$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa File: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (raw, json) Hash identifier: t4B/eq8AOh4JIkCzcOT+SpN0WxnYYYPczNkJfx4V+XI= Subject key identifier: 04:CE:4A:87:81:F2:99:20:7A:67:9E:AA:C0:CB:1D:E5:55:9B:50:7C Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 730E7D2F7CFFF4F8F89BBD75A7C87A91EF287CC3 Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa Signing time: Tue 27 May 2025 11:01:31 +0000 ROA not before: Tue 27 May 2025 10:56:31 +0000 ROA not after: Tue 26 May 2026 11:01:31 +0000 asID: 38524 IP address blocks: 103.191.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0e:7d:2f:7c:ff:f4:f8:f8:9b:bd:75:a7:c8:7a:91:ef:28:7c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: May 27 10:56:31 2025 GMT Not After : May 26 11:01:31 2026 GMT Subject: CN=04CE4A8781F299207A679EAAC0CB1DE5559B507C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:60:72:f6:b5:f6:49:55:04:1e:ac:75:5a: 51:3d:1c:44:ce:7f:0a:e6:99:aa:6d:1a:b1:65:24: 3b:d1:55:9c:84:35:7b:c1:fc:ab:6d:6e:6b:f8:db: e0:87:0b:ec:ba:be:9d:96:00:71:e9:99:87:40:3e: 27:47:6c:3f:d1:eb:89:d8:52:cc:30:3a:4a:f5:d4: 12:7b:bd:c0:30:fd:b2:b0:e1:bb:ae:6a:e2:98:1f: 70:ef:52:6b:33:75:bd:2e:ed:8f:4f:94:d5:f1:25: df:27:ad:de:03:6f:cb:e9:98:46:2d:0f:fc:d9:e8: 33:2b:81:62:03:e2:79:98:6b:55:10:c8:3f:eb:32: de:f6:6b:f2:98:08:79:2e:72:c4:4a:32:4e:10:7e: 67:9a:c5:1a:77:41:31:cb:e8:5b:31:c0:5b:a6:78: 22:2a:be:93:08:eb:b1:17:50:3f:4f:39:61:c4:a9: 3b:cf:97:53:3d:89:b3:94:45:ba:b9:1b:a7:e8:04: 90:64:dd:21:51:06:7c:06:02:e3:a2:a5:d4:70:10: 4a:86:ab:16:10:36:34:6d:53:25:57:a8:49:16:34: e6:ef:54:03:64:99:63:3b:56:5e:14:f7:e0:20:f9: fd:8c:3c:2d:0b:b1:6f:1a:4f:df:3c:d6:3e:c8:43: a8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CE:4A:87:81:F2:99:20:7A:67:9E:AA:C0:CB:1D:E5:55:9B:50:7C X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.153.0/24 Signature Algorithm: sha256WithRSAEncryption 29:f2:9c:07:97:52:d0:8e:78:0b:78:3f:c1:68:fd:0e:65:91: c6:91:76:7f:60:f5:88:39:6d:7a:64:e6:92:4a:57:04:f9:5c: db:48:2a:d4:c6:6a:c9:d0:50:44:b6:a8:4b:86:dd:d4:82:35: 2b:e7:66:d9:af:85:86:74:2a:5f:a6:4d:88:ce:5d:66:6c:2d: 08:78:e0:d3:29:38:3a:24:c2:d4:41:59:65:74:3b:57:1f:08: 53:d4:f4:8e:bd:81:0e:8f:0a:12:08:c8:82:7c:41:45:58:5b: 41:ec:c3:e5:2b:48:a4:a7:d9:13:3c:92:d3:ba:a4:ba:d7:29: f5:48:b1:7b:4e:b5:bd:37:4c:8d:af:56:d9:df:63:81:b8:32: fe:4d:7f:5d:98:38:25:f4:8b:98:cd:2a:d2:90:e7:46:e7:3b: a4:1f:b0:f4:d9:a1:24:d3:e9:5c:fd:c5:fb:c7:78:28:33:60: 51:3a:c9:3b:0d:0a:a1:f4:9e:62:a9:46:1c:10:61:f1:5e:b2: bf:f2:5b:40:6c:dd:cb:0f:02:d3:a2:aa:7e:21:31:87:38:19: 30:22:c7:ea:d5:08:8c:f7:2c:b2:9d:30:d4:3c:36:5d:ba:76: ce:d0:42:80:bb:c5:97:49:85:08:2c:99:82:b7:2c:25:84:59: f8:41:68:30 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcw59L3z/9Pj4m711p8h6ke8ofMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNTA1MjcxMDU2MzFaFw0yNjA1MjYxMTAxMzFaMDMxMTAvBgNV BAMTKDA0Q0U0QTg3ODFGMjk5MjA3QTY3OUVBQUMwQ0IxREU1NTU5QjUwN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPNWBy9rX2SVUEHqx1WlE9HETO fwrmmaptGrFlJDvRVZyENXvB/Kttbmv42+CHC+y6vp2WAHHpmYdAPidHbD/R64nY UswwOkr11BJ7vcAw/bKw4buuauKYH3DvUmszdb0u7Y9PlNXxJd8nrd4Db8vpmEYt D/zZ6DMrgWID4nmYa1UQyD/rMt72a/KYCHkucsRKMk4QfmeaxRp3QTHL6FsxwFum eCIqvpMI67EXUD9POWHEqTvPl1M9ibOURbq5G6foBJBk3SFRBnwGAuOipdRwEEqG qxYQNjRtUyVXqEkWNObvVANkmWM7Vl4U9+Ag+f2MPC0LsW8aT9881j7IQ6jLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBM5Kh4HymSB6Z56qwMsd5VWbUHwwHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2YTZjYTEyLWIyODctNGFjNy04 N2I4LTZjZDczMzUzZTY3Zi8wLzMxMzAzMzJlMzEzOTMxMmUzMTM1MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7+ZMA0GCSqG SIb3DQEBCwUAA4IBAQAp8pwHl1LQjngLeD/BaP0OZZHGkXZ/YPWIOW16ZOaSSlcE +VzbSCrUxmrJ0FBEtqhLht3UgjUr52bZr4WGdCpfpk2Izl1mbC0IeODTKTg6JMLU QVlldDtXHwhT1PSOvYEOjwoSCMiCfEFFWFtB7MPlK0ikp9kTPJLTuqS61yn1SLF7 TrW9N0yNr1bZ32OBuDL+TX9dmDgl9IuYzSrSkOdG5zukH7D02aEk0+lc/cX7x3go M2BROsk7DQqh9J5iqUYcEGHxXrK/8ltAbN3LDwLToqp+ITGHOBkwIsfq1QiM9yyy nTDUPDZdunbO0EKAu8WXSYUILJmCtywlhFn4QWgw -----END CERTIFICATE-----Generated at Thu Jun 5 18:29:28 2025 by rpki-client