$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa File: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (raw, json) Hash identifier: ci8t0ILh1Ova+hNzTpVDTj7iYWLpzQvv8ukLiURZK1o= Subject key identifier: D5:D0:B5:9B:3D:E9:59:E4:40:25:9F:0A:5B:60:A2:89:A1:B0:A5:27 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 467FEDC058BDB2339CC885E17D6642686160C869 Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa Signing time: Fri 13 Jun 2025 09:02:07 +0000 ROA not before: Fri 13 Jun 2025 08:57:07 +0000 ROA not after: Fri 12 Jun 2026 09:02:07 +0000 asID: 140407 IP address blocks: 103.151.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 13:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7f:ed:c0:58:bd:b2:33:9c:c8:85:e1:7d:66:42:68:61:60:c8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Jun 13 08:57:07 2025 GMT Not After : Jun 12 09:02:07 2026 GMT Subject: CN=D5D0B59B3DE959E440259F0A5B60A289A1B0A527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4f:3d:98:23:35:ab:40:cc:2d:91:a4:16:a9: be:89:a6:d7:a2:90:f8:a6:c0:6a:e9:b9:40:05:d6: 43:de:82:5c:c9:20:aa:3e:13:63:d0:04:46:0d:41: 9c:77:8b:07:5f:b9:96:28:8d:6a:32:30:1e:b0:76: d9:57:2f:6e:f9:51:88:e6:71:00:6c:1c:58:1a:64: da:08:30:8d:91:08:54:c8:2e:29:d7:aa:01:ec:c7: 5c:47:29:55:8c:35:ff:1b:92:f2:6a:33:d4:91:30: 1c:f6:60:d8:83:2d:41:38:6b:fd:0a:c1:4c:ac:df: 01:b3:37:c2:22:ee:6e:34:b0:52:f5:31:44:eb:62: d8:1f:4f:38:e1:e1:e2:d3:fd:7f:d3:32:b3:c1:98: 10:42:29:4d:f3:2a:81:31:85:1c:f7:18:f6:84:47: 55:a4:15:e5:17:5c:69:2d:d5:ac:ed:80:15:16:27: 99:3f:90:41:7a:78:6d:c3:ee:8a:11:76:e3:33:8f: 24:4f:da:86:ea:0c:dc:3e:5d:ba:19:98:86:00:d5: 50:c1:41:da:ab:e8:dc:63:42:35:01:4b:d4:9c:cd: cb:11:f8:52:6d:6e:35:f9:95:3d:ab:e2:dd:be:a4: 6e:2a:5a:60:09:ae:31:ee:f0:2d:df:ea:ff:f1:ed: 7e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D0:B5:9B:3D:E9:59:E4:40:25:9F:0A:5B:60:A2:89:A1:B0:A5:27 X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.32.0/24 Signature Algorithm: sha256WithRSAEncryption 37:9b:01:e9:d0:c5:e3:d0:62:7f:c2:70:2f:b9:82:98:1e:08: ba:85:d5:78:17:59:c6:29:42:21:d0:e3:74:b6:bc:cb:2a:8f: d1:ad:71:8d:9d:6e:d0:ab:0f:3b:3a:42:28:4a:6a:f2:be:54: 39:46:23:e3:f2:d0:1e:e3:85:24:bf:fc:83:82:0d:7a:b7:06: a9:29:8a:a7:f0:eb:22:44:4b:6d:9c:2e:2d:66:d0:eb:3b:9f: 84:3d:95:db:b4:6f:3d:0b:30:c9:e6:66:f8:17:53:94:79:06: a7:f0:7c:85:7e:f0:ea:2c:d0:38:70:b5:51:22:3c:20:a0:f7: ca:cf:9c:b4:cf:ce:d9:93:ac:a1:6e:ea:57:13:f1:89:a1:cf: 78:73:e7:0b:de:b6:d5:de:f7:e9:3e:88:dd:2d:6e:36:99:72: dc:c2:03:2e:35:4b:83:9b:b8:a1:3e:ec:22:41:0d:c3:bb:66: e1:84:3c:bb:b9:28:0c:eb:5d:6e:1a:51:60:5a:f0:57:13:e8: 1b:43:70:d2:95:80:1e:b4:34:9b:f5:e3:ad:7c:b7:ab:4f:74: dc:fb:b1:82:d6:63:09:54:5c:f5:58:87:da:d9:40:86:15:4c: 24:72:f7:5d:de:2a:b1:0c:75:0b:fd:35:f3:a3:6a:15:e7:ab: 4a:3b:a5:db -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURn/twFi9sjOcyIXhfWZCaGFgyGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yNTA2MTMwODU3MDdaFw0yNjA2MTIwOTAyMDdaMDMxMTAvBgNV BAMTKEQ1RDBCNTlCM0RFOTU5RTQ0MDI1OUYwQTVCNjBBMjg5QTFCMEE1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvTz2YIzWrQMwtkaQWqb6Jptei kPimwGrpuUAF1kPeglzJIKo+E2PQBEYNQZx3iwdfuZYojWoyMB6wdtlXL275UYjm cQBsHFgaZNoIMI2RCFTILinXqgHsx1xHKVWMNf8bkvJqM9SRMBz2YNiDLUE4a/0K wUys3wGzN8Ii7m40sFL1MUTrYtgfTzjh4eLT/X/TMrPBmBBCKU3zKoExhRz3GPaE R1WkFeUXXGkt1aztgBUWJ5k/kEF6eG3D7ooRduMzjyRP2obqDNw+XboZmIYA1VDB Qdqr6NxjQjUBS9SczcsR+FJtbjX5lT2r4t2+pG4qWmAJrjHu8C3f6v/x7X5hAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1dC1mz3pWeRAJZ8KW2CiiaGwpScwHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1OTZiY2M4LTM4Y2QtNDQzNy04 MGIxLTViYWU5Zjg1NzkzNy8wLzMxMzAzMzJlMzEzNTMxMmUzMzMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5cgMA0GCSqG SIb3DQEBCwUAA4IBAQA3mwHp0MXj0GJ/wnAvuYKYHgi6hdV4F1nGKUIh0ON0trzL Ko/RrXGNnW7Qqw87OkIoSmryvlQ5RiPj8tAe44Ukv/yDgg16twapKYqn8OsiREtt nC4tZtDrO5+EPZXbtG89CzDJ5mb4F1OUeQan8HyFfvDqLNA4cLVRIjwgoPfKz5y0 z87Zk6yhbupXE/GJoc94c+cL3rbV3vfpPojdLW42mXLcwgMuNUuDm7ihPuwiQQ3D u2bhhDy7uSgM611uGlFgWvBXE+gbQ3DSlYAetDSb9eOtfLerT3Tc+7GC1mMJVFz1 WIfa2UCGFUwkcvdd3iqxDHUL/TXzo2oV56tKO6Xb -----END CERTIFICATE-----Generated at Thu Jun 19 20:52:24 2025 by rpki-client