$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa File: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk= Subject key identifier: 27:86:BA:4B:6C:17:E6:AF:BA:63:ED:44:2F:09:D7:DB:4E:D8:6C:13 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 0F42B1EB783539BC5330FE52D7452349DC0382D9 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa Signing time: Mon 16 Jun 2025 03:02:54 +0000 ROA not before: Mon 16 Jun 2025 02:57:54 +0000 ROA not after: Mon 15 Jun 2026 03:02:54 +0000 asID: 48465 IP address blocks: 103.186.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:42:b1:eb:78:35:39:bc:53:30:fe:52:d7:45:23:49:dc:03:82:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Jun 16 02:57:54 2025 GMT Not After : Jun 15 03:02:54 2026 GMT Subject: CN=2786BA4B6C17E6AFBA63ED442F09D7DB4ED86C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:55:c1:04:5e:aa:f8:c2:04:03:c8:f9:cc: c9:cc:d2:19:a4:bf:e9:64:91:1f:dc:c6:f9:af:90: 91:b8:07:1c:2b:4b:38:1b:44:f0:d4:9f:81:e2:ae: 77:98:dd:9a:b3:b7:7e:7a:f4:b1:0f:0b:8d:df:e8: 08:12:25:bc:43:60:84:e9:63:b9:98:c9:f8:12:aa: 10:b6:e8:50:dc:1a:da:0e:a2:27:37:d4:70:15:1a: 98:2d:d6:0c:08:6f:06:0d:0f:09:36:a1:5e:58:05: 20:4b:42:8e:c8:78:11:80:8d:a3:19:da:d4:58:6c: 3d:83:f1:5d:6d:ae:1e:db:bb:e8:b3:8b:f0:29:ee: 74:14:1e:65:53:ca:15:6f:01:3b:e0:2f:0a:68:06: ec:b5:f4:b3:eb:bb:65:e8:13:19:12:84:dc:1d:31: ec:68:65:1f:e2:00:36:5d:9a:47:d8:80:53:a6:14: f9:35:23:eb:c3:fe:4f:11:48:ef:f2:6a:0f:d6:53: 99:05:d9:2b:3a:79:cf:4c:6c:ca:c0:ff:19:d7:ce: 39:ec:bf:00:2d:d7:9a:c4:df:f5:83:b4:58:66:f2: 9e:c4:d2:40:69:7d:7e:bb:43:20:1f:9e:36:92:86: 77:ac:d5:c7:11:10:f5:06:45:b3:6a:79:f6:a3:de: 1b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:86:BA:4B:6C:17:E6:AF:BA:63:ED:44:2F:09:D7:DB:4E:D8:6C:13 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.200.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:77:74:eb:85:7a:50:1d:e6:56:56:be:69:67:62:17:a8:30: 77:61:23:2e:f1:89:fd:ec:47:53:be:c3:45:80:48:b7:72:26: 01:e8:07:c9:18:95:15:4f:dd:16:b2:1a:ea:57:fc:e1:de:25: a5:f2:e9:48:f1:93:bc:5b:f5:74:7b:b5:c8:35:fd:9f:c9:43: 4e:6c:3d:db:68:32:14:60:e1:fc:a4:1c:ee:62:c5:c1:3f:c5: dd:96:ab:a5:1c:2c:56:fb:8f:cc:d4:6e:11:91:19:8e:93:f0: 04:15:ed:48:58:2b:69:18:4b:9f:2c:74:7c:40:5a:9a:64:87: 96:51:44:cb:39:b1:82:81:13:af:fc:16:09:38:e2:97:65:20: 16:d2:e4:a1:50:8f:da:fe:d7:5c:9f:b8:3a:bb:70:76:c2:8b: 36:41:05:99:83:32:e4:61:72:be:31:f7:7c:61:e0:30:0a:32: f3:0a:66:45:5c:b3:14:db:b6:49:e9:39:4e:70:5d:14:74:82: 64:a0:71:3d:48:3e:1c:91:c7:2e:38:25:9d:3b:dd:47:f7:d2: f9:c7:70:68:36:13:c4:a2:36:06:1b:30:ae:d9:6c:67:fe:f0: 7d:25:47:3c:e4:e9:f8:90:67:93:b1:64:1a:d8:23:4e:fb:93: 4c:07:d3:a1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUD0Kx63g1ObxTMP5S10UjSdwDgtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTA2MTYwMjU3NTRaFw0yNjA2MTUwMzAyNTRaMDMxMTAvBgNV BAMTKDI3ODZCQTRCNkMxN0U2QUZCQTYzRUQ0NDJGMDlEN0RCNEVEODZDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzd1XBBF6q+MIEA8j5zMnM0hmk v+lkkR/cxvmvkJG4BxwrSzgbRPDUn4HirneY3Zqzt3569LEPC43f6AgSJbxDYITp Y7mYyfgSqhC26FDcGtoOoic31HAVGpgt1gwIbwYNDwk2oV5YBSBLQo7IeBGAjaMZ 2tRYbD2D8V1trh7bu+izi/Ap7nQUHmVTyhVvATvgLwpoBuy19LPru2XoExkShNwd MexoZR/iADZdmkfYgFOmFPk1I+vD/k8RSO/yag/WU5kF2Ss6ec9MbMrA/xnXzjns vwAt15rE3/WDtFhm8p7E0kBpfX67QyAfnjaShnes1ccREPUGRbNqefaj3huZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJ4a6S2wX5q+6Y+1ELwnX207YbBMwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5NTc3YzNjLTY2Y2QtNDBhNC1h ZmM1LTZjNmY4YjY2NGE1MS8wLzMxMzAzMzJlMzEzODM2MmUzMjMwMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7rIMA0GCSqG SIb3DQEBCwUAA4IBAQAPd3TrhXpQHeZWVr5pZ2IXqDB3YSMu8Yn97EdTvsNFgEi3 ciYB6AfJGJUVT90WshrqV/zh3iWl8ulI8ZO8W/V0e7XINf2fyUNObD3baDIUYOH8 pBzuYsXBP8XdlqulHCxW+4/M1G4RkRmOk/AEFe1IWCtpGEufLHR8QFqaZIeWUUTL ObGCgROv/BYJOOKXZSAW0uShUI/a/tdcn7g6u3B2wos2QQWZgzLkYXK+Mfd8YeAw CjLzCmZFXLMU27ZJ6TlOcF0UdIJkoHE9SD4ckccuOCWdO91H99L5x3BoNhPEojYG GzCu2Wxn/vB9JUc85On4kGeTsWQa2CNO+5NMB9Oh -----END CERTIFICATE-----Generated at Mon Jun 16 12:16:36 2025 by rpki-client