$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa File: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (raw, json) Hash identifier: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8= Subject key identifier: D1:68:4C:7B:D0:3E:62:1B:78:45:F4:B1:C5:D6:37:B0:22:32:A5:FC Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 343D683D107645AF91A19EDA1C0C19D6C6F4DA0B Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa Signing time: Fri 30 May 2025 05:00:01 +0000 ROA not before: Fri 30 May 2025 04:55:01 +0000 ROA not after: Fri 29 May 2026 05:00:01 +0000 asID: 151518 IP address blocks: 103.236.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 00:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3d:68:3d:10:76:45:af:91:a1:9e:da:1c:0c:19:d6:c6:f4:da:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: May 30 04:55:01 2025 GMT Not After : May 29 05:00:01 2026 GMT Subject: CN=D1684C7BD03E621B7845F4B1C5D637B02232A5FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:96:c4:ad:cf:70:cf:0a:0d:35:ec:76:0c:d7: f7:f3:04:b8:e4:8b:1c:01:60:83:7a:16:43:fc:cb: d7:5c:08:38:04:7f:5f:3a:e5:02:24:50:5c:d0:d7: 26:8a:94:d2:4e:dc:09:8b:ab:2a:b0:29:bb:59:49: f6:76:fc:a3:f5:ee:d3:c3:7c:aa:44:26:2d:d3:3e: 41:37:77:fa:d0:05:82:4d:5d:9b:0a:8e:44:52:3f: ff:4a:47:18:6f:1e:9e:32:26:78:c2:9e:f7:3b:8b: f7:51:da:4c:58:28:a5:e4:0a:0b:4a:45:7a:8a:b2: 73:00:9d:c3:a9:2d:ea:f4:7d:37:53:c8:79:12:54: ff:2d:6f:ab:03:51:07:b2:c6:1e:78:f2:d5:b5:73: 3f:c8:56:6d:52:eb:f0:d6:d3:56:99:7a:58:5c:2d: 89:a2:03:cf:15:2f:00:87:b8:e3:7a:7f:30:b8:ff: 15:8a:76:cb:42:cd:f3:4e:da:5d:9d:d5:71:76:ef: dd:24:d3:83:a1:90:d0:96:02:3a:22:1a:c8:7a:64: d7:f9:b0:b3:a4:5b:17:5e:17:83:04:e3:cc:30:ea: 08:2e:ea:a9:81:2b:9c:5d:46:42:97:50:97:fd:c1: 7b:7f:2b:28:57:0a:18:43:f0:a2:a7:62:e0:02:ae: 63:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:68:4C:7B:D0:3E:62:1B:78:45:F4:B1:C5:D6:37:B0:22:32:A5:FC X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.140.0/24 Signature Algorithm: sha256WithRSAEncryption b5:5a:00:12:0b:00:f6:b2:e6:c3:d6:ab:b6:ab:eb:c8:e2:7d: ca:76:a8:7e:58:da:38:b8:22:5f:6e:08:7f:d6:b2:e9:0e:48: e3:3a:78:8d:23:cd:c7:4a:fd:a9:b7:1c:ed:eb:bc:4e:e6:45: a4:86:85:31:9b:c8:26:ab:57:10:d7:7d:e6:78:c9:7b:b0:c8: 8d:8e:65:b8:59:53:23:4c:2e:15:77:58:dd:1f:f9:17:35:22: f2:24:0d:b5:fc:96:cd:1f:1b:39:09:56:f2:12:8b:b3:f6:ca: 66:74:58:21:16:65:34:36:42:2d:4e:5d:1e:a7:60:ba:5b:2f: 5b:f9:58:4b:84:90:aa:48:b9:db:bb:a0:d6:66:73:58:a7:d2: 57:5b:e8:5d:16:9f:02:31:9d:58:d3:44:6f:74:3d:6f:c9:5e: 2a:36:4e:ac:c0:dd:d2:31:8c:52:2f:98:2f:9c:23:df:21:df: 24:89:10:98:b1:a1:45:78:d8:c0:84:4f:cd:3d:74:b4:11:ba: d9:ac:da:a0:a6:75:96:d4:28:f0:86:6e:8c:44:a5:76:5c:e6: c9:98:17:69:23:f7:c5:ff:01:07:e2:61:6a:b5:39:d4:64:54: 8f:73:4b:d5:0a:93:18:26:f4:1a:f5:10:86:6a:37:65:5b:23: 60:28:56:1c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUND1oPRB2Ra+RoZ7aHAwZ1sb02gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNTA1MzAwNDU1MDFaFw0yNjA1MjkwNTAwMDFaMDMxMTAvBgNV BAMTKEQxNjg0QzdCRDAzRTYyMUI3ODQ1RjRCMUM1RDYzN0IwMjIzMkE1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnlsStz3DPCg017HYM1/fzBLjk ixwBYIN6FkP8y9dcCDgEf1865QIkUFzQ1yaKlNJO3AmLqyqwKbtZSfZ2/KP17tPD fKpEJi3TPkE3d/rQBYJNXZsKjkRSP/9KRxhvHp4yJnjCnvc7i/dR2kxYKKXkCgtK RXqKsnMAncOpLer0fTdTyHkSVP8tb6sDUQeyxh548tW1cz/IVm1S6/DW01aZelhc LYmiA88VLwCHuON6fzC4/xWKdstCzfNO2l2d1XF2790k04OhkNCWAjoiGsh6ZNf5 sLOkWxdeF4ME48ww6ggu6qmBK5xdRkKXUJf9wXt/KyhXChhD8KKnYuACrmOrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU0WhMe9A+Yht4RfSxxdY3sCIypfwwHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNWFmODIyLWJlYTktNDhmMy1h YTEyLWIyNzM3MTYyZmM0Mi8wLzMxMzAzMzJlMzIzMzM2MmUzMTM0MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn7IwwDQYJ KoZIhvcNAQELBQADggEBALVaABILAPay5sPWq7ar68jifcp2qH5Y2ji4Il9uCH/W sukOSOM6eI0jzcdK/am3HO3rvE7mRaSGhTGbyCarVxDXfeZ4yXuwyI2OZbhZUyNM LhV3WN0f+Rc1IvIkDbX8ls0fGzkJVvISi7P2ymZ0WCEWZTQ2Qi1OXR6nYLpbL1v5 WEuEkKpIudu7oNZmc1in0ldb6F0WnwIxnVjTRG90PW/JXio2TqzA3dIxjFIvmC+c I98h3ySJEJixoUV42MCET809dLQRutms2qCmdZbUKPCGboxEpXZc5smYF2kj98X/ AQfiYWq1OdRkVI9zS9UKkxgm9Br1EIZqN2VbI2AoVhw= -----END CERTIFICATE-----Generated at Sat Jun 7 18:15:25 2025 by rpki-client