$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33342e302f32342d3234203d3e203338333230.roa File: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (raw, json) Hash identifier: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY= Subject key identifier: 24:DC:C2:D1:9F:B9:86:EC:8A:5B:21:B0:1D:4B:08:CE:03:20:B1:98 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 163D19B57153D338CB7B7CF58AC4CB0C3A58CA0A Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33342e302f32342d3234203d3e203338333230.roa Signing time: Mon 27 Jan 2025 07:00:00 +0000 ROA not before: Mon 27 Jan 2025 06:55:00 +0000 ROA not after: Mon 26 Jan 2026 07:00:00 +0000 asID: 38320 IP address blocks: 175.103.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 17:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3d:19:b5:71:53:d3:38:cb:7b:7c:f5:8a:c4:cb:0c:3a:58:ca:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Jan 27 06:55:00 2025 GMT Not After : Jan 26 07:00:00 2026 GMT Subject: CN=24DCC2D19FB986EC8A5B21B01D4B08CE0320B198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b1:c0:49:85:99:40:8b:94:7e:e8:b8:42:b3: 18:c2:42:28:f2:11:c9:2c:82:c1:50:93:6b:3f:5f: fb:13:2d:87:f7:02:68:96:03:34:8a:33:0a:76:f3: 19:90:76:ae:a6:ee:53:04:13:8b:e9:f9:31:8b:bc: de:3b:64:a6:eb:d1:9a:c7:5d:a4:c4:42:b6:b2:fc: c1:75:24:89:92:20:ff:e2:9e:bc:f5:91:ee:b2:0d: 4a:bb:14:b3:ab:d0:03:fa:97:0e:c7:1b:19:ab:e7: d3:2f:67:dd:ef:c8:6e:00:f6:09:a4:8a:05:d7:75: 1e:a7:3a:24:17:ce:c9:8c:96:a2:39:ad:6f:8e:35: 31:7e:0b:ea:87:7a:32:f6:84:8a:5a:18:d7:0d:cb: 5c:a2:24:24:ac:29:e7:c2:ce:c1:34:4f:c7:53:05: 17:f4:7e:1f:ac:13:85:ef:8f:f2:95:ef:cc:5d:70: d6:a0:a5:64:a4:b8:df:f0:b1:5e:5b:80:78:e5:34: d1:b9:d3:4c:31:65:36:02:8f:74:de:8b:ac:ea:6f: 61:ae:4c:2a:7f:1c:52:62:3e:da:7a:5e:2e:8a:49: ac:e7:b7:a4:3c:84:70:d0:aa:25:32:90:54:ec:10: 2c:b8:52:e5:67:c6:b3:ad:7d:e2:c7:5d:d3:1a:12: 57:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DC:C2:D1:9F:B9:86:EC:8A:5B:21:B0:1D:4B:08:CE:03:20:B1:98 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33342e302f32342d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.103.34.0/24 Signature Algorithm: sha256WithRSAEncryption 89:0b:f2:a5:18:b3:76:03:1a:c7:b6:2f:51:67:3f:b4:83:3c: cf:a4:35:4b:ad:c9:63:7f:89:12:a6:f1:7e:c3:36:b1:e4:b5: c8:c4:de:ab:f7:92:46:cb:5f:ca:9b:09:d3:c3:dd:3b:03:db: 07:a2:2b:62:f2:f4:9e:c9:b2:96:76:69:fd:b2:ae:0a:a5:39: 3b:47:87:f2:66:a2:5f:5a:71:b1:b5:e6:81:7b:8d:78:65:92: 2f:96:1a:c6:8d:4e:21:ce:d5:f5:e2:57:2c:69:69:07:28:c2: ae:11:38:34:de:5f:59:8b:58:bf:fd:79:57:77:32:d9:79:6f: ee:74:a8:ba:43:ff:67:1c:81:f4:5f:be:04:8f:1f:15:6b:74: 03:a4:3e:7a:c8:6f:e7:4b:1d:8b:22:7b:3d:b2:2c:82:2b:27: 18:ce:d1:77:6a:17:1c:d0:7a:8b:3c:96:c2:40:d9:85:f2:d8: 45:28:3a:88:b4:25:f8:3c:68:41:b4:cf:cf:81:aa:61:fb:79: 69:38:23:0f:00:4f:f0:a3:17:f4:d0:45:72:e3:4b:8a:b9:b0: 01:ce:5a:7c:4e:7e:21:77:01:66:23:1f:6f:29:86:e5:75:9d: 22:b4:5a:32:cd:da:3c:c7:98:f1:6d:4e:74:b2:6a:eb:35:24: e9:96:03:f1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFj0ZtXFT0zjLe3z1isTLDDpYygowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTAxMjcwNjU1MDBaFw0yNjAxMjYwNzAwMDBaMDMxMTAvBgNV BAMTKDI0RENDMkQxOUZCOTg2RUM4QTVCMjFCMDFENEIwOENFMDMyMEIxOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkscBJhZlAi5R+6LhCsxjCQijy EcksgsFQk2s/X/sTLYf3AmiWAzSKMwp28xmQdq6m7lMEE4vp+TGLvN47ZKbr0ZrH XaTEQray/MF1JImSIP/inrz1ke6yDUq7FLOr0AP6lw7HGxmr59MvZ93vyG4A9gmk igXXdR6nOiQXzsmMlqI5rW+ONTF+C+qHejL2hIpaGNcNy1yiJCSsKefCzsE0T8dT BRf0fh+sE4Xvj/KV78xdcNagpWSkuN/wsV5bgHjlNNG500wxZTYCj3Tei6zqb2Gu TCp/HFJiPtp6Xi6KSaznt6Q8hHDQqiUykFTsECy4UuVnxrOtfeLHXdMaElfFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJNzC0Z+5huyKWyGwHUsIzgMgsZgwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzczNTJlMzEzMDMzMmUzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK9nIjANBgkqhkiG 9w0BAQsFAAOCAQEAiQvypRizdgMax7YvUWc/tIM8z6Q1S63JY3+JEqbxfsM2seS1 yMTeq/eSRstfypsJ08PdOwPbB6IrYvL0nsmylnZp/bKuCqU5O0eH8maiX1pxsbXm gXuNeGWSL5Yaxo1OIc7V9eJXLGlpByjCrhE4NN5fWYtYv/15V3cy2Xlv7nSoukP/ ZxyB9F++BI8fFWt0A6Q+eshv50sdiyJ7PbIsgisnGM7Rd2oXHNB6izyWwkDZhfLY RSg6iLQl+DxoQbTPz4GqYft5aTgjDwBP8KMX9NBFcuNLirmwAc5afE5+IXcBZiMf bymG5XWdIrRaMs3aPMeY8W1OdLJq6zUk6ZYD8Q== -----END CERTIFICATE-----Generated at Sun Apr 6 07:05:51 2025 by rpki-client