$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa File: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks= Subject key identifier: C9:4E:CD:49:82:88:17:CA:A4:0D:7C:31:A2:3C:85:F4:32:74:71:CD Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 7BC8DCF1F2EAAB60B73A27006BDEFE80529A67BA Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa Signing time: Mon 16 Jun 2025 04:02:24 +0000 ROA not before: Mon 16 Jun 2025 03:57:24 +0000 ROA not after: Mon 15 Jun 2026 04:02:24 +0000 asID: 48465 IP address blocks: 103.150.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c8:dc:f1:f2:ea:ab:60:b7:3a:27:00:6b:de:fe:80:52:9a:67:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Jun 16 03:57:24 2025 GMT Not After : Jun 15 04:02:24 2026 GMT Subject: CN=C94ECD49828817CAA40D7C31A23C85F4327471CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:02:c4:8d:22:6a:0b:7e:59:8b:9b:b0:60: b2:69:bb:be:00:e4:49:ea:cb:b9:a8:84:93:ba:e4: 85:40:36:60:c9:ba:35:67:5d:e5:d3:41:f0:a2:4f: 13:23:e3:c5:dc:3a:4b:4d:8f:b1:a4:9b:42:32:77: 67:d1:52:16:e5:fb:ab:ad:28:8b:6f:24:00:5d:4e: 9f:88:c3:71:d4:5e:5d:a3:65:d4:64:c8:6d:9a:8a: 46:2a:08:ea:02:67:56:3a:2a:6c:2e:69:06:a9:4a: f6:27:18:ea:16:60:ba:f7:4f:03:12:f6:7b:85:2c: 63:d4:db:16:5d:ab:ad:ed:4b:76:a2:f9:0d:b2:37: e5:74:dd:ce:0e:75:68:59:a9:ae:37:3e:e6:14:26: 0a:a7:44:fc:66:6b:bb:e8:1d:dc:30:cd:53:11:af: 25:dc:ca:18:7e:1c:dc:1e:8b:d2:2a:db:73:c2:d7: 7c:3e:8f:08:fb:16:c0:67:ad:4b:01:f3:f3:d8:30: 51:8d:b5:24:6e:d5:98:12:08:07:87:86:a5:59:86: e8:f3:97:ba:e4:39:ea:05:e5:0d:d8:b5:4a:9a:bc: 5c:23:ea:dd:5f:c8:4d:db:da:bb:e7:26:82:59:d2: cf:5f:d3:9f:87:66:0b:e9:7a:9d:00:df:70:84:44: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4E:CD:49:82:88:17:CA:A4:0D:7C:31:A2:3C:85:F4:32:74:71:CD X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.149.0/24 Signature Algorithm: sha256WithRSAEncryption 26:8a:ba:b1:68:47:ce:d5:f5:41:89:a3:89:c9:35:d5:01:4c: d3:56:0c:eb:7c:84:e3:40:88:9b:c0:08:02:79:18:22:7a:9b: f1:6c:bf:a8:42:03:86:6f:99:e7:7f:7a:26:d1:56:a6:f6:1d: 38:cf:e2:0a:92:58:e8:52:e3:42:e6:71:01:66:7b:b9:92:fc: 0b:7e:d9:27:df:e0:ac:98:70:30:5e:f5:c1:30:76:55:6f:00: a8:37:d9:76:88:03:9d:8d:d9:d2:84:f3:f8:30:14:dc:87:7d: 6c:b8:ed:0c:7f:56:7d:18:f9:a3:f3:3f:41:9a:df:19:75:45: 72:14:c6:2f:72:28:b3:bb:04:75:57:ec:d9:dd:a4:bf:81:83: 04:c6:25:00:a5:57:b4:66:db:b4:15:00:47:02:d5:dd:1a:3a: 9a:fb:67:43:16:71:1d:33:5c:1d:9b:8b:22:2c:d0:f3:d9:4b: ef:26:3f:05:1e:57:74:f8:8a:1d:ec:5d:db:ec:eb:7e:3e:ec: 2f:b8:46:02:21:ca:d6:6a:f7:9b:04:8b:fa:b7:17:70:b5:53: f1:d3:5f:8f:33:ae:3c:e0:f6:1d:44:9d:57:cb:84:78:c0:b8: 4b:8f:0f:93:15:77:d4:b3:b5:f3:40:64:46:af:4c:70:fc:8c: 59:87:33:a5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUe8jc8fLqq2C3OicAa97+gFKaZ7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTA2MTYwMzU3MjRaFw0yNjA2MTUwNDAyMjRaMDMxMTAvBgNV BAMTKEM5NEVDRDQ5ODI4ODE3Q0FBNDBEN0MzMUEyM0M4NUY0MzI3NDcxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSALEjSJqC35Zi5uwYLJpu74A 5Enqy7mohJO65IVANmDJujVnXeXTQfCiTxMj48XcOktNj7Gkm0Iyd2fRUhbl+6ut KItvJABdTp+Iw3HUXl2jZdRkyG2aikYqCOoCZ1Y6KmwuaQapSvYnGOoWYLr3TwMS 9nuFLGPU2xZdq63tS3ai+Q2yN+V03c4OdWhZqa43PuYUJgqnRPxma7voHdwwzVMR ryXcyhh+HNwei9Iq23PC13w+jwj7FsBnrUsB8/PYMFGNtSRu1ZgSCAeHhqVZhujz l7rkOeoF5Q3YtUqavFwj6t1fyE3b2rvnJoJZ0s9f05+HZgvpep0A33CERG61AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyU7NSYKIF8qkDXwxojyF9DJ0cc0wHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiZGU5MzZiLTUzY2YtNGIwOC1i NWY3LTJiOTBkZTIxZmU5NC8wLzMxMzAzMzJlMzEzNTMwMmUzMTM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5aVMA0GCSqG SIb3DQEBCwUAA4IBAQAmirqxaEfO1fVBiaOJyTXVAUzTVgzrfITjQIibwAgCeRgi epvxbL+oQgOGb5nnf3om0Vam9h04z+IKkljoUuNC5nEBZnu5kvwLftkn3+CsmHAw XvXBMHZVbwCoN9l2iAOdjdnShPP4MBTch31suO0Mf1Z9GPmj8z9Bmt8ZdUVyFMYv ciizuwR1V+zZ3aS/gYMExiUApVe0Ztu0FQBHAtXdGjqa+2dDFnEdM1wdm4siLNDz 2UvvJj8FHld0+Iod7F3b7Ot+PuwvuEYCIcrWavebBIv6txdwtVPx01+PM6484PYd RJ1Xy4R4wLhLjw+TFXfUs7XzQGRGr0xw/IxZhzOl -----END CERTIFICATE-----Generated at Mon Jun 16 12:19:48 2025 by rpki-client