$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa File: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (raw, json) Hash identifier: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y= Subject key identifier: 56:F4:73:3B:E2:06:E2:D1:C9:E8:88:1E:92:53:DC:4F:34:0B:42:76 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 180C0962FCFF77E75477581AF09A98A7EFF80886 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa Signing time: Thu 15 May 2025 17:00:00 +0000 ROA not before: Thu 15 May 2025 16:55:00 +0000 ROA not after: Thu 14 May 2026 17:00:00 +0000 asID: 150284 IP address blocks: 103.43.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:0c:09:62:fc:ff:77:e7:54:77:58:1a:f0:9a:98:a7:ef:f8:08:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: May 15 16:55:00 2025 GMT Not After : May 14 17:00:00 2026 GMT Subject: CN=56F4733BE206E2D1C9E8881E9253DC4F340B4276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:36:ce:13:d2:7c:e0:64:e6:2a:5f:5f:fc: 2d:89:53:d9:fa:66:63:58:92:3b:5d:68:b9:6f:63: e5:dc:02:14:81:da:a8:ab:28:de:79:77:51:68:4f: 94:d8:17:24:87:1e:a4:89:5f:c8:d5:1d:a1:7c:4f: 9c:8b:b7:0e:35:c9:82:87:48:fa:23:8c:20:1e:01: 93:41:fd:61:78:11:d1:90:8c:37:33:40:aa:bc:7b: 3e:7d:1f:bf:bf:8c:ff:2a:17:98:c0:cd:77:51:e7: 55:06:ac:c0:fa:ba:fb:32:c1:b4:32:90:1a:cb:af: 83:6a:68:dc:84:d7:e3:fd:72:5c:cc:1a:d9:a6:de: 94:d9:2d:23:4e:73:43:56:e3:60:38:4e:b3:41:05: d9:c7:9e:3d:0a:d9:cb:3e:27:94:56:6b:62:74:7e: 20:0b:ba:4e:71:3a:a3:53:a3:eb:f8:a1:09:ce:ca: 38:a5:45:15:88:2e:a8:e9:52:52:95:2e:c6:99:ad: 79:b1:d4:51:c8:48:c2:ca:ff:52:be:87:7a:83:d2: 7f:af:66:ae:b8:32:78:59:d2:57:ef:93:92:c9:e7: 21:62:d8:27:1b:c5:df:a3:33:19:95:b8:9b:23:8a: 39:f6:b8:84:3c:a6:e5:10:e8:e2:3c:e2:16:b0:0b: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F4:73:3B:E2:06:E2:D1:C9:E8:88:1E:92:53:DC:4F:34:0B:42:76 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.164.0/23 Signature Algorithm: sha256WithRSAEncryption 02:64:d3:ca:9b:81:24:65:94:44:b7:8a:ba:d6:bc:7c:bf:f2: d5:39:f6:4b:e5:fa:92:83:84:be:c0:06:16:a9:82:54:c6:ff: 25:85:6e:b3:05:b2:ef:f3:d6:cc:68:2d:66:92:43:0d:e8:2b: c8:5f:18:b7:10:c4:8c:13:bd:35:2b:30:6b:0e:1c:13:6f:68: 4a:05:a3:25:fe:be:ff:db:49:12:56:c4:fd:67:0c:52:4b:4f: 55:05:aa:49:07:33:39:79:6d:b1:dd:ea:69:51:e3:2a:3b:65: c8:2c:26:6d:c6:17:d3:58:6f:50:dc:81:32:06:ea:11:e5:d0: 74:62:94:c8:0c:55:9c:52:94:e1:bd:a9:ab:8e:df:6f:06:56: ff:0f:76:5b:17:3e:b6:8c:a3:40:a7:ab:7d:1b:32:02:b5:7a: 9d:cc:5b:d0:19:d1:6f:4f:97:fc:aa:c3:dc:d0:23:2a:47:94: 91:4e:75:e2:a6:55:57:67:d2:bd:9b:fa:8a:9c:1f:84:9f:67: c1:19:2e:b1:a9:9b:3c:49:f7:67:14:71:55:af:f0:a8:7f:31: f9:b9:81:c3:54:69:43:79:7b:cb:fd:4d:63:80:bd:36:c1:8d: f5:5b:32:74:60:67:b5:b4:5c:7f:2d:b7:dc:a4:49:6c:1e:b4: 9b:2b:8a:e7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGAwJYvz/d+dUd1ga8JqYp+/4CIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTA1MTUxNjU1MDBaFw0yNjA1MTQxNzAwMDBaMDMxMTAvBgNV BAMTKDU2RjQ3MzNCRTIwNkUyRDFDOUU4ODgxRTkyNTNEQzRGMzQwQjQyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrDbOE9J84GTmKl9f/C2JU9n6 ZmNYkjtdaLlvY+XcAhSB2qirKN55d1FoT5TYFySHHqSJX8jVHaF8T5yLtw41yYKH SPojjCAeAZNB/WF4EdGQjDczQKq8ez59H7+/jP8qF5jAzXdR51UGrMD6uvsywbQy kBrLr4NqaNyE1+P9clzMGtmm3pTZLSNOc0NW42A4TrNBBdnHnj0K2cs+J5RWa2J0 fiALuk5xOqNTo+v4oQnOyjilRRWILqjpUlKVLsaZrXmx1FHISMLK/1K+h3qD0n+v Zq64MnhZ0lfvk5LJ5yFi2Ccbxd+jMxmVuJsjijn2uIQ8puUQ6OI84hawC8JZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVvRzO+IG4tHJ6IgeklPcTzQLQnYwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2MmJhY2M5LWQyNWQtNDYxMC1h ZWU0LTY1NWExNGVhMmZkNi8wLzMxMzAzMzJlMzQzMzJlMzEzNjM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzIzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZyukMA0GCSqG SIb3DQEBCwUAA4IBAQACZNPKm4EkZZREt4q61rx8v/LVOfZL5fqSg4S+wAYWqYJU xv8lhW6zBbLv89bMaC1mkkMN6CvIXxi3EMSME701KzBrDhwTb2hKBaMl/r7/20kS VsT9ZwxSS09VBapJBzM5eW2x3eppUeMqO2XILCZtxhfTWG9Q3IEyBuoR5dB0YpTI DFWcUpThvamrjt9vBlb/D3ZbFz62jKNAp6t9GzICtXqdzFvQGdFvT5f8qsPc0CMq R5SRTnXiplVXZ9K9m/qKnB+En2fBGS6xqZs8SfdnFHFVr/CofzH5uYHDVGlDeXvL /U1jgL02wY31WzJ0YGe1tFx/LbfcpElsHrSbK4rn -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:52 2025 by rpki-client