$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa File: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (raw, json) Hash identifier: qNqEjSuCjuvM2nb2P9YufyugF7e/EHHhJHg78hVDerc= Subject key identifier: 6F:B4:E8:6E:F4:BE:59:26:44:D2:E8:B0:DB:3A:AE:1B:94:1D:DB:3F Certificate issuer: /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Certificate serial: 61B4B2366002C092A88FB33A66CDC780F1C903F7 Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa Signing time: Mon 02 Jun 2025 01:02:27 +0000 ROA not before: Mon 02 Jun 2025 00:57:27 +0000 ROA not after: Mon 01 Jun 2026 01:02:27 +0000 asID: 132642 IP address blocks: 103.19.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b4:b2:36:60:02:c0:92:a8:8f:b3:3a:66:cd:c7:80:f1:c9:03:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Validity Not Before: Jun 2 00:57:27 2025 GMT Not After : Jun 1 01:02:27 2026 GMT Subject: CN=6FB4E86EF4BE592644D2E8B0DB3AAE1B941DDB3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:b6:fe:4d:47:6f:c6:8a:bd:d9:25:18:4a: 8f:07:e5:11:8a:c6:70:b6:df:1d:e3:ba:ba:6f:0a: 79:42:db:60:a5:16:e5:7b:ea:fd:bd:d4:56:de:cb: a8:12:b5:88:7f:e6:67:56:73:de:ba:e5:6d:79:36: b9:38:8c:0c:1f:5d:c0:ef:f1:af:f4:ce:34:9e:63: b3:b1:66:8c:c0:7a:87:26:f9:da:04:a2:6f:98:7a: e4:7c:63:cc:53:e6:05:35:59:e9:36:51:19:00:d8: 76:d0:c2:32:92:b7:98:e5:6f:c5:85:ce:c4:28:0c: 69:fe:cb:df:f4:bb:15:f5:1a:00:48:29:0f:40:78: b5:58:b2:fd:a8:43:5f:16:d0:11:59:af:ee:1e:ed: 8a:6a:1e:7d:1c:bb:48:ec:09:b3:6c:ff:db:39:86: 9e:19:74:8a:b6:ca:bb:db:7c:6e:e2:87:10:0b:58: 32:5f:16:10:b2:d9:1f:9a:0b:6f:e4:2c:ee:14:1a: 96:07:bc:7b:b5:5d:ef:8f:ff:73:54:e2:14:46:d9: 4d:9f:0b:52:16:ca:1a:24:3f:62:ba:2b:7f:63:d6: 42:bd:91:f7:57:f0:5b:0e:92:fb:0f:87:d1:97:91: 66:f3:50:ce:aa:ed:4c:26:d7:e8:94:66:49:5f:13: 93:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B4:E8:6E:F4:BE:59:26:44:D2:E8:B0:DB:3A:AE:1B:94:1D:DB:3F X509v3 Authority Key Identifier: keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.180.0/24 Signature Algorithm: sha256WithRSAEncryption 12:23:90:b4:95:25:83:d2:04:17:cf:49:43:67:98:1f:94:91: d5:95:86:69:95:2a:7b:09:9e:2d:d0:c9:7b:9b:f2:96:da:27: a2:eb:28:54:16:ea:d1:36:0f:fd:1b:95:a4:41:c3:d3:17:4c: 91:f4:27:bd:f7:8c:c5:ec:8a:2e:43:2c:46:04:2f:a6:08:ab: ea:1a:51:5e:d3:3f:de:60:2c:64:59:8e:54:c5:fd:fe:c2:aa: 47:38:b2:eb:68:92:8d:36:be:97:60:e1:20:c3:1d:66:47:24: a7:cf:a9:73:3c:70:18:60:3b:c9:f0:97:b6:8e:b9:1b:ab:10: 43:a8:7e:1d:6a:3d:c7:5c:d5:4b:b2:80:24:02:0c:31:5c:d9: 2a:65:59:c6:d4:d4:4b:a7:58:0c:12:13:fa:b6:67:3a:04:20: ab:43:7f:c9:3d:9d:c3:d7:cd:b5:88:70:ce:2c:94:72:19:91: 59:45:b7:a6:7d:d0:28:20:5e:bd:0c:56:69:a6:75:75:e6:34: bb:4f:6b:d8:6a:37:84:42:35:9d:f7:c2:74:ae:b6:a5:bc:a0: 52:32:39:d1:21:dc:9c:eb:8a:81:98:64:5e:e2:e0:03:0b:fe: 74:8b:95:6c:91:62:2f:0e:81:85:17:3a:f6:47:53:f0:a5:d3: 65:be:ae:a4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYbSyNmACwJKoj7M6Zs3HgPHJA/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0 MzdDQThFOTAeFw0yNTA2MDIwMDU3MjdaFw0yNjA2MDEwMTAyMjdaMDMxMTAvBgNV BAMTKDZGQjRFODZFRjRCRTU5MjY0NEQyRThCMERCM0FBRTFCOTQxRERCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tbb+TUdvxoq92SUYSo8H5RGK xnC23x3jurpvCnlC22ClFuV76v291Fbey6gStYh/5mdWc9665W15Nrk4jAwfXcDv 8a/0zjSeY7OxZozAeocm+doEom+YeuR8Y8xT5gU1Wek2URkA2HbQwjKSt5jlb8WF zsQoDGn+y9/0uxX1GgBIKQ9AeLVYsv2oQ18W0BFZr+4e7YpqHn0cu0jsCbNs/9s5 hp4ZdIq2yrvbfG7ihxALWDJfFhCy2R+aC2/kLO4UGpYHvHu1Xe+P/3NU4hRG2U2f C1IWyhokP2K6K39j1kK9kfdX8FsOkvsPh9GXkWbzUM6q7Uwm1+iUZklfE5PzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUb7TobvS+WSZE0uiw2zquG5Qd2z8wHwYDVR0j BBgwFoAUgYgjtQ+NY+nZU8S3UvBNsEN8qOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGM3NzNjOC1mYjU2LTQ0OWYtODY0OS0xMTJkNmUxNjg2YjMvMC84MTg4MjNCNTBG OEQ2M0U5RDk1M0M0Qjc1MkYwNERCMDQzN0NBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0MzdD QThFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUwYzc3M2M4LWZiNTYtNDQ5Zi04 NjQ5LTExMmQ2ZTE2ODZiMy8wLzMxMzAzMzJlMzEzOTJlMzEzODMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxO0MA0GCSqG SIb3DQEBCwUAA4IBAQASI5C0lSWD0gQXz0lDZ5gflJHVlYZplSp7CZ4t0Ml7m/KW 2iei6yhUFurRNg/9G5WkQcPTF0yR9Ce994zF7IouQyxGBC+mCKvqGlFe0z/eYCxk WY5Uxf3+wqpHOLLraJKNNr6XYOEgwx1mRySnz6lzPHAYYDvJ8Je2jrkbqxBDqH4d aj3HXNVLsoAkAgwxXNkqZVnG1NRLp1gMEhP6tmc6BCCrQ3/JPZ3D1821iHDOLJRy GZFZRbemfdAoIF69DFZppnV15jS7T2vYajeEQjWd98J0rralvKBSMjnRIdyc64qB mGRe4uADC/50i5VskWIvDoGFFzr2R1PwpdNlvq6k -----END CERTIFICATE-----Generated at Sat Jun 7 09:41:29 2025 by rpki-client