$ rpki-client -vvf repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa File: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (raw, json) Hash identifier: 6gEpief7n0b1o5LDXUhCiEL/rkB2mrhMUs19uxqg/vs= Subject key identifier: E1:FF:6A:B5:D1:8B:FD:E6:D7:9E:1F:61:D2:6D:F9:80:60:A6:3C:F5 Certificate issuer: /CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Certificate serial: 07C89397E5912D06B29D94E9CDF5D21C27B5A4A0 Authority key identifier: D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa Signing time: Thu 22 May 2025 04:31:23 +0000 ROA not before: Thu 22 May 2025 04:26:23 +0000 ROA not after: Thu 21 May 2026 04:31:23 +0000 asID: 149688 IP address blocks: 103.185.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 01:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c8:93:97:e5:91:2d:06:b2:9d:94:e9:cd:f5:d2:1c:27:b5:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Validity Not Before: May 22 04:26:23 2025 GMT Not After : May 21 04:31:23 2026 GMT Subject: CN=E1FF6AB5D18BFDE6D79E1F61D26DF98060A63CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fe:47:44:63:eb:60:e7:76:2e:f9:b7:f9:99: f9:54:63:ca:f4:b3:66:5b:57:07:64:93:d2:21:8d: 3e:5d:01:2b:48:72:8c:96:b4:33:a6:a8:e8:03:89: 1b:de:54:a4:34:49:bc:c2:10:2f:31:60:b7:ab:1e: 75:33:92:9e:05:92:c0:7b:45:04:76:28:19:d9:70: 4c:de:95:4c:f3:d7:96:71:ee:ce:9d:9e:3c:a5:61: c3:af:8f:11:f8:df:24:00:72:2e:fa:f5:b4:9f:2b: c4:9e:61:3e:6c:26:c9:fa:ba:f7:b4:96:a0:7a:31: 27:6e:93:fb:e1:82:d6:f3:9c:c3:74:e0:d2:fe:72: 1e:f0:09:be:b1:c1:74:73:f9:bc:ab:5b:94:09:61: bd:9b:55:31:b6:30:17:47:41:65:0c:9d:56:d3:34: ab:55:35:34:24:c8:c7:79:d9:b5:50:2e:4f:d3:f1: d6:d8:b2:4f:27:c6:08:14:d1:50:d1:26:6a:ea:9b: 3f:5f:52:fa:7d:b4:13:66:6a:fa:eb:c8:5f:ef:b1: bc:41:da:7d:b4:93:29:99:f3:bc:6c:2d:51:b0:fc: 00:f5:de:97:06:2b:71:28:dd:17:06:7d:a7:20:52: 5e:5b:1a:ad:3c:80:84:47:4d:31:24:f4:70:fb:a6: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FF:6A:B5:D1:8B:FD:E6:D7:9E:1F:61:D2:6D:F9:80:60:A6:3C:F5 X509v3 Authority Key Identifier: keyid:D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.254.0/23 Signature Algorithm: sha256WithRSAEncryption 84:9f:46:d7:a0:fe:86:41:c0:67:a4:75:e6:be:09:da:9a:65: c1:37:14:c7:7e:96:08:ff:e1:52:9b:aa:58:2e:03:2b:01:e1: 20:15:2e:dd:13:64:f4:26:c4:85:28:c3:81:2d:51:36:31:d7: 06:3f:78:2e:84:98:4a:f6:7e:14:74:4b:19:0c:ed:1d:f6:f3: e3:d5:c9:d2:83:45:24:52:6a:7e:bf:2b:e9:47:c6:e8:7c:38: 70:04:98:0a:19:1e:2d:c7:23:df:2d:41:1f:a1:31:3e:ea:cd: 98:0c:33:51:c7:49:69:87:31:07:d2:06:07:c6:19:4b:7d:fc: 4e:20:b9:1f:b3:31:a0:e1:cc:7f:39:10:65:55:e8:0f:10:46: c7:d4:5a:62:c2:3c:dd:17:f6:6f:d1:c9:2e:0e:ea:cc:27:51: 3b:49:ec:36:79:9e:46:4e:04:93:57:e5:aa:01:ec:b6:a6:e8: 9c:a7:99:6a:dc:67:f6:52:22:89:f8:19:e6:7e:4c:89:63:df: 24:65:e2:bd:b2:0f:eb:89:b6:58:12:1e:a0:52:49:d2:a5:ad: 3c:d6:fb:fb:8d:32:bb:14:8b:1e:d2:c2:c8:25:7c:31:38:2d: 10:76:a2:24:08:7d:93:7b:48:64:18:a3:30:bc:dd:63:a4:25: a2:d8:0d:8a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUB8iTl+WRLQaynZTpzfXSHCe1pKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJB RTJBQTY2ODAeFw0yNTA1MjIwNDI2MjNaFw0yNjA1MjEwNDMxMjNaMDMxMTAvBgNV BAMTKEUxRkY2QUI1RDE4QkZERTZENzlFMUY2MUQyNkRGOTgwNjBBNjNDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc/kdEY+tg53Yu+bf5mflUY8r0 s2ZbVwdkk9IhjT5dAStIcoyWtDOmqOgDiRveVKQ0SbzCEC8xYLerHnUzkp4FksB7 RQR2KBnZcEzelUzz15Zx7s6dnjylYcOvjxH43yQAci769bSfK8SeYT5sJsn6uve0 lqB6MSduk/vhgtbznMN04NL+ch7wCb6xwXRz+byrW5QJYb2bVTG2MBdHQWUMnVbT NKtVNTQkyMd52bVQLk/T8dbYsk8nxggU0VDRJmrqmz9fUvp9tBNmavrryF/vsbxB 2n20kymZ87xsLVGw/AD13pcGK3Eo3RcGfacgUl5bGq08gIRHTTEk9HD7pm69AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU4f9qtdGL/ebXnh9h0m35gGCmPPUwHwYDVR0j BBgwFoAU0ARyx3tCvA4j2Sk2CqVou64qpmgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE3MzY5YS1iY2MxLTQyYmMtYjhiMi1mOTZkNTBkMzc0OWQvMC9EMDA0NzJDNzdC NDJCQzBFMjNEOTI5MzYwQUE1NjhCQkFFMkFBNjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJBRTJB QTY2OC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMTczNjlhLWJjYzEtNDJiYy1i OGIyLWY5NmQ1MGQzNzQ5ZC8wLzMxMzAzMzJlMzEzODM1MmUzMjM1MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzNjM4Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnuf4wDQYJ KoZIhvcNAQELBQADggEBAISfRteg/oZBwGekdea+CdqaZcE3FMd+lgj/4VKbqlgu AysB4SAVLt0TZPQmxIUow4EtUTYx1wY/eC6EmEr2fhR0SxkM7R328+PVydKDRSRS an6/K+lHxuh8OHAEmAoZHi3HI98tQR+hMT7qzZgMM1HHSWmHMQfSBgfGGUt9/E4g uR+zMaDhzH85EGVV6A8QRsfUWmLCPN0X9m/RyS4O6swnUTtJ7DZ5nkZOBJNX5aoB 7Lam6JynmWrcZ/ZSIon4GeZ+TIlj3yRl4r2yD+uJtlgSHqBSSdKlrTzW+/uNMrsU ix7SwsglfDE4LRB2oiQIfZN7SGQYozC83WOkJaLYDYo= -----END CERTIFICATE-----Generated at Mon Jun 16 01:24:27 2025 by rpki-client