$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa File: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (raw, json) Hash identifier: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4= Subject key identifier: 99:B7:45:F0:E1:36:F5:E9:62:6D:99:8D:BF:A5:0B:A9:2B:91:5D:73 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 02D8E5945B89F1ED4C705902C40129900F163C86 Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa Signing time: Mon 02 Jun 2025 02:04:25 +0000 ROA not before: Mon 02 Jun 2025 01:59:25 +0000 ROA not after: Mon 01 Jun 2026 02:04:25 +0000 asID: 137331 IP address blocks: 103.133.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d8:e5:94:5b:89:f1:ed:4c:70:59:02:c4:01:29:90:0f:16:3c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Jun 2 01:59:25 2025 GMT Not After : Jun 1 02:04:25 2026 GMT Subject: CN=99B745F0E136F5E9626D998DBFA50BA92B915D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:7e:35:53:16:a9:32:06:4d:1d:b4:a9:c3: 8b:92:27:f5:92:c1:3d:e5:1b:2c:52:ca:23:03:b0: 5b:89:83:ab:bd:be:d2:99:8e:5a:90:8c:99:7b:8a: 2f:e9:55:d5:d7:39:98:b0:b7:fc:99:17:de:68:cd: b7:59:8e:54:94:52:9a:b9:d5:99:60:89:6c:4a:d8: cb:24:55:c2:84:65:96:25:c3:7d:c8:4c:3d:ea:4b: ad:2b:84:89:79:1d:41:a0:42:9b:7f:91:05:18:9d: f4:5f:cb:85:78:43:d4:25:14:e3:da:44:80:4a:f7: 73:78:5c:56:10:25:71:67:fe:4f:ed:b0:cc:fc:4e: b6:3f:5b:7f:43:e7:16:cd:04:b1:89:14:67:b8:67: 54:e0:cd:e9:53:52:9c:58:fe:85:ae:73:bf:8f:38: 24:d0:ee:b3:2e:86:48:be:3e:3d:14:6a:47:b2:f1: 44:11:18:f3:47:3e:47:36:2b:f2:6f:56:a7:46:4c: 4d:eb:15:14:0d:d3:ef:74:f4:d9:d0:ba:25:de:b5: 70:8c:d2:52:6f:21:c2:2c:9f:a3:f3:86:12:01:24: c2:bc:0c:9e:fd:73:1f:57:c4:90:5a:da:53:7a:2a: 34:7d:ef:5f:a1:f2:39:28:cb:ff:2a:2b:69:fd:c1: 11:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B7:45:F0:E1:36:F5:E9:62:6D:99:8D:BF:A5:0B:A9:2B:91:5D:73 X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.222.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:60:9b:fd:8b:6c:4c:a9:2a:2e:3a:7a:1f:b7:87:64:e8:b2: 12:e1:2a:6d:ca:c8:dc:c4:1c:2f:59:5a:ce:f2:61:c3:b1:b6: 73:ed:eb:2e:ed:fd:53:d9:5c:f7:de:90:3f:1b:51:2e:3c:f0: d3:45:ff:73:92:35:74:60:18:b0:e0:fc:ee:c8:ce:6a:79:ac: 34:5a:0a:f5:8d:21:01:ee:32:ab:f0:1e:a3:c4:ea:a7:e1:3c: 0f:b0:99:30:c8:ba:a3:04:da:aa:e7:ca:31:b9:4d:44:c5:f8: 9f:31:e0:a0:d4:43:f1:be:7b:16:17:cc:3d:0b:c8:54:ed:5e: 4d:61:52:7b:91:0a:b2:80:c4:e6:18:6b:bc:02:ca:7f:cc:f7: 80:18:5e:5c:51:dc:33:af:7f:97:2a:46:f4:d5:71:f9:db:77: 04:46:09:af:9e:fb:dc:56:ef:5e:d5:37:07:59:4d:e9:e1:b6: 3f:57:6f:cc:f7:fe:45:e6:89:a7:af:18:40:02:36:57:da:f4: f1:e2:7c:5c:6f:19:b0:0f:6d:d2:95:f4:a9:ac:41:c0:58:2e: 1f:ed:70:2f:11:96:e7:2b:84:4c:99:09:7e:0d:7a:89:5f:97: 84:97:c2:9f:93:b4:80:02:8b:42:da:60:79:6a:b0:7c:85:6a: d5:9a:25:35 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAtjllFuJ8e1McFkCxAEpkA8WPIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNTA2MDIwMTU5MjVaFw0yNjA2MDEwMjA0MjVaMDMxMTAvBgNV BAMTKDk5Qjc0NUYwRTEzNkY1RTk2MjZEOTk4REJGQTUwQkE5MkI5MTVENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4X41UxapMgZNHbSpw4uSJ/WS wT3lGyxSyiMDsFuJg6u9vtKZjlqQjJl7ii/pVdXXOZiwt/yZF95ozbdZjlSUUpq5 1ZlgiWxK2MskVcKEZZYlw33ITD3qS60rhIl5HUGgQpt/kQUYnfRfy4V4Q9QlFOPa RIBK93N4XFYQJXFn/k/tsMz8TrY/W39D5xbNBLGJFGe4Z1TgzelTUpxY/oWuc7+P OCTQ7rMuhki+Pj0Uakey8UQRGPNHPkc2K/JvVqdGTE3rFRQN0+909NnQuiXetXCM 0lJvIcIsn6PzhhIBJMK8DJ79cx9XxJBa2lN6KjR971+h8jkoy/8qK2n9wRELAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUmbdF8OE29elibZmNv6ULqSuRXXMwHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmZDgwZDk2LWVmMWItNDRiMi05 MDNhLTdmNmRhOTQxYTgzNi8wLzMxMzAzMzJlMzEzMzMzMmUzMjMyMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnhd4wDQYJ KoZIhvcNAQELBQADggEBAF5gm/2LbEypKi46eh+3h2ToshLhKm3KyNzEHC9ZWs7y YcOxtnPt6y7t/VPZXPfekD8bUS488NNF/3OSNXRgGLDg/O7Izmp5rDRaCvWNIQHu MqvwHqPE6qfhPA+wmTDIuqME2qrnyjG5TUTF+J8x4KDUQ/G+exYXzD0LyFTtXk1h UnuRCrKAxOYYa7wCyn/M94AYXlxR3DOvf5cqRvTVcfnbdwRGCa+e+9xW717VNwdZ Tenhtj9Xb8z3/kXmiaevGEACNlfa9PHifFxvGbAPbdKV9KmsQcBYLh/tcC8Rlucr hEyZCX4Neolfl4SXwp+TtIACi0LaYHlqsHyFatWaJTU= -----END CERTIFICATE-----Generated at Sat Jun 7 17:59:39 2025 by rpki-client