$ rpki-client -vvf repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa File: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (raw, json) Hash identifier: a0b8kPXsB21232jFrzl+frqgbgAz9BSOiPAZeeremoo= Subject key identifier: 70:4A:1E:C1:8F:B2:20:F9:0D:F6:16:77:46:B5:0C:C6:66:60:D7:21 Certificate issuer: /CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Certificate serial: 6C71D87E318BE29F39B1BAC975ECCAFF80C77235 Authority key identifier: 9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa Signing time: Mon 21 Apr 2025 03:42:37 +0000 ROA not before: Mon 21 Apr 2025 03:37:37 +0000 ROA not after: Mon 20 Apr 2026 03:42:37 +0000 asID: 151404 IP address blocks: 103.253.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 01:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:71:d8:7e:31:8b:e2:9f:39:b1:ba:c9:75:ec:ca:ff:80:c7:72:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6AD12E8763F68692055BC4EE5A1741D489D240 Validity Not Before: Apr 21 03:37:37 2025 GMT Not After : Apr 20 03:42:37 2026 GMT Subject: CN=704A1EC18FB220F90DF6167746B50CC66660D721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:af:53:cb:b2:ee:52:67:8b:03:bc:87:dc: 1a:4c:aa:d3:1b:04:1c:1b:3f:07:5d:08:b7:f4:5b: 48:5e:81:a3:ab:22:d8:76:f5:aa:fa:d5:68:0c:4d: 18:45:91:20:c0:89:71:20:7d:04:90:75:35:69:70: e9:33:8d:d7:ce:56:68:57:bb:0d:62:f3:89:ef:36: ee:b4:1f:44:e0:90:58:10:c0:01:95:d1:fd:53:a3: 01:a7:7d:bc:56:67:d0:3b:35:54:ef:b6:c9:eb:41: 7a:de:9a:5b:66:14:35:61:72:97:06:81:23:ab:4d: 18:78:61:bb:cd:b3:ef:9f:77:f7:b5:61:4a:82:eb: d3:85:21:ee:fd:07:b4:bc:1c:e3:fc:80:07:b2:28: 04:c4:7e:4f:7d:09:e5:72:c0:d8:66:f1:c7:ed:91: 27:ea:61:67:50:8a:a3:82:a3:a4:84:83:a3:93:d8: e4:1d:45:ae:fa:e0:32:71:b1:26:61:aa:c9:d4:09: e5:3a:dd:2d:11:8d:99:49:97:2c:0d:93:8a:2f:ff: e8:93:30:64:34:77:51:56:25:db:e4:1d:2a:f6:f7: 09:18:9d:38:2e:e6:d1:7e:b7:ef:e0:dc:bd:71:e1: c0:a4:18:f7:81:08:b9:ad:42:34:c9:a7:05:a4:58: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4A:1E:C1:8F:B2:20:F9:0D:F6:16:77:46:B5:0C:C6:66:60:D7:21 X509v3 Authority Key Identifier: keyid:9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.229.0/24 Signature Algorithm: sha256WithRSAEncryption 81:f6:42:93:c9:dd:af:fd:8b:43:51:ee:9c:b3:5d:70:5b:4c: 94:90:09:5a:12:84:48:ef:da:07:96:68:63:b9:3a:5c:63:cd: f1:38:38:40:aa:e1:35:70:fc:f8:3b:4a:d0:02:fc:09:8c:9a: 86:07:97:a9:6a:5a:51:b0:14:31:6d:12:8a:6a:30:18:06:03: 2c:d8:4c:35:49:12:8c:b6:75:bb:e0:36:82:b0:90:7a:91:cd: 7a:77:0c:93:03:96:e4:74:a8:4c:c7:c1:87:9c:fa:00:25:53: d7:38:63:2f:6a:6b:5c:52:46:8a:39:31:50:fe:ff:2c:2a:e5: 2d:01:4e:ef:6d:d4:64:ca:de:a8:6c:b3:15:3b:80:42:ca:b6: 3a:71:43:f0:56:92:20:46:67:aa:d4:5f:ae:7d:9f:80:6a:1d: a8:38:17:ba:4a:3a:d2:68:82:d1:7c:c1:d8:6f:68:2f:ff:30: 5c:90:ca:d4:c5:35:91:61:00:5a:37:35:03:6a:63:45:4f:32: 87:88:21:6d:9f:fd:2b:6b:b4:96:97:40:2d:91:5f:76:69:63: d7:4f:e1:c5:d1:96:77:ac:aa:45:ea:cf:26:f2:6a:94:2f:4d: 05:9b:c7:f3:a0:e1:be:d4:5a:f8:16:eb:f1:3d:b7:a9:aa:2e: 46:14:ac:01 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUbHHYfjGL4p85sbrJdezK/4DHcjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFE NDg5RDI0MDAeFw0yNTA0MjEwMzM3MzdaFw0yNjA0MjAwMzQyMzdaMDMxMTAvBgNV BAMTKDcwNEExRUMxOEZCMjIwRjkwREY2MTY3NzQ2QjUwQ0M2NjY2MEQ3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDuq9Ty7LuUmeLA7yH3BpMqtMb BBwbPwddCLf0W0hegaOrIth29ar61WgMTRhFkSDAiXEgfQSQdTVpcOkzjdfOVmhX uw1i84nvNu60H0TgkFgQwAGV0f1TowGnfbxWZ9A7NVTvtsnrQXremltmFDVhcpcG gSOrTRh4YbvNs++fd/e1YUqC69OFIe79B7S8HOP8gAeyKATEfk99CeVywNhm8cft kSfqYWdQiqOCo6SEg6OT2OQdRa764DJxsSZhqsnUCeU63S0RjZlJlywNk4ov/+iT MGQ0d1FWJdvkHSr29wkYnTgu5tF+t+/g3L1x4cCkGPeBCLmtQjTJpwWkWKi1AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUcEoewY+yIPkN9hZ3RrUMxmZg1yEwHwYDVR0j BBgwFoAUnmrRLodj9oaSBVvE7loXQdSJ0kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2QxNWQ1My1hNGI0LTQ0MzUtYTFkYS01MmQwMjEyZWYzM2QvMC85RTZBRDEyRTg3 NjNGNjg2OTIwNTVCQzRFRTVBMTc0MUQ0ODlEMjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QUQxMkU4NzYzRjY4NjkyMDU1QkM0RUU1QTE3NDFENDg5 RDI0MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3ZDE1ZDUzLWE0YjQtNDQzNS1h MWRhLTUyZDAyMTJlZjMzZC8wLzMxMzAzMzJlMzIzNTMzMmUzMjMyMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNDMwMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn/eUwDQYJ KoZIhvcNAQELBQADggEBAIH2QpPJ3a/9i0NR7pyzXXBbTJSQCVoShEjv2geWaGO5 OlxjzfE4OECq4TVw/Pg7StAC/AmMmoYHl6lqWlGwFDFtEopqMBgGAyzYTDVJEoy2 dbvgNoKwkHqRzXp3DJMDluR0qEzHwYec+gAlU9c4Yy9qa1xSRoo5MVD+/ywq5S0B Tu9t1GTK3qhssxU7gELKtjpxQ/BWkiBGZ6rUX659n4BqHag4F7pKOtJogtF8wdhv aC//MFyQytTFNZFhAFo3NQNqY0VPMoeIIW2f/StrtJaXQC2RX3ZpY9dP4cXRlnes qkXqzybyapQvTQWbx/Og4b7UWvgW6/E9t6mqLkYUrAE= -----END CERTIFICATE-----Generated at Thu May 8 07:30:00 2025 by rpki-client