$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa File: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (raw, json) Hash identifier: Q2j6s7F7V0sOCSPl3aHs6rPupunQzCX/dgkjx2YSfjU= Subject key identifier: 2B:14:15:CC:A4:CC:B1:51:A6:46:92:3E:60:0A:BF:53:6C:D6:4B:5D Certificate issuer: /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Certificate serial: 1963D08147ED005F1180E980B0A029553256C52F Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa Signing time: Fri 07 Mar 2025 05:02:40 +0000 ROA not before: Fri 07 Mar 2025 04:57:40 +0000 ROA not after: Fri 06 Mar 2026 05:02:40 +0000 asID: 150952 IP address blocks: 103.211.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 04:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:63:d0:81:47:ed:00:5f:11:80:e9:80:b0:a0:29:55:32:56:c5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Validity Not Before: Mar 7 04:57:40 2025 GMT Not After : Mar 6 05:02:40 2026 GMT Subject: CN=2B1415CCA4CCB151A646923E600ABF536CD64B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:bc:b0:1f:e4:68:30:0d:a5:3f:74:b5:e2: c8:c8:96:8d:36:cf:0d:f4:da:4d:a6:d3:75:b3:31: 4a:12:ad:0f:a5:c9:6d:db:3e:23:16:a2:4a:b3:e0: f1:d1:2f:6b:85:af:f1:de:be:96:3b:66:eb:b2:d8: 3f:a2:26:c9:c9:8c:93:b1:d3:0d:30:b8:b4:ca:ef: 20:3f:a5:3c:2b:17:47:8b:6a:77:a5:d0:98:65:fe: c4:ba:74:0d:eb:2e:c8:8f:93:5b:3c:86:67:b6:80: 5e:5b:1f:de:af:d6:1c:68:ef:cc:47:bc:d0:4d:65: 8f:2d:23:80:04:7b:f6:99:4d:dc:06:2b:73:1d:8b: d8:58:79:35:6f:d9:50:62:7b:6a:1f:0e:cb:21:00: 3a:c4:ec:af:ac:f7:92:bb:43:70:7f:66:5f:dc:58: 9a:7d:fd:9e:91:b3:c6:35:ed:43:35:53:16:b7:0d: 42:df:88:b1:56:5f:eb:64:85:06:91:d5:6c:ca:2b: 9e:b5:66:1e:d0:58:b0:62:34:82:7a:2c:d5:8c:89: c4:8a:a7:81:48:28:68:af:53:89:2e:a9:ce:cb:a2: e4:61:92:02:09:da:68:37:7a:2f:88:bb:f2:98:ea: 04:bf:43:bf:fc:61:83:79:00:8c:5a:e8:c7:ae:c9: 4c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:14:15:CC:A4:CC:B1:51:A6:46:92:3E:60:0A:BF:53:6C:D6:4B:5D X509v3 Authority Key Identifier: keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.196.0/24 Signature Algorithm: sha256WithRSAEncryption 95:c7:2f:7e:d0:34:03:31:d7:5f:34:81:23:68:7d:b7:9c:14: d4:7c:76:45:ab:b6:d7:aa:fb:e8:45:09:1d:f7:e7:c7:13:a8: 6e:d9:cf:7c:90:ea:a5:81:4d:27:c3:bb:21:c5:c1:23:b9:cb: ec:e7:e9:2d:e6:b5:99:28:c8:85:c1:8b:c1:0b:94:1e:9d:92: b0:1f:47:aa:7a:c2:db:c5:b5:1f:d5:f8:d2:40:29:23:66:cf: a6:81:83:96:a9:b0:6d:5f:bb:72:c1:60:d6:06:b4:82:67:aa: ff:28:2d:b8:d7:aa:82:c4:bf:1e:9c:b7:c5:10:af:0b:de:3a: 5f:52:f5:61:8a:d5:84:b6:16:01:36:ea:76:98:0c:38:cf:a8: b7:ed:80:a5:c2:e9:a8:86:09:09:89:08:af:88:33:c1:c3:14: ec:56:16:69:27:c5:a0:a7:50:a1:20:6b:f1:3f:18:b4:c2:27: 19:70:2c:5c:e9:ce:25:ef:f1:da:bf:c8:b8:f8:9c:22:a2:b4: 90:23:4a:93:16:19:c2:d4:d9:b4:c8:da:3a:c7:8e:5e:fa:55: 9d:21:81:83:c4:fb:b9:00:dd:d6:92:45:84:15:04:4a:38:18: 20:85:06:47:df:ee:7e:de:f2:bb:cf:98:89:7e:91:de:d4:f0: a7:b8:65:00 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGWPQgUftAF8RgOmAsKApVTJWxS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQx MTkxRkVEMDAeFw0yNTAzMDcwNDU3NDBaFw0yNjAzMDYwNTAyNDBaMDMxMTAvBgNV BAMTKDJCMTQxNUNDQTRDQ0IxNTFBNjQ2OTIzRTYwMEFCRjUzNkNENjRCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgbywH+RoMA2lP3S14sjIlo02 zw302k2m03WzMUoSrQ+lyW3bPiMWokqz4PHRL2uFr/HevpY7Zuuy2D+iJsnJjJOx 0w0wuLTK7yA/pTwrF0eLanel0Jhl/sS6dA3rLsiPk1s8hme2gF5bH96v1hxo78xH vNBNZY8tI4AEe/aZTdwGK3Mdi9hYeTVv2VBie2ofDsshADrE7K+s95K7Q3B/Zl/c WJp9/Z6Rs8Y17UM1Uxa3DULfiLFWX+tkhQaR1WzKK561Zh7QWLBiNIJ6LNWMicSK p4FIKGivU4kuqc7LouRhkgIJ2mg3ei+Iu/KY6gS/Q7/8YYN5AIxa6MeuyUxJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUKxQVzKTMsVGmRpI+YAq/U2zWS10wHwYDVR0j BBgwFoAUMM6Fcuqd7agFFRu9Fl5pnRGR/tAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDM4MDJlMi0wM2FmLTRkZDAtOGRjZS01NGMyOGE3MjU2M2QvMC8zMENFODU3MkVB OURFREE4MDUxNTFCQkQxNjVFNjk5RDExOTFGRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQxMTkx RkVEMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwMzgwMmUyLTAzYWYtNGRkMC04 ZGNlLTU0YzI4YTcyNTYzZC8wLzMxMzAzMzJlMzIzMTMxMmUzMTM5MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn08QwDQYJ KoZIhvcNAQELBQADggEBAJXHL37QNAMx1180gSNofbecFNR8dkWrtteq++hFCR33 58cTqG7Zz3yQ6qWBTSfDuyHFwSO5y+zn6S3mtZkoyIXBi8ELlB6dkrAfR6p6wtvF tR/V+NJAKSNmz6aBg5apsG1fu3LBYNYGtIJnqv8oLbjXqoLEvx6ct8UQrwveOl9S 9WGK1YS2FgE26naYDDjPqLftgKXC6aiGCQmJCK+IM8HDFOxWFmknxaCnUKEga/E/ GLTCJxlwLFzpziXv8dq/yLj4nCKitJAjSpMWGcLU2bTI2jrHjl76VZ0hgYPE+7kA 3daSRYQVBEo4GCCFBkff7n7e8rvPmIl+kd7U8Ke4ZQA= -----END CERTIFICATE-----Generated at Sun Apr 6 17:55:34 2025 by rpki-client