$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa File: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (raw, json) Hash identifier: hK06HKoqFlnupfPGbH4fj+kvbHmFb9y+Qhw58DcH1q0= Subject key identifier: 11:17:D0:CB:A3:C4:B9:91:6E:B6:AD:44:70:38:52:F1:AA:B3:45:77 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 3E8C18E819AAC37691685B99E80E017F3C3A4D Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa Signing time: Sat 17 May 2025 12:00:02 +0000 ROA not before: Sat 17 May 2025 11:55:02 +0000 ROA not after: Sat 16 May 2026 12:00:02 +0000 asID: 136820 IP address blocks: 103.98.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:8c:18:e8:19:aa:c3:76:91:68:5b:99:e8:0e:01:7f:3c:3a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: May 17 11:55:02 2025 GMT Not After : May 16 12:00:02 2026 GMT Subject: CN=1117D0CBA3C4B9916EB6AD44703852F1AAB34577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:48:26:ea:c1:84:e4:8a:0a:e4:cc:2a:7c:b8: ec:0c:17:56:bb:05:13:9b:f2:3d:05:73:a1:7d:d5: 76:c1:5c:46:09:8b:5e:94:10:6b:02:c8:28:74:e0: fb:3e:be:ca:52:18:a9:b7:7e:5b:a8:a0:39:8c:bc: 23:9e:b2:a8:c6:57:15:95:3f:0c:15:37:8e:05:a9: f5:c0:01:0e:8a:a6:57:3f:99:d6:07:d9:cf:a3:4f: cd:82:e6:a4:f1:02:3a:c2:2e:f9:38:2b:de:93:b2: 5c:da:20:0b:be:87:ea:d8:1f:6f:3c:d5:59:bf:5a: 30:ba:1e:c2:40:64:b9:f8:a0:9d:1e:d6:9b:cb:2c: e8:09:e4:f6:98:e3:b4:33:16:7d:64:61:78:da:72: 5f:53:5e:02:c6:a2:ed:bb:69:09:30:ac:cd:5b:7d: 0a:35:75:f6:74:ee:8a:2a:56:b0:8f:64:f9:36:53: 33:05:20:2a:c6:e8:26:38:9d:34:9a:1b:81:6d:06: 2f:35:d7:ca:b6:92:80:a5:4b:4a:d4:cd:ac:9a:68: 1a:23:a3:09:7e:2b:9d:9d:2f:7c:b4:06:a3:ba:f3: eb:98:eb:c6:71:81:c7:c8:03:9d:f9:ec:e8:7b:8a: b5:d5:51:1b:f0:f7:d5:f8:b8:b3:48:5d:db:ba:95: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:17:D0:CB:A3:C4:B9:91:6E:B6:AD:44:70:38:52:F1:AA:B3:45:77 X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.116.0/24 Signature Algorithm: sha256WithRSAEncryption 64:10:b5:c0:c4:98:51:f4:77:9f:3d:09:4c:d2:6b:07:73:2b: ba:b3:d6:1a:d4:41:b0:e7:2f:b7:4b:6c:e0:ed:99:26:96:08: 91:f9:42:28:0b:7a:69:b3:26:80:1a:1c:b2:85:f6:9f:5a:de: a2:33:76:fa:5b:a4:a5:be:ab:a4:2d:b0:04:ab:7b:40:15:c8: 01:07:fe:2e:29:1e:85:1f:94:51:5b:71:8c:94:c5:9e:88:37: 00:4f:6c:0a:3e:ff:b7:ef:11:0a:ce:07:88:a9:86:79:fe:9e: 66:50:26:02:22:04:89:1c:ac:5f:e3:be:15:59:ee:a6:64:66: 25:be:dd:4d:b6:60:f7:82:c3:f8:9e:c3:59:d6:78:90:fd:38: c6:b2:9d:dc:cc:90:a7:ea:db:57:f6:1b:67:f1:65:90:73:92: 99:b3:3f:4e:8a:fb:6e:40:e6:22:62:89:f3:f2:3e:94:7e:db: 98:8c:c4:06:9c:69:b7:9f:1e:11:2f:ab:a9:e7:fd:73:00:36: 9a:61:e1:0b:27:e1:4f:af:bf:e8:1a:4b:79:f2:6b:3c:3c:ea: 42:7a:10:ef:9e:a1:d2:50:1e:da:bf:f0:55:02:cf:ed:92:9e: ad:89:1f:90:bc:ed:07:c6:ec:03:f9:8f:a7:b3:9f:3a:c8:f2: a6:72:17:7a -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgITPowY6Bmqw3aRaFuZ6A4Bfzw6TTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzRTIxNzNDQ0U2N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3 RDZFMDg4MB4XDTI1MDUxNzExNTUwMloXDTI2MDUxNjEyMDAwMlowMzExMC8GA1UE AxMoMTExN0QwQ0JBM0M0Qjk5MTZFQjZBRDQ0NzAzODUyRjFBQUIzNDU3NzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK1IJurBhOSKCuTMKny47AwXVrsF E5vyPQVzoX3VdsFcRgmLXpQQawLIKHTg+z6+ylIYqbd+W6igOYy8I56yqMZXFZU/ DBU3jgWp9cABDoqmVz+Z1gfZz6NPzYLmpPECOsIu+Tgr3pOyXNogC76H6tgfbzzV Wb9aMLoewkBkufignR7Wm8ss6Ank9pjjtDMWfWRheNpyX1NeAsai7btpCTCszVt9 CjV19nTuiipWsI9k+TZTMwUgKsboJjidNJobgW0GLzXXyraSgKVLStTNrJpoGiOj CX4rnZ0vfLQGo7rz65jrxnGBx8gDnfns6HuKtdVRG/D31fi4s0hd27qVP40CAwEA AaOCAjQwggIwMB0GA1UdDgQWBBQRF9DLo8S5kW62rURwOFLxqrNFdzAfBgNVHSME GDAWgBQ+IXPM5n910p8cqqc55sxnJ9bgiDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Nj ZDUzOTQ4LWRkZjMtNDQ5YS1iZjJiLWNmM2Y3YWUxNzZkMy8wLzNFMjE3M0NDRTY3 Rjc1RDI5RjFDQUFBNzM5RTZDQzY3MjdENkUwODguY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8zRTIxNzNDQ0U2N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZF MDg4LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvMzEzMDMzMmUzOTM4MmUzMTMxMzYyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMTMzMzYzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnYnQwDQYJKoZI hvcNAQELBQADggEBAGQQtcDEmFH0d589CUzSawdzK7qz1hrUQbDnL7dLbODtmSaW CJH5QigLemmzJoAaHLKF9p9a3qIzdvpbpKW+q6QtsASre0AVyAEH/i4pHoUflFFb cYyUxZ6INwBPbAo+/7fvEQrOB4iphnn+nmZQJgIiBIkcrF/jvhVZ7qZkZiW+3U22 YPeCw/iew1nWeJD9OMayndzMkKfq21f2G2fxZZBzkpmzP06K+25A5iJiifPyPpR+ 25iMxAacabefHhEvq6nn/XMANpph4Qsn4U+vv+gaS3nyazw86kJ6EO+eodJQHtq/ 8FUCz+2Snq2JH5C87QfG7AP5j6eznzrI8qZyF3o= -----END CERTIFICATE-----Generated at Sat Jun 7 23:12:09 2025 by rpki-client