$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa File: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (raw, json) Hash identifier: Vqh39P+3nWLH6GpYM+8FhU68z1hzASxU3wAlgsuT274= Subject key identifier: 0F:5A:22:9C:F7:F7:55:8B:C0:14:A4:B8:6C:AD:8C:DF:FD:B6:FB:6C Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 16868CB2EA716D4D58B2C26D485F2812E7F122C9 Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa Signing time: Wed 19 Mar 2025 10:00:03 +0000 ROA not before: Wed 19 Mar 2025 09:55:03 +0000 ROA not after: Wed 18 Mar 2026 10:00:03 +0000 asID: 135455 IP address blocks: 103.68.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 14:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:86:8c:b2:ea:71:6d:4d:58:b2:c2:6d:48:5f:28:12:e7:f1:22:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Mar 19 09:55:03 2025 GMT Not After : Mar 18 10:00:03 2026 GMT Subject: CN=0F5A229CF7F7558BC014A4B86CAD8CDFFDB6FB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:78:53:07:e8:c4:3a:9a:20:da:e4:41:1d: 69:23:cd:8e:59:72:ce:cf:79:36:95:c7:33:9f:04: 6b:51:4f:e8:6e:ac:1c:ef:07:34:44:9c:10:51:32: 4f:f9:00:8c:8c:6d:88:b4:51:3b:7b:53:fb:8e:a9: c3:98:ed:f4:10:33:28:cb:42:75:37:0b:d5:8a:f2: 4b:98:cd:5d:9e:f7:81:8c:18:b8:38:b0:a4:93:90: 8d:da:ed:f9:dd:43:4d:9f:f9:42:2a:fd:02:5d:d8: 4d:47:70:c4:c2:29:78:5b:d7:17:f3:c7:50:f6:94: b9:15:0d:96:2f:8e:a5:30:83:c7:1b:3d:ec:94:81: ce:d7:65:29:91:93:dc:83:7a:f8:43:85:80:f6:eb: 72:1e:ae:a3:16:0f:e4:c2:56:96:5c:dc:5a:53:d3: e8:51:2c:d5:82:19:46:e7:26:e7:2c:a0:99:33:7e: d6:e3:48:a4:5a:5a:e5:9d:55:07:67:0f:57:c0:22: 3a:2b:cb:d6:46:c6:b4:08:05:3d:06:5e:13:c3:3b: 39:a0:9f:bf:08:df:70:8f:57:15:68:dd:79:96:87: 5f:05:91:f0:8d:df:d7:69:77:36:3d:0e:77:22:f6: 00:7a:9c:30:87:e3:c1:6f:ea:1a:92:f9:e2:a0:53: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5A:22:9C:F7:F7:55:8B:C0:14:A4:B8:6C:AD:8C:DF:FD:B6:FB:6C X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.136.0/24 Signature Algorithm: sha256WithRSAEncryption a3:da:e7:74:60:d0:ac:76:00:75:6a:ba:81:4e:ec:c7:c4:37: d9:ea:c0:00:14:e9:f1:ac:fa:d6:c7:0f:37:e1:a3:ed:10:91: 4c:55:83:db:ce:ee:14:f0:5f:fb:47:75:57:f5:54:2e:79:49: 02:65:8c:a1:cc:21:5a:90:68:55:d8:f7:4e:f9:47:ca:f5:69: 83:6a:6a:94:58:d2:4d:9d:0a:6d:7b:db:59:1e:e7:65:07:1c: 39:31:df:68:f3:86:29:7e:98:fe:69:d6:8b:ec:f9:30:03:8e: c2:1c:f0:cd:f3:0b:b4:ee:69:b0:38:97:7a:c0:00:0d:f8:bb: 45:c1:19:92:e4:bb:32:b6:b8:81:aa:09:a5:d0:14:5b:59:d0: f5:8d:51:eb:f9:2f:7d:52:a6:90:b8:4d:9b:21:ca:ba:e0:22: a9:e7:1c:19:2b:b8:e5:c9:39:c5:f9:27:49:43:59:72:17:b4: 08:18:e7:5d:de:eb:43:61:a0:f2:71:c5:b3:ad:fd:a9:f2:40: d5:cf:38:aa:d6:62:db:99:0c:05:f3:23:fb:03:e3:b0:91:dd: da:58:90:95:20:a8:f0:de:55:09:50:ec:3f:93:cd:6b:81:5e: b5:21:62:1d:82:5f:44:9f:e0:c3:74:84:0e:ed:01:01:91:09: 59:bd:45:5b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFoaMsupxbU1YssJtSF8oEufxIskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNTAzMTkwOTU1MDNaFw0yNjAzMTgxMDAwMDNaMDMxMTAvBgNV BAMTKDBGNUEyMjlDRjdGNzU1OEJDMDE0QTRCODZDQUQ4Q0RGRkRCNkZCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpt3hTB+jEOpog2uRBHWkjzY5Z cs7PeTaVxzOfBGtRT+hurBzvBzREnBBRMk/5AIyMbYi0UTt7U/uOqcOY7fQQMyjL QnU3C9WK8kuYzV2e94GMGLg4sKSTkI3a7fndQ02f+UIq/QJd2E1HcMTCKXhb1xfz x1D2lLkVDZYvjqUwg8cbPeyUgc7XZSmRk9yDevhDhYD263IerqMWD+TCVpZc3FpT 0+hRLNWCGUbnJucsoJkzftbjSKRaWuWdVQdnD1fAIjory9ZGxrQIBT0GXhPDOzmg n78I33CPVxVo3XmWh18FkfCN39dpdzY9Dnci9gB6nDCH48Fv6hqS+eKgU9WRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUD1oinPf3VYvAFKS4bK2M3/22+2wwHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzZGMxYjA1LTJhNjktNDViMC04 YzQ0LTYyNjc3MjI3NmJkOS8wLzMxMzAzMzJlMzYzODJlMzEzMzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0SIMA0GCSqG SIb3DQEBCwUAA4IBAQCj2ud0YNCsdgB1arqBTuzHxDfZ6sAAFOnxrPrWxw834aPt EJFMVYPbzu4U8F/7R3VX9VQueUkCZYyhzCFakGhV2PdO+UfK9WmDamqUWNJNnQpt e9tZHudlBxw5Md9o84Ypfpj+adaL7PkwA47CHPDN8wu07mmwOJd6wAAN+LtFwRmS 5LsytriBqgml0BRbWdD1jVHr+S99UqaQuE2bIcq64CKp5xwZK7jlyTnF+SdJQ1ly F7QIGOdd3utDYaDyccWzrf2p8kDVzziq1mLbmQwF8yP7A+Owkd3aWJCVIKjw3lUJ UOw/k81rgV61IWIdgl9En+DDdIQO7QEBkQlZvUVb -----END CERTIFICATE-----Generated at Tue Apr 29 08:31:45 2025 by rpki-client