$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35372e302f32342d3234203d3e203538383136.roa File: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (raw, json) Hash identifier: KnUhOivFyTwSLl1lFtmGPDtu87HmW4jCAVjkx4JXtuo= Subject key identifier: 2D:E3:02:5E:06:42:AC:B3:7B:E5:AA:5E:EA:20:9B:90:6D:5F:80:ED Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Certificate serial: 1B0446BA4B0B0BEFECECF5F3591E3375F437555F Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35372e302f32342d3234203d3e203538383136.roa Signing time: Thu 06 Mar 2025 08:00:00 +0000 ROA not before: Thu 06 Mar 2025 07:55:00 +0000 ROA not after: Thu 05 Mar 2026 08:00:00 +0000 asID: 58816 IP address blocks: 103.248.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:04:46:ba:4b:0b:0b:ef:ec:ec:f5:f3:59:1e:33:75:f4:37:55:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166 Validity Not Before: Mar 6 07:55:00 2025 GMT Not After : Mar 5 08:00:00 2026 GMT Subject: CN=2DE3025E0642ACB37BE5AA5EEA209B906D5F80ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:03:79:94:2a:d6:3c:80:6b:49:de:b3:6a: a9:ac:ab:87:d4:93:c5:4b:df:62:dd:81:86:fa:20: 73:a5:26:04:f6:15:a2:51:3b:55:eb:89:14:80:aa: ba:a1:96:b0:33:a2:66:50:06:66:72:43:46:35:00: 63:02:bb:35:85:af:53:4a:a5:16:35:0f:83:96:fb: 7c:4e:d6:66:e5:79:58:73:df:75:9a:3e:3a:e5:60: 86:87:05:f2:85:ac:30:53:49:d0:13:68:27:db:47: b4:e5:d9:de:d9:ac:cc:16:12:0d:52:c5:24:d4:83: 78:a7:39:fe:f4:5a:d6:81:65:48:9f:60:66:b1:cd: 94:91:60:1d:78:4d:01:02:74:16:f4:6c:51:6a:ba: 13:b3:81:de:03:f5:18:4c:2b:1f:26:68:6f:f1:32: 99:c4:29:5e:a7:c5:79:a0:53:1c:42:be:13:d1:2b: 16:20:77:e9:13:66:df:f8:50:d5:90:75:0a:d0:bd: 25:0f:64:37:6d:10:87:7a:9f:5c:b1:d8:b8:38:3a: 5a:43:9f:73:5e:d1:0a:62:bf:8c:35:46:93:0b:bb: 04:94:81:da:5f:c2:f7:99:6e:cc:da:10:75:c0:ce: 82:98:c2:1a:23:a5:22:e8:8f:4a:08:45:9e:ac:57: 66:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E3:02:5E:06:42:AC:B3:7B:E5:AA:5E:EA:20:9B:90:6D:5F:80:ED X509v3 Authority Key Identifier: keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35372e302f32342d3234203d3e203538383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.248.57.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:b9:84:77:6d:66:d4:78:e0:d5:5e:cb:d9:cd:99:ff:a5:ef: 69:c2:e6:b6:88:55:38:17:6b:05:16:2f:d5:f4:5d:c9:da:6a: 27:26:6b:b1:77:3f:b3:c6:71:9e:f5:78:95:31:3e:a3:f4:fa: b3:71:66:a2:de:ec:b7:f6:81:f6:4a:f2:cc:2b:7a:74:1e:a5: de:59:c4:1b:dd:57:87:1e:7a:ce:90:ed:7f:37:a7:88:b7:5c: e3:40:59:6c:cf:62:d2:0c:dc:01:89:cc:80:2b:cc:6b:c2:5e: a6:14:c1:3f:40:a2:d7:55:3c:89:b6:c2:1e:23:23:d8:8b:02: 65:0d:7b:84:8b:77:71:20:7f:e8:3f:20:a8:ea:e3:83:a9:42: 98:a3:f6:84:ec:3b:e9:10:a3:b6:85:09:61:d4:38:fe:8b:90: e3:98:16:9a:ff:42:bf:37:da:ca:67:d4:28:6b:5f:17:9c:73: 22:b0:dd:ef:0c:6f:2b:ab:b8:1a:26:49:79:09:3e:30:a3:48: 85:e2:79:ca:7e:11:b0:c3:8c:cc:0e:04:26:6c:46:83:59:1b: 53:ec:14:80:23:33:d8:ad:84:2f:71:ed:75:70:f1:5b:ef:49: 86:b0:93:d2:6b:d7:86:70:eb:71:9e:da:06:db:2a:4e:e0:31: ea:06:21:f2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGwRGuksLC+/s7PXzWR4zdfQ3VV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VF MkY5MjE2NjAeFw0yNTAzMDYwNzU1MDBaFw0yNjAzMDUwODAwMDBaMDMxMTAvBgNV BAMTKDJERTMwMjVFMDY0MkFDQjM3QkU1QUE1RUVBMjA5QjkwNkQ1RjgwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LQN5lCrWPIBrSd6zaqmsq4fU k8VL32LdgYb6IHOlJgT2FaJRO1XriRSAqrqhlrAzomZQBmZyQ0Y1AGMCuzWFr1NK pRY1D4OW+3xO1mbleVhz33WaPjrlYIaHBfKFrDBTSdATaCfbR7Tl2d7ZrMwWEg1S xSTUg3inOf70WtaBZUifYGaxzZSRYB14TQECdBb0bFFquhOzgd4D9RhMKx8maG/x MpnEKV6nxXmgUxxCvhPRKxYgd+kTZt/4UNWQdQrQvSUPZDdtEId6n1yx2Lg4OlpD n3Ne0Qpiv4w1RpMLuwSUgdpfwveZbszaEHXAzoKYwhojpSLoj0oIRZ6sV2YlAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULeMCXgZCrLN75ape6iCbkG1fgO0wHwYDVR0j BBgwFoAUIEIAiuyAFS83PSoE39OJPuL5IWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmMzY2JjNC04ODgzLTQxMWMtODc2ZS1lOWUyM2E4ZDhhZDkvMC8yMDQyMDA4QUVD ODAxNTJGMzczRDJBMDRERkQzODkzRUUyRjkyMTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VFMkY5 MjE2Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04 NzZlLWU5ZTIzYThkOGFkOS8wLzMxMzAzMzJlMzIzNDM4MmUzNTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf4OTANBgkqhkiG 9w0BAQsFAAOCAQEALbmEd21m1Hjg1V7L2c2Z/6XvacLmtohVOBdrBRYv1fRdydpq JyZrsXc/s8ZxnvV4lTE+o/T6s3Fmot7st/aB9kryzCt6dB6l3lnEG91Xhx56zpDt fzeniLdc40BZbM9i0gzcAYnMgCvMa8JephTBP0Ci11U8ibbCHiMj2IsCZQ17hIt3 cSB/6D8gqOrjg6lCmKP2hOw76RCjtoUJYdQ4/ouQ45gWmv9CvzfaymfUKGtfF5xz IrDd7wxvK6u4GiZJeQk+MKNIheJ5yn4RsMOMzA4EJmxGg1kbU+wUgCMz2K2EL3Ht dXDxW+9JhrCT0mvXhnDrcZ7aBtsqTuAx6gYh8g== -----END CERTIFICATE-----Generated at Sun Apr 6 10:46:09 2025 by rpki-client