$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa File: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (raw, json) Hash identifier: G1U9gODI47ty2yrLIvmBDS+xG1WkgDbqidFt5qR0lew= Subject key identifier: 39:EB:68:D8:FE:20:33:FA:DA:DF:4B:C3:57:96:DF:99:F6:91:28:80 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 1BBB1C1E5EA74B7522F701F490CF5829DF62C5D8 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa Signing time: Thu 24 Apr 2025 04:00:00 +0000 ROA not before: Thu 24 Apr 2025 03:55:00 +0000 ROA not after: Thu 23 Apr 2026 04:00:00 +0000 asID: 131111 IP address blocks: 103.158.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:bb:1c:1e:5e:a7:4b:75:22:f7:01:f4:90:cf:58:29:df:62:c5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Apr 24 03:55:00 2025 GMT Not After : Apr 23 04:00:00 2026 GMT Subject: CN=39EB68D8FE2033FADADF4BC35796DF99F6912880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:18:70:6f:80:15:2e:14:71:cb:c1:38:d4: c9:d6:77:36:ac:60:a9:2d:ae:65:cd:62:31:95:e4: c6:75:27:9d:a7:e7:96:7a:5b:b5:d2:26:c3:c8:1c: 81:c1:b9:6b:bb:bf:53:87:11:fe:6d:51:ac:01:b3: 7a:96:db:ac:22:0e:5c:4d:7d:95:32:58:44:80:0c: 56:be:c2:76:61:93:e2:c8:c7:f6:f3:92:71:e4:4c: 53:29:c7:2c:b4:0e:d4:cc:44:c0:77:f0:70:53:9c: b0:34:73:aa:d4:9a:14:a9:88:f9:06:ac:65:b2:36: 4e:6a:f0:cb:21:53:83:f5:b7:31:22:58:8d:f6:e8: 40:64:df:8d:4f:d8:4a:15:99:30:d0:8a:1d:ad:b4: 33:eb:c7:c8:f1:02:7b:85:6f:5e:60:b1:cb:33:a3: 1f:9e:02:d4:66:9b:4d:4e:0e:3f:78:f2:37:d1:45: 59:ed:62:0a:ac:a4:ee:5d:5a:ce:36:ac:9a:31:9b: 58:41:94:ea:b5:ed:81:ea:44:9a:12:90:50:2a:b5: 59:43:8e:39:d4:10:d2:a7:58:5f:90:50:f7:98:ff: 0e:4c:83:a7:97:28:03:33:06:38:9f:bb:e7:2a:cb: a3:a8:68:4e:98:d3:40:1a:42:90:86:c4:72:72:f1: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EB:68:D8:FE:20:33:FA:DA:DF:4B:C3:57:96:DF:99:F6:91:28:80 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.194.0/23 Signature Algorithm: sha256WithRSAEncryption 78:0b:a6:18:c2:a0:28:d0:92:55:7c:c0:f3:f4:9a:85:57:49: 01:0f:00:fe:2d:f0:4d:40:65:05:00:98:45:47:1d:97:09:66: bd:b2:e3:12:a4:fd:96:b3:b8:6c:19:46:e2:bc:0a:77:93:73: b8:1d:c0:88:4d:2c:ed:05:0a:d5:dc:38:52:fa:78:f6:ab:fc: 56:26:4e:53:72:2c:ce:ef:49:55:db:e5:6e:0f:4a:19:e6:58: ab:1b:31:60:d2:e0:3c:37:b9:7f:1c:34:16:30:59:5e:e8:03: fa:23:75:20:3f:3c:d3:e0:1c:15:d0:a8:e0:43:6f:b4:b5:7f: f5:59:6c:fe:47:ef:44:91:09:8e:d3:54:2b:4c:a5:cb:49:f1: 38:17:a4:7e:2a:ae:42:b7:a0:4b:f5:dc:08:b1:99:ec:57:11: ea:c0:d0:0f:2d:b0:b3:b0:1a:02:8d:ca:40:fb:1a:bd:82:cf: fc:7d:05:15:a9:50:c2:0d:eb:27:d6:66:77:b0:7b:09:51:71: 1b:e1:aa:08:d1:95:cd:6d:49:2b:d0:9e:51:90:39:75:cd:47: e6:77:ff:51:b9:ac:9f:00:80:3d:5e:08:3d:cf:19:aa:29:5e: 5f:af:21:1b:99:c6:e7:e3:88:4e:6d:f1:50:df:1e:b5:d6:be: ef:2d:35:01 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUG7scHl6nS3Ui9wH0kM9YKd9ixdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNTA0MjQwMzU1MDBaFw0yNjA0MjMwNDAwMDBaMDMxMTAvBgNV BAMTKDM5RUI2OEQ4RkUyMDMzRkFEQURGNEJDMzU3OTZERjk5RjY5MTI4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXhhwb4AVLhRxy8E41MnWdzas YKktrmXNYjGV5MZ1J52n55Z6W7XSJsPIHIHBuWu7v1OHEf5tUawBs3qW26wiDlxN fZUyWESADFa+wnZhk+LIx/bzknHkTFMpxyy0DtTMRMB38HBTnLA0c6rUmhSpiPkG rGWyNk5q8MshU4P1tzEiWI326EBk341P2EoVmTDQih2ttDPrx8jxAnuFb15gscsz ox+eAtRmm01ODj948jfRRVntYgqspO5dWs42rJoxm1hBlOq17YHqRJoSkFAqtVlD jjnUENKnWF+QUPeY/w5Mg6eXKAMzBjifu+cqy6OoaE6Y00AaQpCGxHJy8XETAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUOeto2P4gM/ra30vDV5bfmfaRKIAwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNDZiZGFkLWYxMzAtNDhhOS04 NTM0LTU0YmEzZThlZDYxZi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM5MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnsIwDQYJ KoZIhvcNAQELBQADggEBAHgLphjCoCjQklV8wPP0moVXSQEPAP4t8E1AZQUAmEVH HZcJZr2y4xKk/ZazuGwZRuK8CneTc7gdwIhNLO0FCtXcOFL6ePar/FYmTlNyLM7v SVXb5W4PShnmWKsbMWDS4Dw3uX8cNBYwWV7oA/ojdSA/PNPgHBXQqOBDb7S1f/VZ bP5H70SRCY7TVCtMpctJ8TgXpH4qrkK3oEv13AixmexXEerA0A8tsLOwGgKNykD7 Gr2Cz/x9BRWpUMIN6yfWZnewewlRcRvhqgjRlc1tSSvQnlGQOXXNR+Z3/1G5rJ8A gD1eCD3PGaopXl+vIRuZxufjiE5t8VDfHrXWvu8tNQE= -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:49 2025 by rpki-client on console.sobornost.net