$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa File: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (raw, json) Hash identifier: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs= Subject key identifier: 1C:4A:B7:56:EC:B2:2B:30:D5:C0:C9:BD:0F:E9:4A:D0:33:AC:3F:17 Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 2FE425C2897ECCF8F1A2B591D8BE8BF9EA8B8E3B Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa Signing time: Mon 02 Jun 2025 01:02:45 +0000 ROA not before: Mon 02 Jun 2025 00:57:45 +0000 ROA not after: Mon 01 Jun 2026 01:02:45 +0000 asID: 132649 IP address blocks: 103.24.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 18:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e4:25:c2:89:7e:cc:f8:f1:a2:b5:91:d8:be:8b:f9:ea:8b:8e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Jun 2 00:57:45 2025 GMT Not After : Jun 1 01:02:45 2026 GMT Subject: CN=1C4AB756ECB22B30D5C0C9BD0FE94AD033AC3F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:d3:f9:24:ee:47:58:20:bb:82:e1:1c:a0: 54:16:82:05:0d:69:20:b9:a5:fb:9f:7f:7d:9d:75: 4f:70:ce:8e:58:bb:05:16:be:d2:1e:dc:26:ab:e7: 86:8b:32:88:2a:78:61:df:0f:e1:d3:5a:e9:5e:75: 11:b7:b0:9a:40:fd:68:6a:bc:d7:c9:3c:0a:0c:a1: cc:32:4b:74:98:08:a1:35:39:5e:9e:e5:29:78:c0: 36:4e:02:85:be:16:07:84:2b:4e:32:9c:be:c9:a7: ef:77:24:fb:79:d2:8c:4f:46:e7:84:d9:67:37:16: e4:fc:a0:d9:79:cc:a7:8c:fa:38:87:1d:c6:50:7d: 87:22:09:f3:45:d9:40:7a:0d:43:c5:e3:ca:e3:b3: bc:df:3b:06:09:f3:05:21:ee:86:02:f8:72:51:79: 4d:eb:7a:d4:00:4d:b6:34:80:f0:0b:e1:79:52:21: 88:e4:35:4e:39:f1:d3:9b:1a:95:0d:3d:a1:4d:7b: d1:91:fd:e7:98:4c:32:a1:91:b1:e1:4c:18:08:8b: b0:9f:2c:fd:e3:01:0c:86:e9:7e:22:10:39:2f:fe: e0:53:a2:cd:99:dd:d9:76:bd:54:8b:bc:d8:cc:a0: a8:ea:cb:2d:b7:04:0d:27:46:84:b2:b3:0b:fb:0f: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4A:B7:56:EC:B2:2B:30:D5:C0:C9:BD:0F:E9:4A:D0:33:AC:3F:17 X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.212.0/24 Signature Algorithm: sha256WithRSAEncryption 90:67:06:d9:e6:7d:24:6f:cd:cf:2d:8e:31:63:f4:23:af:8a: 62:43:93:b1:c3:ce:f7:5b:26:6a:81:3d:de:62:35:b3:c4:98: 11:5f:cb:b8:c9:e4:18:bf:4f:b2:ed:a1:ef:51:c7:d4:d6:65: 21:dd:17:a8:64:4f:98:af:22:89:7c:4a:b9:14:9c:cb:9f:2b: 15:c2:37:66:44:7a:1c:88:3f:66:9b:76:27:09:d7:2d:d1:72: a0:32:74:66:fe:c9:33:bf:ac:12:83:67:bc:26:1f:d1:f2:86: cf:a0:7a:e4:73:ef:b1:df:01:ff:84:13:c8:f6:c9:6b:4a:36: 48:9d:8b:99:c4:43:bb:0f:42:a8:78:20:7d:84:32:f3:6a:5a: e1:ac:b4:2b:07:40:ef:dd:9a:02:19:c1:92:3a:08:70:81:1f: 15:6f:15:e3:8f:0b:24:f8:92:f3:55:a3:d2:77:38:5c:fd:d7: 85:a2:85:4c:3e:00:69:06:8d:0b:1e:8e:8b:1f:9d:d0:bc:e4: 0f:50:26:93:b9:62:d7:69:0d:cb:2b:69:a0:89:51:2b:e6:f9: 13:23:4f:6e:6b:59:78:7a:4e:18:b8:32:9b:a9:b7:76:a4:92: 09:f1:17:a1:39:93:c0:ae:77:09:a2:83:3c:22:10:de:f2:15: bc:af:52:74 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUL+Qlwol+zPjxorWR2L6L+eqLjjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTA2MDIwMDU3NDVaFw0yNjA2MDEwMTAyNDVaMDMxMTAvBgNV BAMTKDFDNEFCNzU2RUNCMjJCMzBENUMwQzlCRDBGRTk0QUQwMzNBQzNGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdYdP5JO5HWCC7guEcoFQWggUN aSC5pfuff32ddU9wzo5YuwUWvtIe3Car54aLMogqeGHfD+HTWuledRG3sJpA/Whq vNfJPAoMocwyS3SYCKE1OV6e5Sl4wDZOAoW+FgeEK04ynL7Jp+93JPt50oxPRueE 2Wc3FuT8oNl5zKeM+jiHHcZQfYciCfNF2UB6DUPF48rjs7zfOwYJ8wUh7oYC+HJR eU3retQATbY0gPAL4XlSIYjkNU458dObGpUNPaFNe9GR/eeYTDKhkbHhTBgIi7Cf LP3jAQyG6X4iEDkv/uBTos2Z3dl2vVSLvNjMoKjqyy23BA0nRoSyswv7DzZHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUHEq3VuyyKzDVwMm9D+lK0DOsPxcwHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlNDZhMzA1LWRmNzctNDU4Ny04 NzAzLWE5MDVjNTM3NzlhYy8wLzMxMzAzMzJlMzIzNDJlMzIzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxjUMA0GCSqG SIb3DQEBCwUAA4IBAQCQZwbZ5n0kb83PLY4xY/Qjr4piQ5Oxw873WyZqgT3eYjWz xJgRX8u4yeQYv0+y7aHvUcfU1mUh3ReoZE+YryKJfEq5FJzLnysVwjdmRHociD9m m3YnCdct0XKgMnRm/skzv6wSg2e8Jh/R8obPoHrkc++x3wH/hBPI9slrSjZInYuZ xEO7D0KoeCB9hDLzalrhrLQrB0Dv3ZoCGcGSOghwgR8VbxXjjwsk+JLzVaPSdzhc /deFooVMPgBpBo0LHo6LH53QvOQPUCaTuWLXaQ3LK2mgiVEr5vkTI09ua1l4ek4Y uDKbqbd2pJIJ8RehOZPArncJooM8IhDe8hW8r1J0 -----END CERTIFICATE-----Generated at Mon Jun 9 09:04:31 2025 by rpki-client