$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa File: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (raw, json) Hash identifier: D6xVrarR741Tat/B/aD4Gr/765oFGk3PkG8sC2eJZzQ= Subject key identifier: 92:24:89:64:AD:56:B6:BF:44:34:FB:9E:8F:02:18:6A:84:00:B3:C5 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 2A101918C59BDE04E66A0E31BECA50F2C48D3A6F Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa Signing time: Sat 17 May 2025 12:00:01 +0000 ROA not before: Sat 17 May 2025 11:55:01 +0000 ROA not after: Sat 16 May 2026 12:00:01 +0000 asID: 136820 IP address blocks: 103.98.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 17:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:10:19:18:c5:9b:de:04:e6:6a:0e:31:be:ca:50:f2:c4:8d:3a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: May 17 11:55:01 2025 GMT Not After : May 16 12:00:01 2026 GMT Subject: CN=92248964AD56B6BF4434FB9E8F02186A8400B3C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:16:38:15:08:31:4b:1f:1f:e5:f6:88:f6:f6: 66:e2:3c:00:da:13:2f:9d:21:77:10:12:22:d7:7f: a1:f9:65:5e:75:68:37:14:2d:4e:f9:9d:d7:b0:42: 1a:3a:c3:24:89:22:cf:f3:35:1d:c5:03:27:a3:06: e4:1f:3f:a3:8f:24:69:a6:67:7b:9f:92:9a:c3:b4: b8:21:a4:12:b9:bc:24:bf:19:4f:ec:9f:71:f0:99: d4:6f:3c:61:a7:97:80:8f:57:39:74:59:66:71:e2: 72:c7:bb:3f:68:71:fb:e6:61:9a:40:21:e9:c0:79: c1:12:8d:c9:9e:6d:48:c5:45:5a:3a:28:ff:0b:bb: 46:bf:d0:3f:de:ab:63:ba:47:32:97:50:2e:65:e2: 8a:f1:7b:d7:f0:f9:03:c2:44:06:54:90:4e:3c:b7: 64:23:7d:6d:90:3d:65:4b:59:7e:b6:8e:04:aa:44: 04:ee:2b:2e:88:6c:5f:44:76:3d:51:9c:a9:65:54: ed:d6:8f:bc:6f:6e:18:9e:41:ea:65:6f:d1:6a:59: 7d:4a:10:6f:cd:20:01:a3:b2:d8:37:da:39:53:9f: fe:76:eb:2a:bb:3e:56:35:0e:9a:2f:ea:ab:4c:41: 24:96:6f:17:e9:1a:b4:07:60:1a:9a:ca:b4:ef:f1: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:24:89:64:AD:56:B6:BF:44:34:FB:9E:8F:02:18:6A:84:00:B3:C5 X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.116.0/22 Signature Algorithm: sha256WithRSAEncryption 93:00:ea:67:56:54:72:30:0b:e9:47:ed:0d:5d:56:8d:ce:e3: bb:79:10:1c:6f:12:85:0e:1c:7e:a7:03:02:59:1f:89:59:28: 1a:c1:fb:94:35:75:52:70:75:b8:dc:18:92:61:37:d8:71:e2: 9e:aa:e3:37:ef:dc:12:a7:3b:ff:cf:a0:5b:3d:55:8d:a8:bb: dd:ce:40:9b:0f:db:e8:0a:b5:48:6e:bf:42:4d:ec:51:a8:c7: a0:cf:cd:8d:49:07:a8:7f:f5:fb:37:84:01:74:d6:1a:18:05: 85:30:3b:ec:9b:98:d8:28:3b:a3:f5:bb:57:a8:3e:c6:e5:a9: 98:d4:62:1d:a5:47:0a:d3:bf:c8:44:ff:ce:41:50:55:3a:b5: a3:5f:ef:6b:23:f6:cf:0b:66:8c:9f:5e:7f:d9:22:90:05:2e: 19:08:5c:b9:e1:10:e8:0b:22:1a:f3:45:12:ad:ed:ad:f5:c6: 57:ec:16:ad:89:a3:29:15:1d:87:be:38:19:ff:01:71:67:a6: 5f:75:ee:e9:4a:ba:78:35:c7:6b:70:3f:2e:23:96:a0:54:47: 4a:c9:e1:f6:ca:e7:f9:c9:95:9e:7d:18:ef:a9:2d:88:f4:23: 29:37:59:d2:9b:74:a1:60:42:e7:0b:7a:26:1d:62:d9:c6:7b: 5f:b1:c8:f9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKhAZGMWb3gTmag4xvspQ8sSNOm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNTA1MTcxMTU1MDFaFw0yNjA1MTYxMjAwMDFaMDMxMTAvBgNV BAMTKDkyMjQ4OTY0QUQ1NkI2QkY0NDM0RkI5RThGMDIxODZBODQwMEIzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFjgVCDFLHx/l9oj29mbiPADa Ey+dIXcQEiLXf6H5ZV51aDcULU75ndewQho6wySJIs/zNR3FAyejBuQfP6OPJGmm Z3ufkprDtLghpBK5vCS/GU/sn3HwmdRvPGGnl4CPVzl0WWZx4nLHuz9ocfvmYZpA IenAecESjcmebUjFRVo6KP8Lu0a/0D/eq2O6RzKXUC5l4orxe9fw+QPCRAZUkE48 t2QjfW2QPWVLWX62jgSqRATuKy6IbF9Edj1RnKllVO3Wj7xvbhieQeplb9FqWX1K EG/NIAGjstg32jlTn/526yq7PlY1Dpov6qtMQSSWbxfpGrQHYBqayrTv8fG5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkiSJZK1Wtr9ENPuejwIYaoQAs8UwHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjZDUzOTQ4LWRkZjMtNDQ5YS1i ZjJiLWNmM2Y3YWUxNzZkMy8wLzMxMzAzMzJlMzkzODJlMzEzMTM2MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzEzMzM2MzgzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2J0MA0GCSqG SIb3DQEBCwUAA4IBAQCTAOpnVlRyMAvpR+0NXVaNzuO7eRAcbxKFDhx+pwMCWR+J WSgawfuUNXVScHW43BiSYTfYceKequM379wSpzv/z6BbPVWNqLvdzkCbD9voCrVI br9CTexRqMegz82NSQeof/X7N4QBdNYaGAWFMDvsm5jYKDuj9btXqD7G5amY1GId pUcK07/IRP/OQVBVOrWjX+9rI/bPC2aMn15/2SKQBS4ZCFy54RDoCyIa80USre2t 9cZX7BatiaMpFR2HvjgZ/wFxZ6Zfde7pSrp4NcdrcD8uI5agVEdKyeH2yuf5yZWe fRjvqS2I9CMpN1nSm3ShYELnC3omHWLZxntfscj5 -----END CERTIFICATE-----Generated at Sat Jun 7 14:11:32 2025 by rpki-client