$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa File: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: Kh7pHFYHeApzfjYgrJNd5I2iP4JAPgnfkCfLUW4wIPU= Subject key identifier: E3:DB:9E:97:D4:A5:DC:D0:C4:C1:49:21:EA:80:BA:DF:A6:35:7C:3E Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 356FBE25F9245F024706FFA8B9952910F728B0EE Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa Signing time: Wed 11 Dec 2024 19:00:00 +0000 ROA not before: Wed 11 Dec 2024 18:55:00 +0000 ROA not after: Wed 10 Dec 2025 19:00:00 +0000 asID: 9341 IP address blocks: 103.181.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6f:be:25:f9:24:5f:02:47:06:ff:a8:b9:95:29:10:f7:28:b0:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Dec 11 18:55:00 2024 GMT Not After : Dec 10 19:00:00 2025 GMT Subject: CN=E3DB9E97D4A5DCD0C4C14921EA80BADFA6357C3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:c9:af:51:c9:74:39:da:17:9e:d1:0c:74: 00:2d:93:43:ac:a5:e4:c1:d2:8f:9c:db:ba:0c:e8: b0:af:cf:43:ad:5b:16:ef:2a:e7:8f:d1:69:18:12: 5b:d1:cd:b1:59:db:ef:a5:74:83:c9:56:11:6b:36: d9:14:65:f1:0a:21:e3:0c:ef:2d:4c:2b:3e:59:14: cc:52:7b:b9:3d:d6:f1:4a:7c:06:f2:0d:8e:cb:13: ba:c6:d4:e0:d0:3a:3f:49:eb:24:96:1b:7a:5a:27: 94:d1:85:ed:0c:3a:8e:cc:38:de:9f:d4:6a:84:e7: f2:ad:ef:8c:e2:d4:70:8c:38:7c:ae:f8:ce:ae:ef: b2:ff:b3:e2:ae:9f:da:ef:d1:ac:63:ae:b2:47:b3: cd:e0:05:d4:5e:62:86:44:3b:68:80:c1:db:77:5e: 42:c2:70:96:c7:80:7f:09:72:bd:52:b7:35:b4:83: 7d:7e:f3:32:d6:5d:f4:66:5d:ec:f9:f4:00:35:17: e3:3f:fe:a7:09:9a:e3:35:08:c9:89:d9:13:a1:16: d4:63:10:5e:87:12:ff:2b:b3:c6:5b:5d:e7:ce:6a: 99:ab:4f:2d:67:aa:96:b0:d6:9d:09:7b:18:c9:35: 7b:cd:61:b2:72:a5:07:c0:6e:fa:b1:55:19:1d:b5: 99:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DB:9E:97:D4:A5:DC:D0:C4:C1:49:21:EA:80:BA:DF:A6:35:7C:3E X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.250.0/24 Signature Algorithm: sha256WithRSAEncryption 38:68:1e:f7:e3:0d:f8:f7:44:53:cd:f4:92:7b:ce:f2:80:fc: 66:7c:31:72:c3:fb:5a:7d:1d:06:1e:55:c4:29:4c:26:ab:30: 19:ba:6b:69:e5:2c:87:91:6c:83:c7:6b:4d:91:e4:4a:c4:35: 21:bd:a7:9c:76:dd:de:5f:77:4e:b1:24:b2:c0:2a:7a:a3:cb: cc:1d:78:85:26:35:b6:53:15:13:2a:16:ab:f3:67:96:00:7b: 6b:80:cd:0c:d5:a5:60:c6:c2:b5:ff:82:4f:67:56:fc:a6:a4: 40:1e:2c:dc:cf:91:92:cb:c9:cc:8f:49:2e:4c:f9:02:c7:c9: 48:b6:41:fc:df:dc:b1:65:3f:73:c8:0b:91:04:0b:db:14:77: 33:d0:86:d2:e1:fd:b3:bb:b2:04:e0:96:37:2b:f0:9e:ae:36: d3:d9:67:59:40:d7:a7:95:d3:e4:a7:20:7c:37:30:4f:3e:7f: 2d:db:63:b8:48:a1:30:4a:0a:a4:7e:3e:94:c2:17:a8:8f:a8: 30:9e:c0:b6:7a:50:fc:1a:99:59:68:21:11:55:6c:69:a8:1b: 02:66:1d:c4:93:85:ed:c4:5f:6a:30:f2:04:fb:38:ab:04:83: da:72:d1:eb:b0:fb:d3:f6:d4:be:1a:f4:db:da:53:64:6e:2c: e2:ac:8e:07 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNW++JfkkXwJHBv+ouZUpEPcosO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNDEyMTExODU1MDBaFw0yNTEyMTAxOTAwMDBaMDMxMTAvBgNV BAMTKEUzREI5RTk3RDRBNURDRDBDNEMxNDkyMUVBODBCQURGQTYzNTdDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDk8mvUcl0OdoXntEMdAAtk0Os peTB0o+c27oM6LCvz0OtWxbvKueP0WkYElvRzbFZ2++ldIPJVhFrNtkUZfEKIeMM 7y1MKz5ZFMxSe7k91vFKfAbyDY7LE7rG1ODQOj9J6ySWG3paJ5TRhe0MOo7MON6f 1GqE5/Kt74zi1HCMOHyu+M6u77L/s+Kun9rv0axjrrJHs83gBdReYoZEO2iAwdt3 XkLCcJbHgH8Jcr1StzW0g31+8zLWXfRmXez59AA1F+M//qcJmuM1CMmJ2ROhFtRj EF6HEv8rs8ZbXefOapmrTy1nqpaw1p0JexjJNXvNYbJypQfAbvqxVRkdtZl3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU49uel9Sl3NDEwUkh6oC636Y1fD4wHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmYTU4OWVmLTlmM2QtNDNiYy1i YTMwLWZhMzI2YjcxZjc4Ny8wLzMxMzAzMzJlMzEzODMxMmUzMjM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe1+jANBgkqhkiG 9w0BAQsFAAOCAQEAOGge9+MN+PdEU830knvO8oD8ZnwxcsP7Wn0dBh5VxClMJqsw GbpraeUsh5Fsg8drTZHkSsQ1Ib2nnHbd3l93TrEkssAqeqPLzB14hSY1tlMVEyoW q/NnlgB7a4DNDNWlYMbCtf+CT2dW/KakQB4s3M+RksvJzI9JLkz5AsfJSLZB/N/c sWU/c8gLkQQL2xR3M9CG0uH9s7uyBOCWNyvwnq4209lnWUDXp5XT5KcgfDcwTz5/ LdtjuEihMEoKpH4+lMIXqI+oMJ7AtnpQ/BqZWWghEVVsaagbAmYdxJOF7cRfajDy BPs4qwSD2nLR67D70/bUvhr029pTZG4s4qyOBw== -----END CERTIFICATE-----Generated at Sat Apr 5 19:19:19 2025 by rpki-client