$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa File: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (raw, json) Hash identifier: We1k3RElK9GB1JUpvlgdlEhaIFsMFI9pBQlBnBG9xm0= Subject key identifier: 05:C4:E1:99:F1:BF:D1:DE:7E:DE:45:6C:FD:53:33:14:59:11:4E:E9 Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 218EAFB1BBD0A77CC84568DF358443FF4334B7D3 Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa Signing time: Mon 02 Jun 2025 01:03:17 +0000 ROA not before: Mon 02 Jun 2025 00:58:17 +0000 ROA not after: Mon 01 Jun 2026 01:03:17 +0000 asID: 38515 IP address blocks: 103.107.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8e:af:b1:bb:d0:a7:7c:c8:45:68:df:35:84:43:ff:43:34:b7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: Jun 2 00:58:17 2025 GMT Not After : Jun 1 01:03:17 2026 GMT Subject: CN=05C4E199F1BFD1DE7EDE456CFD53331459114EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:a1:8f:8d:9c:99:18:3b:e5:53:6c:be:9c: d2:c8:c6:72:e4:bb:ae:15:77:d3:ba:2c:e2:ec:e5: fe:e9:b4:da:67:6f:ee:c3:6e:b3:9b:28:a4:b5:20: ad:b6:44:6a:6f:d8:21:da:0f:b8:45:ae:3c:e4:97: b3:af:f9:e2:38:ca:a7:51:33:c6:82:96:37:ab:bd: 52:bf:2f:e5:f3:aa:2a:9a:8e:46:8a:4a:5a:eb:32: 59:08:20:16:a4:1e:0f:b2:21:79:77:b1:cc:97:88: 63:b3:0f:28:9c:96:2d:2e:01:24:f5:e4:71:25:14: 35:bb:c9:d7:16:2c:01:e7:bb:b3:5e:37:8e:91:89: 37:aa:f2:db:5d:e0:9a:2c:da:16:f0:1c:08:14:b6: ed:d5:9f:8b:ab:55:19:85:5e:e5:02:96:fc:d0:f7: 0c:9f:b4:3e:2a:17:9b:14:03:84:be:8d:a8:d5:9d: 54:dc:80:93:5e:46:87:17:46:6e:f5:7e:ec:36:8a: d2:a9:d4:06:6a:bd:2f:89:50:61:8d:eb:f2:bf:03: b9:9f:52:a9:ff:4a:4a:a0:23:6c:29:c0:29:07:b0: cd:f9:a9:e4:d8:b6:ca:75:76:67:74:9c:58:77:1c: 06:39:01:75:e6:a8:57:2d:db:ff:90:6e:4a:30:3f: 26:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C4:E1:99:F1:BF:D1:DE:7E:DE:45:6C:FD:53:33:14:59:11:4E:E9 X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.249.0/24 Signature Algorithm: sha256WithRSAEncryption b6:f9:0a:82:e3:9f:27:66:65:15:4e:b2:38:1c:41:10:aa:21: bf:e2:06:e5:e0:9b:69:d2:ce:55:84:47:81:62:1b:57:3f:13: 3d:d2:22:88:13:15:99:80:90:e5:67:d7:1d:ad:6f:69:02:aa: 85:23:53:f4:8c:b2:6d:eb:7c:c4:69:d3:ea:87:ae:19:47:4e: 2d:8c:16:a7:5c:6b:4d:81:b3:b2:6d:a0:ba:09:59:89:ab:42: 97:68:b2:6c:8c:20:b3:35:2e:ef:2a:40:af:a4:a3:5d:53:f5: b4:1c:87:b3:53:d2:3e:dd:d2:54:71:9e:47:92:b5:53:ed:f0: f0:c7:fc:44:08:3c:e4:98:75:44:1d:3b:b1:8e:85:e3:db:cb: c5:20:05:6e:82:f3:5a:46:94:0c:fe:f9:c7:27:70:f8:af:e0: 7a:3e:ee:30:5f:56:ea:be:8f:bc:ec:f2:29:21:da:04:d3:35: 41:28:ac:92:f5:6d:3b:bc:2f:83:4a:75:dc:96:45:b4:2f:0e: 5b:c2:7b:ff:e1:03:68:99:cd:0e:c1:26:f4:9a:cb:07:61:2f: 9e:ce:68:bb:65:f4:d8:3d:3a:90:9d:bc:70:98:7e:ed:aa:2a: 93:93:cf:ea:83:63:a1:cc:6c:d7:e5:23:11:90:e2:33:d9:41: 55:e2:0b:05 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIY6vsbvQp3zIRWjfNYRD/0M0t9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yNTA2MDIwMDU4MTdaFw0yNjA2MDEwMTAzMTdaMDMxMTAvBgNV BAMTKDA1QzRFMTk5RjFCRkQxREU3RURFNDU2Q0ZENTMzMzE0NTkxMTRFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJY6GPjZyZGDvlU2y+nNLIxnLk u64Vd9O6LOLs5f7ptNpnb+7DbrObKKS1IK22RGpv2CHaD7hFrjzkl7Ov+eI4yqdR M8aCljervVK/L+XzqiqajkaKSlrrMlkIIBakHg+yIXl3scyXiGOzDyicli0uAST1 5HElFDW7ydcWLAHnu7NeN46RiTeq8ttd4Jos2hbwHAgUtu3Vn4urVRmFXuUClvzQ 9wyftD4qF5sUA4S+jajVnVTcgJNeRocXRm71fuw2itKp1AZqvS+JUGGN6/K/A7mf Uqn/SkqgI2wpwCkHsM35qeTYtsp1dmd0nFh3HAY5AXXmqFct2/+QbkowPyZpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBcThmfG/0d5+3kVs/VMzFFkRTukwHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzAzMzJlMzEzMDM3MmUzMjM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2v5MA0GCSqG SIb3DQEBCwUAA4IBAQC2+QqC458nZmUVTrI4HEEQqiG/4gbl4Jtp0s5VhEeBYhtX PxM90iKIExWZgJDlZ9cdrW9pAqqFI1P0jLJt63zEadPqh64ZR04tjBanXGtNgbOy baC6CVmJq0KXaLJsjCCzNS7vKkCvpKNdU/W0HIezU9I+3dJUcZ5HkrVT7fDwx/xE CDzkmHVEHTuxjoXj28vFIAVugvNaRpQM/vnHJ3D4r+B6Pu4wX1bqvo+87PIpIdoE 0zVBKKyS9W07vC+DSnXclkW0Lw5bwnv/4QNomc0OwSb0mssHYS+ezmi7ZfTYPTqQ nbxwmH7tqiqTk8/qg2OhzGzX5SMRkOIz2UFV4gsF -----END CERTIFICATE-----Generated at Sun Jun 8 18:41:43 2025 by rpki-client