$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa File: 3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa (raw, json) Hash identifier: bULrEt1X3G/jiy2aFh5cacfLRjb9rnKNnf+yCOK9lkk= Subject key identifier: 70:BB:58:2B:27:44:10:A8:52:16:70:40:25:FE:E0:25:8F:B2:DB:CA Certificate issuer: /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB Certificate serial: 571E315968A42A52D315F093B5EC41DE2B213EA3 Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa Signing time: Mon 02 Jun 2025 02:03:54 +0000 ROA not before: Mon 02 Jun 2025 01:58:54 +0000 ROA not after: Mon 01 Jun 2026 02:03:54 +0000 asID: 63497 IP address blocks: 103.232.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1e:31:59:68:a4:2a:52:d3:15:f0:93:b5:ec:41:de:2b:21:3e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB Validity Not Before: Jun 2 01:58:54 2025 GMT Not After : Jun 1 02:03:54 2026 GMT Subject: CN=70BB582B274410A85216704025FEE0258FB2DBCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:4d:90:3f:14:73:f8:56:18:1e:12:a0:dc: e7:87:aa:b7:0e:53:59:c6:7b:90:15:80:b1:27:0e: 4a:4d:95:79:fd:a7:f2:b0:f9:38:8a:03:73:4a:27: c0:77:21:45:9e:44:37:3c:0b:d1:98:c4:7c:02:0b: 58:80:b5:dd:ca:40:49:dc:18:37:fe:e8:c8:f4:e9: db:c3:e5:8d:f3:82:7e:05:94:23:19:c5:63:e0:61: e6:2c:46:f0:a2:e7:40:77:26:9f:a5:d0:a6:b5:d8: 9d:58:66:a4:ee:6c:77:64:1d:d3:e6:fa:65:0c:cc: 81:ed:b8:c3:a8:2e:d1:07:c6:9e:8a:9a:6b:77:72: 78:91:47:4b:3a:b8:aa:2b:3b:b4:c9:5a:e8:67:45: 00:a3:b4:d2:4f:b0:3d:18:96:90:e8:5f:cb:e6:de: 7d:cb:37:37:2d:7e:8f:ca:c1:b7:8f:97:f8:c2:5d: fa:ce:54:32:c1:61:ce:bb:90:81:e5:61:c3:c4:09: 94:9b:a8:6b:e7:50:b7:7d:43:fe:11:d1:4e:89:af: fc:db:e7:d0:68:3c:2e:6f:87:63:a4:69:1d:fc:f8: 90:b8:cc:98:24:22:07:57:f5:57:b2:42:cc:88:4b: b3:ac:b1:82:0e:b9:dc:87:44:06:de:a0:f0:11:c3: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BB:58:2B:27:44:10:A8:52:16:70:40:25:FE:E0:25:8F:B2:DB:CA X509v3 Authority Key Identifier: keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.232.240.0/24 Signature Algorithm: sha256WithRSAEncryption 61:e0:f6:5f:60:e0:b7:02:5a:47:3d:8e:c8:95:93:cb:1d:46: b3:93:8b:a0:c1:fb:1f:04:36:43:74:a3:1f:8c:5a:1a:5f:69: 8f:0b:4a:5e:10:9e:b3:75:a8:27:e2:33:d0:63:fe:51:0a:a1: 4a:66:26:e1:27:f6:91:fb:44:ee:b1:2e:4e:24:1c:90:e1:87: fe:35:e6:d4:50:6b:40:e4:b0:98:82:8b:f5:de:dc:11:bf:91: d1:96:85:48:c8:14:50:3a:59:7a:b9:cf:89:3d:ac:58:0d:ba: 9a:4e:02:7f:43:de:81:a9:c8:17:ca:7e:6f:ca:dc:3a:86:8d: 9b:f8:78:0f:6c:db:de:ae:44:0a:1e:43:ff:5b:f6:fe:ef:17: 37:58:a8:ca:a1:8a:87:3a:1d:68:7e:e1:e8:5c:80:08:0f:b9: ad:63:ee:f7:82:9f:81:f6:da:6d:55:0c:8d:e8:96:b8:48:b2: 74:58:01:af:3e:60:37:32:85:3b:a1:4f:03:0d:12:54:3b:25: 57:06:30:92:76:d5:bf:ed:13:ce:b6:77:13:d7:9d:f9:6d:9d: 34:8a:34:3d:c3:90:32:01:c7:cc:dc:e8:72:c6:40:69:c5:c4: 0e:f9:0d:60:60:38:e7:c3:32:fb:6b:06:09:53:d2:57:40:4b: 41:d1:28:69 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVx4xWWikKlLTFfCTtexB3ishPqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjEx NTFDNUVEQjAeFw0yNTA2MDIwMTU4NTRaFw0yNjA2MDEwMjAzNTRaMDMxMTAvBgNV BAMTKDcwQkI1ODJCMjc0NDEwQTg1MjE2NzA0MDI1RkVFMDI1OEZCMkRCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Ik2QPxRz+FYYHhKg3OeHqrcO U1nGe5AVgLEnDkpNlXn9p/Kw+TiKA3NKJ8B3IUWeRDc8C9GYxHwCC1iAtd3KQEnc GDf+6Mj06dvD5Y3zgn4FlCMZxWPgYeYsRvCi50B3Jp+l0Ka12J1YZqTubHdkHdPm +mUMzIHtuMOoLtEHxp6Kmmt3cniRR0s6uKorO7TJWuhnRQCjtNJPsD0YlpDoX8vm 3n3LNzctfo/KwbePl/jCXfrOVDLBYc67kIHlYcPECZSbqGvnULd9Q/4R0U6Jr/zb 59BoPC5vh2OkaR38+JC4zJgkIgdX9VeyQsyIS7OssYIOudyHRAbeoPARw0YHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcLtYKydEEKhSFnBAJf7gJY+y28owHwYDVR0j BBgwFoAUAyGYT5gjCk+UZn6CwKPesRUcXtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTYzM2I4ZS0wZGY5LTQ0YWMtOWNhZS1kNmY2NzY1YTUyYzkvMC8wMzIxOTg0Rjk4 MjMwQTRGOTQ2NjdFODJDMEEzREVCMTE1MUM1RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjExNTFD NUVEQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNjMzYjhlLTBkZjktNDRhYy05 Y2FlLWQ2ZjY3NjVhNTJjOS8wLzMxMzAzMzJlMzIzMzMyMmUzMjM0MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+jwMA0GCSqG SIb3DQEBCwUAA4IBAQBh4PZfYOC3AlpHPY7IlZPLHUazk4ugwfsfBDZDdKMfjFoa X2mPC0peEJ6zdagn4jPQY/5RCqFKZibhJ/aR+0TusS5OJByQ4Yf+NebUUGtA5LCY gov13twRv5HRloVIyBRQOll6uc+JPaxYDbqaTgJ/Q96BqcgXyn5vytw6ho2b+HgP bNverkQKHkP/W/b+7xc3WKjKoYqHOh1ofuHoXIAID7mtY+73gp+B9tptVQyN6Ja4 SLJ0WAGvPmA3MoU7oU8DDRJUOyVXBjCSdtW/7RPOtncT1535bZ00ijQ9w5AyAcfM 3OhyxkBpxcQO+Q1gYDjnwzL7awYJU9JXQEtB0Shp -----END CERTIFICATE-----Generated at Sat Jun 7 15:31:12 2025 by rpki-client