$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/3130332e38312e36302e302f32322d3234203d3e20313336303630.roa File: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (raw, json) Hash identifier: fSyZW5UURSSq8c97wxQl2sx5mMYsc0LA9hnaSF/iy/A= Subject key identifier: 73:1D:6E:30:F5:BA:FE:F3:2C:65:53:C6:42:1B:7E:47:89:83:FF:91 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 73507A5F16015D8EDED857AE63C9F74050CC2652 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/3130332e38312e36302e302f32322d3234203d3e20313336303630.roa Signing time: Mon 20 Jan 2025 10:01:08 +0000 ROA not before: Mon 20 Jan 2025 09:56:08 +0000 ROA not after: Mon 19 Jan 2026 10:01:08 +0000 asID: 136060 IP address blocks: 103.81.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Feb 2025 12:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:50:7a:5f:16:01:5d:8e:de:d8:57:ae:63:c9:f7:40:50:cc:26:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Jan 20 09:56:08 2025 GMT Not After : Jan 19 10:01:08 2026 GMT Subject: CN=731D6E30F5BAFEF32C6553C6421B7E478983FF91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:fd:df:ce:99:b8:bb:8a:8e:13:1a:cd:41: 33:af:7a:91:d8:1d:ab:dd:47:b0:d8:e9:12:6c:4d: 5e:79:0b:e8:fb:ca:3f:a6:26:e2:88:c7:e7:54:3b: 50:b2:fe:b8:2a:e5:cc:c3:9a:fa:de:2e:b9:47:5b: 73:8e:cb:7c:df:06:44:34:34:b6:1a:1e:17:d6:e4: ec:cf:b1:e2:4b:0d:a4:7d:32:36:63:5b:f1:98:9e: 72:c5:0f:33:ce:3c:fc:3e:12:5a:63:1d:ea:f5:bc: ee:e1:5a:64:8d:db:b9:2a:1e:96:1a:79:54:02:5e: c1:00:7b:21:87:87:52:4f:de:dc:9e:65:71:af:37: b9:4a:46:65:21:91:3b:c6:87:55:e2:06:38:46:58: 37:f9:59:02:ac:e1:96:96:58:9d:01:df:74:f9:46: 3c:15:0c:89:d5:23:84:d5:56:0d:ab:41:58:bc:84: dd:10:70:1d:d6:20:ab:48:99:17:17:a1:8c:f9:ea: 88:54:c8:f9:50:5a:14:d0:41:b7:63:b6:4f:db:72: ed:e6:c1:c5:c4:29:19:0a:b0:83:6b:3c:ab:ad:2d: 61:1f:93:27:55:66:bc:96:3b:d9:54:08:7c:67:a9: 83:ec:5f:b0:49:49:5a:91:4d:cc:75:4b:ca:cc:f3: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1D:6E:30:F5:BA:FE:F3:2C:65:53:C6:42:1B:7E:47:89:83:FF:91 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/3130332e38312e36302e302f32322d3234203d3e20313336303630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.81.60.0/22 Signature Algorithm: sha256WithRSAEncryption a5:f9:9e:47:56:ee:9d:5a:0a:60:e0:6f:c0:fe:6c:cf:9e:44: 49:d9:78:b8:76:44:16:3a:23:42:7c:42:d1:1a:62:1f:70:a2: 33:ca:68:a5:20:18:86:41:fe:c3:38:fb:bc:7d:46:a6:6b:81: 6d:cc:42:a4:00:34:8e:32:cb:cc:25:aa:78:f7:39:5b:46:15: 24:9b:14:56:16:99:18:b5:a8:35:35:85:5d:69:c9:4c:03:b7: b0:18:2e:33:b7:3a:84:14:1b:24:08:28:9d:33:f8:8f:59:93: e8:e7:88:a7:6b:12:8e:f5:d1:76:2e:d4:73:50:77:fc:4d:dc: 9a:df:4d:cc:15:2f:d6:55:cc:d9:6a:65:d8:35:75:29:33:7e: e5:d8:98:44:fc:48:13:f5:a1:bf:5d:bc:34:76:6c:04:3a:70: f1:1e:ca:c1:e1:d2:ec:f4:be:4b:d3:a0:23:fb:67:97:84:44: b9:8e:7c:cd:86:eb:3a:97:72:36:07:ff:34:2f:6c:46:d0:57: 55:a0:bc:06:d5:c8:1b:3f:89:b8:1c:3f:b8:04:66:21:59:92: 64:4e:67:4e:12:af:ae:94:fa:02:f8:20:fe:89:3b:1e:40:7f: d7:6d:56:4f:c4:79:99:bf:00:3a:b9:75:7e:71:ec:44:79:37: ba:50:0f:7f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUc1B6XxYBXY7e2FeuY8n3QFDMJlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTAxMjAwOTU2MDhaFw0yNjAxMTkxMDAxMDhaMDMxMTAvBgNV BAMTKDczMUQ2RTMwRjVCQUZFRjMyQzY1NTNDNjQyMUI3RTQ3ODk4M0ZGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIef3fzpm4u4qOExrNQTOvepHY HavdR7DY6RJsTV55C+j7yj+mJuKIx+dUO1Cy/rgq5czDmvreLrlHW3OOy3zfBkQ0 NLYaHhfW5OzPseJLDaR9MjZjW/GYnnLFDzPOPPw+ElpjHer1vO7hWmSN27kqHpYa eVQCXsEAeyGHh1JP3tyeZXGvN7lKRmUhkTvGh1XiBjhGWDf5WQKs4ZaWWJ0B33T5 RjwVDInVI4TVVg2rQVi8hN0QcB3WIKtImRcXoYz56ohUyPlQWhTQQbdjtk/bcu3m wcXEKRkKsINrPKutLWEfkydVZryWO9lUCHxnqYPsX7BJSVqRTcx1S8rM89H1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUcx1uMPW6/vMsZVPGQht+R4mD/5EwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAxNTc2ZDRjLTE3NDUtNGExNi04 ZWVmLWNlYzA4MWM4MjA0My8wLzMxMzAzMzJlMzgzMTJlMzYzMDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdRPDANBgkqhkiG 9w0BAQsFAAOCAQEApfmeR1bunVoKYOBvwP5sz55ESdl4uHZEFjojQnxC0RpiH3Ci M8popSAYhkH+wzj7vH1GpmuBbcxCpAA0jjLLzCWqePc5W0YVJJsUVhaZGLWoNTWF XWnJTAO3sBguM7c6hBQbJAgonTP4j1mT6OeIp2sSjvXRdi7Uc1B3/E3cmt9NzBUv 1lXM2Wpl2DV1KTN+5diYRPxIE/Whv128NHZsBDpw8R7KweHS7PS+S9OgI/tnl4RE uY58zYbrOpdyNgf/NC9sRtBXVaC8BtXIGz+JuBw/uARmIVmSZE5nThKvrpT6Avgg /ok7HkB/121WT8R5mb8AOrl1fnHsRHk3ulAPfw== -----END CERTIFICATE-----Generated at Fri Feb 21 11:18:48 2025 by rpki-client