$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa File: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (raw, json) Hash identifier: OX5qJy0ELn8OIpv9cwcHP0OwwrzKVk8H6b2UKzBtyEg= Subject key identifier: D4:6D:E6:42:31:61:64:61:C2:4D:39:DE:16:C0:D8:4A:73:A6:23:18 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 790D5E569818C7EB3894EED444E1FD71CA1C33D5 Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa Signing time: Mon 02 Jun 2025 01:02:55 +0000 ROA not before: Mon 02 Jun 2025 00:57:55 +0000 ROA not after: Mon 01 Jun 2026 01:02:55 +0000 asID: 138113 IP address blocks: 103.126.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0d:5e:56:98:18:c7:eb:38:94:ee:d4:44:e1:fd:71:ca:1c:33:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Jun 2 00:57:55 2025 GMT Not After : Jun 1 01:02:55 2026 GMT Subject: CN=D46DE64231616461C24D39DE16C0D84A73A62318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:0f:a3:25:b2:13:70:fa:e7:db:e6:36:b5: cc:d3:2a:c3:31:83:4e:27:b5:99:64:1e:69:9f:0c: 75:46:c5:f4:e3:f4:f6:4d:b7:99:a9:5d:64:cb:ec: 51:1e:b7:38:9f:38:00:2f:21:d9:1e:c6:2b:22:bb: 50:d3:d5:72:f0:32:1d:66:0f:6a:28:9f:fb:51:f3: 93:59:74:9c:60:6f:08:45:3b:bb:41:1b:2b:63:9b: 5a:53:05:92:b7:cf:b0:57:19:f9:c9:f2:81:a0:4f: 40:ff:b5:07:ac:82:f5:9d:5a:05:0d:1e:f3:08:20: 55:b7:2b:79:ce:30:f7:a3:25:97:c3:bf:78:91:50: 11:2a:7d:26:d8:ec:01:5a:0e:a4:99:c5:79:92:62: 0d:96:b2:c2:f4:f4:99:39:24:1b:32:fe:36:59:42: c2:e7:15:ef:51:81:4e:2d:60:ca:2d:20:77:b4:2e: 26:33:d5:c5:83:a9:c9:d1:3c:07:97:3c:e0:c3:b9: f0:29:9b:a9:67:87:82:73:58:1d:6f:4f:0a:84:a2: 81:7a:e7:b5:f0:36:cd:52:c1:6c:fe:ac:5d:84:2a: ab:1f:5b:92:0d:5b:3e:e4:74:d7:40:c5:e9:2f:a5: 9c:f7:d9:75:3d:a3:e1:4f:df:41:59:7e:a3:69:14: 2f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6D:E6:42:31:61:64:61:C2:4D:39:DE:16:C0:D8:4A:73:A6:23:18 X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.200.0/23 Signature Algorithm: sha256WithRSAEncryption 74:b2:96:64:36:9f:43:02:20:2a:8c:a7:8a:1c:d5:68:c5:c8: 37:e9:00:20:76:0b:36:54:13:d8:6a:10:85:ba:be:f8:74:c9: 06:66:07:fa:d9:23:be:84:b6:60:73:c7:94:26:27:73:b6:33: 42:ab:56:41:00:92:ec:67:04:e1:af:b8:f2:45:af:76:0b:7b: 37:15:67:e6:90:b3:03:d4:7b:66:21:aa:76:00:d6:ec:98:b3: 6c:b1:c9:5b:2c:84:e7:0d:e9:88:70:be:d8:75:f5:2c:86:84: 8b:5a:3c:27:bc:ae:4f:8d:28:2d:27:64:64:c8:c2:83:74:31: 9b:8a:ac:e8:6e:bf:f4:18:f0:7c:5c:ac:9f:c6:6e:f5:f5:3f: 46:04:bc:c7:40:d3:84:7a:ab:4b:6c:a4:36:05:36:43:b6:58: 8c:62:0b:ba:0e:78:0d:a1:6c:91:d1:3b:fe:53:b5:34:95:11: 94:6a:36:96:f0:45:8e:97:6e:1a:e9:6a:03:23:46:76:b8:9f: 41:e9:73:5a:46:60:30:c9:a0:d6:0c:e9:c1:12:f5:bd:ec:4b: 62:d2:42:15:4c:19:1c:d8:7c:94:1e:69:42:de:3f:33:d6:26: 09:54:61:fe:58:6a:2c:42:88:54:95:16:f6:51:f4:b1:b4:ee: 07:80:d2:53 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUeQ1eVpgYx+s4lO7UROH9ccocM9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNTA2MDIwMDU3NTVaFw0yNjA2MDEwMTAyNTVaMDMxMTAvBgNV BAMTKEQ0NkRFNjQyMzE2MTY0NjFDMjREMzlERTE2QzBEODRBNzNBNjIzMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCslA+jJbITcPrn2+Y2tczTKsMx g04ntZlkHmmfDHVGxfTj9PZNt5mpXWTL7FEetzifOAAvIdkexisiu1DT1XLwMh1m D2oon/tR85NZdJxgbwhFO7tBGytjm1pTBZK3z7BXGfnJ8oGgT0D/tQesgvWdWgUN HvMIIFW3K3nOMPejJZfDv3iRUBEqfSbY7AFaDqSZxXmSYg2WssL09Jk5JBsy/jZZ QsLnFe9RgU4tYMotIHe0LiYz1cWDqcnRPAeXPODDufApm6lnh4JzWB1vTwqEooF6 57XwNs1SwWz+rF2EKqsfW5INWz7kdNdAxekvpZz32XU9o+FP30FZfqNpFC95AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU1G3mQjFhZGHCTTneFsDYSnOmIxgwHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhMmU1YjY5LWFkYmQtNGUyZC04 NDdkLTM3NDgxNTU4MWQ4Ni8wLzMxMzAzMzJlMzEzMjM2MmUzMjMwMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzgzMTMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnfsgwDQYJ KoZIhvcNAQELBQADggEBAHSylmQ2n0MCICqMp4oc1WjFyDfpACB2CzZUE9hqEIW6 vvh0yQZmB/rZI76EtmBzx5QmJ3O2M0KrVkEAkuxnBOGvuPJFr3YLezcVZ+aQswPU e2YhqnYA1uyYs2yxyVsshOcN6Yhwvth19SyGhItaPCe8rk+NKC0nZGTIwoN0MZuK rOhuv/QY8HxcrJ/GbvX1P0YEvMdA04R6q0tspDYFNkO2WIxiC7oOeA2hbJHRO/5T tTSVEZRqNpbwRY6XbhrpagMjRna4n0Hpc1pGYDDJoNYM6cES9b3sS2LSQhVMGRzY fJQeaULePzPWJglUYf5YaixCiFSVFvZR9LG07geA0lM= -----END CERTIFICATE-----Generated at Sun Jun 8 02:49:00 2025 by rpki-client