$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa File: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (raw, json) Hash identifier: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo= Subject key identifier: A4:FF:FB:9D:71:45:A0:46:00:A0:9F:3F:DC:2B:96:99:20:F6:FF:E9 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 0183531BCBA6AF53CAB94BD083AE72716F105836 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa Signing time: Fri 16 May 2025 07:00:01 +0000 ROA not before: Fri 16 May 2025 06:55:01 +0000 ROA not after: Fri 15 May 2026 07:00:01 +0000 asID: 131705 IP address blocks: 103.154.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 03:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:83:53:1b:cb:a6:af:53:ca:b9:4b:d0:83:ae:72:71:6f:10:58:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: May 16 06:55:01 2025 GMT Not After : May 15 07:00:01 2026 GMT Subject: CN=A4FFFB9D7145A04600A09F3FDC2B969920F6FFE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:40:4f:db:11:ea:39:3b:51:47:ad:42:c2: d2:aa:13:fc:e8:af:48:f4:9b:5d:5d:99:e6:1c:43: 46:83:45:10:e8:e7:37:40:0f:0f:f0:79:44:00:97: 8d:c2:1c:66:17:f3:b6:1f:88:8d:4b:00:83:b7:30: b2:f1:ea:c4:ef:cb:92:fd:70:a4:a8:f0:2f:2e:58: 88:30:6c:06:e4:6d:0e:8f:78:40:82:fd:6e:3f:c0: f0:82:d3:10:ff:44:89:d4:21:ed:ff:77:43:6e:0b: 9b:e7:5d:4c:92:3a:43:1e:fd:cc:61:4e:1c:7a:da: 01:f2:6f:c0:37:fd:36:1d:69:83:22:02:da:e3:7c: e2:eb:02:9c:4f:53:09:fa:1e:a6:43:5e:6d:ce:ca: 79:ba:3c:b0:db:f1:09:40:84:bd:52:2f:17:40:09: 9b:4d:15:3d:f0:07:61:85:39:68:d9:7e:27:67:82: 8a:43:1a:49:1c:70:02:d6:2a:57:86:a5:3b:17:57: 5b:aa:a9:de:71:cc:39:60:38:1f:ad:e6:24:4f:eb: 2a:c0:b6:c3:e6:22:6b:fc:ab:1b:95:00:23:5e:42: 36:c4:24:61:3d:ce:87:dc:51:ea:a4:c7:f1:98:50: e3:0b:f7:1b:bb:8f:e4:71:be:3d:e1:01:81:53:1d: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FF:FB:9D:71:45:A0:46:00:A0:9F:3F:DC:2B:96:99:20:F6:FF:E9 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.179.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:5d:60:74:14:11:f5:1c:51:ac:39:7f:e2:25:f0:24:9a:dc: 07:9a:7c:1f:9c:bf:b4:9d:c9:a3:28:34:15:9b:d2:8b:54:3b: e3:fd:e1:b1:a2:c5:23:c5:40:0c:1f:9b:68:41:bd:e1:e4:41: 3d:9d:f4:24:19:47:44:a5:ee:b9:48:63:71:b6:fe:64:47:19: 0b:93:bc:a9:83:c6:2b:a2:fb:cd:f5:6e:0a:bb:71:4d:79:9d: 89:b7:c6:58:40:54:4a:fc:6a:69:14:7b:a4:77:42:c0:e2:fc: d3:77:a7:8f:68:7b:c8:cb:58:c3:59:d6:04:f0:88:db:e1:36: fc:a7:67:9a:95:33:89:f4:63:e7:a6:04:26:c9:43:af:53:6a: 5d:05:b6:75:a7:d4:ba:a9:16:94:31:5a:00:b8:7a:2b:40:c7: f7:1a:85:c7:e5:92:00:8e:bf:d5:b3:16:cd:fb:4c:6c:fc:3c: 8e:45:f9:25:ae:b7:20:0f:b2:9e:bc:1f:7d:cf:93:18:0d:1e: 05:da:7d:e5:e8:c5:62:77:2e:25:6c:48:04:e9:9f:69:b6:67: b9:2b:bc:82:58:8c:a9:82:ef:26:16:20:b9:dd:f9:f5:89:60: 3c:8a:13:90:f4:82:58:49:d4:48:d7:43:55:0b:19:83:13:49: 0d:d2:a6:5a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAYNTG8umr1PKuUvQg65ycW8QWDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTA1MTYwNjU1MDFaFw0yNjA1MTUwNzAwMDFaMDMxMTAvBgNV BAMTKEE0RkZGQjlENzE0NUEwNDYwMEEwOUYzRkRDMkI5Njk5MjBGNkZGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa9UBP2xHqOTtRR61CwtKqE/zo r0j0m11dmeYcQ0aDRRDo5zdADw/weUQAl43CHGYX87YfiI1LAIO3MLLx6sTvy5L9 cKSo8C8uWIgwbAbkbQ6PeECC/W4/wPCC0xD/RInUIe3/d0NuC5vnXUySOkMe/cxh Thx62gHyb8A3/TYdaYMiAtrjfOLrApxPUwn6HqZDXm3Oynm6PLDb8QlAhL1SLxdA CZtNFT3wB2GFOWjZfidngopDGkkccALWKleGpTsXV1uqqd5xzDlgOB+t5iRP6yrA tsPmImv8qxuVACNeQjbEJGE9zofcUeqkx/GYUOML9xu7j+Rxvj3hAYFTHWhNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUpP/7nXFFoEYAoJ8/3CuWmSD2/+kwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05 OWE0LTBmNDVlOGVjZjU3Ni8wLzMxMzAzMzJlMzEzNTM0MmUzMTM3MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmrMwDQYJ KoZIhvcNAQELBQADggEBAE5dYHQUEfUcUaw5f+Il8CSa3AeafB+cv7SdyaMoNBWb 0otUO+P94bGixSPFQAwfm2hBveHkQT2d9CQZR0Sl7rlIY3G2/mRHGQuTvKmDxiui +831bgq7cU15nYm3xlhAVEr8amkUe6R3QsDi/NN3p49oe8jLWMNZ1gTwiNvhNvyn Z5qVM4n0Y+emBCbJQ69Tal0FtnWn1LqpFpQxWgC4eitAx/cahcflkgCOv9WzFs37 TGz8PI5F+SWutyAPsp68H33PkxgNHgXafeXoxWJ3LiVsSATpn2m2Z7krvIJYjKmC 7yYWILnd+fWJYDyKE5D0glhJ1EjXQ1ULGYMTSQ3Splo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:33 2025 by rpki-client