$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa File: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (raw, json) Hash identifier: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE= Subject key identifier: 07:8E:A8:CE:61:0B:EC:5E:97:9B:BE:2E:73:BB:81:2C:C7:F2:D3:7E Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 40CBF4D33F550043DBC2140F25CB9682DFB7FC45 Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa Signing time: Mon 02 Jun 2025 02:03:28 +0000 ROA not before: Mon 02 Jun 2025 01:58:28 +0000 ROA not after: Mon 01 Jun 2026 02:03:28 +0000 asID: 138079 IP address blocks: 103.130.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:cb:f4:d3:3f:55:00:43:db:c2:14:0f:25:cb:96:82:df:b7:fc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Jun 2 01:58:28 2025 GMT Not After : Jun 1 02:03:28 2026 GMT Subject: CN=078EA8CE610BEC5E979BBE2E73BB812CC7F2D37E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:fe:71:76:70:2e:62:9e:18:fa:fd:67:d6: 51:06:5b:9e:f0:f0:c7:cd:ba:66:44:0d:54:53:d3: 14:20:e5:87:a5:e3:d3:33:18:d3:e7:a4:5b:f8:90: d2:bc:fc:a1:f1:79:32:ae:b9:53:65:bb:c2:ac:2c: fa:6c:53:05:16:75:7f:e9:07:f1:0d:53:9c:23:07: bc:b9:4a:95:0b:dc:ec:09:e7:b2:ea:4d:7b:c4:15: b3:ad:fb:4f:c5:4e:21:ff:02:25:52:9e:b0:9d:b0: 58:0f:cc:ac:9d:61:ac:3f:86:02:d8:91:78:37:ff: da:c6:df:27:39:12:4b:8b:bf:90:1a:ee:d2:46:ea: 48:1a:64:12:34:7f:6a:55:e3:42:b7:78:5c:fa:18: ef:fb:71:46:10:7b:ab:06:20:41:e5:5b:93:b4:67: 1f:01:af:c0:cc:92:b7:af:43:69:81:bf:59:51:3b: 3b:8f:71:fb:7f:a0:5d:4a:40:4a:55:66:ae:59:a5: fa:ce:fe:37:5c:4b:16:ac:df:ed:da:66:df:44:e3: 83:58:85:3f:1b:1d:8b:07:a4:74:9d:32:c0:33:ce: 8f:e1:c2:2b:69:34:88:10:8b:83:60:7c:ce:d3:17: 30:e7:2c:77:82:b0:a1:b2:34:89:b3:6a:20:9b:1b: f8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8E:A8:CE:61:0B:EC:5E:97:9B:BE:2E:73:BB:81:2C:C7:F2:D3:7E X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.60.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:96:6d:94:72:da:9e:bf:0a:b3:7b:d4:fb:f7:7b:24:dc:a9: 52:b3:fe:ae:7b:c7:3a:cd:4e:a5:5f:34:d0:2c:d2:e6:2b:18: cf:ea:6d:e1:0f:cd:3b:98:13:20:e9:62:48:3d:cf:7d:6b:e5: f0:26:e3:81:96:f5:b5:2f:46:35:e1:72:b9:09:85:e9:ea:af: 77:31:03:d1:27:69:27:3a:19:87:d0:2a:d0:da:5b:89:48:a1: ad:53:23:5a:97:39:dd:39:ac:7e:2c:b2:61:0a:8f:d5:27:61: e1:72:88:e4:d0:48:7c:56:4c:5e:9d:a5:3f:e2:c9:17:bb:99: 8a:c5:7b:ce:b2:aa:c9:ee:d4:cf:8b:5d:fc:3f:4f:c8:6a:6b: 47:9f:08:e7:83:1a:b1:80:20:21:d5:b6:fa:54:11:23:1b:5d: 03:87:5a:6d:f0:a9:e3:dc:ac:e7:1c:a9:53:18:f6:ee:d5:7c: ef:41:d7:ac:3a:09:a8:16:62:bf:b3:ca:55:27:df:a2:86:d3: a2:d6:d0:64:79:d2:d9:b0:1e:9e:d1:b2:5d:ad:ab:fd:6d:13: e9:da:93:63:fe:ac:a5:18:71:8e:1d:b1:73:bb:90:fe:3d:80: 8f:c2:1e:24:81:8e:9d:d6:2e:10:24:6e:58:f6:a2:df:71:7c: 53:e6:be:7f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQMv00z9VAEPbwhQPJcuWgt+3/EUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTA2MDIwMTU4MjhaFw0yNjA2MDEwMjAzMjhaMDMxMTAvBgNV BAMTKDA3OEVBOENFNjEwQkVDNUU5NzlCQkUyRTczQkI4MTJDQzdGMkQzN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJP5xdnAuYp4Y+v1n1lEGW57w 8MfNumZEDVRT0xQg5Yel49MzGNPnpFv4kNK8/KHxeTKuuVNlu8KsLPpsUwUWdX/p B/ENU5wjB7y5SpUL3OwJ57LqTXvEFbOt+0/FTiH/AiVSnrCdsFgPzKydYaw/hgLY kXg3/9rG3yc5EkuLv5Aa7tJG6kgaZBI0f2pV40K3eFz6GO/7cUYQe6sGIEHlW5O0 Zx8Br8DMkrevQ2mBv1lROzuPcft/oF1KQEpVZq5ZpfrO/jdcSxas3+3aZt9E44NY hT8bHYsHpHSdMsAzzo/hwitpNIgQi4NgfM7TFzDnLHeCsKGyNImzaiCbG/jfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUB46ozmEL7F6Xm74uc7uBLMfy034wHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMmEzZjI4LTgyNzMtNGRkNS04 N2ZjLTFlZjAwYWNhYzliNi8wLzMxMzAzMzJlMzEzMzMwMmUzNjMwMmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzEzMzM4MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4I8MA0GCSqG SIb3DQEBCwUAA4IBAQA+lm2Uctqevwqze9T793sk3KlSs/6ue8c6zU6lXzTQLNLm KxjP6m3hD807mBMg6WJIPc99a+XwJuOBlvW1L0Y14XK5CYXp6q93MQPRJ2knOhmH 0CrQ2luJSKGtUyNalzndOax+LLJhCo/VJ2Hhcojk0Eh8VkxenaU/4skXu5mKxXvO sqrJ7tTPi138P0/IamtHnwjngxqxgCAh1bb6VBEjG10Dh1pt8Knj3KznHKlTGPbu 1XzvQdesOgmoFmK/s8pVJ9+ihtOi1tBkedLZsB6e0bJdrav9bRPp2pNj/qylGHGO HbFzu5D+PYCPwh4kgY6d1i4QJG5Y9qLfcXxT5r5/ -----END CERTIFICATE-----Generated at Thu Jun 5 18:37:19 2025 by rpki-client