$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa File: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (raw, json) Hash identifier: 067j8zIqWRfiKYsv/8PNz7miyq3F672QljWEkk7m/9s= Subject key identifier: 31:8D:C3:7E:D9:B7:7C:66:92:7D:D1:ED:2C:1B:BC:EC:D5:60:5A:4A Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 1AC1B1DD67EB08B5E9706E0D22E2FB142DF3E687 Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa Signing time: Mon 30 Jun 2025 10:02:52 +0000 ROA not before: Mon 30 Jun 2025 09:57:52 +0000 ROA not after: Mon 29 Jun 2026 10:02:52 +0000 asID: 151992 IP address blocks: 103.42.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 20:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c1:b1:dd:67:eb:08:b5:e9:70:6e:0d:22:e2:fb:14:2d:f3:e6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Jun 30 09:57:52 2025 GMT Not After : Jun 29 10:02:52 2026 GMT Subject: CN=318DC37ED9B77C66927DD1ED2C1BBCECD5605A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:8f:d0:72:42:04:5f:5e:41:d3:02:67:86: 79:36:98:91:d0:f0:26:05:57:2e:d4:b7:e6:cb:a0: 67:56:5c:5b:12:a3:85:ce:33:11:74:3d:33:cf:9b: 88:27:8d:eb:86:53:91:33:c9:d5:b7:50:8e:95:89: d2:b4:0d:58:79:ee:0b:ab:f4:4f:68:82:87:26:29: c5:41:86:fd:29:0f:d8:3c:00:17:2f:11:70:da:7a: a5:b9:e5:ff:9a:72:26:38:52:16:24:ba:7e:ea:47: ab:e3:49:63:d6:82:55:84:42:81:4d:81:51:fe:a4: c4:58:be:9e:8f:f7:fe:9c:d6:2f:20:72:3e:64:42: fd:05:29:e3:ea:cc:13:78:c4:1c:56:2d:e4:e1:5f: 9c:63:8c:2a:68:cc:52:54:07:cd:50:96:41:3b:6b: f9:f5:9e:c2:8e:fd:be:6d:e9:d3:e2:75:30:7e:6f: 5a:52:00:f9:be:7a:dd:28:53:1d:b4:cf:2e:25:dd: 35:fc:60:7f:65:0e:14:0b:6f:d2:04:00:1d:c3:d1: 0b:c5:38:27:5b:40:fe:c3:00:6d:c2:7a:4c:d9:9f: 3c:1a:2a:bf:3b:c4:fc:41:b8:fe:46:0f:ed:8a:1d: 16:90:9f:07:4a:14:37:73:5f:32:40:80:33:2c:cf: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8D:C3:7E:D9:B7:7C:66:92:7D:D1:ED:2C:1B:BC:EC:D5:60:5A:4A X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.242.0/24 Signature Algorithm: sha256WithRSAEncryption 71:85:e7:1c:a4:1e:5a:37:30:0b:70:86:11:7e:ab:82:1b:91: 4d:1c:0b:5a:3b:3d:ba:57:60:ac:45:30:2b:f1:e1:94:10:dc: f9:ad:dc:26:0c:6d:8e:4d:50:ba:9a:de:e0:31:ee:fd:ac:9e: 54:63:45:85:ff:75:e3:14:8b:ca:ef:40:3f:a5:7e:d0:fd:12: 7f:26:99:a7:fa:b2:27:c5:2e:fa:a0:05:87:13:5c:30:21:42: 15:a1:8c:99:14:8c:ed:bc:96:9c:63:6f:19:57:a6:76:88:9d: e6:6b:48:4f:7f:54:0b:d8:7f:eb:58:c3:a1:9f:ac:c2:61:18: 61:c7:73:ac:b1:b0:2a:b6:6c:a7:99:6f:c5:7a:1e:41:0d:74: 90:98:58:73:3f:6b:b4:da:1b:37:73:58:37:e0:d8:ff:b8:95: 8d:c0:65:02:2c:c5:42:02:b7:5e:53:84:78:e7:e6:8e:04:52: 55:4c:2b:cd:1b:04:aa:7d:f8:d1:fe:54:f9:b2:d8:ef:d6:1a: 68:79:b5:58:e9:99:be:16:c4:09:6b:c1:dd:77:aa:e4:11:50: 73:d2:c5:ab:ee:9c:90:2e:dd:16:23:33:50:0c:ae:92:75:58: 03:bd:76:a6:24:0d:dc:3e:d0:a5:57:53:ee:83:1a:3e:df:e2: b8:39:66:6d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGsGx3WfrCLXpcG4NIuL7FC3z5ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNTA2MzAwOTU3NTJaFw0yNjA2MjkxMDAyNTJaMDMxMTAvBgNV BAMTKDMxOERDMzdFRDlCNzdDNjY5MjdERDFFRDJDMUJCQ0VDRDU2MDVBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1IY/QckIEX15B0wJnhnk2mJHQ 8CYFVy7Ut+bLoGdWXFsSo4XOMxF0PTPPm4gnjeuGU5EzydW3UI6VidK0DVh57gur 9E9ogocmKcVBhv0pD9g8ABcvEXDaeqW55f+aciY4UhYkun7qR6vjSWPWglWEQoFN gVH+pMRYvp6P9/6c1i8gcj5kQv0FKePqzBN4xBxWLeThX5xjjCpozFJUB81QlkE7 a/n1nsKO/b5t6dPidTB+b1pSAPm+et0oUx20zy4l3TX8YH9lDhQLb9IEAB3D0QvF OCdbQP7DAG3CekzZnzwaKr87xPxBuP5GD+2KHRaQnwdKFDdzXzJAgDMszwTDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMY3Dftm3fGaSfdHtLBu87NVgWkowHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1N2YxZjQzLWNlN2UtNDk3MC1h YWQwLTc4MmIwMTliZDAzZS8wLzMxMzAzMzJlMzQzMjJlMzIzNDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzkzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyryMA0GCSqG SIb3DQEBCwUAA4IBAQBxheccpB5aNzALcIYRfquCG5FNHAtaOz26V2CsRTAr8eGU ENz5rdwmDG2OTVC6mt7gMe79rJ5UY0WF/3XjFIvK70A/pX7Q/RJ/Jpmn+rInxS76 oAWHE1wwIUIVoYyZFIztvJacY28ZV6Z2iJ3ma0hPf1QL2H/rWMOhn6zCYRhhx3Os sbAqtmynmW/Feh5BDXSQmFhzP2u02hs3c1g34Nj/uJWNwGUCLMVCArdeU4R45+aO BFJVTCvNGwSqffjR/lT5stjv1hpoebVY6Zm+FsQJa8Hdd6rkEVBz0sWr7pyQLt0W IzNQDK6SdVgDvXamJA3cPtClV1Pugxo+3+K4OWZt -----END CERTIFICATE-----Generated at Tue Jul 1 01:07:25 2025 by rpki-client