$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa File: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (raw, json) Hash identifier: jQaUGbMnprmPG29gShaOC88VLFUYJfQ53uR+ITg6jLM= Subject key identifier: FF:F9:F0:F5:D1:D6:DC:81:04:3E:A3:5E:AA:02:2C:99:2A:02:1D:57 Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 24932248F766006C9CFD14F967FF142CDEC7A525 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa Signing time: Mon 02 Jun 2025 01:02:41 +0000 ROA not before: Mon 02 Jun 2025 00:57:41 +0000 ROA not after: Mon 01 Jun 2026 01:02:41 +0000 asID: 131749 IP address blocks: 103.31.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:93:22:48:f7:66:00:6c:9c:fd:14:f9:67:ff:14:2c:de:c7:a5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Jun 2 00:57:41 2025 GMT Not After : Jun 1 01:02:41 2026 GMT Subject: CN=FFF9F0F5D1D6DC81043EA35EAA022C992A021D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:99:6d:65:78:b7:f7:50:57:ad:15:fc:f8: 85:55:07:5b:14:ff:3a:31:b2:90:33:9e:a2:fe:f4: d7:9e:50:3b:38:a5:55:08:a6:ed:6f:f0:9e:88:5e: 56:7b:8d:14:03:3f:1d:95:31:8a:a4:15:6b:7a:2b: 78:c7:9a:98:ab:a8:97:b5:de:f8:7a:56:56:b2:7d: d3:88:e8:b6:3f:e8:6a:82:fa:df:23:b9:d3:41:e7: 89:07:22:89:c4:8e:73:20:6b:06:90:c5:e6:e3:f1: 88:8e:80:e7:14:2a:46:c2:51:03:22:87:c8:16:98: 4b:de:0a:f1:7d:ad:de:c4:4c:20:bb:cb:15:14:63: 26:27:42:e7:81:ca:c9:7d:11:5d:49:c6:8e:3f:f6: 91:09:6c:92:f9:b5:e4:b9:89:01:7f:12:40:6b:19: 48:00:75:a9:88:bc:8a:20:a8:2b:15:7f:3f:b0:b9: 72:02:2e:1f:59:83:49:ad:64:98:2b:a7:5b:52:ff: 0a:79:b2:09:e0:06:4e:9e:d3:e7:9c:a7:e5:e3:d1: 06:bf:53:d4:40:ba:98:e0:0b:ed:a8:9d:17:c8:41: 67:22:94:23:41:3e:5c:e5:13:36:9a:52:92:8f:04: af:4d:77:59:48:44:b6:95:2a:1b:4f:ad:98:52:2c: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F9:F0:F5:D1:D6:DC:81:04:3E:A3:5E:AA:02:2C:99:2A:02:1D:57 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.135.0/24 Signature Algorithm: sha256WithRSAEncryption 06:08:15:b1:a4:15:a1:ef:44:5d:ec:2e:71:14:a5:74:89:b6: e7:54:83:25:c3:f6:a3:dd:f9:0b:17:3d:6a:8b:3e:14:e7:d4: f8:be:a5:09:6e:f4:81:fb:6b:64:8f:07:d9:6f:09:c9:cc:af: bc:5d:20:99:0f:5b:23:13:13:7a:0c:1b:1e:c5:ea:a2:85:b7: 6c:98:0a:62:e5:6f:8e:1d:1f:65:3f:67:3e:3e:5b:3f:13:38: 46:5a:fa:85:15:d4:86:4f:55:09:6f:80:c7:14:4f:18:16:ea: 45:54:03:73:ba:e2:30:00:73:b0:3c:47:96:70:9f:42:d0:81: 1e:a7:9f:34:e2:d8:4f:92:49:67:6b:2c:c5:26:95:d2:6a:ec: b6:29:00:9e:fd:7b:9e:6b:71:85:ed:0c:8d:80:4c:30:e2:79: 12:7c:98:ec:57:9a:35:de:e8:7f:3a:d8:1e:85:57:af:23:f9: 24:b6:e5:f3:94:1a:73:a6:3f:89:55:de:9a:a9:1a:ad:78:81: 8b:c9:fd:5e:39:a2:bb:5f:15:dd:1b:2e:68:b1:11:1f:b0:6c: 23:e5:5b:cb:db:30:b1:4b:13:d7:b7:6a:fd:2f:fc:6e:28:f4: 02:6e:b8:e3:1a:e3:3f:ed:40:c6:a1:d4:03:d2:1c:19:e9:d4: b1:c6:3b:53 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJJMiSPdmAGyc/RT5Z/8ULN7HpSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTA2MDIwMDU3NDFaFw0yNjA2MDEwMTAyNDFaMDMxMTAvBgNV BAMTKEZGRjlGMEY1RDFENkRDODEwNDNFQTM1RUFBMDIyQzk5MkEwMjFENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzpltZXi391BXrRX8+IVVB1sU /zoxspAznqL+9NeeUDs4pVUIpu1v8J6IXlZ7jRQDPx2VMYqkFWt6K3jHmpirqJe1 3vh6VlayfdOI6LY/6GqC+t8judNB54kHIonEjnMgawaQxebj8YiOgOcUKkbCUQMi h8gWmEveCvF9rd7ETCC7yxUUYyYnQueBysl9EV1Jxo4/9pEJbJL5teS5iQF/EkBr GUgAdamIvIogqCsVfz+wuXICLh9Zg0mtZJgrp1tS/wp5sgngBk6e0+ecp+Xj0Qa/ U9RAupjgC+2onRfIQWcilCNBPlzlEzaaUpKPBK9Nd1lIRLaVKhtPrZhSLBGJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU//nw9dHW3IEEPqNeqgIsmSoCHVcwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMxMzAzMzJlMzMzMTJlMzEzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx+HMA0GCSqG SIb3DQEBCwUAA4IBAQAGCBWxpBWh70Rd7C5xFKV0ibbnVIMlw/aj3fkLFz1qiz4U 59T4vqUJbvSB+2tkjwfZbwnJzK+8XSCZD1sjExN6DBsexeqihbdsmApi5W+OHR9l P2c+Pls/EzhGWvqFFdSGT1UJb4DHFE8YFupFVANzuuIwAHOwPEeWcJ9C0IEep580 4thPkklnayzFJpXSauy2KQCe/Xuea3GF7QyNgEww4nkSfJjsV5o13uh/OtgehVev I/kktuXzlBpzpj+JVd6aqRqteIGLyf1eOaK7XxXdGy5osREfsGwj5VvL2zCxSxPX t2r9L/xuKPQCbrjjGuM/7UDGodQD0hwZ6dSxxjtT -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:33 2025 by rpki-client