$ rpki-client -vvf repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa File: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (raw, json) Hash identifier: Fo/wu0BFSpF55NefZU/m5we3g29g18juirYZ6ANAiIw= Subject key identifier: CB:32:35:DE:BE:B3:E4:4E:4D:06:C5:B8:21:73:F8:74:0F:68:5E:86 Certificate issuer: /CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Certificate serial: 6502C58E72FA02BA5E3099AD2043EED0828E9B05 Authority key identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa Signing time: Mon 09 Jun 2025 04:00:00 +0000 ROA not before: Mon 09 Jun 2025 03:55:00 +0000 ROA not after: Mon 08 Jun 2026 04:00:00 +0000 asID: 149915 IP address blocks: 103.189.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:02:c5:8e:72:fa:02:ba:5e:30:99:ad:20:43:ee:d0:82:8e:9b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Validity Not Before: Jun 9 03:55:00 2025 GMT Not After : Jun 8 04:00:00 2026 GMT Subject: CN=CB3235DEBEB3E44E4D06C5B82173F8740F685E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:e6:46:af:0b:c7:36:45:bb:5d:01:bb:03: dc:6d:c7:67:d6:69:4e:b2:32:f0:07:55:d2:e9:4d: 30:49:94:4c:37:da:b4:9e:bc:c3:90:64:33:b0:ed: af:7c:27:18:cc:c8:50:c0:a6:d7:81:d0:6f:31:65: 26:52:3e:20:93:c9:9c:d2:dd:7f:db:27:ad:ab:1b: 9b:e2:61:6a:71:44:9e:b8:77:28:32:4a:16:16:a3: 9b:af:8e:db:6b:ea:c3:08:4e:b0:45:1e:b9:bd:8e: a4:e8:de:fb:3b:0c:1e:b7:44:b6:4d:63:dd:14:12: 31:f1:4f:42:59:46:79:dc:73:35:ab:02:fd:54:2f: 33:e9:87:b3:39:19:17:80:9f:40:a6:ea:2a:26:fb: 40:23:d2:c6:c1:8c:d3:62:37:ed:f9:9c:b7:b2:06: 7a:a1:01:f5:19:15:83:5d:68:2a:61:8c:88:ab:71: 56:dc:f0:40:27:e3:32:42:51:40:61:7e:42:94:6a: 40:c6:cc:2a:19:34:60:18:f3:a7:54:ee:03:00:33: 07:fc:38:71:30:fd:0e:55:08:1e:25:5a:f9:d3:a8: 1c:f3:07:fa:b5:03:c0:05:98:fe:2e:89:dc:44:00: 2a:1a:af:24:95:1d:d2:a6:45:c9:6f:fd:5c:9e:78: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:32:35:DE:BE:B3:E4:4E:4D:06:C5:B8:21:73:F8:74:0F:68:5E:86 X509v3 Authority Key Identifier: keyid:80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.254.0/24 Signature Algorithm: sha256WithRSAEncryption 78:33:f6:8d:d0:68:97:c9:61:ab:35:6b:24:4c:27:28:5d:0d: 99:3c:8c:85:f5:8a:ac:04:21:c3:7e:b6:17:85:55:ad:c7:81: 2f:c8:99:bd:26:d8:b8:8b:ac:e3:5e:10:74:31:8b:11:7e:4f: 39:91:2b:35:c8:a7:34:0f:7d:31:38:ed:68:a5:dc:13:e4:bd: 43:cb:af:41:62:41:e6:42:a3:32:05:5f:1b:a4:22:45:9e:a7: 9f:78:df:58:4a:9b:5a:b9:94:82:46:c9:57:9d:8a:3d:4b:9d: ca:0f:2e:3f:6a:5a:23:a1:6f:93:e9:b0:a3:bf:9c:b5:ef:b7: 79:9f:69:5c:2a:62:66:a1:9d:9f:37:03:8d:3c:74:d6:7e:e5: 7e:3b:f4:02:32:ab:0c:68:9b:b4:55:bc:b7:56:83:13:75:a7: 73:98:f4:87:89:80:37:39:f3:c4:61:a0:6e:52:72:d4:b6:32: 2d:29:38:30:c8:bf:f4:ba:f8:b1:b1:94:18:7e:41:2d:fe:67: 92:b4:e4:07:20:6a:44:8e:3d:69:91:a7:4f:64:65:7b:68:50: c3:82:0d:bc:4f:8d:ea:5b:0d:d2:2d:0e:fd:5f:08:18:a7:22: 05:6e:be:be:96:01:4a:b1:b6:8b:67:a5:dd:00:7e:f5:89:62: 2f:9d:f0:46 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZQLFjnL6ArpeMJmtIEPu0IKOmwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVG NDM2RkZERjAeFw0yNTA2MDkwMzU1MDBaFw0yNjA2MDgwNDAwMDBaMDMxMTAvBgNV BAMTKENCMzIzNURFQkVCM0U0NEU0RDA2QzVCODIxNzNGODc0MEY2ODVFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwe+ZGrwvHNkW7XQG7A9xtx2fW aU6yMvAHVdLpTTBJlEw32rSevMOQZDOw7a98JxjMyFDApteB0G8xZSZSPiCTyZzS 3X/bJ62rG5viYWpxRJ64dygyShYWo5uvjttr6sMITrBFHrm9jqTo3vs7DB63RLZN Y90UEjHxT0JZRnncczWrAv1ULzPph7M5GReAn0Cm6iom+0Aj0sbBjNNiN+35nLey BnqhAfUZFYNdaCphjIircVbc8EAn4zJCUUBhfkKUakDGzCoZNGAY86dU7gMAMwf8 OHEw/Q5VCB4lWvnTqBzzB/q1A8AFmP4uidxEACoarySVHdKmRclv/VyeeJoNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUyzI13r6z5E5NBsW4IXP4dA9oXoYwHwYDVR0j BBgwFoAUgDDtikjtmFpd2I6bwcDQFfQ2/98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAwNTZiNC1mMDI3LTQ0ZmEtOTc0ZC00YTFlZDE5MWFlNTYvMC84MDMwRUQ4QTQ4 RUQ5ODVBNUREODhFOUJDMUMwRDAxNUY0MzZGRkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVGNDM2 RkZERi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMDA1NmI0LWYwMjctNDRmYS05 NzRkLTRhMWVkMTkxYWU1Ni8wLzMxMzAzMzJlMzEzODM5MmUzMjM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMxMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvf4wDQYJ KoZIhvcNAQELBQADggEBAHgz9o3QaJfJYas1ayRMJyhdDZk8jIX1iqwEIcN+theF Va3HgS/Imb0m2LiLrONeEHQxixF+TzmRKzXIpzQPfTE47Wil3BPkvUPLr0FiQeZC ozIFXxukIkWep59431hKm1q5lIJGyVedij1LncoPLj9qWiOhb5PpsKO/nLXvt3mf aVwqYmahnZ83A408dNZ+5X479AIyqwxom7RVvLdWgxN1p3OY9IeJgDc588RhoG5S ctS2Mi0pODDIv/S6+LGxlBh+QS3+Z5K05AcgakSOPWmRp09kZXtoUMOCDbxPjepb DdItDv1fCBinIgVuvr6WAUqxtotnpd0AfvWJYi+d8EY= -----END CERTIFICATE-----Generated at Mon Jun 16 19:17:30 2025 by rpki-client