$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa File: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (raw, json) Hash identifier: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc= Subject key identifier: CC:35:58:47:15:4B:32:2E:10:F3:86:35:6B:E4:CB:0C:66:8F:38:6D Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 05BB31CB26AE9FC80A7F7805A8A4A2F471EFD5C8 Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa Signing time: Mon 02 Jun 2025 02:03:28 +0000 ROA not before: Mon 02 Jun 2025 01:58:28 +0000 ROA not after: Mon 01 Jun 2026 02:03:28 +0000 asID: 138079 IP address blocks: 103.130.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:bb:31:cb:26:ae:9f:c8:0a:7f:78:05:a8:a4:a2:f4:71:ef:d5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Jun 2 01:58:28 2025 GMT Not After : Jun 1 02:03:28 2026 GMT Subject: CN=CC355847154B322E10F386356BE4CB0C668F386D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:32:bb:86:d3:71:b2:01:e9:70:2e:0d:12: b2:09:bb:b8:e3:d3:a7:07:f0:65:ca:25:d3:d2:07: 44:e2:04:53:28:3a:e3:4f:16:11:19:5d:90:4c:4e: c7:dd:8a:48:04:22:e7:20:f4:ed:25:e3:20:89:9a: f9:f9:bb:a9:e4:9a:9b:e8:3e:fc:f4:76:2c:c6:26: 6c:25:a4:53:e3:c0:83:d3:50:fe:08:d3:77:37:9e: b3:46:e9:29:16:e9:30:e9:8e:ed:09:7e:44:7c:3f: 1d:1c:34:70:d9:6f:7e:62:26:02:c3:e8:4b:ba:3d: e2:49:c3:a3:b3:94:40:76:c7:2b:35:0e:4e:19:63: e6:73:30:e1:a2:60:c9:19:82:71:28:cb:e4:72:57: 83:16:32:fe:24:bf:be:fc:00:22:4a:0d:4c:91:0f: ad:28:f4:f2:cf:96:5a:09:82:04:4a:05:42:ba:2c: 15:96:f5:c8:57:25:7b:44:36:f8:55:a5:9a:21:a3: 77:30:93:8a:f9:ce:d6:61:4e:65:fe:1d:46:ec:38: 8f:6f:c8:1b:2a:87:cd:70:93:f5:be:1c:53:7e:18: 83:8c:1f:4e:b4:a5:b0:6b:ad:72:c4:59:e3:6c:70: ef:ca:12:f6:d6:f5:5b:88:7d:e8:9f:f2:cb:66:95: e2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:35:58:47:15:4B:32:2E:10:F3:86:35:6B:E4:CB:0C:66:8F:38:6D X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.60.0/24 Signature Algorithm: sha256WithRSAEncryption 21:80:85:2e:57:6a:7f:08:2b:a6:93:5f:4d:b4:1b:3c:4f:19: e4:26:72:aa:75:ba:29:36:c6:be:18:da:0d:9e:f2:f3:fb:b0: 65:d4:68:4a:ac:49:f1:79:fa:a9:62:cf:36:88:75:97:29:3a: 1b:05:9d:4b:2a:9d:d8:5c:df:1c:dd:c6:5d:ec:0b:3d:8e:49: 12:58:31:fa:7a:6e:bd:e0:c1:3f:c9:f7:62:37:93:9a:85:2a: 4c:4c:ca:f3:f4:72:2d:2e:b7:90:e2:fe:78:6b:a1:c3:79:d5: 1c:fc:c3:12:0f:c8:cc:08:d1:5e:7b:7e:c1:13:bf:1a:d5:54: 5d:d4:e0:37:32:14:4b:d0:65:70:ca:a2:b6:f0:24:10:b9:00: 61:83:ef:d6:f2:30:e7:b6:5c:63:6f:83:6d:03:17:e1:50:75: 5c:80:31:56:2a:76:76:96:ff:e8:71:fa:0e:29:9d:1a:ca:36: 6f:82:58:ec:4c:64:4a:87:35:94:b8:7d:be:d0:dd:93:17:0a: ba:9f:8c:c3:b3:f2:02:e1:78:0f:9c:6a:34:e7:e8:7d:89:e6: f9:63:43:94:c4:e7:0c:59:1a:67:ba:21:f2:20:05:32:f3:10: 74:89:16:da:3d:7d:3a:a8:4f:8b:4f:6d:51:8a:f1:e5:20:12: b3:13:68:a8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBbsxyyaun8gKf3gFqKSi9HHv1cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTA2MDIwMTU4MjhaFw0yNjA2MDEwMjAzMjhaMDMxMTAvBgNV BAMTKENDMzU1ODQ3MTU0QjMyMkUxMEYzODYzNTZCRTRDQjBDNjY4RjM4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CzK7htNxsgHpcC4NErIJu7jj 06cH8GXKJdPSB0TiBFMoOuNPFhEZXZBMTsfdikgEIucg9O0l4yCJmvn5u6nkmpvo Pvz0dizGJmwlpFPjwIPTUP4I03c3nrNG6SkW6TDpju0JfkR8Px0cNHDZb35iJgLD 6Eu6PeJJw6OzlEB2xys1Dk4ZY+ZzMOGiYMkZgnEoy+RyV4MWMv4kv778ACJKDUyR D60o9PLPlloJggRKBUK6LBWW9chXJXtENvhVpZoho3cwk4r5ztZhTmX+HUbsOI9v yBsqh81wk/W+HFN+GIOMH060pbBrrXLEWeNscO/KEvbW9VuIfeif8stmleJfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzDVYRxVLMi4Q84Y1a+TLDGaPOG0wHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMmEzZjI4LTgyNzMtNGRkNS04 N2ZjLTFlZjAwYWNhYzliNi8wLzMxMzAzMzJlMzEzMzMwMmUzNjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4I8MA0GCSqG SIb3DQEBCwUAA4IBAQAhgIUuV2p/CCumk19NtBs8TxnkJnKqdbopNsa+GNoNnvLz +7Bl1GhKrEnxefqpYs82iHWXKTobBZ1LKp3YXN8c3cZd7As9jkkSWDH6em694ME/ yfdiN5OahSpMTMrz9HItLreQ4v54a6HDedUc/MMSD8jMCNFee37BE78a1VRd1OA3 MhRL0GVwyqK28CQQuQBhg+/W8jDntlxjb4NtAxfhUHVcgDFWKnZ2lv/ocfoOKZ0a yjZvgljsTGRKhzWUuH2+0N2TFwq6n4zDs/IC4XgPnGo05+h9ieb5Y0OUxOcMWRpn uiHyIAUy8xB0iRbaPX06qE+LT21RivHlIBKzE2io -----END CERTIFICATE-----Generated at Thu Jun 5 18:46:05 2025 by rpki-client