$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa File: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (raw, json) Hash identifier: IVCqBdFN38jWB6ahE4bcDTBKo48M7ALZxNEE15iGilE= Subject key identifier: 93:B6:E8:8E:3A:69:B6:41:F2:5A:A6:A3:7F:FE:02:2A:B8:5A:00:0E Certificate issuer: /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Certificate serial: 18E6F17BFE311FFD31E40EDFFE5ABD1140A2A6BC Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa Signing time: Mon 02 Jun 2025 02:04:07 +0000 ROA not before: Mon 02 Jun 2025 01:59:07 +0000 ROA not after: Mon 01 Jun 2026 02:04:07 +0000 asID: 138114 IP address blocks: 103.125.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e6:f1:7b:fe:31:1f:fd:31:e4:0e:df:fe:5a:bd:11:40:a2:a6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Validity Not Before: Jun 2 01:59:07 2025 GMT Not After : Jun 1 02:04:07 2026 GMT Subject: CN=93B6E88E3A69B641F25AA6A37FFE022AB85A000E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:7e:68:43:27:f1:bb:1c:f7:87:73:ec:f6: ec:dc:08:c0:dc:97:cc:d8:21:15:3f:d0:95:19:f5: 06:98:5d:f9:16:ec:80:6c:fb:f8:10:ef:16:f2:66: f6:08:7e:6b:ba:27:2d:87:d1:bd:3b:56:d6:81:0f: c0:1d:1d:23:21:1d:73:5f:a1:1e:89:27:a9:e7:9d: df:bd:60:6b:1c:cf:85:e5:16:aa:99:2a:b2:c7:fc: 5a:ba:a3:11:2c:59:00:2b:50:8b:e3:c9:6f:a6:19: 6e:9d:16:c3:14:66:53:62:f6:ca:dd:19:a5:30:41: 40:c5:4d:32:c4:9e:d2:bb:b4:a3:bd:bf:d1:2f:f0: 69:bf:a2:fc:cc:17:97:82:f4:0f:57:97:3a:75:4b: 7a:bf:f0:09:76:cd:59:29:73:48:08:ae:af:74:b0: 7a:27:71:21:ee:3a:14:50:d0:f5:2b:fc:bd:a2:9d: 3a:d7:bf:51:57:6b:4d:a7:76:93:9a:9f:f4:21:ee: 31:f3:db:ce:33:68:1a:0f:c9:13:68:b8:24:02:7a: 0e:e6:12:f8:c0:e8:fb:b7:a4:48:d5:c6:a5:f5:e5: a8:b0:6b:07:3f:b8:c5:73:60:44:5d:34:6d:f5:27: 1d:b3:1e:d7:67:7b:84:c6:4e:17:de:06:e3:e7:e7: c5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B6:E8:8E:3A:69:B6:41:F2:5A:A6:A3:7F:FE:02:2A:B8:5A:00:0E X509v3 Authority Key Identifier: keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.184.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:3a:dd:d6:1a:4f:8b:16:ce:fb:a0:ae:62:f1:5e:14:57:a0: e7:37:68:21:34:6b:b3:4c:e3:76:1b:06:73:b8:21:35:ce:9e: 54:27:ca:0b:d7:9b:f8:c6:ea:e1:72:20:fd:7b:95:15:e0:ff: d8:57:6c:b1:5a:20:e4:bd:d5:e5:1f:74:ca:a2:df:29:1d:e9: a8:3d:5a:33:40:32:64:83:9c:21:25:69:c7:8e:8b:24:cb:bc: b3:6f:3c:c1:8d:1e:2c:85:06:df:e8:c6:c2:dd:e4:dc:ee:01: 56:63:00:74:3c:36:49:b5:0b:71:fd:81:ad:9e:de:43:15:2c: e0:90:f5:97:49:38:37:4e:62:8f:f2:b0:6c:06:5f:6c:b9:58: 6a:b5:69:78:de:c5:42:bf:dc:d8:4a:2a:05:37:dd:1e:03:5c: 37:ad:6b:ad:76:b0:95:cb:27:f8:34:b3:87:56:0a:27:5e:0d: 43:18:d3:ab:be:7f:88:10:17:f0:d4:97:6f:c3:72:f3:ef:0a: 71:1b:9c:14:ad:d8:da:56:84:f2:34:78:d7:8c:21:76:45:95: e3:f3:78:82:f0:30:45:c8:16:7a:7b:78:55:bf:07:07:36:e9: 08:94:e4:87:4d:ce:f3:e6:40:de:c3:11:bf:e6:eb:53:31:26: b3:1c:cc:97 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGObxe/4xH/0x5A7f/lq9EUCiprwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1 NEM0RjY1RjAeFw0yNTA2MDIwMTU5MDdaFw0yNjA2MDEwMjA0MDdaMDMxMTAvBgNV BAMTKDkzQjZFODhFM0E2OUI2NDFGMjVBQTZBMzdGRkUwMjJBQjg1QTAwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSn5oQyfxuxz3h3Ps9uzcCMDc l8zYIRU/0JUZ9QaYXfkW7IBs+/gQ7xbyZvYIfmu6Jy2H0b07VtaBD8AdHSMhHXNf oR6JJ6nnnd+9YGscz4XlFqqZKrLH/Fq6oxEsWQArUIvjyW+mGW6dFsMUZlNi9srd GaUwQUDFTTLEntK7tKO9v9Ev8Gm/ovzMF5eC9A9Xlzp1S3q/8Al2zVkpc0gIrq90 sHoncSHuOhRQ0PUr/L2inTrXv1FXa02ndpOan/Qh7jHz284zaBoPyRNouCQCeg7m EvjA6Pu3pEjVxqX15aiwawc/uMVzYERdNG31Jx2zHtdne4TGThfeBuPn58VdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUk7bojjpptkHyWqajf/4CKrhaAA4wHwYDVR0j BBgwFoAUEpKFpHihZu4LVNvNpgdx2lTE9l8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2Q5MjY4Yi01ZTYxLTQzYjItYTYyNC00MWIwMWQ3ZDc2YjIvMC8xMjkyODVBNDc4 QTE2NkVFMEI1NERCQ0RBNjA3NzFEQTU0QzRGNjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1NEM0 RjY1Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzZDkyNjhiLTVlNjEtNDNiMi1h NjI0LTQxYjAxZDdkNzZiMi8wLzMxMzAzMzJlMzEzMjM1MmUzMTM4MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMxMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfbgwDQYJ KoZIhvcNAQELBQADggEBAJs63dYaT4sWzvugrmLxXhRXoOc3aCE0a7NM43YbBnO4 ITXOnlQnygvXm/jG6uFyIP17lRXg/9hXbLFaIOS91eUfdMqi3ykd6ag9WjNAMmSD nCElaceOiyTLvLNvPMGNHiyFBt/oxsLd5NzuAVZjAHQ8Nkm1C3H9ga2e3kMVLOCQ 9ZdJODdOYo/ysGwGX2y5WGq1aXjexUK/3NhKKgU33R4DXDeta612sJXLJ/g0s4dW CideDUMY06u+f4gQF/DUl2/DcvPvCnEbnBSt2NpWhPI0eNeMIXZFlePzeILwMEXI Fnp7eFW/Bwc26QiU5IdNzvPmQN7DEb/m61MxJrMczJc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:50 2025 by rpki-client