1:C5:BD:45:6E:C6:A7:4F:6F:CB:EF:3E:8A:DC:CD:E6:DB Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 3263009B5C5A390151375598451F73E7EA74CB4D Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32342d3234203d3e203435333035.roa Signing time: Wed 30 Apr 2025 10:00:00 +0000 ROA not before: Wed 30 Apr 2025 09:55:00 +0000 ROA not after: Wed 29 Apr 2026 10:00:00 +0000 asID: 45305 IP address blocks: 103.189.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 09:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:63:00:9b:5c:5a:39:01:51:37:55:98:45:1f:73:e7:ea:74:cb:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Apr 30 09:55:00 2025 GMT Not After : Apr 29 10:00:00 2026 GMT Subject: CN=42A437A1C5BD456EC6A74F6FCBEF3E8ADCCDE6DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:8f:51:6a:40:92:da:08:3b:b5:d2:28:7c: a8:6b:2b:b0:b4:c1:a3:1b:3b:91:4b:cd:17:ab:c4: 3f:94:c0:00:38:76:9c:ad:ef:37:35:6f:ae:04:1b: 24:e6:bd:8b:dc:fd:04:3a:ca:c8:7e:d5:a4:aa:20: a3:0d:08:ce:15:e5:a3:17:bb:bb:4b:23:68:72:b5: 58:eb:5b:dc:4c:b8:64:8f:00:8d:c7:5a:a4:73:a7: 04:8e:9b:e0:0a:4f:08:48:99:f9:cf:e0:08:37:1d: 60:f8:53:f3:d0:69:cf:e5:27:66:ac:62:ee:49:04: 71:61:0f:c2:ae:9a:00:b4:61:b7:96:cd:1a:5b:cf: 08:8b:85:6f:3c:48:71:f8:a9:98:d5:dd:23:11:4e: 59:eb:f3:67:56:0a:8c:28:ec:62:24:e6:9f:12:83: 3a:c6:3f:26:6b:ab:b0:b6:cf:68:81:7a:31:96:0a: 7f:0a:a6:58:b5:9b:9c:c9:fa:94:d4:84:18:5c:51: 35:77:47:da:48:13:ab:41:22:dd:ce:4e:ea:14:20: 55:a1:a7:da:22:87:e3:27:7c:76:aa:24:8b:95:74: bb:31:f0:05:91:24:6b:4f:ed:d8:c6:0e:c8:f8:98: 5b:f8:2c:9e:45:b8:5f:58:57:a4:99:f2:70:dc:e9: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A4:37:A1:C5:BD:45:6E:C6:A7:4F:6F:CB:EF:3E:8A:DC:CD:E6:DB X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.96.0/24 Signature Algorithm: sha256WithRSAEncryption 69:4d:21:67:6d:e8:16:40:9a:e7:3e:d2:ed:ac:3d:13:ee:83: 89:5b:9e:89:7d:b0:59:91:7e:c4:0d:45:e7:ae:27:4f:c6:df: 96:ab:0b:bf:b0:d3:f5:6c:df:18:53:1c:c0:f6:6f:5f:97:4f: d6:74:ae:1b:f5:e7:dd:3f:f3:48:44:45:00:5a:eb:e5:51:eb: b6:f1:24:93:e3:82:44:39:f6:33:0d:8f:7a:b5:9f:99:50:12: 67:88:d2:6d:5b:c1:8f:19:b9:20:23:04:3d:99:95:b1:15:03: 5d:ec:2c:b7:fa:33:cd:ac:a9:1f:dc:c0:12:72:83:de:36:94: 1e:3b:f3:2c:bd:ef:96:74:c5:4d:dd:ff:08:1c:18:70:a7:55: e1:bb:4b:d3:d3:bc:6c:99:64:c1:e6:ca:51:61:e1:cf:e8:2b: 0b:93:26:43:99:c1:66:7b:13:47:b6:8a:9f:65:6c:b9:39:cf: b6:bc:60:e8:58:1f:6d:02:f3:f3:8d:ba:f9:a8:2a:bb:e3:34: 68:77:3c:40:21:7a:ca:e3:66:4b:72:49:0c:38:46:84:58:ac: 67:d5:d5:33:a6:a1:d1:e2:4d:c7:84:ee:f5:4a:fe:12:af:e4: 9c:0d:53:81:50:de:fe:75:81:b9:37:78:d2:b5:b5:0a:45:e4: bf:a1:b3:e2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMmMAm1xaOQFRN1WYRR9z5+p0y00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNTA0MzAwOTU1MDBaFw0yNjA0MjkxMDAwMDBaMDMxMTAvBgNV BAMTKDQyQTQzN0ExQzVCRDQ1NkVDNkE3NEY2RkNCRUYzRThBRENDREU2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ko9RakCS2gg7tdIofKhrK7C0 waMbO5FLzRerxD+UwAA4dpyt7zc1b64EGyTmvYvc/QQ6ysh+1aSqIKMNCM4V5aMX u7tLI2hytVjrW9xMuGSPAI3HWqRzpwSOm+AKTwhImfnP4Ag3HWD4U/PQac/lJ2as Yu5JBHFhD8KumgC0YbeWzRpbzwiLhW88SHH4qZjV3SMRTlnr82dWCowo7GIk5p8S gzrGPyZrq7C2z2iBejGWCn8Kpli1m5zJ+pTUhBhcUTV3R9pIE6tBIt3OTuoUIFWh p9oih+MnfHaqJIuVdLsx8AWRJGtP7djGDsj4mFv4LJ5FuF9YV6SZ8nDc6R0xAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUQqQ3ocW9RW7Gp09vy+8+itzN5tswHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E0MzMzNmY4LWU1NDYtNDYyYy04 NDEwLWI3NzMyYjZjODAxNS8wLzMxMzAzMzJlMzEzODM5MmUzOTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe9YDANBgkqhkiG 9w0BAQsFAAOCAQEAaU0hZ23oFkCa5z7S7aw9E+6DiVueiX2wWZF+xA1F564nT8bf lqsLv7DT9WzfGFMcwPZvX5dP1nSuG/Xn3T/zSERFAFrr5VHrtvEkk+OCRDn2Mw2P erWfmVASZ4jSbVvBjxm5ICMEPZmVsRUDXewst/ozzaypH9zAEnKD3jaUHjvzLL3v lnTFTd3/CBwYcKdV4btL09O8bJlkwebKUWHhz+grC5MmQ5nBZnsTR7aKn2VsuTnP trxg6FgfbQLz8426+agqu+M0aHc8QCF6yuNmS3JJDDhGhFisZ9XVM6ah0eJNx4Tu 9Ur+Eq/knA1TgVDe/nWBuTd40rW1CkXkv6Gz4g== -----END CERTIFICATE-----Generated at Wed May 7 18:48:43 2025 by rpki-client