$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa File: 3130332e38302e39342e302f32332d3233203d3e20313439393138.roa (raw, json) Hash identifier: QomALuZh560wA4XSnq0uHiERVKskvU73jPe/dFNv0V4= Subject key identifier: 96:25:F5:03:BA:93:7E:FE:14:60:A9:26:D5:27:F9:6E:06:B3:3D:26 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 50F6D6134D70117A58B1BD287BFEE091F52B49F7 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa Signing time: Wed 21 May 2025 04:00:00 +0000 ROA not before: Wed 21 May 2025 03:55:00 +0000 ROA not after: Wed 20 May 2026 04:00:00 +0000 asID: 149918 IP address blocks: 103.80.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f6:d6:13:4d:70:11:7a:58:b1:bd:28:7b:fe:e0:91:f5:2b:49:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: May 21 03:55:00 2025 GMT Not After : May 20 04:00:00 2026 GMT Subject: CN=9625F503BA937EFE1460A926D527F96E06B33D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:25:e1:84:0c:98:7e:d8:8e:13:f6:a3:2c:27: b5:c6:63:d9:92:08:6d:bd:2b:3f:65:23:ea:54:fc: 2d:0d:81:05:6b:c5:d3:c0:f8:de:72:ac:5b:08:12: 38:1e:10:3d:f9:43:05:bc:c4:47:7d:25:32:32:2f: ff:93:95:64:98:0f:1a:66:d6:63:24:a3:14:60:c6: 31:08:5b:6c:ce:80:4e:9c:d0:a3:7b:be:c5:86:a0: 45:38:18:86:d7:f0:b9:db:58:b1:e8:b2:66:6e:e2: ff:08:2d:84:1b:26:d0:54:50:2e:40:f1:7a:7b:4d: 15:e1:62:08:29:61:53:87:79:fc:9b:74:09:48:cd: 0f:b4:c9:a1:32:96:fd:57:7a:2c:d0:82:5a:31:55: 2d:62:79:9a:42:88:b8:d6:71:e5:db:d7:35:6b:5c: d5:ec:14:ff:cd:ee:75:b9:3b:7f:5e:6f:7c:99:c2: 0c:9e:99:15:c9:43:3c:78:69:69:a5:29:e1:ab:87: 87:b1:de:5f:0e:76:3a:38:32:5e:25:f6:ba:05:ba: a7:cd:56:dc:c7:61:d5:7e:c1:15:d6:03:ee:2a:41: 5c:2c:e6:cb:38:29:1e:42:97:57:78:0e:29:d6:5b: 72:5c:b6:2d:fb:95:14:13:e4:f6:aa:a9:1b:b4:f1: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:25:F5:03:BA:93:7E:FE:14:60:A9:26:D5:27:F9:6E:06:B3:3D:26 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.80.94.0/23 Signature Algorithm: sha256WithRSAEncryption 41:ea:02:a7:24:f0:4e:cb:d4:9e:df:b7:ad:ce:b3:99:d2:0d: 84:33:4e:a3:4c:eb:68:7c:0b:f8:02:d9:8f:0f:e3:13:fe:6c: 0a:fc:d3:9f:a1:30:d9:45:7c:59:fb:9b:06:53:83:4c:17:26: 40:2e:71:98:8a:46:91:ac:7f:81:81:6a:e2:c8:45:38:3e:d1: c4:0a:c1:0f:fa:a3:a0:17:b0:f5:21:ff:27:51:8f:10:0e:c4: b1:77:18:dd:6c:27:25:6c:3e:77:e1:66:4f:b5:a5:eb:f9:a4: fb:2d:aa:09:af:3c:d7:59:2c:32:45:c2:1d:30:b9:c5:df:c8: 83:23:4c:4a:ba:8f:c3:27:82:80:25:a3:5b:d0:a3:8b:d3:93: 8d:72:c2:24:45:a5:6d:eb:79:ee:e7:ef:a6:6d:3b:a2:b7:11: d5:ea:cf:7d:4c:98:15:8a:f6:f7:61:ea:6e:92:84:cd:68:8a: f2:8c:ce:75:9c:52:ea:86:f2:ca:3d:2d:64:fb:0c:3f:2c:df: 70:4c:0e:14:b7:e2:1d:35:89:9b:0a:a3:3a:b5:17:7e:a7:16: 30:33:80:f4:53:c6:ff:d8:72:ce:72:e4:78:48:08:7e:28:ae: 1c:4d:ac:39:61:fd:fa:79:ca:cf:98:15:9e:13:c3:ac:7a:a8: 7a:56:a4:64 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUPbWE01wEXpYsb0oe/7gkfUrSfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNTA1MjEwMzU1MDBaFw0yNjA1MjAwNDAwMDBaMDMxMTAvBgNV BAMTKDk2MjVGNTAzQkE5MzdFRkUxNDYwQTkyNkQ1MjdGOTZFMDZCMzNEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJeGEDJh+2I4T9qMsJ7XGY9mS CG29Kz9lI+pU/C0NgQVrxdPA+N5yrFsIEjgeED35QwW8xEd9JTIyL/+TlWSYDxpm 1mMkoxRgxjEIW2zOgE6c0KN7vsWGoEU4GIbX8LnbWLHosmZu4v8ILYQbJtBUUC5A 8Xp7TRXhYggpYVOHefybdAlIzQ+0yaEylv1XeizQgloxVS1ieZpCiLjWceXb1zVr XNXsFP/N7nW5O39eb3yZwgyemRXJQzx4aWmlKeGrh4ex3l8Odjo4Ml4l9roFuqfN VtzHYdV+wRXWA+4qQVws5ss4KR5Cl1d4DinWW3Jcti37lRQT5PaqqRu08eQ5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUliX1A7qTfv4UYKkm1Sf5bgazPSYwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzAzMzJlMzgzMDJlMzkzNDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzQzOTM5MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdQXjANBgkqhkiG 9w0BAQsFAAOCAQEAQeoCpyTwTsvUnt+3rc6zmdINhDNOo0zraHwL+ALZjw/jE/5s CvzTn6Ew2UV8WfubBlODTBcmQC5xmIpGkax/gYFq4shFOD7RxArBD/qjoBew9SH/ J1GPEA7EsXcY3WwnJWw+d+FmT7Wl6/mk+y2qCa8811ksMkXCHTC5xd/IgyNMSrqP wyeCgCWjW9Cji9OTjXLCJEWlbet57ufvpm07orcR1erPfUyYFYr292HqbpKEzWiK 8ozOdZxS6obyyj0tZPsMPyzfcEwOFLfiHTWJmwqjOrUXfqcWMDOA9FPG/9hyznLk eEgIfiiuHE2sOWH9+nnKz5gVnhPDrHqoelakZA== -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:44 2025 by rpki-client