$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa File: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (raw, json) Hash identifier: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo= Subject key identifier: 30:31:82:9A:5C:2B:01:03:92:39:1F:4B:4E:0E:20:43:5C:B8:F3:F9 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 252927B86B0C653BA46531521C1D260A32782A33 Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa Signing time: Mon 02 Jun 2025 01:02:28 +0000 ROA not before: Mon 02 Jun 2025 00:57:28 +0000 ROA not after: Mon 01 Jun 2026 01:02:28 +0000 asID: 139440 IP address blocks: 103.145.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:29:27:b8:6b:0c:65:3b:a4:65:31:52:1c:1d:26:0a:32:78:2a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Jun 2 00:57:28 2025 GMT Not After : Jun 1 01:02:28 2026 GMT Subject: CN=3031829A5C2B010392391F4B4E0E20435CB8F3F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:56:30:17:2b:42:6a:27:d9:41:2b:13:9f: 6c:8c:78:9e:b1:50:37:0e:b0:e4:03:70:f7:91:63: 8d:87:6c:b9:0b:1b:9b:8b:1e:6c:ba:b3:dd:b6:9a: 28:43:19:61:2e:69:de:e2:46:ad:d5:19:81:a5:66: 54:e7:63:14:01:61:48:93:00:15:9c:d4:23:13:73: aa:a3:f0:bd:7d:49:88:e2:ac:ac:b2:4f:52:e3:13: 99:a5:96:b6:4e:fc:48:66:77:ff:b9:19:c0:92:39: 39:61:b0:44:25:1a:48:ef:92:fd:27:69:20:8d:08: 74:72:6a:75:1f:53:29:6d:11:e1:bc:ae:f4:bd:1d: 6a:e8:f9:3f:af:12:21:f6:52:d1:46:8a:80:28:61: e0:73:bc:d6:59:e7:2e:e6:5a:d8:0e:e3:1a:d6:04: e7:7e:46:5e:d6:3e:44:47:fd:57:3d:ac:ba:fb:38: 11:e2:7f:e9:a3:7c:38:8e:73:37:54:6f:76:11:cd: c2:4f:6c:a7:c4:be:62:d0:9c:c8:77:4e:e9:72:8d: 0e:2c:b4:0f:d6:24:b9:bc:2c:2a:07:9c:4f:d0:74: 7a:5e:52:9a:aa:64:7a:60:01:fc:b5:05:0e:e8:4c: b5:a0:ce:a5:d4:7b:12:88:0c:96:f5:76:c5:7d:1f: d5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:31:82:9A:5C:2B:01:03:92:39:1F:4B:4E:0E:20:43:5C:B8:F3:F9 X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.66.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:04:32:e8:1a:9e:82:82:15:fb:00:00:e0:d7:4f:21:27:b6: 0a:9a:ae:22:51:47:85:d9:45:5d:45:1f:0d:73:67:92:fe:4b: 2e:da:b4:6a:b9:d9:d4:6f:44:89:33:0c:5c:73:d5:9a:db:b8: 24:ef:0f:49:d0:80:af:b4:af:38:e9:f6:7f:03:ef:c0:cc:7c: 3e:e0:a6:e7:d8:5c:6f:ff:da:d5:5b:3d:39:10:cc:bc:bd:19: 2f:47:e7:bb:0e:13:18:5b:24:1c:e2:2d:95:ec:67:10:b7:8a: e3:76:63:e6:95:b8:09:2e:b5:80:17:f2:d4:cd:44:b8:9d:3c: 7f:61:b0:d7:69:bc:ce:68:15:79:08:a2:14:6c:81:01:3b:07: e6:ec:a6:53:ce:82:86:ec:7d:c1:97:e4:c1:ef:5e:dd:4d:77: 9b:e9:da:d0:5e:72:e2:5c:f5:3b:a3:8f:8d:22:79:73:f7:b8: 77:df:a7:64:be:d9:03:c1:87:d6:39:2b:2d:46:34:71:57:33: c0:17:c5:ba:9c:a4:1a:30:3e:7a:46:a0:f9:1a:ed:c3:fb:a1: 8d:c7:5b:6c:be:22:6f:3d:a6:7f:da:2f:58:00:95:5d:db:46: be:77:05:00:ef:6f:61:8b:94:e1:a1:77:ff:08:ee:72:26:1d: b4:d7:52:23 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJSknuGsMZTukZTFSHB0mCjJ4KjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNTA2MDIwMDU3MjhaFw0yNjA2MDEwMTAyMjhaMDMxMTAvBgNV BAMTKDMwMzE4MjlBNUMyQjAxMDM5MjM5MUY0QjRFMEUyMDQzNUNCOEYzRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqVYwFytCaifZQSsTn2yMeJ6x UDcOsOQDcPeRY42HbLkLG5uLHmy6s922mihDGWEuad7iRq3VGYGlZlTnYxQBYUiT ABWc1CMTc6qj8L19SYjirKyyT1LjE5mllrZO/Ehmd/+5GcCSOTlhsEQlGkjvkv0n aSCNCHRyanUfUyltEeG8rvS9HWro+T+vEiH2UtFGioAoYeBzvNZZ5y7mWtgO4xrW BOd+Rl7WPkRH/Vc9rLr7OBHif+mjfDiOczdUb3YRzcJPbKfEvmLQnMh3TulyjQ4s tA/WJLm8LCoHnE/QdHpeUpqqZHpgAfy1BQ7oTLWgzqXUexKIDJb1dsV9H9WvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMDGCmlwrAQOSOR9LTg4gQ1y48/kwHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMTkxMWI5LTFkMmYtNGJiNC05 ZDc1LTlhYTNjMzUxMDBlOC8wLzMxMzAzMzJlMzEzNDM1MmUzNjM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5FCMA0GCSqG SIb3DQEBCwUAA4IBAQAKBDLoGp6CghX7AADg108hJ7YKmq4iUUeF2UVdRR8Nc2eS /ksu2rRqudnUb0SJMwxcc9Wa27gk7w9J0ICvtK846fZ/A+/AzHw+4Kbn2Fxv/9rV Wz05EMy8vRkvR+e7DhMYWyQc4i2V7GcQt4rjdmPmlbgJLrWAF/LUzUS4nTx/YbDX abzOaBV5CKIUbIEBOwfm7KZTzoKG7H3Bl+TB717dTXeb6drQXnLiXPU7o4+NInlz 97h336dkvtkDwYfWOSstRjRxVzPAF8W6nKQaMD56RqD5Gu3D+6GNx1tsviJvPaZ/ 2i9YAJVd20a+dwUA729hi5ThoXf/CO5yJh2011Ij -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:19 2025 by rpki-client