$ rpki-client -vvf repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa File: 3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa (raw, json) Hash identifier: ZT9C4ozjXu7zgMyjGuykG3d8zzHdnxWgyq99AWHagU0= Subject key identifier: 3A:AF:C1:6B:CA:4E:25:E0:EC:59:98:46:B9:1A:0D:3E:3B:E9:35:71 Certificate issuer: /CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC Certificate serial: 7D70070F79E625BAF73563A1B7C3451A25425BB9 Authority key identifier: 7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa Signing time: Wed 01 Jan 2025 19:00:02 +0000 ROA not before: Wed 01 Jan 2025 18:55:02 +0000 ROA not after: Wed 31 Dec 2025 19:00:02 +0000 asID: 150530 IP address blocks: 103.68.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 15:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:70:07:0f:79:e6:25:ba:f7:35:63:a1:b7:c3:45:1a:25:42:5b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC Validity Not Before: Jan 1 18:55:02 2025 GMT Not After : Dec 31 19:00:02 2025 GMT Subject: CN=3AAFC16BCA4E25E0EC599846B91A0D3E3BE93571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:87:5f:2f:94:72:d9:67:0c:5d:95:4f:d0: c8:97:8b:bd:81:0f:15:5f:19:30:61:73:24:54:54: 02:31:ab:41:03:52:37:a5:ca:92:40:9f:f3:63:11: 26:fa:71:6e:52:9d:5a:0f:07:03:39:c6:f6:bd:22: 7b:42:d5:fc:a5:23:09:64:93:58:dc:ad:61:65:39: e1:b4:b1:54:b9:1b:69:bd:2f:92:27:d6:50:0b:18: 93:e9:5b:8a:ff:00:f9:8c:04:a1:20:5d:78:e1:52: db:e4:dc:d8:32:93:41:01:b9:f2:d2:d3:25:a0:dc: 31:4f:81:d1:4a:fa:03:e7:af:2f:24:67:d8:2a:7e: a7:5f:90:1a:11:d4:bb:bc:21:9b:3d:e5:33:20:75: 51:e0:93:67:d9:cc:c0:3b:0d:7c:49:95:36:a2:b4: 75:cf:66:6d:e3:60:4e:56:1e:b2:f3:35:b5:e1:b3: 83:f1:5b:d2:ae:87:b0:3d:77:25:b1:88:c6:1d:37: 92:99:ed:87:30:21:ca:04:09:5b:61:4a:2e:89:fd: 80:4b:4e:96:0e:48:e7:ab:11:c7:00:d9:a5:c3:4c: b1:91:cf:f6:35:c2:72:5b:f2:f4:fe:06:22:71:3e: 5a:19:fa:d9:b4:74:bb:5a:38:93:40:73:c5:5f:b6: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AF:C1:6B:CA:4E:25:E0:EC:59:98:46:B9:1A:0D:3E:3B:E9:35:71 X509v3 Authority Key Identifier: keyid:7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.212.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:3c:26:4b:8b:76:6a:75:a1:f6:83:62:93:28:cc:a8:b7:9e: 5e:e1:f6:02:1c:0d:80:ce:db:dd:52:3d:1e:7f:d9:07:a5:41: f2:18:20:fe:42:8a:b1:7d:5f:1e:3f:8a:dd:8d:9d:8b:f4:62: 84:d3:c2:e3:ea:04:7c:eb:97:a8:f0:78:b7:c2:66:4f:bd:1e: 5e:20:b9:4d:dc:e8:27:3f:02:55:34:50:77:0e:0d:bc:30:52: 3b:85:99:6f:6e:fe:ef:d2:d4:18:fe:2e:46:f1:3e:ef:e9:97: 26:60:58:0d:0a:17:1e:ae:9c:86:0f:9a:dd:52:0f:81:d2:99: 16:95:a9:5c:cf:17:ca:fb:20:fb:d6:b5:37:31:2e:f9:74:46: c4:44:e6:51:87:a2:86:f2:bc:cc:cd:13:7d:32:ab:51:86:32: f2:8e:1e:06:4d:e4:cf:49:55:26:0a:9c:4a:cd:7e:d0:53:06: 1f:8c:62:f7:29:78:03:3c:2e:cd:73:95:d2:9e:25:e0:cd:53: e3:66:3e:92:54:f0:2c:d7:10:ef:71:bd:69:e8:83:5d:ad:8a: 13:9d:20:07:dc:96:0a:33:1e:a2:04:81:88:85:d4:4f:93:41: 10:e1:cc:e5:90:de:f5:76:05:85:38:a6:14:94:f2:30:af:38: df:68:42:47 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfXAHD3nmJbr3NWOht8NFGiVCW7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M4NTkyQjA4MEExN0E5Q0UyRjc4MkRFQTRDMTI5N0E5 N0I2MENEQzAeFw0yNTAxMDExODU1MDJaFw0yNTEyMzExOTAwMDJaMDMxMTAvBgNV BAMTKDNBQUZDMTZCQ0E0RTI1RTBFQzU5OTg0NkI5MUEwRDNFM0JFOTM1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVc4dfL5Ry2WcMXZVP0MiXi72B DxVfGTBhcyRUVAIxq0EDUjelypJAn/NjESb6cW5SnVoPBwM5xva9IntC1fylIwlk k1jcrWFlOeG0sVS5G2m9L5In1lALGJPpW4r/APmMBKEgXXjhUtvk3Ngyk0EBufLS 0yWg3DFPgdFK+gPnry8kZ9gqfqdfkBoR1Lu8IZs95TMgdVHgk2fZzMA7DXxJlTai tHXPZm3jYE5WHrLzNbXhs4PxW9Kuh7A9dyWxiMYdN5KZ7YcwIcoECVthSi6J/YBL TpYOSOerEccA2aXDTLGRz/Y1wnJb8vT+BiJxPloZ+tm0dLtaOJNAc8VftkH1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOq/Ba8pOJeDsWZhGuRoNPjvpNXEwHwYDVR0j BBgwFoAUfIWSsIChepzi94LepMEpepe2DNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjYwY2YxNi03NGZmLTRmMmYtYjU2Yy1lNTgxZWFlYTI1MWMvMC83Qzg1OTJCMDgw QTE3QTlDRTJGNzgyREVBNEMxMjk3QTk3QjYwQ0RDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M4NTkyQjA4MEExN0E5Q0UyRjc4MkRFQTRDMTI5N0E5N0I2 MENEQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyNjBjZjE2LTc0ZmYtNGYyZi1i NTZjLWU1ODFlYWVhMjUxYy8wLzMxMzAzMzJlMzYzODJlMzIzMTMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0TUMA0GCSqG SIb3DQEBCwUAA4IBAQCMPCZLi3ZqdaH2g2KTKMyot55e4fYCHA2AztvdUj0ef9kH pUHyGCD+QoqxfV8eP4rdjZ2L9GKE08Lj6gR865eo8Hi3wmZPvR5eILlN3OgnPwJV NFB3Dg28MFI7hZlvbv7v0tQY/i5G8T7v6ZcmYFgNChcerpyGD5rdUg+B0pkWlalc zxfK+yD71rU3MS75dEbEROZRh6KG8rzMzRN9MqtRhjLyjh4GTeTPSVUmCpxKzX7Q UwYfjGL3KXgDPC7Nc5XSniXgzVPjZj6SVPAs1xDvcb1p6INdrYoTnSAH3JYKMx6i BIGIhdRPk0EQ4czlkN71dgWFOKYUlPIwrzjfaEJH -----END CERTIFICATE-----Generated at Sun Apr 6 22:40:24 2025 by rpki-client