$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa File: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (raw, json) Hash identifier: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY= Subject key identifier: 82:02:4D:17:F6:35:53:D7:51:1A:09:13:1F:6C:DF:CE:09:5D:31:5D Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 6DF8E6D4FA942EB040F66E16A21D4E113F588235 Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa Signing time: Mon 02 Jun 2025 01:03:00 +0000 ROA not before: Mon 02 Jun 2025 00:58:00 +0000 ROA not after: Mon 01 Jun 2026 01:03:00 +0000 asID: 46032 IP address blocks: 103.148.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f8:e6:d4:fa:94:2e:b0:40:f6:6e:16:a2:1d:4e:11:3f:58:82:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Jun 2 00:58:00 2025 GMT Not After : Jun 1 01:03:00 2026 GMT Subject: CN=82024D17F63553D7511A09131F6CDFCE095D315D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b2:83:f3:38:11:26:f5:6b:da:50:a3:a8:2d: b3:5c:db:1a:1d:35:01:7b:34:54:41:82:9a:40:33: 55:bd:fa:b2:87:c4:ab:39:66:25:7f:e1:df:da:17: cf:11:19:4e:50:f4:1f:21:e0:74:f4:69:0f:b2:26: b9:d0:5f:2a:ae:bf:22:77:30:f9:53:7d:fb:1c:3a: b0:e1:d5:a6:9e:34:87:a8:c7:74:7c:eb:25:38:2b: ff:50:23:e8:1d:06:70:1f:87:d3:c2:e4:a4:07:cb: 1e:43:dd:f7:25:38:c6:49:8c:d0:d3:91:36:c3:a7: 7d:bd:63:a6:3b:7c:9e:e0:00:3f:5c:67:c6:26:e5: cd:66:99:81:07:1d:fc:9a:6e:7b:96:54:a8:7d:e0: 3a:79:75:77:96:ab:34:53:cb:b3:97:77:cc:4e:82: c8:ee:49:e9:a0:a5:de:91:53:0c:aa:df:30:7d:92: 24:0d:e3:b0:2e:1b:cd:dc:ec:1d:5e:89:08:3b:da: 5e:68:6c:34:fc:86:dd:a5:6e:55:92:b8:58:88:ce: ea:02:28:6f:b9:62:dc:d7:fd:47:c0:a7:ec:63:6c: a5:0b:fa:46:94:89:d7:8b:d1:aa:b6:20:6f:bd:5c: da:b1:04:36:33:06:61:37:f7:87:e0:25:14:ea:7e: ab:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:02:4D:17:F6:35:53:D7:51:1A:09:13:1F:6C:DF:CE:09:5D:31:5D X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.111.0/24 Signature Algorithm: sha256WithRSAEncryption 43:6a:a6:b4:30:f1:6e:8c:2a:4b:9d:84:6d:f1:6d:fb:66:46: 8d:df:8b:46:1c:28:d5:f1:c1:66:51:5d:cf:14:0b:bf:98:8d: ee:78:58:7b:4a:e3:58:e1:12:46:4f:a7:f6:47:c1:62:85:09: 6c:25:34:34:ab:ea:a6:05:f2:e5:4f:1c:58:78:53:04:4c:ff: 5d:1d:0d:4e:bf:81:f3:aa:c7:c4:7f:84:d1:10:af:9b:cb:dc: 26:8e:85:b8:92:09:aa:50:ec:49:b4:f9:98:c0:42:5d:77:0b: 11:27:40:fd:46:5d:4d:1c:58:4e:ee:87:fa:0e:a2:ef:f3:1f: ad:5b:75:53:01:ec:44:9e:af:7c:a7:fb:9e:5e:f7:e9:8c:0f: 85:05:f8:ba:4d:7c:0c:22:d3:11:f7:dd:77:34:7f:05:e2:67: af:90:69:01:fb:de:d5:17:0d:ba:5d:2c:fd:5d:0a:f6:3b:f7: 28:7d:7a:52:3d:05:3b:38:b1:e1:b4:f7:5e:df:b0:73:0d:fd: ac:b1:98:d2:ad:81:b4:dc:41:88:e5:e4:5e:b9:74:39:96:de: f3:f7:08:2c:c5:9e:2e:47:b5:c6:db:27:37:b7:e2:fe:6b:b8: bd:90:c6:2d:9d:1f:f4:03:1b:1d:de:3e:b8:8c:37:af:d8:e7: ab:bb:e6:b5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbfjm1PqULrBA9m4Woh1OET9YgjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNTA2MDIwMDU4MDBaFw0yNjA2MDEwMTAzMDBaMDMxMTAvBgNV BAMTKDgyMDI0RDE3RjYzNTUzRDc1MTFBMDkxMzFGNkNERkNFMDk1RDMxNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbsoPzOBEm9WvaUKOoLbNc2xod NQF7NFRBgppAM1W9+rKHxKs5ZiV/4d/aF88RGU5Q9B8h4HT0aQ+yJrnQXyquvyJ3 MPlTffscOrDh1aaeNIeox3R86yU4K/9QI+gdBnAfh9PC5KQHyx5D3fclOMZJjNDT kTbDp329Y6Y7fJ7gAD9cZ8Ym5c1mmYEHHfyabnuWVKh94Dp5dXeWqzRTy7OXd8xO gsjuSemgpd6RUwyq3zB9kiQN47AuG83c7B1eiQg72l5obDT8ht2lblWSuFiIzuoC KG+5YtzX/UfAp+xjbKUL+kaUideL0aq2IG+9XNqxBDYzBmE394fgJRTqfquDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUggJNF/Y1U9dRGgkTH2zfzgldMV0wHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZjkyNDQ3LWFjZDMtNDI3Yy1i NWU3LWRiMzkxN2YxODVjOC8wLzMxMzAzMzJlMzEzNDM4MmUzMTMxMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RvMA0GCSqG SIb3DQEBCwUAA4IBAQBDaqa0MPFujCpLnYRt8W37ZkaN34tGHCjV8cFmUV3PFAu/ mI3ueFh7SuNY4RJGT6f2R8FihQlsJTQ0q+qmBfLlTxxYeFMETP9dHQ1Ov4HzqsfE f4TREK+by9wmjoW4kgmqUOxJtPmYwEJddwsRJ0D9Rl1NHFhO7of6DqLv8x+tW3VT AexEnq98p/ueXvfpjA+FBfi6TXwMItMR9913NH8F4mevkGkB+97VFw26XSz9XQr2 O/cofXpSPQU7OLHhtPde37BzDf2ssZjSrYG03EGI5eReuXQ5lt7z9wgsxZ4uR7XG 2yc3t+L+a7i9kMYtnR/0Axsd3j64jDev2Oeru+a1 -----END CERTIFICATE-----Generated at Sat Jun 7 22:31:04 2025 by rpki-client