$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa File: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (raw, json) Hash identifier: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0= Subject key identifier: E0:3F:42:20:3B:EC:FF:A3:F6:4F:DB:06:F2:59:B3:01:9E:B3:7E:1B Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 301F304F2400214111D616A62A49617BB8EF67DC Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa Signing time: Mon 10 Mar 2025 16:00:42 +0000 ROA not before: Mon 10 Mar 2025 15:55:42 +0000 ROA not after: Mon 09 Mar 2026 16:00:42 +0000 asID: 151994 IP address blocks: 103.255.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1f:30:4f:24:00:21:41:11:d6:16:a6:2a:49:61:7b:b8:ef:67:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Mar 10 15:55:42 2025 GMT Not After : Mar 9 16:00:42 2026 GMT Subject: CN=E03F42203BECFFA3F64FDB06F259B3019EB37E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8e:4c:f9:dc:ee:74:19:73:1b:0f:7c:af:5c: bb:08:bf:49:24:ff:4a:1f:c0:c4:38:4d:3c:89:85: 15:c8:35:86:96:48:d7:78:03:70:cb:06:d7:12:42: 8f:fb:ff:7f:45:ec:c5:b9:a8:0b:4f:e6:f5:48:bc: d6:99:2d:f8:de:fd:49:fd:40:cc:7f:95:d6:94:2b: 7a:e7:42:91:08:2e:12:34:f9:73:d9:cb:9f:31:84: ed:6e:76:f4:f6:4a:dd:47:26:1b:be:47:f6:56:c6: 36:d9:e4:17:15:59:93:73:66:4e:54:0a:2d:7c:87: a6:54:00:97:29:9c:5f:23:b8:54:6b:a6:64:0b:7a: 5e:8c:4f:7d:96:20:db:b9:c9:45:6c:2c:69:27:82: c8:de:d3:b8:71:29:fe:1b:20:18:81:ba:1d:8e:1b: 1f:de:f1:6e:67:88:8e:4e:f5:0e:2c:4a:ef:2b:d9: 79:dc:86:1f:eb:3a:2d:d2:e6:e8:c2:ed:5f:1a:55: 04:27:ff:ab:49:3b:e3:37:e6:cc:ce:cc:dc:64:fc: 6c:d6:96:a8:a5:52:27:bc:1d:1a:11:db:ff:c2:e2: 9a:8f:4f:1d:f1:88:43:f1:d3:9f:b9:21:62:48:02: 9b:4e:bb:27:71:b2:6b:e9:45:18:ce:41:83:07:45: 7b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3F:42:20:3B:EC:FF:A3:F6:4F:DB:06:F2:59:B3:01:9E:B3:7E:1B X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.164.0/23 Signature Algorithm: sha256WithRSAEncryption d4:f2:cf:8b:76:7d:08:dd:99:7e:5b:6b:a1:41:a7:4c:a5:e4: fd:2f:46:2d:5e:e8:2b:4b:18:95:ee:85:89:60:a5:a3:eb:19: 6d:de:ae:61:b4:42:c6:2e:a9:72:04:e3:6d:46:ee:be:d9:0b: 5b:34:31:a7:1f:46:2f:a2:e0:20:97:06:cc:ea:dc:cb:8e:01: f6:10:31:84:71:f7:ac:f8:86:85:91:56:42:91:7c:8f:12:3a: 54:7b:a2:5b:47:1e:60:c0:21:a0:28:c0:af:56:61:c3:98:88: 2d:70:07:9e:63:06:86:a0:b7:2b:2a:ef:07:b6:7e:6a:49:37: 4f:c1:3b:f7:5a:86:2f:66:74:10:5e:ef:5e:7a:d1:89:64:89: 10:27:18:59:23:2d:11:ab:89:27:b0:66:14:73:60:75:0f:47: ac:77:44:29:39:ee:b7:dd:e1:8d:ae:4d:31:b6:02:28:22:c0: 49:c1:4b:5a:ca:d9:5e:f2:a0:c9:83:1c:92:8e:b6:b9:02:f3: 78:9b:30:61:31:7c:e2:03:14:c7:70:62:5a:63:45:14:d2:25: 61:c3:c5:77:55:5a:b2:9a:4d:1a:8d:a3:c7:c4:f5:21:34:ea: 17:83:b0:34:1b:e0:aa:17:39:a2:c4:b3:0b:54:db:be:5e:88: c7:68:97:a7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMB8wTyQAIUER1hamKklhe7jvZ9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNTAzMTAxNTU1NDJaFw0yNjAzMDkxNjAwNDJaMDMxMTAvBgNV BAMTKEUwM0Y0MjIwM0JFQ0ZGQTNGNjRGREIwNkYyNTlCMzAxOUVCMzdFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjkz53O50GXMbD3yvXLsIv0kk /0ofwMQ4TTyJhRXINYaWSNd4A3DLBtcSQo/7/39F7MW5qAtP5vVIvNaZLfje/Un9 QMx/ldaUK3rnQpEILhI0+XPZy58xhO1udvT2St1HJhu+R/ZWxjbZ5BcVWZNzZk5U Ci18h6ZUAJcpnF8juFRrpmQLel6MT32WINu5yUVsLGkngsje07hxKf4bIBiBuh2O Gx/e8W5niI5O9Q4sSu8r2Xnchh/rOi3S5ujC7V8aVQQn/6tJO+M35szOzNxk/GzW lqilUie8HRoR2//C4pqPTx3xiEPx05+5IWJIAptOuydxsmvpRRjOQYMHRXsdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU4D9CIDvs/6P2T9sG8lmzAZ6zfhswHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjNDdlZjVjLTViYmEtNGNkMS04 ZGM5LTE3M2UyNzUxZjRmNC8wLzMxMzAzMzJlMzIzNTM1MmUzMTM2MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzEzOTM5MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn/6QwDQYJ KoZIhvcNAQELBQADggEBANTyz4t2fQjdmX5ba6FBp0yl5P0vRi1e6CtLGJXuhYlg paPrGW3ermG0QsYuqXIE421G7r7ZC1s0MacfRi+i4CCXBszq3MuOAfYQMYRx96z4 hoWRVkKRfI8SOlR7oltHHmDAIaAowK9WYcOYiC1wB55jBoagtysq7we2fmpJN0/B O/dahi9mdBBe71560YlkiRAnGFkjLRGriSewZhRzYHUPR6x3RCk57rfd4Y2uTTG2 AigiwEnBS1rK2V7yoMmDHJKOtrkC83ibMGExfOIDFMdwYlpjRRTSJWHDxXdVWrKa TRqNo8fE9SE06heDsDQb4KoXOaLEswtU275eiMdol6c= -----END CERTIFICATE-----Generated at Sun Apr 6 08:20:45 2025 by rpki-client