$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e203633383637.roa File: 3130332e3134332e3132382e302f32342d3234203d3e203633383637.roa (raw, json) Hash identifier: FNrqexyO5PGfaZyWK5L3Tnsg+Y7pZFzaC0Hec4eA2tQ= Subject key identifier: 3A:A8:60:74:A1:9D:18:86:7B:94:75:92:6E:71:EC:17:86:1E:54:1F Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Certificate serial: 31B24E8800D75E415063BDAD1665C5E22E18F1B0 Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e203633383637.roa Signing time: Sat 07 Jun 2025 15:42:10 +0000 ROA not before: Sat 07 Jun 2025 15:37:10 +0000 ROA not after: Sat 06 Jun 2026 15:42:10 +0000 asID: 63867 IP address blocks: 103.143.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 13:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b2:4e:88:00:d7:5e:41:50:63:bd:ad:16:65:c5:e2:2e:18:f1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Validity Not Before: Jun 7 15:37:10 2025 GMT Not After : Jun 6 15:42:10 2026 GMT Subject: CN=3AA86074A19D18867B9475926E71EC17861E541F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:c8:34:67:e7:0b:b6:9f:9f:8a:c6:1c:62: d4:1f:ea:f5:b4:af:31:a1:a4:7f:85:63:69:7e:fb: 4c:41:b2:33:49:43:0c:56:70:06:ab:86:04:dc:59: 35:f6:bd:75:23:8a:7f:81:ae:3d:b1:f6:b7:1c:5a: 8b:58:ef:b8:37:8b:25:35:7c:dc:79:a0:39:14:53: 20:09:11:70:5b:21:f4:9d:c9:6c:ad:4b:42:70:27: d3:72:67:0c:4e:00:0b:73:52:fd:0e:ed:71:5e:0c: be:44:70:ff:1d:a4:ed:47:73:46:6f:38:e0:e3:42: b8:80:8d:92:d6:21:58:6b:81:05:4c:65:df:18:75: ac:c8:30:8c:63:94:b7:df:48:69:20:a6:db:3d:a9: 6b:f0:d7:4c:34:47:f2:19:85:7d:48:f3:3b:7e:00: 52:33:4c:4e:fd:30:c3:1e:35:94:9b:a4:42:d5:38: 65:ae:19:7e:a6:bd:bc:34:b4:e5:e8:93:25:4e:78: b2:2f:c8:fe:d5:1f:c6:8e:ce:2e:4d:32:b5:55:06: e8:51:89:16:9a:d7:44:e4:b8:5b:3d:cd:ba:e9:38: 4c:fa:2d:63:df:f2:84:5c:55:2f:25:d3:7c:bd:e3: 1c:3f:6a:9c:ce:55:95:ea:dc:d1:da:08:1c:5c:a5: d3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A8:60:74:A1:9D:18:86:7B:94:75:92:6E:71:EC:17:86:1E:54:1F X509v3 Authority Key Identifier: keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e203633383637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.128.0/24 Signature Algorithm: sha256WithRSAEncryption bf:91:e6:f5:b9:0a:2b:1a:2f:85:79:81:41:6b:6a:cf:ec:a8: df:ee:1b:7c:36:57:7f:67:4d:5d:9a:ad:3d:2b:21:dd:2d:70: 67:48:22:87:84:30:11:e5:39:0e:65:c3:0d:81:72:60:3b:a4: 91:62:e1:09:07:f4:ab:7e:dd:84:fd:ca:da:e3:db:2b:70:23: ed:ad:24:0f:8f:7e:c4:8c:38:c1:9f:1a:37:7a:3e:70:55:51: 42:33:77:09:5d:7d:fa:08:e9:48:c9:0e:85:52:fc:ec:2a:b9: 17:f2:65:45:04:20:fc:81:5c:61:6a:65:5f:6a:f5:e9:c2:73: e5:6a:40:b8:3e:ff:35:69:02:6c:66:f0:d1:65:70:0e:da:b9: cb:4b:f0:c1:a5:68:3e:88:cc:be:45:4e:f7:23:fb:3b:f4:76: 5f:3b:a1:a6:45:e5:8b:d7:54:15:2e:7a:ac:27:a1:39:21:78: bd:10:17:48:3e:67:82:2d:f5:ef:60:5b:b0:7c:17:d7:d9:eb: fc:5e:6c:1b:33:f0:38:0b:21:33:e8:82:0b:a0:8e:05:42:99: 5e:ce:ae:ac:1b:c0:f2:8a:d3:cc:7c:71:c4:6e:83:3d:f4:38: 4f:68:d0:5c:5f:1d:5b:51:4c:a0:13:45:f8:d9:61:91:1f:92: 54:1d:d6:01 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMbJOiADXXkFQY72tFmXF4i4Y8bAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURG QjQzRERCMjAeFw0yNTA2MDcxNTM3MTBaFw0yNjA2MDYxNTQyMTBaMDMxMTAvBgNV BAMTKDNBQTg2MDc0QTE5RDE4ODY3Qjk0NzU5MjZFNzFFQzE3ODYxRTU0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcV8g0Z+cLtp+fisYcYtQf6vW0 rzGhpH+FY2l++0xBsjNJQwxWcAarhgTcWTX2vXUjin+Brj2x9rccWotY77g3iyU1 fNx5oDkUUyAJEXBbIfSdyWytS0JwJ9NyZwxOAAtzUv0O7XFeDL5EcP8dpO1Hc0Zv OODjQriAjZLWIVhrgQVMZd8YdazIMIxjlLffSGkgpts9qWvw10w0R/IZhX1I8zt+ AFIzTE79MMMeNZSbpELVOGWuGX6mvbw0tOXokyVOeLIvyP7VH8aOzi5NMrVVBuhR iRaa10TkuFs9zbrpOEz6LWPf8oRcVS8l03y94xw/apzOVZXq3NHaCBxcpdOBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOqhgdKGdGIZ7lHWSbnHsF4YeVB8wHwYDVR0j BBgwFoAUKb53H+bXiMpQnnh3h/IYrftD3bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC8yOUJFNzcxRkU2 RDc4OENBNTA5RTc4Nzc4N0YyMThBREZCNDNEREIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURGQjQz RERCMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyZTk2YmYzLWQwMjEtNGQ4NC05 MGQ1LWMyNDU1OGFhNDk1Zi8wLzMxMzAzMzJlMzEzNDMzMmUzMTMyMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4+AMA0GCSqG SIb3DQEBCwUAA4IBAQC/keb1uQorGi+FeYFBa2rP7Kjf7ht8Nld/Z01dmq09KyHd LXBnSCKHhDAR5TkOZcMNgXJgO6SRYuEJB/Srft2E/cra49srcCPtrSQPj37EjDjB nxo3ej5wVVFCM3cJXX36COlIyQ6FUvzsKrkX8mVFBCD8gVxhamVfavXpwnPlakC4 Pv81aQJsZvDRZXAO2rnLS/DBpWg+iMy+RU73I/s79HZfO6GmReWL11QVLnqsJ6E5 IXi9EBdIPmeCLfXvYFuwfBfX2ev8XmwbM/A4CyEz6IILoI4FQplezq6sG8DyitPM fHHEboM99DhPaNBcXx1bUUygE0X42WGRH5JUHdYB -----END CERTIFICATE-----Generated at Mon Jun 16 13:30:43 2025 by rpki-client