$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa File: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (raw, json) Hash identifier: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q= Subject key identifier: BF:34:54:3D:AF:D0:F0:F6:B1:E8:FF:55:6C:03:D9:0E:EC:FC:2F:F0 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 34BA8FD2030812672BDBF3B26AD88C919B913971 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa Signing time: Thu 15 May 2025 17:00:00 +0000 ROA not before: Thu 15 May 2025 16:55:00 +0000 ROA not after: Thu 14 May 2026 17:00:00 +0000 asID: 150284 IP address blocks: 103.43.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ba:8f:d2:03:08:12:67:2b:db:f3:b2:6a:d8:8c:91:9b:91:39:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: May 15 16:55:00 2025 GMT Not After : May 14 17:00:00 2026 GMT Subject: CN=BF34543DAFD0F0F6B1E8FF556C03D90EECFC2FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:96:9f:29:9f:e7:ce:c2:9e:a4:40:7a:9a: e0:c5:3f:34:60:c6:17:ac:37:04:22:9a:27:e8:bc: 2f:01:5f:4e:7a:0a:74:52:6b:b9:45:53:5b:99:e7: 67:4b:fa:87:49:f1:0a:ad:d8:37:78:d5:84:0e:b0: 72:42:2e:fb:bf:59:0a:27:c4:3f:f5:e0:e1:7c:f8: 58:e5:5f:96:e2:12:a8:99:2f:03:a1:be:84:ec:37: 26:c1:24:33:b0:7d:75:20:b8:21:0e:3f:a6:41:53: da:90:33:d9:ac:39:0f:e0:23:4f:81:37:36:1f:99: 23:0d:e7:3d:2e:3f:f5:64:72:f1:b2:1b:ca:0a:b9: 8b:98:56:a3:7b:bd:71:ab:9b:95:74:92:ff:a5:98: ef:f9:12:0d:cf:b2:6c:e7:0d:ad:6a:67:5a:37:40: 94:fc:af:70:d2:a4:98:eb:af:cc:a8:da:8f:44:21: a2:d5:cc:f5:2b:4c:5f:91:7a:1d:45:a1:1c:aa:bb: 8c:8a:d3:6f:23:53:1c:ca:51:b3:34:36:d6:81:54: 1d:11:e0:13:7b:f5:e9:94:53:1e:16:57:96:ec:c9: 8c:f3:53:6f:89:f4:89:7c:88:7c:ce:09:49:ee:d3: b4:c9:be:10:1a:3b:90:ae:37:99:c3:97:86:14:d0: 0c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:34:54:3D:AF:D0:F0:F6:B1:E8:FF:55:6C:03:D9:0E:EC:FC:2F:F0 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.165.0/24 Signature Algorithm: sha256WithRSAEncryption af:f6:8a:6a:35:9e:e3:43:59:35:0e:94:29:fc:f8:9c:06:8d: 66:ba:af:a8:6f:e7:23:1a:dd:95:13:d4:b7:6a:3a:24:97:82: 47:b8:5e:0d:c7:1f:76:58:d6:41:24:80:c0:ce:30:51:76:7a: 9d:66:5c:5f:e6:d6:84:c9:f3:28:8c:b0:54:9a:ec:3d:c1:83: d4:a8:7f:ee:0a:f3:08:3f:3a:81:4a:95:d2:9a:42:51:08:37: 45:10:43:f3:c4:c1:af:36:1e:85:54:13:57:48:2e:38:47:b8: ab:13:8a:36:9c:67:58:d7:65:5c:17:c0:d0:4e:6c:e0:db:54: b2:bf:79:70:e3:c2:aa:75:64:10:3c:a4:de:da:2c:85:29:c6: 32:c9:76:da:49:e8:08:19:fb:6f:c3:26:2e:ac:76:f5:3f:60: ee:ae:63:c0:05:dc:e0:79:86:1b:24:26:10:80:3e:82:34:c5: a1:c8:6e:c5:b0:c4:53:72:50:f1:2d:aa:23:dc:a9:fd:9f:51: e8:ff:6d:37:e6:e9:3e:dd:f4:01:55:17:a3:0b:74:15:e3:c6: 32:28:b4:e3:e0:c9:9c:9f:56:dd:62:83:c3:9c:70:8b:b6:8a: 1e:86:db:48:ce:0b:21:81:06:34:9e:fd:7d:7d:5f:1c:4a:6d: 9f:bf:93:86 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNLqP0gMIEmcr2/OyatiMkZuROXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTA1MTUxNjU1MDBaFw0yNjA1MTQxNzAwMDBaMDMxMTAvBgNV BAMTKEJGMzQ1NDNEQUZEMEYwRjZCMUU4RkY1NTZDMDNEOTBFRUNGQzJGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYj5afKZ/nzsKepEB6muDFPzRg xhesNwQimifovC8BX056CnRSa7lFU1uZ52dL+odJ8Qqt2Dd41YQOsHJCLvu/WQon xD/14OF8+FjlX5biEqiZLwOhvoTsNybBJDOwfXUguCEOP6ZBU9qQM9msOQ/gI0+B NzYfmSMN5z0uP/VkcvGyG8oKuYuYVqN7vXGrm5V0kv+lmO/5Eg3PsmznDa1qZ1o3 QJT8r3DSpJjrr8yo2o9EIaLVzPUrTF+Reh1FoRyqu4yK028jUxzKUbM0NtaBVB0R 4BN79emUUx4WV5bsyYzzU2+J9Il8iHzOCUnu07TJvhAaO5CuN5nDl4YU0AwJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUvzRUPa/Q8Pax6P9VbAPZDuz8L/AwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2MmJhY2M5LWQyNWQtNDYxMC1h ZWU0LTY1NWExNGVhMmZkNi8wLzMxMzAzMzJlMzQzMzJlMzEzNjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyulMA0GCSqG SIb3DQEBCwUAA4IBAQCv9opqNZ7jQ1k1DpQp/PicBo1muq+ob+cjGt2VE9S3ajok l4JHuF4Nxx92WNZBJIDAzjBRdnqdZlxf5taEyfMojLBUmuw9wYPUqH/uCvMIPzqB SpXSmkJRCDdFEEPzxMGvNh6FVBNXSC44R7irE4o2nGdY12VcF8DQTmzg21Syv3lw 48KqdWQQPKTe2iyFKcYyyXbaSegIGftvwyYurHb1P2DurmPABdzgeYYbJCYQgD6C NMWhyG7FsMRTclDxLaoj3Kn9n1Ho/2035uk+3fQBVRejC3QV48YyKLTj4Mmcn1bd YoPDnHCLtooehttIzgshgQY0nv19fV8cSm2fv5OG -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:02 2025 by rpki-client