$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa File: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (raw, json) Hash identifier: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo= Subject key identifier: A3:90:E2:6A:DD:FE:80:98:FD:DA:6C:E1:25:45:3F:79:E8:94:F3:83 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 73660F4E2D6267ECD6A679B8A3462FF4AD0F0CD4 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa Signing time: Mon 02 Jun 2025 02:03:01 +0000 ROA not before: Mon 02 Jun 2025 01:58:01 +0000 ROA not after: Mon 01 Jun 2026 02:03:01 +0000 asID: 139989 IP address blocks: 103.148.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:66:0f:4e:2d:62:67:ec:d6:a6:79:b8:a3:46:2f:f4:ad:0f:0c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Jun 2 01:58:01 2025 GMT Not After : Jun 1 02:03:01 2026 GMT Subject: CN=A390E26ADDFE8098FDDA6CE125453F79E894F383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c8:00:89:56:c8:a2:77:a1:40:10:00:6b:b7: 2a:cf:ce:ee:a9:5d:93:0f:ad:a8:7b:9c:35:eb:76: 3d:d3:68:f9:f9:fd:fe:0d:61:f4:f7:3c:97:eb:b6: 54:f1:7d:8c:8f:55:dd:21:7a:ed:c1:87:49:36:9a: de:72:e5:8f:b5:d1:42:80:2f:1c:fa:a8:38:16:49: ea:a6:f7:ab:65:16:da:35:8a:42:c9:18:a5:70:19: fc:29:20:db:7f:1f:f8:b2:af:cb:83:af:61:df:82: 68:37:4e:e7:e0:fa:91:eb:1d:ed:9a:cd:af:d2:44: b8:85:64:94:26:4c:d1:39:a2:ce:9a:66:70:93:3d: b5:b8:c7:ad:4d:19:14:9a:fc:71:0c:7a:bc:a4:78: c6:6f:25:a2:4f:67:9c:53:a2:69:d9:81:33:3e:2b: 94:a3:85:28:a2:c8:3f:dc:bc:d9:23:7f:22:61:6b: 21:98:4f:cb:96:91:9e:4b:29:35:06:47:98:c3:68: 4b:46:01:9b:10:34:28:84:fe:dd:c7:1b:18:b4:45: 23:bb:98:ed:ab:11:59:20:35:46:b8:fa:d9:aa:ca: 6c:65:8b:fc:93:16:9a:99:38:88:10:ac:e2:b7:68: bf:29:a5:a9:8a:7d:f5:28:99:c7:68:5f:b9:15:04: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:90:E2:6A:DD:FE:80:98:FD:DA:6C:E1:25:45:3F:79:E8:94:F3:83 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.77.0/24 Signature Algorithm: sha256WithRSAEncryption 79:97:b0:75:a6:b9:f8:e8:8e:b3:b6:bc:b8:b0:c1:81:4b:30: d3:31:6f:10:20:bd:08:41:bf:8a:27:51:f0:da:17:1c:8a:cf: 8a:43:c1:84:46:03:9c:b1:2b:7b:e3:d9:1b:b8:40:b2:e4:4e: 3f:f4:be:a4:de:a6:8f:6b:f3:96:fb:37:66:4b:dc:ec:39:07: 7c:0a:cd:34:55:59:6f:50:cf:70:0c:73:14:92:dc:ab:a3:50: 7f:ab:b8:7d:ed:31:e7:7c:50:4f:2a:43:17:5b:0d:7c:ba:d3: 1d:b1:20:62:39:6c:6f:a7:51:ae:53:e5:c0:97:ec:c9:dd:19: a4:7c:5f:06:b3:35:17:91:48:63:42:87:25:b7:cb:cd:2e:5e: 2a:a6:25:87:ab:1c:bb:cf:e3:2e:30:2b:54:32:f3:65:a6:0d: 9f:5b:51:e5:4a:21:cf:b5:db:a6:75:93:6a:9f:b6:cd:dd:c3: e8:16:bd:03:0e:58:53:f8:51:e3:57:0c:dc:bc:31:fe:b2:73: 3d:a5:09:59:ef:f3:0c:32:d2:40:33:4c:be:41:a7:ea:c5:85: 49:d3:30:c4:ca:33:36:47:18:15:54:d2:3d:59:c3:b8:70:3c: 72:58:d0:fa:bb:db:13:93:3a:aa:dd:eb:b3:b0:d0:78:14:0e: 1a:54:6c:5f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUc2YPTi1iZ+zWpnm4o0Yv9K0PDNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNTA2MDIwMTU4MDFaFw0yNjA2MDEwMjAzMDFaMDMxMTAvBgNV BAMTKEEzOTBFMjZBRERGRTgwOThGRERBNkNFMTI1NDUzRjc5RTg5NEYzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyACJVsiid6FAEABrtyrPzu6p XZMPrah7nDXrdj3TaPn5/f4NYfT3PJfrtlTxfYyPVd0heu3Bh0k2mt5y5Y+10UKA Lxz6qDgWSeqm96tlFto1ikLJGKVwGfwpINt/H/iyr8uDr2Hfgmg3Tufg+pHrHe2a za/SRLiFZJQmTNE5os6aZnCTPbW4x61NGRSa/HEMerykeMZvJaJPZ5xTomnZgTM+ K5SjhSiiyD/cvNkjfyJhayGYT8uWkZ5LKTUGR5jDaEtGAZsQNCiE/t3HGxi0RSO7 mO2rEVkgNUa4+tmqymxli/yTFpqZOIgQrOK3aL8ppamKffUomcdoX7kVBKBvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUo5Diat3+gJj92mzhJUU/eeiU84MwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMzE3NDZlLWIwZjYtNDgyNy04 YzRlLWI4MTkyZGVjYzM5YS8wLzMxMzAzMzJlMzEzNDM4MmUzNzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RNMA0GCSqG SIb3DQEBCwUAA4IBAQB5l7B1prn46I6ztry4sMGBSzDTMW8QIL0IQb+KJ1Hw2hcc is+KQ8GERgOcsSt749kbuECy5E4/9L6k3qaPa/OW+zdmS9zsOQd8Cs00VVlvUM9w DHMUktyro1B/q7h97THnfFBPKkMXWw18utMdsSBiOWxvp1GuU+XAl+zJ3RmkfF8G szUXkUhjQoclt8vNLl4qpiWHqxy7z+MuMCtUMvNlpg2fW1HlSiHPtdumdZNqn7bN 3cPoFr0DDlhT+FHjVwzcvDH+snM9pQlZ7/MMMtJAM0y+QafqxYVJ0zDEyjM2RxgV VNI9WcO4cDxyWND6u9sTkzqq3euzsNB4FA4aVGxf -----END CERTIFICATE-----Generated at Mon Jun 16 08:31:42 2025 by rpki-client