$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa File: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs= Subject key identifier: 46:2F:96:CB:3A:55:38:C7:64:2C:0C:96:E2:BB:D7:EC:2A:2F:AB:A6 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 186E79F5C3F689785FFE5253BAA342BDB423506B Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa Signing time: Mon 16 Jun 2025 04:02:24 +0000 ROA not before: Mon 16 Jun 2025 03:57:24 +0000 ROA not after: Mon 15 Jun 2026 04:02:24 +0000 asID: 48465 IP address blocks: 103.150.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6e:79:f5:c3:f6:89:78:5f:fe:52:53:ba:a3:42:bd:b4:23:50:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Jun 16 03:57:24 2025 GMT Not After : Jun 15 04:02:24 2026 GMT Subject: CN=462F96CB3A5538C7642C0C96E2BBD7EC2A2FABA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:28:45:2d:71:63:3b:6f:4c:24:f9:4a:77:71: 90:43:d1:03:17:71:1d:13:a7:48:4a:d1:fa:4d:51: f1:f0:69:97:21:d4:17:53:5f:fd:2d:ed:55:e6:9d: d9:cc:2c:69:f7:08:e5:ef:b7:62:94:37:47:ca:74: cf:76:ee:cf:6b:ae:56:ab:aa:6a:f8:78:0b:ae:32: f8:1c:d6:f8:4e:62:46:5f:4e:fd:eb:50:57:1a:ca: 2d:7e:d3:40:f1:fd:e3:12:24:e2:29:82:bc:57:70: 82:b9:95:9e:a8:bd:ba:af:62:fc:ee:10:5d:63:3f: 47:e7:ce:cc:00:f8:3b:6f:90:62:fc:5c:7f:61:2b: 40:a6:0a:82:83:ed:6c:c7:a2:06:31:5d:31:73:68: 51:62:83:60:b1:76:cd:32:86:b7:63:d5:33:cc:c8: 66:6f:a6:08:d7:e6:d1:5d:99:89:23:a7:27:bf:53: a6:80:a4:b9:73:ed:be:1b:09:d0:0c:b8:61:60:66: d0:6f:dc:7b:57:98:c2:f4:68:42:3a:fe:e0:8d:2c: 53:c2:a3:75:9e:1b:fc:b5:58:9a:82:a4:e9:7c:e8: 13:34:eb:61:61:35:1a:e4:57:87:32:2f:10:32:36: 53:f3:72:ac:ec:4d:73:5b:83:b9:ad:56:44:fc:ea: b1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2F:96:CB:3A:55:38:C7:64:2C:0C:96:E2:BB:D7:EC:2A:2F:AB:A6 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.148.0/24 Signature Algorithm: sha256WithRSAEncryption b4:47:38:46:10:fd:41:48:a6:b5:53:81:17:dc:87:be:c2:ae: 3a:25:b4:cf:b6:31:18:b7:5d:bb:29:ed:70:61:c2:08:76:88: 9f:29:d9:d2:46:f2:28:7c:49:e1:30:82:33:aa:da:10:b1:37: 62:3e:9d:a7:13:63:b9:a7:c8:d5:71:b7:51:62:15:e8:ea:d0: d2:cd:be:a0:42:a8:51:49:77:08:bb:81:a8:ab:5e:91:56:de: f5:25:d4:21:c3:c6:fc:a8:24:64:2b:24:6d:8c:e5:7c:77:9c: e2:7e:d8:d6:ab:de:fd:40:6e:05:2f:09:8a:ef:45:3e:7f:99: 03:70:da:81:cd:fc:53:ac:ab:c0:b7:14:51:87:fe:d3:fc:47: 37:40:15:e7:4e:6d:09:31:b5:20:1f:15:91:13:38:64:a8:1e: 4d:50:af:0e:4c:e9:37:6d:cf:31:71:d5:f2:ba:04:84:ef:5c: 02:c8:30:5f:73:28:a4:c9:a0:2b:a7:15:9b:ac:ec:47:88:17: c4:eb:dd:76:24:54:54:a5:2e:55:22:62:64:d4:b0:73:9f:d0: 11:0a:e3:54:ce:66:ed:db:13:78:45:47:20:47:56:81:c5:b5: ad:c3:a2:31:0b:85:d2:ce:42:11:54:f6:3e:a5:cd:0b:4e:94: 7b:65:0d:d8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGG559cP2iXhf/lJTuqNCvbQjUGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTA2MTYwMzU3MjRaFw0yNjA2MTUwNDAyMjRaMDMxMTAvBgNV BAMTKDQ2MkY5NkNCM0E1NTM4Qzc2NDJDMEM5NkUyQkJEN0VDMkEyRkFCQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsKEUtcWM7b0wk+Up3cZBD0QMX cR0Tp0hK0fpNUfHwaZch1BdTX/0t7VXmndnMLGn3COXvt2KUN0fKdM927s9rrlar qmr4eAuuMvgc1vhOYkZfTv3rUFcayi1+00Dx/eMSJOIpgrxXcIK5lZ6ovbqvYvzu EF1jP0fnzswA+DtvkGL8XH9hK0CmCoKD7WzHogYxXTFzaFFig2Cxds0yhrdj1TPM yGZvpgjX5tFdmYkjpye/U6aApLlz7b4bCdAMuGFgZtBv3HtXmML0aEI6/uCNLFPC o3WeG/y1WJqCpOl86BM062FhNRrkV4cyLxAyNlPzcqzsTXNbg7mtVkT86rFRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURi+WyzpVOMdkLAyW4rvX7Covq6YwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiZGU5MzZiLTUzY2YtNGIwOC1i NWY3LTJiOTBkZTIxZmU5NC8wLzMxMzAzMzJlMzEzNTMwMmUzMTM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5aUMA0GCSqG SIb3DQEBCwUAA4IBAQC0RzhGEP1BSKa1U4EX3Ie+wq46JbTPtjEYt127Ke1wYcII doifKdnSRvIofEnhMIIzqtoQsTdiPp2nE2O5p8jVcbdRYhXo6tDSzb6gQqhRSXcI u4Goq16RVt71JdQhw8b8qCRkKyRtjOV8d5ziftjWq979QG4FLwmK70U+f5kDcNqB zfxTrKvAtxRRh/7T/Ec3QBXnTm0JMbUgHxWREzhkqB5NUK8OTOk3bc8xcdXyugSE 71wCyDBfcyikyaArpxWbrOxHiBfE6912JFRUpS5VImJk1LBzn9ARCuNUzmbt2xN4 RUcgR1aBxbWtw6IxC4XSzkIRVPY+pc0LTpR7ZQ3Y -----END CERTIFICATE-----Generated at Mon Jun 16 12:20:34 2025 by rpki-client