$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa File: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (raw, json) Hash identifier: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns= Subject key identifier: 24:D7:8B:67:20:6F:BD:C7:4D:C5:8F:57:07:C4:F1:30:70:46:3C:50 Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 6876C3F33598990A64A27B5DBC0659044AB4CC9D Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa Signing time: Mon 19 May 2025 07:00:00 +0000 ROA not before: Mon 19 May 2025 06:55:00 +0000 ROA not after: Mon 18 May 2026 07:00:00 +0000 asID: 149398 IP address blocks: 103.182.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:76:c3:f3:35:98:99:0a:64:a2:7b:5d:bc:06:59:04:4a:b4:cc:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: May 19 06:55:00 2025 GMT Not After : May 18 07:00:00 2026 GMT Subject: CN=24D78B67206FBDC74DC58F5707C4F13070463C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:ae:93:97:ab:bb:fc:dd:e1:2a:d3:57:82: 79:86:a8:b4:18:0a:ff:f7:84:84:85:0d:b8:d0:5d: c4:16:71:ca:00:4c:6a:24:10:65:25:31:ce:ef:ed: 87:16:ff:5b:b0:0c:56:e2:34:72:99:82:75:d1:e0: 84:35:0e:07:36:d5:78:5c:61:65:12:f7:2e:bd:5e: 5f:d6:c4:ec:b1:1b:1c:8b:17:e7:2a:2b:60:26:b2: d2:b3:9a:ea:0d:84:63:3b:2d:b2:4f:f3:37:90:d5: f5:fe:eb:84:61:b7:e3:d2:aa:43:09:c9:40:5f:85: 82:3f:d7:19:7a:11:ac:7b:52:60:a3:48:00:e9:0f: 8b:4c:a3:4e:f7:61:81:65:a0:f3:67:0c:87:27:b4: 44:d8:b1:83:4d:d8:84:e4:93:9c:95:d5:46:1b:5a: b1:9b:7d:99:d0:5f:f5:bd:09:d0:f2:89:3f:6b:7b: fa:fd:7c:6a:5e:f1:c8:10:b1:3f:1f:02:a2:04:d5: a7:b5:29:f1:20:12:3d:37:d1:a4:d6:c1:08:b3:a2: e7:3f:f9:ae:4a:c4:92:25:55:19:57:e3:e1:28:ea: e9:3c:10:99:88:e3:e8:0c:76:5e:7a:60:45:b5:28: a2:a7:6f:03:61:8f:ee:57:0d:fd:68:52:2c:0d:19: 5b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D7:8B:67:20:6F:BD:C7:4D:C5:8F:57:07:C4:F1:30:70:46:3C:50 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.76.0/24 Signature Algorithm: sha256WithRSAEncryption 44:ee:e7:6f:1b:26:a3:a5:29:ea:e4:74:3d:8e:31:fb:e3:59: 42:5e:cd:9a:6e:99:1b:ad:77:f3:23:04:e7:37:15:16:fc:96: aa:34:59:f4:24:3a:b5:4b:56:c7:90:6b:bd:79:49:0d:34:3b: b4:00:11:7f:6c:d8:54:6a:01:a1:99:a7:35:76:52:4d:db:a0: 61:51:2e:1d:0a:bb:bc:8a:8e:c6:8e:ef:f2:f6:07:42:84:39: f3:0a:85:e9:be:9a:07:cf:b2:bf:93:45:99:1a:6c:55:e6:07: d9:ae:ad:60:fc:5b:95:b5:ba:67:ba:d4:24:c7:94:da:64:f3: d3:26:65:40:fe:da:17:93:1a:1b:33:bd:ed:d5:a6:63:61:b9: 6d:c2:90:f5:f9:ec:27:9f:db:80:31:94:de:32:56:61:fc:ca: 23:e6:5f:de:42:d6:b7:fc:53:5a:c6:43:1f:b2:3f:77:70:6b: f1:18:44:f5:6c:27:e9:54:18:9f:10:a2:c4:ea:e9:8d:dd:90: d6:9c:d3:c2:34:ab:d5:b1:62:02:30:41:52:9c:20:54:6b:47: a9:4b:98:cb:36:50:f5:50:ad:b0:f7:76:03:bf:11:d9:59:46: e8:3a:32:ac:ff:a4:60:20:05:bd:95:e8:93:f2:6d:f8:91:39: e5:a4:a4:2f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaHbD8zWYmQpkontdvAZZBEq0zJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTA1MTkwNjU1MDBaFw0yNjA1MTgwNzAwMDBaMDMxMTAvBgNV BAMTKDI0RDc4QjY3MjA2RkJEQzc0REM1OEY1NzA3QzRGMTMwNzA0NjNDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/a6Tl6u7/N3hKtNXgnmGqLQY Cv/3hISFDbjQXcQWccoATGokEGUlMc7v7YcW/1uwDFbiNHKZgnXR4IQ1Dgc21Xhc YWUS9y69Xl/WxOyxGxyLF+cqK2AmstKzmuoNhGM7LbJP8zeQ1fX+64Rht+PSqkMJ yUBfhYI/1xl6Eax7UmCjSADpD4tMo073YYFloPNnDIcntETYsYNN2ITkk5yV1UYb WrGbfZnQX/W9CdDyiT9re/r9fGpe8cgQsT8fAqIE1ae1KfEgEj030aTWwQizouc/ +a5KxJIlVRlX4+Eo6uk8EJmI4+gMdl56YEW1KKKnbwNhj+5XDf1oUiwNGVsjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJNeLZyBvvcdNxY9XB8TxMHBGPFAwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkNGRjZGUzLTc1N2YtNDNkNC1h ZGUyLWZmMDg4N2NjMjQ4Ny8wLzMxMzAzMzJlMzEzODMyMmUzNzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7ZMMA0GCSqG SIb3DQEBCwUAA4IBAQBE7udvGyajpSnq5HQ9jjH741lCXs2abpkbrXfzIwTnNxUW /JaqNFn0JDq1S1bHkGu9eUkNNDu0ABF/bNhUagGhmac1dlJN26BhUS4dCru8io7G ju/y9gdChDnzCoXpvpoHz7K/k0WZGmxV5gfZrq1g/FuVtbpnutQkx5TaZPPTJmVA /toXkxobM73t1aZjYbltwpD1+ewnn9uAMZTeMlZh/Moj5l/eQta3/FNaxkMfsj93 cGvxGET1bCfpVBifEKLE6umN3ZDWnNPCNKvVsWICMEFSnCBUa0epS5jLNlD1UK2w 93YDvxHZWUboOjKs/6RgIAW9leiT8m34kTnlpKQv -----END CERTIFICATE-----Generated at Sat Jun 7 15:37:31 2025 by rpki-client