$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33352e302f32342d3234203d3e203234353334.roa File: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (raw, json) Hash identifier: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww= Subject key identifier: 83:3E:3B:84:56:23:F4:B1:DE:1B:29:29:7F:0F:66:1E:A2:AE:F0:2A Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 6F014FC681865E98FFDA54FD141FEE52A87C96E5 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33352e302f32342d3234203d3e203234353334.roa Signing time: Fri 28 Mar 2025 10:02:23 +0000 ROA not before: Fri 28 Mar 2025 09:57:23 +0000 ROA not after: Fri 27 Mar 2026 10:02:23 +0000 asID: 24534 IP address blocks: 103.149.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 07:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:01:4f:c6:81:86:5e:98:ff:da:54:fd:14:1f:ee:52:a8:7c:96:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Mar 28 09:57:23 2025 GMT Not After : Mar 27 10:02:23 2026 GMT Subject: CN=833E3B845623F4B1DE1B29297F0F661EA2AEF02A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:6a:b6:71:a6:48:4c:75:4f:fb:85:5f:3c: 6d:a1:8f:df:2a:67:b4:c2:9a:a2:52:c4:24:fd:65: 82:17:48:f6:88:1a:2f:d8:ad:fc:4c:5f:98:5e:eb: 56:78:ea:29:78:47:e4:5a:37:bb:13:1a:2a:ef:9d: 60:ab:86:16:06:8f:f1:10:25:06:e6:8b:de:27:9c: f6:c5:9d:5c:85:dc:ba:f5:31:cf:a8:0f:2d:e8:a0: 3a:40:fe:08:5b:ed:6b:6c:71:ba:a7:4f:fa:ed:1f: f8:ff:b2:86:26:c7:17:46:76:04:ad:20:4a:3b:7c: c4:7a:f9:bb:71:39:6b:54:31:e7:78:99:0d:2a:5c: 14:40:7f:7f:b1:4f:ab:d8:81:e2:82:87:9e:5c:2c: b2:16:34:55:95:03:5d:64:94:fc:b8:22:3a:a6:c4: e9:32:14:e1:e1:83:c1:7f:5e:42:8f:02:66:e8:ee: 04:50:1b:67:75:cc:d1:f1:f5:c3:e8:72:48:eb:95: 75:96:a9:0e:69:33:77:0a:df:e2:41:2d:5e:d5:34: 04:81:1d:bc:18:22:a1:37:11:e5:08:5d:6d:8f:65: 9e:c9:01:16:28:27:15:95:57:2a:25:a6:ab:00:60: 99:59:42:13:e8:4d:c9:c2:59:9f:e2:56:a2:83:c8: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3E:3B:84:56:23:F4:B1:DE:1B:29:29:7F:0F:66:1E:A2:AE:F0:2A X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33352e302f32342d3234203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.35.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:ee:ef:af:ca:3a:30:10:13:e4:bf:95:0b:c8:2a:6d:3a:fb: 23:9d:e2:9f:03:82:ab:ce:65:45:8b:f6:30:b4:e4:2a:e0:e2: fa:bd:89:be:c9:9c:ca:a6:13:0c:94:8c:d1:dc:8f:7e:c6:63: 16:17:67:84:fa:3c:fc:f1:ea:dc:33:93:8e:a4:41:04:37:2d: d0:54:4c:d1:d8:69:78:dc:bd:a1:11:e0:fb:41:a1:bb:47:90: bd:02:19:a4:f8:1b:c5:fe:35:e1:66:05:be:3c:74:42:38:ac: 55:c4:6d:3f:2a:7c:b5:c9:43:8d:a9:fc:a2:de:a2:92:43:bf: da:cf:85:63:b4:c6:b1:68:08:d1:60:7f:55:9b:81:5b:80:5a: e7:a1:4f:3c:a8:bb:08:b6:c2:59:f0:7b:0e:1d:b0:2e:c3:5f: eb:79:15:e8:a8:cb:fe:dc:33:9d:32:94:5b:1f:32:91:58:61: 0b:28:67:fd:a6:b9:c5:2f:4f:9f:3f:16:1e:94:1b:9a:59:f2: 28:ed:1f:7a:b1:25:5d:94:72:d6:25:62:78:02:42:08:59:a8: 12:82:13:4f:2d:c2:7a:51:62:2a:50:6f:34:c6:92:78:45:17: 6e:d4:09:b4:7f:cb:86:88:83:c5:c1:30:f1:d6:96:f4:c6:d7: a2:11:98:0f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbwFPxoGGXpj/2lT9FB/uUqh8luUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTAzMjgwOTU3MjNaFw0yNjAzMjcxMDAyMjNaMDMxMTAvBgNV BAMTKDgzM0UzQjg0NTYyM0Y0QjFERTFCMjkyOTdGMEY2NjFFQTJBRUYwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG42q2caZITHVP+4VfPG2hj98q Z7TCmqJSxCT9ZYIXSPaIGi/YrfxMX5he61Z46il4R+RaN7sTGirvnWCrhhYGj/EQ JQbmi94nnPbFnVyF3Lr1Mc+oDy3ooDpA/ghb7WtscbqnT/rtH/j/soYmxxdGdgSt IEo7fMR6+btxOWtUMed4mQ0qXBRAf3+xT6vYgeKCh55cLLIWNFWVA11klPy4Ijqm xOkyFOHhg8F/XkKPAmbo7gRQG2d1zNHx9cPockjrlXWWqQ5pM3cK3+JBLV7VNASB HbwYIqE3EeUIXW2PZZ7JARYoJxWVVyolpqsAYJlZQhPoTcnCWZ/iVqKDyFoXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUgz47hFYj9LHeGykpfw9mHqKu8CowHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNjM1ZTI1LTg1OTktNDhhZS1i ZGNiLWUzMjNkZmM4OTZlYy8wLzMxMzAzMzJlMzEzNDM5MmUzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeVIzANBgkqhkiG 9w0BAQsFAAOCAQEAO+7vr8o6MBAT5L+VC8gqbTr7I53inwOCq85lRYv2MLTkKuDi +r2JvsmcyqYTDJSM0dyPfsZjFhdnhPo8/PHq3DOTjqRBBDct0FRM0dhpeNy9oRHg +0Ghu0eQvQIZpPgbxf414WYFvjx0QjisVcRtPyp8tclDjan8ot6ikkO/2s+FY7TG sWgI0WB/VZuBW4Ba56FPPKi7CLbCWfB7Dh2wLsNf63kV6KjL/twznTKUWx8ykVhh Cyhn/aa5xS9Pnz8WHpQbmlnyKO0ferElXZRy1iVieAJCCFmoEoITTy3CelFiKlBv NMaSeEUXbtQJtH/LhoiDxcEw8daW9MbXohGYDw== -----END CERTIFICATE-----Generated at Sun Apr 6 17:20:08 2025 by rpki-client