$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa File: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (raw, json) Hash identifier: sb1oa9JahKggAJqL+2P4wHzELfKnqVAcTcFhItAaTrg= Subject key identifier: 4F:10:C5:93:38:F4:5A:6C:4D:9B:84:19:02:8E:C0:4F:8F:5C:DB:08 Certificate issuer: /CN=98F94938EA9072872BE06639F79DC61C000F849C Certificate serial: 1D7E2F7BBCE9066F7A6D9C34289AF549A61D93FF Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa Signing time: Mon 02 Jun 2025 02:02:44 +0000 ROA not before: Mon 02 Jun 2025 01:57:44 +0000 ROA not after: Mon 01 Jun 2026 02:02:44 +0000 asID: 58369 IP address blocks: 103.121.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7e:2f:7b:bc:e9:06:6f:7a:6d:9c:34:28:9a:f5:49:a6:1d:93:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C Validity Not Before: Jun 2 01:57:44 2025 GMT Not After : Jun 1 02:02:44 2026 GMT Subject: CN=4F10C59338F45A6C4D9B8419028EC04F8F5CDB08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:04:58:20:84:7e:5d:4c:cf:94:4d:f9:6f:71: 50:13:26:79:57:52:c3:d5:6c:78:b3:a2:65:97:5c: 89:85:da:30:5a:58:68:46:8f:ec:dc:44:5e:3e:17: d4:7b:41:5b:3f:1d:02:91:75:2c:79:f5:f5:f3:b4: 4b:86:f1:e9:70:60:b0:24:c3:ca:c8:71:96:bb:65: 33:45:e1:04:1e:64:8d:60:97:5e:ef:33:8e:61:a6: 13:58:1d:dc:61:bf:d9:8e:a8:37:3b:87:d9:7c:d8: 48:c7:43:e0:a0:a1:34:11:14:74:f8:3f:f1:d6:f7: 39:e9:28:a2:b3:c9:96:29:e1:92:0e:10:5a:23:3a: 5c:dc:0f:1c:59:c5:e2:b4:be:6e:d0:b6:fa:0e:77: bc:b9:21:ee:2f:a7:5f:29:51:21:d3:23:38:8b:62: c5:8c:e5:84:a3:a7:c6:3a:bd:65:36:c2:b3:9d:60: b0:c4:7a:e3:2b:ef:c5:da:21:38:4a:53:ee:88:28: b2:4b:a0:e3:db:1d:31:c3:f6:07:9c:29:d2:b6:7f: ea:c4:07:c2:28:77:52:fb:c3:c7:6a:fe:e4:38:74: 22:ef:0d:9d:cb:84:18:ad:dd:b9:8f:9a:4d:20:29: 70:1b:77:1e:66:0f:7c:c7:26:36:b4:d1:71:f5:39: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:10:C5:93:38:F4:5A:6C:4D:9B:84:19:02:8E:C0:4F:8F:5C:DB:08 X509v3 Authority Key Identifier: keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.148.0/24 Signature Algorithm: sha256WithRSAEncryption b2:d9:50:eb:bf:b0:ac:24:69:a4:40:c8:ac:a4:77:d6:17:63: 85:07:f9:87:12:01:38:62:72:a2:e9:03:ac:55:66:48:d8:92: ec:06:0d:9f:04:b9:67:c4:f3:cc:2a:b0:a1:1f:d2:18:83:f6: 53:56:8a:16:09:1e:08:fc:b9:c7:32:e5:ba:48:e6:f0:00:14: 13:bf:db:3e:5f:a9:bc:03:58:0d:b9:de:e9:dc:ed:d9:42:16: 4c:bf:e6:b3:3c:64:bd:80:17:63:43:c2:d1:99:67:24:c2:64: 87:5f:61:35:a4:b2:0d:69:95:85:9e:56:a3:0a:24:eb:35:cc: 17:ac:ae:0a:f4:e8:06:b3:70:ab:76:36:9d:52:6c:89:c2:8a: 53:67:c4:0b:05:6f:b9:c4:5e:47:4a:e9:5c:7a:94:e9:f8:b1: 45:78:14:77:8c:90:38:4f:c5:2a:f1:2e:d0:01:25:04:9d:68: f5:a0:77:6a:2a:68:90:bb:96:6f:26:27:98:14:46:16:34:a1: a2:50:0b:7f:74:19:1d:a0:c9:b4:53:8e:3a:20:48:44:cc:04: 2f:ef:e9:7c:df:e9:50:5e:40:e9:42:25:82:6f:8c:17:44:08: d8:9b:30:4d:04:cc:88:f2:b4:1e:f4:e9:a6:b0:81:10:15:a9: 64:11:b2:9c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHX4ve7zpBm96bZw0KJr1SaYdk/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMw MDBGODQ5QzAeFw0yNTA2MDIwMTU3NDRaFw0yNjA2MDEwMjAyNDRaMDMxMTAvBgNV BAMTKDRGMTBDNTkzMzhGNDVBNkM0RDlCODQxOTAyOEVDMDRGOEY1Q0RCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBFgghH5dTM+UTflvcVATJnlX UsPVbHizomWXXImF2jBaWGhGj+zcRF4+F9R7QVs/HQKRdSx59fXztEuG8elwYLAk w8rIcZa7ZTNF4QQeZI1gl17vM45hphNYHdxhv9mOqDc7h9l82EjHQ+CgoTQRFHT4 P/HW9znpKKKzyZYp4ZIOEFojOlzcDxxZxeK0vm7QtvoOd7y5Ie4vp18pUSHTIziL YsWM5YSjp8Y6vWU2wrOdYLDEeuMr78XaIThKU+6IKLJLoOPbHTHD9gecKdK2f+rE B8Iod1L7w8dq/uQ4dCLvDZ3LhBit3bmPmk0gKXAbdx5mD3zHJja00XH1OdA/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUTxDFkzj0WmxNm4QZAo7AT49c2wgwHwYDVR0j BBgwFoAUmPlJOOqQcocr4GY5953GHAAPhJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMC85OEY5NDkzOEVB OTA3Mjg3MkJFMDY2MzlGNzlEQzYxQzAwMEY4NDlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGOTQ5MzhFQTkwNzI4NzJCRTA2NjM5Rjc5REM2MUMwMDBG ODQ5Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzYjE0NmEyLTc3MTUtNDU5Zi04 MjQ0LThiMzJhMzY0NjYzYy8wLzMxMzAzMzJlMzEzMjMxMmUzMTM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3mUMA0GCSqG SIb3DQEBCwUAA4IBAQCy2VDrv7CsJGmkQMispHfWF2OFB/mHEgE4YnKi6QOsVWZI 2JLsBg2fBLlnxPPMKrChH9IYg/ZTVooWCR4I/LnHMuW6SObwABQTv9s+X6m8A1gN ud7p3O3ZQhZMv+azPGS9gBdjQ8LRmWckwmSHX2E1pLINaZWFnlajCiTrNcwXrK4K 9OgGs3CrdjadUmyJwopTZ8QLBW+5xF5HSulcepTp+LFFeBR3jJA4T8Uq8S7QASUE nWj1oHdqKmiQu5ZvJieYFEYWNKGiUAt/dBkdoMm0U446IEhEzAQv7+l83+lQXkDp QiWCb4wXRAjYmzBNBMyI8rQe9OmmsIEQFalkEbKc -----END CERTIFICATE-----Generated at Thu Jun 5 18:59:38 2025 by rpki-client