$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa File: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: +ZHf279OS2MHjAeCxjl0QBmwTayFhrDzO/892nI5F/c= Subject key identifier: 05:B9:35:03:9C:70:20:5B:FA:33:8D:16:7B:28:B3:9B:11:2E:AF:4A Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E Certificate serial: 6167670858DFB205E2D42BAFB6F1C638F11D0282 Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa Signing time: Tue 10 Jun 2025 18:00:01 +0000 ROA not before: Tue 10 Jun 2025 17:55:01 +0000 ROA not after: Tue 09 Jun 2026 18:00:01 +0000 asID: 23679 IP address blocks: 103.238.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 16:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:67:67:08:58:df:b2:05:e2:d4:2b:af:b6:f1:c6:38:f1:1d:02:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E Validity Not Before: Jun 10 17:55:01 2025 GMT Not After : Jun 9 18:00:01 2026 GMT Subject: CN=05B935039C70205BFA338D167B28B39B112EAF4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:30:d7:cc:db:22:5f:73:77:b4:f3:63:7b: f5:de:d7:2e:e6:b3:a2:9b:80:3a:51:b6:31:90:7e: 95:e3:d1:42:b0:66:74:55:c4:d7:3f:ce:cb:a6:5e: 8f:54:cd:41:71:49:bf:20:84:b1:0e:d6:49:c1:ec: 90:3a:5c:2e:d7:42:9a:13:8b:fe:06:3c:37:3f:6c: ed:4f:bf:38:25:dd:b2:48:9b:2c:0c:ea:e4:54:50: dc:6a:25:19:4d:03:aa:50:60:c0:30:e7:7a:87:79: 67:23:cc:6b:dd:b5:1a:08:21:1f:7e:ba:f3:69:b4: f5:97:84:6e:fc:6d:70:c2:1e:ff:2b:b6:96:ee:25: dd:c2:79:39:b7:c8:a4:04:33:3c:f3:3e:97:9a:58: b3:59:db:fb:18:22:85:d2:8c:be:19:da:19:4e:b0: f1:6a:72:5a:63:94:a3:57:fd:c6:32:28:02:4c:86: 3c:b9:d1:5d:39:24:8a:5c:46:10:09:6d:41:76:6e: aa:17:8f:96:aa:64:8e:96:02:ca:44:ae:c0:e1:dc: f2:28:23:fb:4c:8f:ae:82:52:fe:85:8d:b2:4e:13: 1a:14:0e:2f:71:8b:01:9c:25:29:a3:c0:a5:43:9a: 0b:ee:ae:5e:11:a0:bf:75:4d:f5:44:c5:ae:4d:5a: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B9:35:03:9C:70:20:5B:FA:33:8D:16:7B:28:B3:9B:11:2E:AF:4A X509v3 Authority Key Identifier: keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.203.0/24 Signature Algorithm: sha256WithRSAEncryption 48:a9:15:d2:6b:16:3f:01:09:d7:de:04:ab:80:41:75:77:27: f7:3a:9a:63:d3:e8:40:58:cc:b2:d3:77:2e:a5:7c:81:3d:b4: 1d:0c:00:d7:6f:08:45:a0:04:9b:fa:22:d7:78:44:1c:4b:66: b7:72:ca:29:fa:3b:31:b1:e8:a8:ed:00:b2:c3:51:ed:a1:c4: ea:ef:43:dd:3b:f0:3b:23:67:37:b8:67:71:65:1d:6c:17:a8: 4b:27:ed:1e:5b:2e:8f:58:82:47:96:9f:84:66:09:e3:e4:eb: 13:d4:40:5f:fa:57:a9:79:0b:48:14:af:0b:ba:ec:fc:55:53: d4:2f:05:6f:4c:1f:5e:48:4e:55:2c:2e:2b:ee:c5:af:fe:41: 65:10:8e:c7:35:c4:6e:99:7f:4e:2d:5b:2e:59:00:be:ff:c0: 90:d4:88:ec:d0:2d:80:58:75:76:5e:dc:60:3d:35:b7:b3:bd: 3c:cf:bf:c6:03:28:25:82:08:a1:9e:c4:73:5a:28:3d:12:53: f1:37:99:0f:ba:94:95:95:cc:b8:d4:2b:f5:b6:5c:12:4f:6f: c7:15:ca:33:58:bf:dc:6b:73:f6:3b:01:6d:cd:89:80:99:5c: 24:0f:2e:37:77:c9:e7:8f:7c:67:6f:05:0b:d3:79:3e:96:f8: 69:90:68:de -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYWdnCFjfsgXi1CuvtvHGOPEdAoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC NTlCRjkxRTAeFw0yNTA2MTAxNzU1MDFaFw0yNjA2MDkxODAwMDFaMDMxMTAvBgNV BAMTKDA1QjkzNTAzOUM3MDIwNUJGQTMzOEQxNjdCMjhCMzlCMTEyRUFGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfDDXzNsiX3N3tPNje/Xe1y7m s6KbgDpRtjGQfpXj0UKwZnRVxNc/zsumXo9UzUFxSb8ghLEO1knB7JA6XC7XQpoT i/4GPDc/bO1Pvzgl3bJImywM6uRUUNxqJRlNA6pQYMAw53qHeWcjzGvdtRoIIR9+ uvNptPWXhG78bXDCHv8rtpbuJd3CeTm3yKQEMzzzPpeaWLNZ2/sYIoXSjL4Z2hlO sPFqclpjlKNX/cYyKAJMhjy50V05JIpcRhAJbUF2bqoXj5aqZI6WAspErsDh3PIo I/tMj66CUv6FjbJOExoUDi9xiwGcJSmjwKVDmgvurl4RoL91TfVExa5NWsWRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBbk1A5xwIFv6M40WeyizmxEur0owHwYDVR0j BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC RjkxRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzMxMzAzMzJlMzIzMzM4MmUzMjMwMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+7LMA0GCSqG SIb3DQEBCwUAA4IBAQBIqRXSaxY/AQnX3gSrgEF1dyf3Oppj0+hAWMyy03cupXyB PbQdDADXbwhFoASb+iLXeEQcS2a3csop+jsxseio7QCyw1HtocTq70PdO/A7I2c3 uGdxZR1sF6hLJ+0eWy6PWIJHlp+EZgnj5OsT1EBf+lepeQtIFK8Luuz8VVPULwVv TB9eSE5VLC4r7sWv/kFlEI7HNcRumX9OLVsuWQC+/8CQ1Ijs0C2AWHV2XtxgPTW3 s708z7/GAyglggihnsRzWig9ElPxN5kPupSVlcy41Cv1tlwST2/HFcozWL/ca3P2 OwFtzYmAmVwkDy43d8nnj3xnbwUL03k+lvhpkGje -----END CERTIFICATE-----Generated at Fri Jun 20 05:04:30 2025 by rpki-client