$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa File: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (raw, json) Hash identifier: oPq0eksRu+Qj6e9d7D3QHko1LMTQ6v8EettFrsXT3rc= Subject key identifier: 44:39:04:27:87:51:3B:77:46:0F:6F:08:FB:21:54:F3:0E:9D:DB:79 Certificate issuer: /CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Certificate serial: 3BA342BF7FA514CB2D3B6DBE38BBD2CBEA2331BA Authority key identifier: 5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa Signing time: Mon 02 Jun 2025 02:04:02 +0000 ROA not before: Mon 02 Jun 2025 01:59:02 +0000 ROA not after: Mon 01 Jun 2026 02:04:02 +0000 asID: 138828 IP address blocks: 103.137.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a3:42:bf:7f:a5:14:cb:2d:3b:6d:be:38:bb:d2:cb:ea:23:31:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Validity Not Before: Jun 2 01:59:02 2025 GMT Not After : Jun 1 02:04:02 2026 GMT Subject: CN=4439042787513B77460F6F08FB2154F30E9DDB79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:4b:92:a7:f3:e5:9d:3f:02:b1:c4:d3:41: ea:82:50:fb:45:dd:12:7b:41:e6:d4:76:ae:f1:99: bb:59:0d:54:b2:ce:da:1f:f4:6d:80:40:ca:e6:42: cf:e4:3c:fc:bf:02:3e:1a:f8:38:79:c5:d2:3f:33: 1f:43:a4:d1:a9:0f:fb:59:5f:92:10:5b:14:4e:39: ed:3f:34:69:53:46:c3:d9:ee:94:76:79:93:8f:a7: 2e:d0:ce:75:ed:13:31:94:99:19:1b:8e:96:5b:dd: df:16:66:ed:f3:25:52:04:3d:39:2d:26:d4:83:ce: 1e:2e:c9:e1:92:2f:16:f7:93:44:81:60:42:bc:f2: 3d:0f:bd:bf:2b:23:10:90:37:cb:9b:40:5a:35:f1: 57:84:94:fb:e2:ae:b4:04:37:8c:73:26:53:9e:d8: 99:7d:56:85:7a:ff:d2:de:d4:3b:f5:71:b2:bd:cf: 91:e8:8f:46:26:4d:37:ea:34:8b:cb:66:f0:0f:2f: 97:ce:d3:a3:d7:0a:d3:e0:2b:64:83:92:49:86:af: d1:5b:c8:75:07:b0:1d:78:5c:b9:f9:96:78:22:72: 01:d1:4e:e6:dd:df:e0:f9:01:b0:ee:be:61:0b:a4: ae:46:68:d2:0f:ea:cd:e6:e5:f4:eb:84:49:3d:e8: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:39:04:27:87:51:3B:77:46:0F:6F:08:FB:21:54:F3:0E:9D:DB:79 X509v3 Authority Key Identifier: keyid:5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.82.0/23 Signature Algorithm: sha256WithRSAEncryption 38:1f:ba:b8:f1:74:01:78:97:33:00:12:34:e9:ed:84:1d:c3: f7:d0:c2:eb:8b:f8:a3:ae:ba:22:3b:f4:c4:3c:cb:6f:ee:f9: 14:2a:c9:f8:b7:e3:a0:09:32:20:a2:f8:4f:e0:e8:2e:27:49: 5c:18:99:e5:92:6b:5d:ce:e2:67:6f:1a:23:82:96:71:20:5f: 23:5c:07:ff:a2:48:e9:52:cc:82:3c:6c:d6:06:3c:c9:58:c5: 21:cb:47:a2:69:12:43:ca:0b:88:f8:3f:ed:0b:d1:48:f3:a9: af:d9:af:7b:92:94:77:16:4d:f0:6a:05:17:04:39:c4:6c:b7: 2d:61:02:1b:df:08:f6:7b:09:18:90:6f:77:8a:af:c3:fd:c5: ac:7d:56:f7:83:26:b7:13:86:cb:c6:9d:85:81:59:e3:e6:ec: 3a:6d:12:0b:9a:c1:9e:06:cf:d8:e2:be:82:b8:c8:7f:41:10: 1d:37:37:b0:01:84:e0:b4:ae:3c:fb:7b:13:fc:d5:dc:14:c8: 30:7e:48:a7:b5:68:9d:cb:d1:07:e4:a3:f6:6d:5b:ba:61:e8: 4d:06:4f:2e:0c:5e:cc:03:11:12:22:21:32:fa:f0:0e:48:87: fa:e9:db:35:0c:b1:57:c8:e5:56:7b:07:a2:88:8c:fc:33:cd: bb:56:77:84 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUO6NCv3+lFMstO22+OLvSy+ojMbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5 QkYzQjlGMDAeFw0yNTA2MDIwMTU5MDJaFw0yNjA2MDEwMjA0MDJaMDMxMTAvBgNV BAMTKDQ0MzkwNDI3ODc1MTNCNzc0NjBGNkYwOEZCMjE1NEYzMEU5RERCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkE0uSp/PlnT8CscTTQeqCUPtF 3RJ7QebUdq7xmbtZDVSyztof9G2AQMrmQs/kPPy/Aj4a+Dh5xdI/Mx9DpNGpD/tZ X5IQWxROOe0/NGlTRsPZ7pR2eZOPpy7QznXtEzGUmRkbjpZb3d8WZu3zJVIEPTkt JtSDzh4uyeGSLxb3k0SBYEK88j0Pvb8rIxCQN8ubQFo18VeElPvirrQEN4xzJlOe 2Jl9VoV6/9Le1Dv1cbK9z5Hoj0YmTTfqNIvLZvAPL5fO06PXCtPgK2SDkkmGr9Fb yHUHsB14XLn5lngicgHRTubd3+D5AbDuvmELpK5GaNIP6s3m5fTrhEk96DjrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURDkEJ4dRO3dGD28I+yFU8w6d23kwHwYDVR0j BBgwFoAUXn5KY8cVspbVl7WqP+gAYJvzufAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU2Y2Q0MS0yZTRjLTRjYzItODgxZS1iYWI0NGE4ODRmZDQvMC81RTdFNEE2M0M3 MTVCMjk2RDU5N0I1QUEzRkU4MDA2MDlCRjNCOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5QkYz QjlGMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhZTZjZDQxLTJlNGMtNGNjMi04 ODFlLWJhYjQ0YTg4NGZkNC8wLzMxMzAzMzJlMzEzMzM3MmUzODMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4lSMA0GCSqG SIb3DQEBCwUAA4IBAQA4H7q48XQBeJczABI06e2EHcP30MLri/ijrroiO/TEPMtv 7vkUKsn4t+OgCTIgovhP4OguJ0lcGJnlkmtdzuJnbxojgpZxIF8jXAf/okjpUsyC PGzWBjzJWMUhy0eiaRJDyguI+D/tC9FI86mv2a97kpR3Fk3wagUXBDnEbLctYQIb 3wj2ewkYkG93iq/D/cWsfVb3gya3E4bLxp2FgVnj5uw6bRILmsGeBs/Y4r6CuMh/ QRAdNzewAYTgtK48+3sT/NXcFMgwfkintWidy9EH5KP2bVu6YehNBk8uDF7MAxES IiEy+vAOSIf66ds1DLFXyOVWeweiiIz8M827VneE -----END CERTIFICATE-----Generated at Sun Jun 8 07:28:07 2025 by rpki-client