$ rpki-client -vvf repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa File: 3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa (raw, json) Hash identifier: 6pDvqDjIlcQkZPcI9oy/Uawt6R25Hk17d81YNhRXRmY= Subject key identifier: 03:5C:DE:CD:01:59:9A:A3:C9:26:40:91:6A:9B:02:A8:28:E9:94:4C Certificate issuer: /CN=251859FA726E84EB8EF1585C6B1F3D925581A938 Certificate serial: 39373B721D224F7A2188C7192E6A6DF25729CA2A Authority key identifier: 25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa Signing time: Tue 06 May 2025 13:44:51 +0000 ROA not before: Tue 06 May 2025 13:39:51 +0000 ROA not after: Tue 05 May 2026 13:44:51 +0000 asID: 138842 IP address blocks: 103.138.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 10:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:37:3b:72:1d:22:4f:7a:21:88:c7:19:2e:6a:6d:f2:57:29:ca:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251859FA726E84EB8EF1585C6B1F3D925581A938 Validity Not Before: May 6 13:39:51 2025 GMT Not After : May 5 13:44:51 2026 GMT Subject: CN=035CDECD01599AA3C92640916A9B02A828E9944C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:29:93:19:5b:df:98:53:cf:c8:f1:49:e4:77: eb:69:98:76:e8:4b:0c:a5:b3:31:cb:dc:04:c4:9c: 42:0f:3f:43:07:d4:a6:0b:bc:82:5e:e9:c9:98:49: 56:65:f3:a0:98:4f:ed:7b:2a:3c:ef:99:3b:38:1b: 52:74:10:1b:8d:f1:0b:76:3c:0c:ae:e3:17:10:00: 8c:60:2b:20:51:d9:a2:e9:3a:01:d0:90:2c:3e:c7: 4d:fe:9f:48:4c:46:ef:45:ab:bd:d0:88:f0:07:77: ca:90:6d:b8:10:73:9b:4b:b0:23:8f:48:2e:52:17: 32:e8:c9:6d:cf:fe:2a:d4:19:3e:85:b9:b7:9f:6f: e0:86:32:d8:f2:35:98:14:c1:0b:9a:8a:b9:b9:59: 20:79:45:af:ef:b1:32:8f:2a:1d:03:67:75:aa:a0: d7:e0:ca:a4:f7:82:6a:2d:97:8d:10:b0:ae:07:b6: d9:af:0b:2a:36:08:36:ca:14:2f:ae:41:bc:ed:49: 35:f5:05:29:ef:b2:49:e0:af:14:d3:11:2b:69:58: 9d:ef:8b:d1:82:a8:7e:98:fd:70:52:57:f6:ee:96: b9:4c:31:52:71:d3:78:64:0b:2b:c5:a4:21:85:62: 7e:54:d8:2f:89:14:19:2f:eb:26:7b:41:e3:49:1f: 5d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5C:DE:CD:01:59:9A:A3:C9:26:40:91:6A:9B:02:A8:28:E9:94:4C X509v3 Authority Key Identifier: keyid:25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.69.0/24 Signature Algorithm: sha256WithRSAEncryption 18:d9:13:f9:cb:f4:1d:11:0b:6a:45:0d:03:83:b2:d1:b5:5c: 59:9e:ae:97:e2:2d:10:18:a0:97:2d:96:3d:bc:14:d2:fe:a1: 6a:08:b5:84:28:f2:43:59:48:3b:8d:cf:af:e3:da:db:e4:ee: 9e:ea:6b:b7:aa:5c:bf:d0:50:97:9b:a8:4c:71:54:0b:8c:44: f4:c7:a8:3f:2e:f0:a8:ab:37:7f:f0:a7:0d:08:f0:45:b0:b6: 4e:d3:19:25:df:4b:b6:c9:fb:8d:c1:ba:a6:ee:69:6f:62:a4: 68:90:34:a2:6f:e8:e8:8f:6f:87:34:be:0a:c1:05:bf:af:b0: 5f:5c:c3:8a:3c:1f:d8:0c:76:98:5c:94:de:15:36:bf:41:ec: 61:31:4d:64:1e:70:ba:60:22:6d:12:d5:2d:68:84:c5:24:b6: f3:fc:2d:4c:8f:6a:a1:ba:be:4e:d9:28:0b:ac:aa:e0:e5:d9: 31:50:f8:01:4f:bc:b3:a1:b5:82:2f:0b:3e:fd:61:df:de:39: 02:90:80:68:67:d3:90:b6:43:af:f6:14:d4:5e:a1:43:22:5d: c9:30:48:32:f9:f5:e2:21:d3:f1:21:6c:d1:2a:13:d4:9a:c3: 55:14:05:d9:ee:f1:d9:a4:bb:00:f6:73:06:ac:0f:b4:e4:e4: a8:56:5b:0f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOTc7ch0iT3ohiMcZLmpt8lcpyiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNEOTI1 NTgxQTkzODAeFw0yNTA1MDYxMzM5NTFaFw0yNjA1MDUxMzQ0NTFaMDMxMTAvBgNV BAMTKDAzNUNERUNEMDE1OTlBQTNDOTI2NDA5MTZBOUIwMkE4MjhFOTk0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiKZMZW9+YU8/I8Unkd+tpmHbo SwylszHL3ATEnEIPP0MH1KYLvIJe6cmYSVZl86CYT+17KjzvmTs4G1J0EBuN8Qt2 PAyu4xcQAIxgKyBR2aLpOgHQkCw+x03+n0hMRu9Fq73QiPAHd8qQbbgQc5tLsCOP SC5SFzLoyW3P/irUGT6Fubefb+CGMtjyNZgUwQuairm5WSB5Ra/vsTKPKh0DZ3Wq oNfgyqT3gmotl40QsK4HttmvCyo2CDbKFC+uQbztSTX1BSnvskngrxTTEStpWJ3v i9GCqH6Y/XBSV/bulrlMMVJx03hkCyvFpCGFYn5U2C+JFBkv6yZ7QeNJH10rAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUA1zezQFZmqPJJkCRapsCqCjplEwwHwYDVR0j BBgwFoAUJRhZ+nJuhOuO8Vhcax89klWBqTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTM2NzRhNi0xMTRmLTRiYjUtODViYi1jYmI2N2RiMmE5NTUvMC8yNTE4NTlGQTcy NkU4NEVCOEVGMTU4NUM2QjFGM0Q5MjU1ODFBOTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNEOTI1NTgx QTkzOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MzY3NGE2LTExNGYtNGJiNS04 NWJiLWNiYjY3ZGIyYTk1NS8wLzMxMzAzMzJlMzEzMzM4MmUzNjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4pFMA0GCSqG SIb3DQEBCwUAA4IBAQAY2RP5y/QdEQtqRQ0Dg7LRtVxZnq6X4i0QGKCXLZY9vBTS /qFqCLWEKPJDWUg7jc+v49rb5O6e6mu3qly/0FCXm6hMcVQLjET0x6g/LvCoqzd/ 8KcNCPBFsLZO0xkl30u2yfuNwbqm7mlvYqRokDSib+joj2+HNL4KwQW/r7BfXMOK PB/YDHaYXJTeFTa/QexhMU1kHnC6YCJtEtUtaITFJLbz/C1Mj2qhur5O2SgLrKrg 5dkxUPgBT7yzobWCLws+/WHf3jkCkIBoZ9OQtkOv9hTUXqFDIl3JMEgy+fXiIdPx IWzRKhPUmsNVFAXZ7vHZpLsA9nMGrA+05OSoVlsP -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:40 2025 by rpki-client