$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/3130332e39352e34302e302f32322d3234203d3e203538343935.roa File: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (raw, json) Hash identifier: 4Nmw1fLmOShLUzPpmEzdZOQ+qEZBBauKqV3+7mgcSNw= Subject key identifier: 05:75:9E:5E:08:F3:0D:EC:2D:31:1B:36:C2:A2:E3:36:74:1D:C0:C0 Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Certificate serial: 0341270714CD6802E4DB1DFED7B4C2700782FA1B Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/3130332e39352e34302e302f32322d3234203d3e203538343935.roa Signing time: Mon 02 Jun 2025 01:03:18 +0000 ROA not before: Mon 02 Jun 2025 00:58:18 +0000 ROA not after: Mon 01 Jun 2026 01:03:18 +0000 asID: 58495 IP address blocks: 103.95.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:41:27:07:14:cd:68:02:e4:db:1d:fe:d7:b4:c2:70:07:82:fa:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Validity Not Before: Jun 2 00:58:18 2025 GMT Not After : Jun 1 01:03:18 2026 GMT Subject: CN=05759E5E08F30DEC2D311B36C2A2E336741DC0C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:04:89:ab:2a:fc:cf:a0:d1:1c:b9:fc:e9: ee:c4:a6:a4:74:69:b5:d0:a0:bd:66:88:38:ba:bc: 73:6e:6c:b4:17:f3:15:0f:d7:6e:db:30:56:d9:e0: b1:7c:62:85:a6:1f:1a:e9:8b:91:c7:0c:3c:d7:c9: 30:73:8c:54:b7:12:eb:d7:f5:34:38:a3:52:13:37: 66:85:a1:47:78:f0:7f:50:8f:f0:da:16:98:20:b2: 13:8a:9a:3d:b6:37:8e:fb:ce:72:8e:5d:67:a5:ba: 9a:34:d8:85:83:d5:88:e3:cd:08:f2:fc:2f:91:4f: 25:6b:08:bb:84:78:2f:2d:d5:c7:f2:0a:c7:b3:99: 12:5d:fa:64:aa:d9:d1:27:4e:2d:43:52:3b:24:3a: 8b:e5:35:1c:72:c8:9b:08:73:6e:71:f4:f4:2b:af: 36:fc:3a:74:78:81:f3:37:c9:96:df:5c:db:c1:c7: d3:07:cb:b2:ad:07:94:b6:df:5b:4c:d0:14:75:d5: 27:a7:03:9b:9a:c6:79:49:9d:92:2f:e7:6c:e7:d2: 26:b9:df:b8:4d:19:bf:3f:dd:de:b0:96:c1:2e:ac: 64:02:73:61:af:50:0f:c6:87:57:f7:f1:bb:6e:89: ff:80:46:14:72:96:18:48:b9:3c:20:1c:07:89:65: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:75:9E:5E:08:F3:0D:EC:2D:31:1B:36:C2:A2:E3:36:74:1D:C0:C0 X509v3 Authority Key Identifier: keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/3130332e39352e34302e302f32322d3234203d3e203538343935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.40.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:7b:72:83:01:ac:7c:1a:f4:bc:6b:8d:42:57:f6:f1:0b:23: aa:2f:55:4a:f3:67:76:38:2b:a6:37:d7:6a:ec:3f:9b:8f:6b: 6e:4b:be:6f:67:0c:82:c5:4e:dd:0d:91:04:ce:ca:60:a9:61: de:5b:d6:ea:ab:f8:9f:7d:bd:c7:b1:50:66:45:65:e9:34:16: 17:ca:b1:52:62:36:a4:03:4a:a4:78:e9:1f:e3:57:9f:3d:dc: ac:7c:4e:fd:ab:ff:8a:bb:a0:9b:6a:80:bf:f7:c8:f3:70:fe: 90:4b:d2:6b:9a:0e:52:ac:07:68:a8:79:2a:c0:88:29:ae:83: 41:7f:9d:b1:2c:52:cb:82:7b:6b:3d:36:14:ab:26:90:68:78: a3:75:dd:cc:b8:b8:10:12:1a:67:73:01:22:99:9c:fd:09:97: cc:8b:af:ab:6f:42:18:f8:96:66:96:b4:57:ef:ea:d3:af:65: 4d:d0:5e:f9:9d:44:f0:d2:23:6d:16:be:f8:e2:ea:33:3f:58: 10:ad:3d:aa:3d:b5:58:2c:b5:e0:db:a0:d8:a1:a2:8b:b5:6b: c0:c8:aa:0c:ec:4f:b4:fc:32:d1:86:e8:46:b3:fb:87:1e:1c: 4a:cd:f8:06:e4:e4:a7:46:f4:0f:7a:a6:bf:b2:e2:10:0a:76: 99:12:d5:19 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUA0EnBxTNaALk2x3+17TCcAeC+hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAy QTA5NjYyMDAeFw0yNTA2MDIwMDU4MThaFw0yNjA2MDEwMTAzMThaMDMxMTAvBgNV BAMTKDA1NzU5RTVFMDhGMzBERUMyRDMxMUIzNkMyQTJFMzM2NzQxREMwQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMgSJqyr8z6DRHLn86e7EpqR0 abXQoL1miDi6vHNubLQX8xUP127bMFbZ4LF8YoWmHxrpi5HHDDzXyTBzjFS3EuvX 9TQ4o1ITN2aFoUd48H9Qj/DaFpggshOKmj22N477znKOXWelupo02IWD1YjjzQjy /C+RTyVrCLuEeC8t1cfyCsezmRJd+mSq2dEnTi1DUjskOovlNRxyyJsIc25x9PQr rzb8OnR4gfM3yZbfXNvBx9MHy7KtB5S231tM0BR11SenA5uaxnlJnZIv52zn0ia5 37hNGb8/3d6wlsEurGQCc2GvUA/Gh1f38btuif+ARhRylhhIuTwgHAeJZS4DAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUBXWeXgjzDewtMRs2wqLjNnQdwMAwHwYDVR0j BBgwFoAUQav3ktFBIqqmfkK9Quu44CoJZiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTQ1ZWJhYi1lYzE2LTQ1ODktYTlhNi04YTM2NjFkNDNlM2UvMC80MUFCRjc5MkQx NDEyMkFBQTY3RTQyQkQ0MkVCQjhFMDJBMDk2NjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAyQTA5 NjYyMC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNDVlYmFiLWVjMTYtNDU4OS1h OWE2LThhMzY2MWQ0M2UzZS8wLzMxMzAzMzJlMzkzNTJlMzQzMDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM1MzgzNDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnXygwDQYJKoZIhvcN AQELBQADggEBAEp7coMBrHwa9LxrjUJX9vELI6ovVUrzZ3Y4K6Y312rsP5uPa25L vm9nDILFTt0NkQTOymCpYd5b1uqr+J99vcexUGZFZek0FhfKsVJiNqQDSqR46R/j V5893Kx8Tv2r/4q7oJtqgL/3yPNw/pBL0muaDlKsB2ioeSrAiCmug0F/nbEsUsuC e2s9NhSrJpBoeKN13cy4uBASGmdzASKZnP0Jl8yLr6tvQhj4lmaWtFfv6tOvZU3Q XvmdRPDSI20Wvvji6jM/WBCtPao9tVgsteDboNihoou1a8DIqgzsT7T8MtGG6Eaz +4ceHErN+Abk5KdG9A96pr+y4hAKdpkS1Rk= -----END CERTIFICATE-----Generated at Sat Jun 7 17:25:50 2025 by rpki-client