$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa File: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (raw, json) Hash identifier: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q= Subject key identifier: B1:2B:9E:B8:2F:79:60:FF:96:0D:60:BA:9D:4F:7B:5E:73:D4:6F:BE Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 9F32E8FB27023D251A7F263FE6C0088A894A7B Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa Signing time: Mon 02 Jun 2025 02:03:10 +0000 ROA not before: Mon 02 Jun 2025 01:58:10 +0000 ROA not after: Mon 01 Jun 2026 02:03:10 +0000 asID: 138131 IP address blocks: 103.115.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 08:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9f:32:e8:fb:27:02:3d:25:1a:7f:26:3f:e6:c0:08:8a:89:4a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Jun 2 01:58:10 2025 GMT Not After : Jun 1 02:03:10 2026 GMT Subject: CN=B12B9EB82F7960FF960D60BA9D4F7B5E73D46FBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:f3:f9:24:5e:c1:f5:d0:a2:f6:70:c6:00: 42:28:a4:ce:6d:cc:19:16:56:ae:10:6b:ad:1b:06: 47:3c:ad:52:7c:b5:da:b4:5c:4c:43:4e:71:04:04: 5f:38:11:97:d5:f4:66:a2:19:25:fd:92:41:9d:42: ce:de:3b:aa:de:7c:2a:d8:8b:2a:d9:8c:04:09:fb: c1:0d:f1:44:86:72:6a:c5:c8:2f:40:2d:20:09:c2: ba:76:5b:6e:16:b1:e7:25:1c:70:40:39:78:8d:6c: 5e:e7:00:28:66:14:70:ab:20:37:9a:9c:f7:ad:63: 7d:39:5b:52:f1:eb:03:ee:6c:81:c8:7f:4a:4d:32: cf:3d:68:1d:7c:5d:18:63:8f:ea:b3:a7:7b:67:9f: b0:b7:c1:07:a3:15:8a:e4:b9:73:8f:b3:39:74:bf: 93:26:a5:1c:f0:2c:d5:d8:57:76:13:2d:6d:ac:49: 8c:15:3d:e1:e8:14:dd:5b:ed:ec:c7:ec:f9:6f:ad: 6b:9f:20:94:44:57:16:62:d7:be:9a:cf:f2:f8:6e: c4:39:5e:e4:8a:db:1f:2d:b3:cd:79:a6:7b:83:1c: 0b:a1:a0:44:5a:c7:8f:39:5c:86:35:cf:46:cc:0f: 8a:e2:b4:f9:5c:10:0d:4d:46:5b:9e:f7:73:49:c5: b7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2B:9E:B8:2F:79:60:FF:96:0D:60:BA:9D:4F:7B:5E:73:D4:6F:BE X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.164.0/24 Signature Algorithm: sha256WithRSAEncryption c5:15:b5:6f:74:bb:0c:1e:b2:4e:79:ed:bf:63:43:7f:0e:36: 61:57:5d:a4:e7:91:3d:2f:3f:c4:65:d5:f2:df:b5:e4:a8:5f: 26:2e:d3:ad:f4:eb:26:55:fc:49:f5:0a:f8:11:cf:be:b5:4d: 74:1b:e2:b6:52:54:9d:92:18:0e:e4:be:74:8c:48:d6:f5:13: d7:20:09:fb:ca:2f:b4:14:85:f8:cd:1a:0b:b5:97:83:5a:69: 79:aa:ee:54:ca:08:a0:0b:8c:e9:d7:82:38:50:14:4d:ff:5f: 91:75:89:29:7b:62:28:80:88:85:4b:a4:00:16:20:af:08:46: e0:d9:ce:40:7a:0f:8e:7e:e7:1b:45:4e:7b:3f:a4:b0:13:fe: 0c:81:36:4e:8e:9b:70:f4:a9:69:03:74:a1:e2:83:78:de:5c: 14:43:5d:ab:3b:fe:64:de:39:23:d8:c7:9b:6f:96:75:e0:02: 79:4d:82:62:2f:8d:6d:34:c3:f3:e7:03:5d:3d:0d:b4:df:ee: 3e:a1:d0:1f:92:4b:0b:94:a8:a4:da:e8:cc:fa:f7:71:0f:e4: b3:b5:47:77:50:58:71:46:57:e0:dc:4e:3f:d3:91:07:10:63: e5:f9:99:c0:99:8a:72:fc:17:56:12:24:b1:d5:c6:68:a7:ed: 24:39:74:98 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAJ8y6PsnAj0lGn8mP+bACIqJSnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTA2MDIwMTU4MTBaFw0yNjA2MDEwMjAzMTBaMDMxMTAvBgNV BAMTKEIxMkI5RUI4MkY3OTYwRkY5NjBENjBCQTlENEY3QjVFNzNENDZGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaufP5JF7B9dCi9nDGAEIopM5t zBkWVq4Qa60bBkc8rVJ8tdq0XExDTnEEBF84EZfV9GaiGSX9kkGdQs7eO6refCrY iyrZjAQJ+8EN8USGcmrFyC9ALSAJwrp2W24WseclHHBAOXiNbF7nAChmFHCrIDea nPetY305W1Lx6wPubIHIf0pNMs89aB18XRhjj+qzp3tnn7C3wQejFYrkuXOPszl0 v5MmpRzwLNXYV3YTLW2sSYwVPeHoFN1b7ezH7PlvrWufIJREVxZi176az/L4bsQ5 XuSK2x8ts815pnuDHAuhoERax485XIY1z0bMD4ritPlcEA1NRlue93NJxbeHAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUsSueuC95YP+WDWC6nU97XnPUb74wHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNjM0N2Y0LWVhMjYtNGQ0Yy1h NTY4LTFkODYzMzYwZTQyMS8wLzMxMzAzMzJlMzEzMTM1MmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnc6QwDQYJ KoZIhvcNAQELBQADggEBAMUVtW90uwwesk557b9jQ38ONmFXXaTnkT0vP8Rl1fLf teSoXyYu06306yZV/En1CvgRz761TXQb4rZSVJ2SGA7kvnSMSNb1E9cgCfvKL7QU hfjNGgu1l4NaaXmq7lTKCKALjOnXgjhQFE3/X5F1iSl7YiiAiIVLpAAWIK8IRuDZ zkB6D45+5xtFTns/pLAT/gyBNk6Om3D0qWkDdKHig3jeXBRDXas7/mTeOSPYx5tv lnXgAnlNgmIvjW00w/PnA109DbTf7j6h0B+SSwuUqKTa6Mz693EP5LO1R3dQWHFG V+DcTj/TkQcQY+X5mcCZinL8F1YSJLHVxmin7SQ5dJg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:05 2025 by rpki-client