$ rpki-client -vvf repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa File: 3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (raw, json) Hash identifier: Yqses+sM6Ch7Yy0wlsERwjD51XaycOIOWt4JofJnhIQ= Subject key identifier: 6D:05:30:CA:89:69:B1:3F:F1:7B:D5:6B:F4:4A:2F:32:B7:DC:D8:03 Certificate issuer: /CN=6592459773B9BF90E892EF4DE9361A991482809F Certificate serial: 08BA43F872EAF3CE60B077E8EAADB7B9CB466B5B Authority key identifier: 65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa Signing time: Fri 09 May 2025 05:02:28 +0000 ROA not before: Fri 09 May 2025 04:57:28 +0000 ROA not after: Fri 08 May 2026 05:02:28 +0000 asID: 150998 IP address blocks: 103.211.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 10:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ba:43:f8:72:ea:f3:ce:60:b0:77:e8:ea:ad:b7:b9:cb:46:6b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6592459773B9BF90E892EF4DE9361A991482809F Validity Not Before: May 9 04:57:28 2025 GMT Not After : May 8 05:02:28 2026 GMT Subject: CN=6D0530CA8969B13FF17BD56BF44A2F32B7DCD803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6e:db:3d:5d:11:96:09:a5:fd:8f:c5:5f:20: 82:9e:00:e4:e1:5d:99:87:4c:b0:3f:5b:93:a3:82: 56:ad:4d:e7:ce:c7:80:41:1e:74:1f:d1:76:24:4c: 41:27:ce:99:4b:ef:74:21:43:c7:42:02:5f:4b:39: 6f:bd:45:4b:4a:9a:46:96:af:a1:1c:15:d0:ec:6b: be:ec:0a:8d:e9:af:3f:de:f4:6b:54:a4:36:ea:0c: 70:59:59:29:ea:8b:b4:68:40:7e:12:f7:e5:9e:d9: 6f:a1:4d:17:0b:dc:8f:6a:cd:82:e3:a8:35:94:23: c0:c1:14:60:d1:62:76:63:ab:d3:d2:3d:41:3a:5a: ba:d2:dc:84:f4:ee:84:74:b6:bb:d4:24:33:01:91: 2e:14:25:e9:e1:d5:61:f8:15:d8:68:c4:0e:8b:7d: 92:5d:83:75:36:02:50:b4:02:99:0f:a1:67:e1:78: ee:4f:da:11:e8:a0:5a:af:d0:7f:70:89:f3:a0:a7: 04:ec:7a:87:91:0f:83:a5:dd:e1:f5:c8:b3:fb:bd: 80:28:f4:c2:32:e8:7d:ba:f6:4b:59:62:d2:d1:c3: 9f:29:d2:f5:0f:8f:67:f3:d6:31:b6:00:d9:9b:87: c5:90:be:42:7a:d8:e7:fa:f3:0c:52:5b:c8:12:d3: 93:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:05:30:CA:89:69:B1:3F:F1:7B:D5:6B:F4:4A:2F:32:B7:DC:D8:03 X509v3 Authority Key Identifier: keyid:65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.107.0/24 Signature Algorithm: sha256WithRSAEncryption 13:10:80:7b:dd:c5:93:b1:46:25:cd:34:7c:cc:ed:58:86:b4: 24:05:76:a8:06:f9:27:e6:27:30:59:dd:11:88:b3:d6:78:85: 48:33:83:45:95:d0:fd:fd:f3:0d:8c:cf:a5:ac:dc:6a:6d:86: d0:51:da:cf:75:b9:f3:e3:7a:88:05:d2:64:8a:73:f7:9c:af: 2e:68:b0:3a:fb:80:d1:95:d4:44:c1:da:b6:eb:ee:4b:d4:66: e6:7e:94:6c:93:2a:c7:73:b8:a0:3a:42:e0:cf:f6:9f:1a:b1: e3:90:d8:2c:18:8c:37:f7:3b:e5:e5:a9:d0:c8:96:62:fd:66: 7b:e4:4f:bd:7d:f3:21:1f:c6:45:3d:b6:e8:f9:6f:a8:56:ec: 2c:0b:ef:94:29:c7:f2:6f:3f:91:bd:21:a1:13:97:d4:8c:94: 07:85:87:aa:e2:dc:d6:8f:fe:9c:98:ed:da:82:64:f6:95:5a: 4c:86:01:c4:35:b4:5f:df:94:3f:f2:c4:dc:b5:9e:56:ae:63: 95:0e:c0:c8:76:a7:7b:ea:05:17:0f:36:cf:3f:b1:39:81:24: 76:de:9e:7d:7f:44:58:9d:09:4e:3e:c3:67:d6:cd:06:55:15: 06:89:ec:0d:8b:bf:42:0d:fc:55:53:ed:46:0e:57:a6:a9:7a: e3:e9:8c:b5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCLpD+HLq885gsHfo6q23uctGa1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU5MjQ1OTc3M0I5QkY5MEU4OTJFRjRERTkzNjFBOTkx NDgyODA5RjAeFw0yNTA1MDkwNDU3MjhaFw0yNjA1MDgwNTAyMjhaMDMxMTAvBgNV BAMTKDZEMDUzMENBODk2OUIxM0ZGMTdCRDU2QkY0NEEyRjMyQjdEQ0Q4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbts9XRGWCaX9j8VfIIKeAOTh XZmHTLA/W5OjglatTefOx4BBHnQf0XYkTEEnzplL73QhQ8dCAl9LOW+9RUtKmkaW r6EcFdDsa77sCo3prz/e9GtUpDbqDHBZWSnqi7RoQH4S9+We2W+hTRcL3I9qzYLj qDWUI8DBFGDRYnZjq9PSPUE6WrrS3IT07oR0trvUJDMBkS4UJenh1WH4FdhoxA6L fZJdg3U2AlC0ApkPoWfheO5P2hHooFqv0H9wifOgpwTseoeRD4Ol3eH1yLP7vYAo 9MIy6H269ktZYtLRw58p0vUPj2fz1jG2ANmbh8WQvkJ62Of68wxSW8gS05NfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUbQUwyolpsT/xe9Vr9EovMrfc2AMwHwYDVR0j BBgwFoAUZZJFl3O5v5Doku9N6TYamRSCgJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODc4YzA2Mi1iMDkyLTQwMjUtOWI2OC1iZmViOWI2NWE1YTAvMC82NTkyNDU5Nzcz QjlCRjkwRTg5MkVGNERFOTM2MUE5OTE0ODI4MDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU5MjQ1OTc3M0I5QkY5MEU4OTJFRjRERTkzNjFBOTkxNDgy ODA5Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NzhjMDYyLWIwOTItNDAyNS05 YjY4LWJmZWI5YjY1YTVhMC8wLzMxMzAzMzJlMzIzMTMxMmUzMTMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn02swDQYJ KoZIhvcNAQELBQADggEBABMQgHvdxZOxRiXNNHzM7ViGtCQFdqgG+SfmJzBZ3RGI s9Z4hUgzg0WV0P398w2Mz6Ws3GpthtBR2s91ufPjeogF0mSKc/ecry5osDr7gNGV 1ETB2rbr7kvUZuZ+lGyTKsdzuKA6QuDP9p8aseOQ2CwYjDf3O+XlqdDIlmL9Znvk T7198yEfxkU9tuj5b6hW7CwL75Qpx/JvP5G9IaETl9SMlAeFh6ri3NaP/pyY7dqC ZPaVWkyGAcQ1tF/flD/yxNy1nlauY5UOwMh2p3vqBRcPNs8/sTmBJHbenn1/RFid CU4+w2fWzQZVFQaJ7A2Lv0IN/FVT7UYOV6apeuPpjLU= -----END CERTIFICATE-----Generated at Sat May 10 08:53:41 2025 by rpki-client