$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa File: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (raw, json) Hash identifier: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM= Subject key identifier: 5F:4E:2F:B4:81:86:4C:00:74:91:B3:FA:A6:99:E9:F3:CE:1F:F1:92 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 03E551C856BF23BF02C71F7F07953D7F00B55013 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa Signing time: Thu 08 May 2025 05:00:00 +0000 ROA not before: Thu 08 May 2025 04:55:00 +0000 ROA not after: Thu 07 May 2026 05:00:00 +0000 asID: 149712 IP address blocks: 103.186.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e5:51:c8:56:bf:23:bf:02:c7:1f:7f:07:95:3d:7f:00:b5:50:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: May 8 04:55:00 2025 GMT Not After : May 7 05:00:00 2026 GMT Subject: CN=5F4E2FB481864C007491B3FAA699E9F3CE1FF192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:52:c9:ce:07:6e:f1:3c:bb:bc:7c:f2:0e: 7c:a4:ac:e2:cb:8d:ca:a9:f9:12:30:5a:39:12:73: bc:44:08:74:4c:9b:f1:47:33:65:ae:68:c5:c5:8e: ef:3c:4e:c3:5f:2d:d5:8a:74:11:0d:39:8b:ea:75: ab:c4:35:44:c2:42:b9:3a:bc:d5:98:1e:69:da:ee: cb:73:85:22:c0:6a:06:6b:ae:0f:be:9a:22:64:b6: d1:2f:21:c7:da:7d:03:c2:e0:1d:7f:91:b0:33:49: e8:bf:8a:97:d7:e1:63:06:c0:86:76:ad:16:4b:1e: 7d:1c:4b:32:12:f0:7c:e5:4d:e8:31:29:1e:70:34: 29:de:88:86:8d:12:3b:3d:6f:a2:38:1c:31:ba:c1: 46:9c:99:4f:73:1f:a3:66:13:15:45:48:e3:37:0c: a4:fd:08:0e:82:cc:8d:c2:34:08:83:0b:15:05:db: d0:c7:91:4c:aa:70:e2:eb:29:48:60:48:a3:6a:74: 6f:69:b4:30:ad:2e:2b:01:ca:4e:53:01:77:93:39: 74:af:51:ec:a8:1e:e0:ee:90:be:55:28:5b:37:4f: 69:8b:ed:89:13:6e:78:43:76:9a:03:81:89:88:22: 5c:d0:57:3c:79:e2:05:18:65:d3:2a:5c:3a:11:94: fd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4E:2F:B4:81:86:4C:00:74:91:B3:FA:A6:99:E9:F3:CE:1F:F1:92 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.194.0/23 Signature Algorithm: sha256WithRSAEncryption 56:89:b1:27:1b:76:71:60:59:23:1a:68:4c:5b:44:e2:e4:ae: 18:1e:d6:33:ca:34:64:fd:d5:ae:1c:86:72:1c:a7:aa:0f:4a: af:6d:d8:9e:b8:94:00:c4:29:a2:db:54:84:a8:59:b8:53:f5: c6:cd:24:68:aa:b2:7c:3e:2c:89:e5:7d:f6:8d:76:cc:8c:68: 07:67:81:b6:ad:e7:c5:7b:ab:ca:18:12:20:e1:6c:6a:d8:c3: 22:8e:62:a0:16:aa:6c:f2:d2:1f:94:df:4d:0c:40:f0:a6:4d: c2:f4:02:c3:81:36:a2:9c:11:ef:04:e5:b1:8b:63:0d:27:ef: b2:b5:e3:64:4d:d8:fc:a8:e6:4b:b6:02:77:bc:70:61:c5:5a: 18:b6:17:7f:e9:91:4a:75:6c:e2:d8:e5:14:3e:3d:07:1b:f1: 67:bb:83:09:4b:ce:fa:9b:5c:32:d6:c8:8e:76:ea:9f:ba:af: 3d:20:d7:53:1d:9b:bc:53:a0:b4:93:15:a4:e2:82:15:fc:aa: 18:d7:d8:ca:e2:20:d6:47:fb:38:41:69:0d:0f:ec:62:5a:0e: 8d:b6:27:89:d4:69:40:d1:b4:68:b6:9e:3e:41:84:dc:57:d0: 93:79:80:ac:73:88:b5:4d:2a:27:3c:94:c7:5a:5a:d3:78:00: 6e:22:a2:53 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUA+VRyFa/I78Cxx9/B5U9fwC1UBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTA1MDgwNDU1MDBaFw0yNjA1MDcwNTAwMDBaMDMxMTAvBgNV BAMTKDVGNEUyRkI0ODE4NjRDMDA3NDkxQjNGQUE2OTlFOUYzQ0UxRkYxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2olLJzgdu8Ty7vHzyDnykrOLL jcqp+RIwWjkSc7xECHRMm/FHM2WuaMXFju88TsNfLdWKdBENOYvqdavENUTCQrk6 vNWYHmna7stzhSLAagZrrg++miJkttEvIcfafQPC4B1/kbAzSei/ipfX4WMGwIZ2 rRZLHn0cSzIS8HzlTegxKR5wNCneiIaNEjs9b6I4HDG6wUacmU9zH6NmExVFSOM3 DKT9CA6CzI3CNAiDCxUF29DHkUyqcOLrKUhgSKNqdG9ptDCtLisByk5TAXeTOXSv UeyoHuDukL5VKFs3T2mL7YkTbnhDdpoDgYmIIlzQVzx54gUYZdMqXDoRlP2LAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUX04vtIGGTAB0kbP6ppnp884f8ZIwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyNTJlYWQzLWRjOGYtNGQ4Ni1h ZmNmLWExNDBlNWI4NzUzMi8wLzMxMzAzMzJlMzEzODM2MmUzMTM5MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnusIwDQYJ KoZIhvcNAQELBQADggEBAFaJsScbdnFgWSMaaExbROLkrhge1jPKNGT91a4chnIc p6oPSq9t2J64lADEKaLbVISoWbhT9cbNJGiqsnw+LInlffaNdsyMaAdngbat58V7 q8oYEiDhbGrYwyKOYqAWqmzy0h+U300MQPCmTcL0AsOBNqKcEe8E5bGLYw0n77K1 42RN2Pyo5ku2Ane8cGHFWhi2F3/pkUp1bOLY5RQ+PQcb8We7gwlLzvqbXDLWyI52 6p+6rz0g11Mdm7xToLSTFaTighX8qhjX2MriINZH+zhBaQ0P7GJaDo22J4nUaUDR tGi2nj5BhNxX0JN5gKxziLVNKic8lMdaWtN4AG4iolM= -----END CERTIFICATE-----Generated at Fri Jun 6 16:45:25 2025 by rpki-client