$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32342d3234203d3e20313439393138.roa File: 3130332e38302e39342e302f32342d3234203d3e20313439393138.roa (raw, json) Hash identifier: Sv8Lj/9ts337yl530zmQURGB3Akxuc0SiQxE5gE7SVA= Subject key identifier: 8D:95:B6:72:AB:CA:1A:A4:CA:16:A3:9D:13:50:31:6C:D5:08:3C:2F Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 58E3F112C6354CB77756E7D8422196736EFEB8E5 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32342d3234203d3e20313439393138.roa Signing time: Wed 21 May 2025 04:00:01 +0000 ROA not before: Wed 21 May 2025 03:55:01 +0000 ROA not after: Wed 20 May 2026 04:00:01 +0000 asID: 149918 IP address blocks: 103.80.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e3:f1:12:c6:35:4c:b7:77:56:e7:d8:42:21:96:73:6e:fe:b8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: May 21 03:55:01 2025 GMT Not After : May 20 04:00:01 2026 GMT Subject: CN=8D95B672ABCA1AA4CA16A39D1350316CD5083C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:7f:5e:75:31:3a:fc:e9:80:bb:5f:d4:08: 10:8f:4b:d9:fe:63:06:a5:89:5d:b1:b6:d0:b7:39: 7d:8a:0c:93:7b:c2:62:2c:d8:21:2b:dd:13:10:fa: 0e:16:e3:34:6b:7d:a4:31:0c:ab:1d:29:3b:f0:b6: 5a:1c:7c:c4:9a:10:15:9a:ac:cf:57:65:07:a5:7e: a4:18:ac:bd:59:29:ca:85:f1:92:78:e6:f5:86:7c: eb:27:94:74:84:b6:30:c8:1e:b7:a6:5c:a5:0f:03: 7c:8f:36:c6:9a:e8:de:e2:f0:f3:c3:03:12:68:c0: 3e:b8:de:8d:83:81:11:e8:bd:27:af:ff:d8:9a:14: 51:49:e4:5a:f1:65:77:43:69:13:36:1c:b0:34:ff: 8c:1d:84:29:20:4b:d2:88:70:3b:25:cd:23:61:ea: 93:37:3d:74:3d:11:f3:8a:00:2d:10:11:cb:92:31: 58:76:19:6c:cc:88:a0:cf:a1:ca:c6:d8:e9:70:80: fe:d1:66:95:a7:4b:e7:b3:1f:f8:b0:fe:9a:5e:23: de:25:80:f6:92:f0:3c:41:af:1f:c1:2c:18:5b:79: 36:ee:4f:20:5f:c6:fe:cf:0d:6a:18:ee:52:39:2d: a2:c4:f0:31:27:fa:e9:e0:21:36:e5:99:57:5b:e7: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:95:B6:72:AB:CA:1A:A4:CA:16:A3:9D:13:50:31:6C:D5:08:3C:2F X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32342d3234203d3e20313439393138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.80.94.0/24 Signature Algorithm: sha256WithRSAEncryption 93:f4:7d:96:15:23:d3:fb:cb:d0:bd:6e:5f:d5:15:94:5b:f8: 07:32:9e:91:38:ee:d4:81:34:39:e7:cd:45:d2:c7:30:72:b0: af:24:f2:cb:11:c1:a2:08:20:70:a6:a7:91:f7:32:97:c1:cb: e8:7d:e3:94:2a:8a:b2:ca:38:7a:b1:a2:ec:b4:fa:8e:c3:49: 53:10:1b:eb:66:fc:2f:86:a1:38:b0:cb:6e:d8:a0:40:30:2f: 5c:f2:d5:37:4c:60:a3:0d:5c:7c:b7:36:8f:a7:8e:a0:27:df: 6a:8d:15:f0:7a:8b:4f:61:6b:d6:e6:fc:64:7e:ae:0e:de:0c: 7d:db:26:da:fc:bf:85:22:85:d3:58:b3:86:6e:03:24:9e:ba: b7:13:90:37:68:29:1e:56:6c:ed:b1:9d:cc:ff:89:bc:d4:e0: ac:70:71:e5:f1:34:72:c2:7a:df:a9:cc:85:f6:02:81:a9:99: 83:b8:fc:91:8d:46:21:44:7d:70:60:64:b3:74:2d:2a:ad:25: 6b:48:c6:2e:9d:8a:76:c6:ba:58:3c:f2:b1:04:9b:54:96:24: 43:7a:1f:3d:d2:4f:e4:fe:cf:40:a8:36:e9:94:58:89:e6:03: bc:d2:0d:e5:4f:15:47:82:6b:9b:81:70:28:31:84:4d:bc:c2: 22:28:18:7b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWOPxEsY1TLd3VufYQiGWc27+uOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNTA1MjEwMzU1MDFaFw0yNjA1MjAwNDAwMDFaMDMxMTAvBgNV BAMTKDhEOTVCNjcyQUJDQTFBQTRDQTE2QTM5RDEzNTAzMTZDRDUwODNDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxD39edTE6/OmAu1/UCBCPS9n+ YwaliV2xttC3OX2KDJN7wmIs2CEr3RMQ+g4W4zRrfaQxDKsdKTvwtlocfMSaEBWa rM9XZQelfqQYrL1ZKcqF8ZJ45vWGfOsnlHSEtjDIHremXKUPA3yPNsaa6N7i8PPD AxJowD643o2DgRHovSev/9iaFFFJ5FrxZXdDaRM2HLA0/4wdhCkgS9KIcDslzSNh 6pM3PXQ9EfOKAC0QEcuSMVh2GWzMiKDPocrG2OlwgP7RZpWnS+ezH/iw/ppeI94l gPaS8DxBrx/BLBhbeTbuTyBfxv7PDWoY7lI5LaLE8DEn+ungITblmVdb5/VZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjZW2cqvKGqTKFqOdE1AxbNUIPC8wHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzAzMzJlMzgzMDJlMzkzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM5MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdQXjANBgkqhkiG 9w0BAQsFAAOCAQEAk/R9lhUj0/vL0L1uX9UVlFv4BzKekTju1IE0OefNRdLHMHKw ryTyyxHBogggcKankfcyl8HL6H3jlCqKsso4erGi7LT6jsNJUxAb62b8L4ahOLDL btigQDAvXPLVN0xgow1cfLc2j6eOoCffao0V8HqLT2Fr1ub8ZH6uDt4Mfdsm2vy/ hSKF01izhm4DJJ66txOQN2gpHlZs7bGdzP+JvNTgrHBx5fE0csJ636nMhfYCgamZ g7j8kY1GIUR9cGBks3QtKq0la0jGLp2Kdsa6WDzysQSbVJYkQ3ofPdJP5P7PQKg2 6ZRYieYDvNIN5U8VR4Jrm4FwKDGETbzCIigYew== -----END CERTIFICATE-----Generated at Thu Jun 5 18:28:28 2025 by rpki-client