$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa File: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (raw, json) Hash identifier: pzNE22UpG1Jt2+Owlsq87q7swwQXq2gUn384QTqpP2M= Subject key identifier: 7C:89:21:EA:CA:0B:EB:83:CD:13:F1:63:8B:CF:EB:9A:CC:60:84:9C Certificate issuer: /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Certificate serial: 6F34D78934F36A82130AFF6BC2633DBF3695C4D7 Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa Signing time: Mon 12 May 2025 08:01:04 +0000 ROA not before: Mon 12 May 2025 07:56:04 +0000 ROA not after: Mon 11 May 2026 08:01:04 +0000 asID: 138123 IP address blocks: 103.132.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:34:d7:89:34:f3:6a:82:13:0a:ff:6b:c2:63:3d:bf:36:95:c4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Validity Not Before: May 12 07:56:04 2025 GMT Not After : May 11 08:01:04 2026 GMT Subject: CN=7C8921EACA0BEB83CD13F1638BCFEB9ACC60849C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b2:82:19:37:db:2c:63:95:46:b5:01:46:49: 75:84:7d:56:1e:f9:12:d9:73:eb:41:50:0d:56:b3: 3b:1b:02:6b:de:cc:1b:f9:75:d3:d8:32:b4:d5:8f: 59:80:27:3f:b1:3d:bb:22:f9:6d:2f:bc:7b:15:d1: a1:cc:13:88:95:57:cd:61:33:6c:a3:f4:c1:e7:05: 6d:05:7b:8e:a4:d7:47:0d:8b:9d:e7:63:2c:4e:cd: 48:bd:a4:b6:f5:2c:60:fe:96:b3:7e:82:f2:84:ca: d6:c5:aa:db:b4:78:67:b3:07:f8:4f:ae:eb:78:94: 7c:d9:24:6c:82:d2:09:53:9a:40:99:dd:c8:dc:3a: b2:e1:86:08:78:e9:3d:e3:17:3e:62:d9:92:6f:e2: fa:5d:b6:0b:b2:22:9c:08:bc:c4:f0:fe:22:44:16: a7:34:a8:50:17:4a:57:ce:42:fa:17:c0:b4:86:e2: cc:af:4c:2c:a9:64:39:c3:aa:e4:e8:08:0e:a6:2e: 3c:18:a3:23:3d:80:c9:a2:4d:c3:67:39:6c:87:9a: 34:d1:d1:65:7f:2c:69:c3:50:92:68:9e:d5:d3:89: f2:4e:28:0b:9e:b7:48:1a:aa:67:6d:90:d4:5e:29: 13:fe:18:02:39:d9:c7:ca:5f:b7:d4:7b:65:48:b4: 0a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:89:21:EA:CA:0B:EB:83:CD:13:F1:63:8B:CF:EB:9A:CC:60:84:9C X509v3 Authority Key Identifier: keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.132.52.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:34:61:f8:a7:87:e4:39:7d:52:69:e6:dc:95:09:42:65:ff: fc:f7:10:97:d7:49:57:51:b3:64:78:64:d2:42:29:15:1f:d0: a0:db:14:53:ec:54:95:fe:f7:b9:3d:72:23:e7:43:7a:48:4d: a9:14:76:fd:5b:e3:a2:f4:9b:25:92:98:c4:47:1a:5a:25:ea: be:97:df:d8:07:d5:e8:c9:fe:ff:2b:b3:8b:6a:b3:7a:22:9d: 05:85:01:7a:a7:77:bf:47:49:5d:2c:ce:b4:60:d1:0c:1d:a7: 07:3e:42:22:64:fd:1c:d7:de:f4:e2:c2:8d:e1:6c:db:bb:44: dc:e6:e7:02:0c:fa:17:66:52:ef:74:43:55:a7:a9:06:8e:b3: e8:3a:ab:da:20:92:3d:84:1f:0e:59:06:4e:92:34:a7:63:2d: c1:1a:01:18:2a:fc:1a:fd:49:35:8b:94:2b:5d:6f:71:29:ac: 5a:7b:19:16:e5:a1:41:10:7d:8a:3d:a2:12:ce:89:19:6b:07: d7:55:3d:5e:11:ef:b9:92:c7:e9:eb:6a:0b:0f:a7:2a:20:20: 99:ea:dd:18:d3:e0:2b:0f:61:03:86:3e:96:37:e3:ea:83:a6: 2b:7c:06:13:b1:4e:f2:f5:a6:ab:0d:ff:82:14:e7:2c:98:fe: 1b:2a:80:76 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbzTXiTTzaoITCv9rwmM9vzaVxNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVC MEMyNjFCNjAeFw0yNTA1MTIwNzU2MDRaFw0yNjA1MTEwODAxMDRaMDMxMTAvBgNV BAMTKDdDODkyMUVBQ0EwQkVCODNDRDEzRjE2MzhCQ0ZFQjlBQ0M2MDg0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtsoIZN9ssY5VGtQFGSXWEfVYe +RLZc+tBUA1WszsbAmvezBv5ddPYMrTVj1mAJz+xPbsi+W0vvHsV0aHME4iVV81h M2yj9MHnBW0Fe46k10cNi53nYyxOzUi9pLb1LGD+lrN+gvKEytbFqtu0eGezB/hP rut4lHzZJGyC0glTmkCZ3cjcOrLhhgh46T3jFz5i2ZJv4vpdtguyIpwIvMTw/iJE Fqc0qFAXSlfOQvoXwLSG4syvTCypZDnDquToCA6mLjwYoyM9gMmiTcNnOWyHmjTR 0WV/LGnDUJJontXTifJOKAuet0gaqmdtkNReKRP+GAI52cfKX7fUe2VItAobAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfIkh6soL64PNE/Fji8/rmsxghJwwHwYDVR0j BBgwFoAUuIEW4YDzLAM2KASoHLDPLrDCYbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTk2ZWQ4OS0yYTE2LTQxNTEtYmY4My01OWRjZTU2MTQ2MGMvMC9CODgxMTZFMTgw RjMyQzAzMzYyODA0QTgxQ0IwQ0YyRUIwQzI2MUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVCMEMy NjFCNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlOTZlZDg5LTJhMTYtNDE1MS1i ZjgzLTU5ZGNlNTYxNDYwYy8wLzMxMzAzMzJlMzEzMzMyMmUzNTMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4Q0MA0GCSqG SIb3DQEBCwUAA4IBAQBqNGH4p4fkOX1SaebclQlCZf/89xCX10lXUbNkeGTSQikV H9Cg2xRT7FSV/ve5PXIj50N6SE2pFHb9W+Oi9JslkpjERxpaJeq+l9/YB9Xoyf7/ K7OLarN6Ip0FhQF6p3e/R0ldLM60YNEMHacHPkIiZP0c19704sKN4Wzbu0Tc5ucC DPoXZlLvdENVp6kGjrPoOqvaIJI9hB8OWQZOkjSnYy3BGgEYKvwa/Uk1i5QrXW9x KaxaexkW5aFBEH2KPaISzokZawfXVT1eEe+5ksfp62oLD6cqICCZ6t0Y0+ArD2ED hj6WN+Pqg6YrfAYTsU7y9aarDf+CFOcsmP4bKoB2 -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:56 2025 by rpki-client