$ rpki-client -vvf repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa File: 3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa (raw, json) Hash identifier: 6s+35i1PbBgpAAj3R2PbueLOCnOhVKs2T7rEnDWSY6U= Subject key identifier: 5D:BC:48:12:12:10:CD:EB:B3:A2:21:E9:5F:59:A3:29:CB:16:D2:79 Certificate issuer: /CN=A715B65580762207B94EC6527AFBEDD69970A868 Certificate serial: 648754F06A64745A71AC3C28AB6D8C82CA2E181F Authority key identifier: A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa Signing time: Mon 02 Jun 2025 02:03:44 +0000 ROA not before: Mon 02 Jun 2025 01:58:44 +0000 ROA not after: Mon 01 Jun 2026 02:03:44 +0000 asID: 138875 IP address blocks: 103.140.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.crl rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:87:54:f0:6a:64:74:5a:71:ac:3c:28:ab:6d:8c:82:ca:2e:18:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A715B65580762207B94EC6527AFBEDD69970A868 Validity Not Before: Jun 2 01:58:44 2025 GMT Not After : Jun 1 02:03:44 2026 GMT Subject: CN=5DBC48121210CDEBB3A221E95F59A329CB16D279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:51:c6:11:66:71:09:e8:00:2c:6c:81:72:ec: ff:68:0f:10:73:25:72:7f:40:d8:ef:ea:9c:44:31: 1b:2b:7d:4b:13:57:89:2f:5f:62:c3:6d:e8:e7:38: f7:8c:d6:47:b7:b5:cb:8d:93:59:dc:a5:b6:28:30: 7b:ce:52:04:ae:91:b9:87:4e:1b:94:e2:5a:c9:d0: 94:a4:7a:62:7c:fb:e3:bc:a6:2a:ce:8e:42:08:3f: 0b:7f:26:78:cc:59:3c:7b:da:1b:b3:9d:7c:d6:01: 02:3d:3d:fb:82:ba:ef:fb:f5:73:8e:c0:2e:6f:73: 5a:5e:fc:3e:0b:31:31:1a:bc:a2:4e:4b:2e:23:54: f2:3a:d2:59:37:f1:49:b5:0f:46:60:7a:2b:2c:7d: a4:dc:8c:31:1c:27:4e:68:27:80:96:c0:5d:54:c8: 15:f9:a4:13:c2:0a:e5:69:06:6d:a2:e1:76:d6:4e: 54:95:4d:98:79:61:93:e6:4f:d4:6f:65:54:03:78: 77:29:c1:7a:2a:25:cb:20:e6:8b:f3:ff:37:0e:9d: 6c:25:e0:d0:99:d8:29:7b:61:05:ba:fe:ad:3b:5a: 49:2c:4a:ad:12:92:8e:35:15:ff:2d:aa:e5:84:b6: 42:14:e0:86:06:91:26:c7:81:04:bc:f2:5f:9e:b6: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BC:48:12:12:10:CD:EB:B3:A2:21:E9:5F:59:A3:29:CB:16:D2:79 X509v3 Authority Key Identifier: keyid:A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.104.0/23 Signature Algorithm: sha256WithRSAEncryption 81:77:93:45:3e:a5:4f:38:14:a7:98:ca:4c:9e:bc:92:86:e5: 20:8c:c7:b8:88:60:67:0e:69:cf:de:49:af:a4:cf:5c:fb:a1: 27:7e:42:d7:e5:8e:5f:eb:b4:8d:34:5b:3b:88:4b:bf:44:0c: a0:04:ca:e9:4c:97:85:0d:b5:26:01:ce:80:e7:01:84:72:04: 35:c3:52:ad:94:14:dd:b3:9b:05:4a:86:7d:e4:c3:ce:1e:d2: fa:92:ff:6c:45:bc:13:35:e4:54:16:7b:f6:38:12:0d:88:fe: 01:ab:8b:bd:fe:b4:b6:04:f7:87:93:72:47:26:18:fd:48:7a: 25:83:1f:bc:a2:f4:a4:bd:64:e5:71:de:a8:c3:07:4f:8a:73: 32:9f:c2:24:47:ff:6f:3e:d3:40:97:bc:99:bd:d5:c5:e4:54: e4:d9:6d:db:c0:14:8f:fa:96:12:18:62:c5:8b:93:21:8a:46: cf:6e:82:4b:d3:31:c5:56:71:97:55:c6:84:6b:d5:49:3e:90: ac:7d:04:67:19:ed:5f:fa:a0:1a:15:95:b9:2e:02:d3:0d:fb: e3:88:8f:5d:46:c2:31:04:24:8d:dd:bc:27:20:a3:2c:95:ca: 50:70:b1:79:f7:b9:f4:44:17:6e:7f:36:7d:ee:c9:39:84:07: 1c:da:1d:1a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZIdU8GpkdFpxrDwoq22MgsouGB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxNUI2NTU4MDc2MjIwN0I5NEVDNjUyN0FGQkVERDY5 OTcwQTg2ODAeFw0yNTA2MDIwMTU4NDRaFw0yNjA2MDEwMjAzNDRaMDMxMTAvBgNV BAMTKDVEQkM0ODEyMTIxMENERUJCM0EyMjFFOTVGNTlBMzI5Q0IxNkQyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMUcYRZnEJ6AAsbIFy7P9oDxBz JXJ/QNjv6pxEMRsrfUsTV4kvX2LDbejnOPeM1ke3tcuNk1ncpbYoMHvOUgSukbmH ThuU4lrJ0JSkemJ8++O8pirOjkIIPwt/JnjMWTx72huznXzWAQI9PfuCuu/79XOO wC5vc1pe/D4LMTEavKJOSy4jVPI60lk38Um1D0ZgeissfaTcjDEcJ05oJ4CWwF1U yBX5pBPCCuVpBm2i4XbWTlSVTZh5YZPmT9RvZVQDeHcpwXoqJcsg5ovz/zcOnWwl 4NCZ2Cl7YQW6/q07WkksSq0Sko41Ff8tquWEtkIU4IYGkSbHgQS88l+etnU3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUXbxIEhIQzeuzoiHpX1mjKcsW0nkwHwYDVR0j BBgwFoAUpxW2VYB2Ige5TsZSevvt1plwqGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzRiY2NkNS0yNTJjLTQ5NDctODcxYi0xNTZkZmZmZTc3MTcvMC9BNzE1QjY1NTgw NzYyMjA3Qjk0RUM2NTI3QUZCRURENjk5NzBBODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcxNUI2NTU4MDc2MjIwN0I5NEVDNjUyN0FGQkVERDY5OTcw QTg2OC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3NGJjY2Q1LTI1MmMtNDk0Ny04 NzFiLTE1NmRmZmZlNzcxNy8wLzMxMzAzMzJlMzEzNDMwMmUzMTMwMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnjGgwDQYJ KoZIhvcNAQELBQADggEBAIF3k0U+pU84FKeYykyevJKG5SCMx7iIYGcOac/eSa+k z1z7oSd+Qtfljl/rtI00WzuIS79EDKAEyulMl4UNtSYBzoDnAYRyBDXDUq2UFN2z mwVKhn3kw84e0vqS/2xFvBM15FQWe/Y4Eg2I/gGri73+tLYE94eTckcmGP1IeiWD H7yi9KS9ZOVx3qjDB0+KczKfwiRH/28+00CXvJm91cXkVOTZbdvAFI/6lhIYYsWL kyGKRs9ugkvTMcVWcZdVxoRr1Uk+kKx9BGcZ7V/6oBoVlbkuAtMN++OIj11GwjEE JI3dvCcgoyyVylBwsXn3ufREF25/Nn3uyTmEBxzaHRo= -----END CERTIFICATE-----Generated at Sat Jun 7 23:06:09 2025 by rpki-client