$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132302e302f32342d3234203d3e203536323436.roa File: 3130332e31302e3132302e302f32342d3234203d3e203536323436.roa (raw, json) Hash identifier: hZqGyBtx+YtZi5x9IcSVHqp8MXxoSpQuXevmdmUanW0= Subject key identifier: 4F:2F:9E:A4:CA:4A:70:86:B4:1B:27:B5:3F:04:E5:8D:C0:09:1F:24 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 137E56014DA329043D7B976C409616C3C00793EC Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132302e302f32342d3234203d3e203536323436.roa Signing time: Mon 02 Jun 2025 01:03:11 +0000 ROA not before: Mon 02 Jun 2025 00:58:11 +0000 ROA not after: Mon 01 Jun 2026 01:03:11 +0000 asID: 56246 IP address blocks: 103.10.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7e:56:01:4d:a3:29:04:3d:7b:97:6c:40:96:16:c3:c0:07:93:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jun 2 00:58:11 2025 GMT Not After : Jun 1 01:03:11 2026 GMT Subject: CN=4F2F9EA4CA4A7086B41B27B53F04E58DC0091F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:9b:1f:b9:9f:a7:c7:14:9c:7d:95:db:3b: 8a:e7:e4:ea:12:a5:99:df:50:7d:ef:82:70:18:e5: b0:ff:b1:8c:d0:66:33:49:2f:28:68:fa:21:a3:7f: fc:be:1a:91:ad:7a:7f:b4:1e:0e:a5:35:dd:6e:9f: 0c:4d:6b:87:0c:d0:81:c7:ab:af:5e:3b:0e:a7:b6: 1d:4a:29:fc:17:3c:e8:dd:17:6d:a6:37:38:db:f5: 59:aa:4d:3e:4e:d8:75:6e:90:b4:40:35:22:1c:a7: e3:87:35:df:94:db:f5:d1:15:f4:eb:c8:54:cd:b0: 67:d0:bc:74:a8:56:45:e1:08:5f:65:31:10:7d:b9: c6:dd:0e:75:bf:5d:dc:d2:1f:10:57:e2:78:55:c6: 93:19:61:57:1f:78:88:47:2f:d5:87:8f:43:0e:67: ed:98:3a:74:3f:e5:e6:a8:a0:cf:55:73:48:d0:ec: 99:3b:91:ba:0d:7a:ae:10:2a:84:0c:78:ca:d1:e9: a9:af:b4:f8:4b:f4:80:36:a7:98:cf:46:02:c2:9b: c6:65:0c:dd:9b:a8:5c:98:c6:2f:28:88:74:39:5d: 82:ae:f5:e7:99:79:eb:07:e8:1a:23:6a:62:00:4e: e6:2d:65:cf:aa:4d:2f:1e:28:db:6b:28:2b:b7:da: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2F:9E:A4:CA:4A:70:86:B4:1B:27:B5:3F:04:E5:8D:C0:09:1F:24 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132302e302f32342d3234203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.120.0/24 Signature Algorithm: sha256WithRSAEncryption 84:e4:8e:ce:31:53:ab:f8:7b:20:dd:e6:89:c7:33:24:24:03: ca:37:74:40:f4:0e:54:2b:dc:12:85:8d:e9:b4:bc:b0:e0:b8: 95:74:87:dd:a6:92:8c:c5:d9:10:ee:5f:7b:d4:ee:4e:50:b7: 69:d6:59:3a:aa:62:8c:2c:5b:f6:d4:a2:9e:bb:94:74:33:a7: 11:2d:7f:6f:94:de:fd:fa:a6:55:96:8d:5a:12:20:77:24:b9: be:10:7a:67:79:f8:24:db:c0:4f:cf:94:58:d1:97:a3:f7:e4: 8a:fc:10:8f:cf:36:b6:b6:6e:73:3a:a0:0e:fa:77:e7:cc:aa: d6:9f:31:98:12:5c:5b:31:7f:f3:c3:6e:c8:20:a7:e1:cf:2b: c3:5b:07:94:13:6b:11:00:d5:33:ff:4a:d3:ed:8f:be:c9:ed: a9:c3:d6:9b:ac:fb:2c:df:37:0c:ce:06:c0:27:6d:d2:06:38: cd:71:ce:ed:6e:6d:18:5a:54:fb:83:8a:17:8d:53:a3:9b:38: a5:9e:a2:b6:65:34:38:8e:17:1d:ce:38:30:6d:01:90:b1:c2: d1:af:6c:eb:4d:79:bc:5e:97:60:a1:93:94:1f:64:9c:37:fd: 71:64:2f:09:28:02:7f:9b:39:c4:7d:55:fd:4c:6d:ed:2d:b0: f4:be:28:bb -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUE35WAU2jKQQ9e5dsQJYWw8AHk+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTA2MDIwMDU4MTFaFw0yNjA2MDEwMTAzMTFaMDMxMTAvBgNV BAMTKDRGMkY5RUE0Q0E0QTcwODZCNDFCMjdCNTNGMDRFNThEQzAwOTFGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NpsfuZ+nxxScfZXbO4rn5OoS pZnfUH3vgnAY5bD/sYzQZjNJLyho+iGjf/y+GpGten+0Hg6lNd1unwxNa4cM0IHH q69eOw6nth1KKfwXPOjdF22mNzjb9VmqTT5O2HVukLRANSIcp+OHNd+U2/XRFfTr yFTNsGfQvHSoVkXhCF9lMRB9ucbdDnW/XdzSHxBX4nhVxpMZYVcfeIhHL9WHj0MO Z+2YOnQ/5eaooM9Vc0jQ7Jk7kboNeq4QKoQMeMrR6amvtPhL9IA2p5jPRgLCm8Zl DN2bqFyYxi8oiHQ5XYKu9eeZeesH6BojamIATuYtZc+qTS8eKNtrKCu32sxbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTy+epMpKcIa0Gye1PwTljcAJHyQwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzAzMzJlMzEzMDJlMzEzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKeDANBgkqhkiG 9w0BAQsFAAOCAQEAhOSOzjFTq/h7IN3micczJCQDyjd0QPQOVCvcEoWN6bS8sOC4 lXSH3aaSjMXZEO5fe9TuTlC3adZZOqpijCxb9tSinruUdDOnES1/b5Te/fqmVZaN WhIgdyS5vhB6Z3n4JNvAT8+UWNGXo/fkivwQj882trZuczqgDvp358yq1p8xmBJc WzF/88NuyCCn4c8rw1sHlBNrEQDVM/9K0+2PvsntqcPWm6z7LN83DM4GwCdt0gY4 zXHO7W5tGFpU+4OKF41To5s4pZ6itmU0OI4XHc44MG0BkLHC0a9s6015vF6XYKGT lB9knDf9cWQvCSgCf5s5xH1V/Uxt7S2w9L4ouw== -----END CERTIFICATE-----Generated at Fri Jun 6 16:50:01 2025 by rpki-client