$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa File: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (raw, json) Hash identifier: fEJQJx/Txzr+vMmd8tCh4JvmoJuakGNPJHf3zsUQTcY= Subject key identifier: 00:53:01:44:89:55:6A:98:DA:69:CC:5D:8A:7C:14:1A:81:0E:83:30 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 50EC1403AB22981B06B9B006C2FFA26DD623A51B Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa Signing time: Wed 19 Mar 2025 06:10:10 +0000 ROA not before: Wed 19 Mar 2025 06:05:10 +0000 ROA not after: Wed 18 Mar 2026 06:10:10 +0000 asID: 150537 IP address blocks: 103.81.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 21:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ec:14:03:ab:22:98:1b:06:b9:b0:06:c2:ff:a2:6d:d6:23:a5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: Mar 19 06:05:10 2025 GMT Not After : Mar 18 06:10:10 2026 GMT Subject: CN=0053014489556A98DA69CC5D8A7C141A810E8330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:19:72:0d:7a:07:5e:5a:7d:5b:22:95:36:50: 7c:de:ab:30:fc:cd:78:c0:78:26:8a:b1:4f:d1:78: a5:4a:bf:77:66:23:fb:36:25:9c:c5:59:2c:36:d2: cc:9f:9d:af:db:22:15:57:84:2d:b6:04:98:7e:52: 4a:85:6b:95:06:57:33:e2:66:8f:03:29:bc:9f:bd: 11:1e:d4:80:cd:cb:fe:df:d3:07:f7:15:fe:49:31: 2e:f7:cd:fe:3f:51:89:ae:f7:4b:48:ea:0e:3b:ff: 8e:24:96:78:2d:19:99:b7:a6:56:db:db:f8:fd:c5: af:1c:04:e5:1b:a1:6a:a2:19:ce:b5:38:f0:c7:22: f0:e8:44:73:8c:db:28:31:49:5d:10:1b:43:78:a8: f4:6f:c2:15:db:6b:57:b3:45:a1:26:3d:30:51:99: 08:ab:ff:51:59:a5:5e:dd:30:91:ae:64:0c:8d:21: 08:c5:f2:ee:95:0a:fc:18:3a:e6:dd:76:c3:2f:92: 79:86:71:bc:87:20:7b:1e:4a:b3:e6:42:01:7c:da: cf:38:e0:be:c8:ed:9a:c4:de:0e:bb:f0:f4:47:d9: 73:c3:28:fb:95:d0:55:5a:20:0b:ea:f9:22:c7:4f: 00:a6:c1:43:e8:85:56:36:c2:96:3e:a2:05:5a:eb: 78:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:53:01:44:89:55:6A:98:DA:69:CC:5D:8A:7C:14:1A:81:0E:83:30 X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.81.253.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:5d:e1:6c:e1:ab:e8:67:9e:b5:d6:39:9a:2e:22:01:6e:5e: 1e:8d:93:0e:75:c1:f3:ce:3b:8c:e9:5d:66:e9:c3:03:f6:49: 39:ed:4a:65:8a:54:dc:85:77:6f:b4:33:1d:b6:05:50:51:ea: 4d:91:3e:4a:ef:fb:34:0f:7f:b4:46:16:02:a6:61:03:96:96: c0:cb:82:86:c0:c6:60:ea:d2:e6:5b:dc:07:f1:60:d0:34:8d: 01:59:4f:8b:d9:81:a0:57:44:a2:a5:6e:6f:0c:a2:08:ce:d6: 83:b4:1c:53:37:82:43:78:f4:05:a4:08:da:09:7a:aa:78:34: ee:f9:d6:de:a5:4f:59:85:49:c2:64:58:44:d0:f2:ff:ba:39: f4:b7:93:8d:5f:f3:a1:98:8b:60:ea:1d:a8:51:dd:ab:19:48: 67:c9:4e:d2:5a:56:3d:a0:a2:86:a0:ea:56:f6:96:da:9f:60: 14:04:1a:64:50:ee:d8:03:6a:20:c7:ff:7a:16:23:42:1f:5e: 9e:36:ea:fe:28:ad:36:cd:73:1f:e0:fb:46:72:d6:61:2b:b2: 03:6b:72:b1:cc:6c:2d:6d:a3:6a:1e:23:6e:1b:46:ee:28:96: 8e:32:b4:47:b7:97:80:4d:55:08:f2:61:75:e4:53:4e:45:81: ae:0e:d6:c1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUOwUA6simBsGubAGwv+ibdYjpRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNTAzMTkwNjA1MTBaFw0yNjAzMTgwNjEwMTBaMDMxMTAvBgNV BAMTKDAwNTMwMTQ0ODk1NTZBOThEQTY5Q0M1RDhBN0MxNDFBODEwRTgzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgGXINegdeWn1bIpU2UHzeqzD8 zXjAeCaKsU/ReKVKv3dmI/s2JZzFWSw20syfna/bIhVXhC22BJh+UkqFa5UGVzPi Zo8DKbyfvREe1IDNy/7f0wf3Ff5JMS73zf4/UYmu90tI6g47/44klngtGZm3plbb 2/j9xa8cBOUboWqiGc61OPDHIvDoRHOM2ygxSV0QG0N4qPRvwhXba1ezRaEmPTBR mQir/1FZpV7dMJGuZAyNIQjF8u6VCvwYOubddsMvknmGcbyHIHseSrPmQgF82s84 4L7I7ZrE3g678PRH2XPDKPuV0FVaIAvq+SLHTwCmwUPohVY2wpY+ogVa63jnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAFMBRIlVapjaacxdinwUGoEOgzAwHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjMGQ0MGJjLTkzYzgtNDE1Yi1i NmE4LWFlZjA4OGQ3ZjRkNC8wLzMxMzAzMzJlMzgzMTJlMzIzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1H9MA0GCSqG SIb3DQEBCwUAA4IBAQA7XeFs4avoZ5611jmaLiIBbl4ejZMOdcHzzjuM6V1m6cMD 9kk57UplilTchXdvtDMdtgVQUepNkT5K7/s0D3+0RhYCpmEDlpbAy4KGwMZg6tLm W9wH8WDQNI0BWU+L2YGgV0SipW5vDKIIztaDtBxTN4JDePQFpAjaCXqqeDTu+dbe pU9ZhUnCZFhE0PL/ujn0t5ONX/OhmItg6h2oUd2rGUhnyU7SWlY9oKKGoOpW9pba n2AUBBpkUO7YA2ogx/96FiNCH16eNur+KK02zXMf4PtGctZhK7IDa3KxzGwtbaNq HiNuG0buKJaOMrRHt5eATVUI8mF15FNORYGuDtbB -----END CERTIFICATE-----Generated at Wed May 7 21:08:02 2025 by rpki-client