$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa File: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (raw, json) Hash identifier: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI= Subject key identifier: 20:5F:59:86:3F:73:1E:F7:19:DF:1F:C5:CC:D7:6F:2A:C2:A7:F2:74 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 0B7116834A24321FD2B94244E1033771FED04F1A Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa Signing time: Wed 30 Apr 2025 03:00:01 +0000 ROA not before: Wed 30 Apr 2025 02:55:01 +0000 ROA not after: Wed 29 Apr 2026 03:00:01 +0000 asID: 140417 IP address blocks: 103.151.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 20:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:71:16:83:4a:24:32:1f:d2:b9:42:44:e1:03:37:71:fe:d0:4f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Apr 30 02:55:01 2025 GMT Not After : Apr 29 03:00:01 2026 GMT Subject: CN=205F59863F731EF719DF1FC5CCD76F2AC2A7F274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dc:6b:8e:81:c3:cc:31:eb:78:39:90:60:3c: 2a:1f:b8:49:c0:32:6e:d5:4b:e1:ca:b4:51:72:49: 1b:c3:c5:de:ba:22:bb:d6:c4:f9:71:8c:93:bb:26: 77:e8:ef:9c:60:b1:53:69:8d:65:8f:de:d9:01:8d: 9b:d2:94:68:36:f0:bb:23:e3:8e:76:39:42:ba:20: d5:9e:a2:0a:75:39:5f:5a:32:d5:15:d0:16:e1:0f: 3d:d2:f6:84:2b:25:69:a4:af:13:ea:3a:d8:5d:8a: 44:54:95:e2:dd:9a:ee:88:df:d9:15:a0:d1:53:8f: c4:27:29:10:dd:eb:2b:04:53:e0:01:f8:8c:8c:7b: 4e:1d:2f:12:98:36:8f:cf:78:15:f4:d5:84:71:ed: 64:2f:86:69:c8:8d:98:19:ab:fb:dd:c8:17:0f:29: 7a:28:62:20:1c:d3:04:e6:38:a3:2d:6c:a9:87:2d: 38:62:bd:81:e8:dc:8b:11:2b:52:ad:24:b4:09:9b: a9:f7:aa:63:30:e3:65:6b:34:d7:66:f8:e6:4e:1f: 4d:7d:40:be:6d:c6:2c:dd:fd:6c:01:bd:85:69:ad: 72:d9:34:f2:17:72:be:ac:e0:28:8a:fa:73:de:e5: ee:1f:24:1f:8a:c0:c2:5b:1b:59:74:d2:1d:84:b9: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5F:59:86:3F:73:1E:F7:19:DF:1F:C5:CC:D7:6F:2A:C2:A7:F2:74 X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.140.0/23 Signature Algorithm: sha256WithRSAEncryption 51:03:a8:d9:8e:f6:41:dc:5d:d4:98:3d:77:49:76:9f:bd:d3: 33:8b:9b:d8:ac:70:bf:58:e9:d6:89:98:63:15:7a:de:67:fc: dc:63:2b:ff:04:6c:4c:82:d8:ca:ff:98:ab:6e:ed:90:51:86: ac:b9:d5:4c:6f:9d:04:43:db:4c:09:a7:c7:61:64:94:de:7a: 7c:0f:52:96:e3:c3:1f:4f:43:9a:9d:f3:ef:3d:93:37:65:63: db:55:ef:a5:08:6b:51:0e:89:77:9a:31:d0:90:0e:17:5d:fb: b2:6d:bb:48:da:aa:52:87:ba:41:6d:aa:1f:bc:70:17:ef:c9: 87:fc:bc:23:6c:6c:0f:5f:b1:70:06:77:2f:e7:b4:a5:60:15: c2:84:aa:09:a2:95:32:3e:df:9f:5d:4c:06:46:53:d1:6e:be: 9b:d8:3b:20:e2:c7:4a:cf:7d:9a:f0:42:31:cb:a9:4b:3b:4d: 55:4e:78:d7:ca:95:f7:07:6c:6b:7b:fc:25:02:b5:65:64:8e: fd:b7:8c:ed:ed:1d:24:cd:4e:b5:9c:32:87:52:9c:a4:d2:fd: b8:de:cf:ca:e2:37:57:66:3a:54:84:89:87:ad:24:eb:b0:06: e4:1f:63:f8:20:3d:de:f6:14:11:5b:4a:a0:72:1f:45:8e:7f: 90:08:01:db -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUC3EWg0okMh/SuUJE4QM3cf7QTxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNTA0MzAwMjU1MDFaFw0yNjA0MjkwMzAwMDFaMDMxMTAvBgNV BAMTKDIwNUY1OTg2M0Y3MzFFRjcxOURGMUZDNUNDRDc2RjJBQzJBN0YyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3GuOgcPMMet4OZBgPCofuEnA Mm7VS+HKtFFySRvDxd66IrvWxPlxjJO7Jnfo75xgsVNpjWWP3tkBjZvSlGg28Lsj 4452OUK6INWeogp1OV9aMtUV0BbhDz3S9oQrJWmkrxPqOthdikRUleLdmu6I39kV oNFTj8QnKRDd6ysEU+AB+IyMe04dLxKYNo/PeBX01YRx7WQvhmnIjZgZq/vdyBcP KXooYiAc0wTmOKMtbKmHLThivYHo3IsRK1KtJLQJm6n3qmMw42VrNNdm+OZOH019 QL5txizd/WwBvYVprXLZNPIXcr6s4CiK+nPe5e4fJB+KwMJbG1l00h2EuXg7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUIF9Zhj9zHvcZ3x/FzNdvKsKn8nQwHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0NzAyNmE5LTBjOWEtNGQ3OS1h ZDY3LTJjOWRiZDM2NmQwYi8wLzMxMzAzMzJlMzEzNTMxMmUzMTM0MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzNDMxMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnl4wwDQYJ KoZIhvcNAQELBQADggEBAFEDqNmO9kHcXdSYPXdJdp+90zOLm9iscL9Y6daJmGMV et5n/NxjK/8EbEyC2Mr/mKtu7ZBRhqy51UxvnQRD20wJp8dhZJTeenwPUpbjwx9P Q5qd8+89kzdlY9tV76UIa1EOiXeaMdCQDhdd+7Jtu0jaqlKHukFtqh+8cBfvyYf8 vCNsbA9fsXAGdy/ntKVgFcKEqgmilTI+359dTAZGU9FuvpvYOyDix0rPfZrwQjHL qUs7TVVOeNfKlfcHbGt7/CUCtWVkjv23jO3tHSTNTrWcModSnKTS/bjez8riN1dm OlSEiYetJOuwBuQfY/ggPd72FBFbSqByH0WOf5AIAds= -----END CERTIFICATE-----Generated at Mon May 12 13:55:31 2025 by rpki-client