$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa File: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (raw, json) Hash identifier: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w= Subject key identifier: 2F:FF:E4:8F:FE:E7:7D:F0:EB:C5:FD:8E:F5:A4:31:16:83:8D:6E:20 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 21BB28123C0659262B9A4538FFD287119E4DA8A2 Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa Signing time: Mon 02 Jun 2025 02:04:53 +0000 ROA not before: Mon 02 Jun 2025 01:59:53 +0000 ROA not after: Mon 01 Jun 2026 02:04:53 +0000 asID: 139998 IP address blocks: 103.148.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 01:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bb:28:12:3c:06:59:26:2b:9a:45:38:ff:d2:87:11:9e:4d:a8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Jun 2 01:59:53 2025 GMT Not After : Jun 1 02:04:53 2026 GMT Subject: CN=2FFFE48FFEE77DF0EBC5FD8EF5A43116838D6E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:71:57:04:e8:76:f1:97:b3:a8:2c:0c:c0:bd: bb:0f:cb:1d:77:4c:2e:d4:d7:f5:82:cf:08:b8:7f: df:31:8f:f3:1a:57:08:dc:11:0c:b9:92:d2:79:e8: 24:70:40:1c:6a:6e:57:e1:5e:98:25:8c:9f:be:94: 7f:d9:d1:7e:fb:c2:fd:4b:66:f1:e4:c5:4c:50:90: 38:75:d3:d5:15:f1:13:42:6c:78:68:59:49:d3:0b: 33:8a:5d:3e:7d:8e:c1:3f:2c:53:c8:d5:36:0f:82: 62:7c:81:37:e7:b2:a3:76:6d:d7:c0:46:31:1b:6b: 0a:0c:b5:5e:c4:be:76:d9:95:1f:d5:18:a9:1a:6c: 0b:4a:cb:c3:b9:33:24:ff:c8:e5:52:52:2c:5d:da: 64:f4:d2:cd:e2:6f:2d:0a:81:51:75:86:54:22:d3: 9c:0e:dc:91:d0:f1:d6:46:60:fd:40:f8:63:57:91: e1:86:f2:5a:cd:1e:31:63:e0:49:14:a3:a7:3c:f5: 51:31:29:9f:ea:e9:82:51:6d:8f:00:63:e8:82:71: 76:0d:93:76:d6:2b:e1:57:2d:dc:2b:25:99:0b:f1: 45:34:60:c4:98:ba:36:b5:43:b1:d7:b7:c0:a1:c6: 39:77:a9:8a:23:39:9d:5a:77:c5:32:77:02:f5:2d: 1e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FF:E4:8F:FE:E7:7D:F0:EB:C5:FD:8E:F5:A4:31:16:83:8D:6E:20 X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.198.0/23 Signature Algorithm: sha256WithRSAEncryption 12:89:c2:eb:af:a0:46:38:5e:fe:e2:09:94:fd:c7:0a:f8:78: 86:56:9a:4b:61:45:a7:30:73:44:21:cf:cc:77:f8:34:83:7b: 4a:f9:19:2d:1a:65:61:d9:3e:47:40:7a:d2:d3:fe:5a:61:98: 57:dd:ce:e2:ed:fe:8d:08:a4:97:ed:05:d1:ea:09:46:7e:f4: 4a:72:bf:ff:98:2c:cc:5e:60:b2:45:82:49:de:af:84:36:6e: 3a:d8:11:1c:ab:6f:a7:32:f8:72:7e:eb:02:02:fa:f2:81:91: 34:5f:da:03:c6:fc:f0:79:37:d7:b6:b4:9e:85:af:8c:cc:d5: 65:8b:aa:1f:da:ab:27:a9:96:ab:cf:cc:57:29:1c:ff:27:6f: 81:ce:2d:02:d4:4d:af:84:06:43:ab:fa:4c:8e:a8:96:cb:4b: ee:05:65:49:f2:84:9d:54:e8:97:d2:6e:49:b8:49:66:50:b2: ad:f9:08:a5:81:56:b5:7e:99:67:c2:b9:d3:d4:a7:15:f4:27: 18:58:01:81:9d:ee:03:dc:a5:85:dd:96:78:f2:19:2a:54:6e: f5:8a:7d:74:69:95:58:ff:a4:d1:2c:2c:a2:e4:9b:e4:68:a0: b2:b4:f5:3c:e0:d3:c7:d7:a3:58:ba:51:5f:2a:91:ea:52:fa: b1:59:10:5a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIbsoEjwGWSYrmkU4/9KHEZ5NqKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTA2MDIwMTU5NTNaFw0yNjA2MDEwMjA0NTNaMDMxMTAvBgNV BAMTKDJGRkZFNDhGRkVFNzdERjBFQkM1RkQ4RUY1QTQzMTE2ODM4RDZFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecVcE6Hbxl7OoLAzAvbsPyx13 TC7U1/WCzwi4f98xj/MaVwjcEQy5ktJ56CRwQBxqblfhXpgljJ++lH/Z0X77wv1L ZvHkxUxQkDh109UV8RNCbHhoWUnTCzOKXT59jsE/LFPI1TYPgmJ8gTfnsqN2bdfA RjEbawoMtV7EvnbZlR/VGKkabAtKy8O5MyT/yOVSUixd2mT00s3iby0KgVF1hlQi 05wO3JHQ8dZGYP1A+GNXkeGG8lrNHjFj4EkUo6c89VExKZ/q6YJRbY8AY+iCcXYN k3bWK+FXLdwrJZkL8UU0YMSYuja1Q7HXt8Chxjl3qYojOZ1ad8UydwL1LR6dAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUL//kj/7nffDrxf2O9aQxFoONbiAwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwYzJhMTNiLTFmNDAtNGMwMy1i YzM1LWY2OTYxNTE2ZDRkOS8wLzMxMzAzMzJlMzEzNDM4MmUzMTM5MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlMYwDQYJ KoZIhvcNAQELBQADggEBABKJwuuvoEY4Xv7iCZT9xwr4eIZWmkthRacwc0Qhz8x3 +DSDe0r5GS0aZWHZPkdAetLT/lphmFfdzuLt/o0IpJftBdHqCUZ+9Epyv/+YLMxe YLJFgkner4Q2bjrYERyrb6cy+HJ+6wIC+vKBkTRf2gPG/PB5N9e2tJ6Fr4zM1WWL qh/aqyeplqvPzFcpHP8nb4HOLQLUTa+EBkOr+kyOqJbLS+4FZUnyhJ1U6JfSbkm4 SWZQsq35CKWBVrV+mWfCudPUpxX0JxhYAYGd7gPcpYXdlnjyGSpUbvWKfXRplVj/ pNEsLKLkm+RooLK09Tzg08fXo1i6UV8qkepS+rFZEFo= -----END CERTIFICATE-----Generated at Wed Jun 18 11:53:50 2025 by rpki-client