$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa File: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (raw, json) Hash identifier: OXRZ526Vg7TmkLT93n/Qe4MisAG7vaUJuVBZqKmzdzU= Subject key identifier: B8:84:BE:34:D9:BE:07:78:CB:90:92:AB:15:6B:3C:AC:F1:7F:DD:7F Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 6B4515D5FD3D39A3D6143EDF522908BE2B81CE96 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa Signing time: Mon 05 May 2025 15:00:01 +0000 ROA not before: Mon 05 May 2025 14:55:01 +0000 ROA not after: Mon 04 May 2026 15:00:01 +0000 asID: 142365 IP address blocks: 103.170.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:45:15:d5:fd:3d:39:a3:d6:14:3e:df:52:29:08:be:2b:81:ce:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: May 5 14:55:01 2025 GMT Not After : May 4 15:00:01 2026 GMT Subject: CN=B884BE34D9BE0778CB9092AB156B3CACF17FDD7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:ae:64:b1:42:88:8c:14:b8:52:56:bb:08: 48:c8:74:5f:79:69:75:60:db:58:d2:b9:00:06:2f: c1:e4:b1:1e:c1:7f:8f:65:aa:eb:e9:b6:8a:89:05: ee:3a:ea:1f:6a:80:9d:e6:65:78:05:28:a3:d1:75: 75:29:01:10:14:02:6b:21:b0:db:06:3e:ce:2c:27: b4:3b:76:cd:f0:9d:f2:9a:d8:07:d5:a8:a9:61:5e: f7:57:ab:3b:d9:70:37:da:a1:8e:32:72:23:02:df: fb:41:0d:1a:45:0b:c1:d3:66:17:f6:42:6c:82:f7: da:a7:c2:58:6b:be:5b:51:d1:38:26:0e:35:25:ac: 45:fa:40:29:98:b6:a0:01:6f:a4:11:ad:26:74:63: 2d:cc:d9:d6:1d:8e:c3:32:5d:78:b2:32:47:fc:75: a0:38:be:c9:31:f0:8f:9c:15:43:4f:45:e1:d1:86: eb:c9:2d:9e:c5:ba:62:64:9d:90:cf:81:57:69:55: b0:66:9a:b2:73:c6:11:17:c1:b5:af:f0:f9:3d:34: ba:fc:51:1b:65:a8:be:14:8e:3b:1d:2c:85:01:42: fb:b4:5c:29:e6:2d:3f:c4:c5:33:ac:57:0f:8f:27: 5f:48:d8:fe:d0:71:bb:47:6c:1c:b3:78:fc:2c:aa: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:84:BE:34:D9:BE:07:78:CB:90:92:AB:15:6B:3C:AC:F1:7F:DD:7F X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.186.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:13:5c:eb:45:83:51:30:57:02:06:e8:e1:28:78:2f:13:98: b2:41:08:56:cc:47:00:58:64:3d:69:3d:ff:30:25:4c:cc:cb: 83:9e:94:ce:a4:74:c9:0e:31:9f:ed:cc:e0:e5:75:8f:77:60: 5a:c1:53:5a:91:8f:f2:a5:95:a8:17:d7:d2:fe:ab:77:8d:46: 3d:d3:52:90:fa:7d:8d:78:4a:bb:33:81:ce:b9:d9:f4:5f:2a: 4d:1e:0e:f2:e8:a8:d6:c4:3a:74:f9:01:b0:c0:a1:03:02:c8: 67:d6:29:d9:16:22:da:db:f5:fa:cb:aa:48:38:c8:f1:be:aa: 41:0f:ab:2f:b7:28:45:af:bd:65:37:80:0c:fb:75:1b:2e:f5: d5:af:3f:c8:6d:c2:92:8a:1d:3e:3b:21:8e:91:ee:d5:49:56: ce:2e:f8:2f:e6:23:c7:fa:d6:13:a7:08:42:13:6a:54:41:d7: 56:9a:d4:c7:b7:dd:63:c5:97:0e:5f:fe:57:ae:7d:b3:9d:2e: 16:82:7f:71:03:10:22:4b:72:74:21:1d:72:40:37:c7:40:f2: f8:a9:2b:9a:23:92:de:2f:22:35:f8:c1:22:fe:e0:f0:c2:69: e9:c0:38:04:9c:97:e2:04:70:ed:85:62:d8:64:b8:0c:56:87: 46:b5:01:62 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUa0UV1f09OaPWFD7fUikIviuBzpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNTA1MDUxNDU1MDFaFw0yNjA1MDQxNTAwMDFaMDMxMTAvBgNV BAMTKEI4ODRCRTM0RDlCRTA3NzhDQjkwOTJBQjE1NkIzQ0FDRjE3RkREN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gK5ksUKIjBS4Ula7CEjIdF95 aXVg21jSuQAGL8HksR7Bf49lquvptoqJBe466h9qgJ3mZXgFKKPRdXUpARAUAmsh sNsGPs4sJ7Q7ds3wnfKa2AfVqKlhXvdXqzvZcDfaoY4yciMC3/tBDRpFC8HTZhf2 QmyC99qnwlhrvltR0TgmDjUlrEX6QCmYtqABb6QRrSZ0Yy3M2dYdjsMyXXiyMkf8 daA4vskx8I+cFUNPReHRhuvJLZ7FumJknZDPgVdpVbBmmrJzxhEXwbWv8Pk9NLr8 URtlqL4UjjsdLIUBQvu0XCnmLT/ExTOsVw+PJ19I2P7QcbtHbByzePwsqrKbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUuIS+NNm+B3jLkJKrFWs8rPF/3X8wHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhZjBmNDIzLTNiZWQtNDkzOC05 Zjg5LTE1ZTYyNjliZGRjYS8wLzMxMzAzMzJlMzEzNzMwMmUzMTM4MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM2MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqrowDQYJ KoZIhvcNAQELBQADggEBAFwTXOtFg1EwVwIG6OEoeC8TmLJBCFbMRwBYZD1pPf8w JUzMy4OelM6kdMkOMZ/tzODldY93YFrBU1qRj/KllagX19L+q3eNRj3TUpD6fY14 Srszgc652fRfKk0eDvLoqNbEOnT5AbDAoQMCyGfWKdkWItrb9frLqkg4yPG+qkEP qy+3KEWvvWU3gAz7dRsu9dWvP8htwpKKHT47IY6R7tVJVs4u+C/mI8f61hOnCEIT alRB11aa1Me33WPFlw5f/leufbOdLhaCf3EDECJLcnQhHXJAN8dA8vipK5ojkt4v IjX4wSL+4PDCaenAOAScl+IEcO2FYthkuAxWh0a1AWI= -----END CERTIFICATE-----Generated at Wed May 14 13:48:56 2025 by rpki-client