$ rpki-client -vvf repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa File: 3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa (raw, json) Hash identifier: 4s41xEY7UBgsSggqyWIotPxkDNAX87xyMeVQ2bFn4Lw= Subject key identifier: 6B:2E:8A:2D:74:A9:88:11:FB:B6:A6:04:69:77:A2:9C:0F:BC:03:C9 Certificate issuer: /CN=75777FAFA6DB253E3CA15E2E09216AC6AF01001C Certificate serial: 688DC7BDEAF4C19DD087B4A75C0C7E0BF154965C Authority key identifier: 75:77:7F:AF:A6:DB:25:3E:3C:A1:5E:2E:09:21:6A:C6:AF:01:00:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa Signing time: Wed 21 May 2025 07:00:01 +0000 ROA not before: Wed 21 May 2025 06:55:01 +0000 ROA not after: Wed 20 May 2026 07:00:01 +0000 asID: 131111 IP address blocks: 103.159.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.crl rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:8d:c7:bd:ea:f4:c1:9d:d0:87:b4:a7:5c:0c:7e:0b:f1:54:96:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75777FAFA6DB253E3CA15E2E09216AC6AF01001C Validity Not Before: May 21 06:55:01 2025 GMT Not After : May 20 07:00:01 2026 GMT Subject: CN=6B2E8A2D74A98811FBB6A6046977A29C0FBC03C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c5:a7:86:8d:69:ef:ba:e5:43:73:e9:b2:ba: 42:33:98:ef:74:50:dc:90:35:bc:37:82:ca:ab:77: 17:f7:64:7b:e4:d9:25:e6:b4:b1:5f:9f:cb:4d:bc: aa:77:74:aa:ed:93:37:66:41:3d:56:aa:ed:4c:bc: 6a:68:49:78:cb:11:17:52:6b:9e:3a:7f:b3:ca:ba: e6:0f:e1:56:aa:47:47:d7:58:22:89:88:d8:b1:6a: c0:07:f2:74:a8:03:82:61:ff:f4:5f:1e:15:ed:ab: 53:46:46:c2:d3:8e:a2:d6:ed:3e:1b:83:8e:65:d5: 0b:30:03:ba:bf:91:4a:e8:85:19:fc:35:7c:b0:92: 35:f8:26:81:72:12:7a:7c:2a:be:d2:0d:46:e0:29: 6d:25:c6:94:0c:78:da:ef:69:a2:11:bb:4e:d3:dd: c5:67:87:c9:2f:c8:ca:b8:f1:76:ad:73:be:20:26: cc:8b:e4:14:20:81:85:2e:87:5f:81:a7:4d:a1:e4: f4:1d:5a:4c:3e:a6:61:4a:e9:f2:00:de:9d:13:f8: f8:83:fd:ca:52:91:18:b7:83:61:97:ea:1f:e3:a3: 05:ce:d9:95:84:a1:23:3e:b3:ad:7b:b0:d5:2e:05: 1c:cc:1d:09:82:d4:b8:28:70:9b:ae:5a:0c:ab:46: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2E:8A:2D:74:A9:88:11:FB:B6:A6:04:69:77:A2:9C:0F:BC:03:C9 X509v3 Authority Key Identifier: keyid:75:77:7F:AF:A6:DB:25:3E:3C:A1:5E:2E:09:21:6A:C6:AF:01:00:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.198.0/23 Signature Algorithm: sha256WithRSAEncryption 83:17:c6:ff:79:45:2d:f8:c7:80:a0:d5:30:22:00:4f:7f:6c: 42:2f:71:88:02:ba:be:e6:77:e9:34:92:1f:dd:e3:c7:d0:a0: 22:84:d7:bf:bb:63:84:3c:90:c8:af:b0:e2:d9:c0:f2:d0:c2: a7:d0:20:fa:32:72:25:b2:6d:df:f2:c1:e6:53:eb:3b:65:54: a0:88:d5:58:09:d7:b2:08:e6:06:4c:3a:5b:7a:3a:d8:bc:fc: a4:61:11:5c:19:d1:83:1e:ea:16:2e:f2:c5:1c:1a:36:fa:fb: ca:f8:40:82:b0:5b:e9:37:7d:05:55:ba:4c:6f:9f:01:d1:f5: 7b:35:77:6a:4b:bc:3f:de:65:d8:35:e9:15:60:ba:5e:32:58: ee:2e:0d:d5:cf:19:20:c2:3f:0c:7f:14:10:e2:9f:72:a6:9a: 59:df:c3:67:1f:df:74:11:1c:2e:bf:6e:df:4a:0e:42:0b:5a: fe:7f:5a:02:d6:67:ef:64:39:c9:27:cf:ae:da:6e:78:cb:41: 63:ab:dc:bf:5e:c8:44:46:47:01:05:b0:8b:69:13:88:75:d0: 45:6f:2b:54:6a:48:9c:d0:7f:5b:1b:e7:33:e9:3c:de:83:86: cb:95:c6:8e:cb:7a:49:f2:7d:f3:88:87:26:88:1b:6e:63:63: c7:83:5a:5a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUaI3Hver0wZ3Qh7SnXAx+C/FUllwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU3NzdGQUZBNkRCMjUzRTNDQTE1RTJFMDkyMTZBQzZB RjAxMDAxQzAeFw0yNTA1MjEwNjU1MDFaFw0yNjA1MjAwNzAwMDFaMDMxMTAvBgNV BAMTKDZCMkU4QTJENzRBOTg4MTFGQkI2QTYwNDY5NzdBMjlDMEZCQzAzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdxaeGjWnvuuVDc+myukIzmO90 UNyQNbw3gsqrdxf3ZHvk2SXmtLFfn8tNvKp3dKrtkzdmQT1Wqu1MvGpoSXjLERdS a546f7PKuuYP4VaqR0fXWCKJiNixasAH8nSoA4Jh//RfHhXtq1NGRsLTjqLW7T4b g45l1QswA7q/kUrohRn8NXywkjX4JoFyEnp8Kr7SDUbgKW0lxpQMeNrvaaIRu07T 3cVnh8kvyMq48Xatc74gJsyL5BQggYUuh1+Bp02h5PQdWkw+pmFK6fIA3p0T+PiD /cpSkRi3g2GX6h/jowXO2ZWEoSM+s617sNUuBRzMHQmC1LgocJuuWgyrRsSvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUay6KLXSpiBH7tqYEaXeinA+8A8kwHwYDVR0j BBgwFoAUdXd/r6bbJT48oV4uCSFqxq8BABwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTMxY2IwNy0xYjUyLTRjYWUtOWU4ZS00Njg5OTFlY2M3MzEvMC83NTc3N0ZBRkE2 REIyNTNFM0NBMTVFMkUwOTIxNkFDNkFGMDEwMDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU3NzdGQUZBNkRCMjUzRTNDQTE1RTJFMDkyMTZBQzZBRjAx MDAxQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5MzFjYjA3LTFiNTItNGNhZS05 ZThlLTQ2ODk5MWVjYzczMS8wLzMxMzAzMzJlMzEzNTM5MmUzMTM5MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn8YwDQYJ KoZIhvcNAQELBQADggEBAIMXxv95RS34x4Cg1TAiAE9/bEIvcYgCur7md+k0kh/d 48fQoCKE17+7Y4Q8kMivsOLZwPLQwqfQIPoyciWybd/yweZT6ztlVKCI1VgJ17II 5gZMOlt6Oti8/KRhEVwZ0YMe6hYu8sUcGjb6+8r4QIKwW+k3fQVVukxvnwHR9Xs1 d2pLvD/eZdg16RVgul4yWO4uDdXPGSDCPwx/FBDin3Kmmlnfw2cf33QRHC6/bt9K DkILWv5/WgLWZ+9kOcknz67abnjLQWOr3L9eyERGRwEFsItpE4h10EVvK1RqSJzQ f1sb5zPpPN6DhsuVxo7LeknyffOIhyaIG25jY8eDWlo= -----END CERTIFICATE-----Generated at Wed Jul 2 06:18:47 2025 by rpki-client