$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa File: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (raw, json) Hash identifier: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE= Subject key identifier: 11:D6:72:40:C8:A7:5F:1C:E8:37:F1:53:B4:4A:F3:B3:F3:59:90:4F Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 0D32672ACA7F938B870D62A72E8ABDC66F113266 Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa Signing time: Mon 06 Jan 2025 15:17:16 +0000 ROA not before: Mon 06 Jan 2025 15:12:16 +0000 ROA not after: Mon 05 Jan 2026 15:17:16 +0000 asID: 137361 IP address blocks: 103.115.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 07:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:32:67:2a:ca:7f:93:8b:87:0d:62:a7:2e:8a:bd:c6:6f:11:32:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Jan 6 15:12:16 2025 GMT Not After : Jan 5 15:17:16 2026 GMT Subject: CN=11D67240C8A75F1CE837F153B44AF3B3F359904F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:49:64:a4:2c:14:f3:f3:12:fc:39:c2:09: f4:6e:49:03:20:61:bb:6f:cd:4b:14:6b:eb:a0:7a: ca:e3:90:3a:ab:9d:5f:02:27:4d:a3:0a:ed:c4:25: ab:4b:5f:d0:c2:ed:e6:9d:9a:4e:e0:c8:9d:3e:37: 6f:d3:b7:36:c5:6c:5e:cb:f9:4d:0c:a5:5a:a9:de: 9e:81:88:27:5c:60:2f:62:d4:34:e5:68:44:d1:07: d4:38:55:05:59:e3:39:68:72:b4:2f:fe:3a:a0:3f: 0e:e8:97:73:35:83:15:39:a8:65:cc:b8:81:d7:bc: 77:70:81:f3:40:17:a9:b4:68:0e:7b:93:8e:15:67: 7d:eb:fa:6c:22:9b:6f:5c:52:dd:42:e7:8d:38:39: b0:5e:55:bc:6f:eb:83:07:b7:5b:9d:bc:d0:7e:fe: 3a:f2:ea:9a:b3:aa:f6:8e:a2:ce:57:2f:02:7f:40: 7b:91:35:d7:64:97:a7:36:8e:5a:f0:d3:ed:72:76: 97:d8:f8:03:26:62:85:6f:ec:b0:be:0b:be:1f:6d: ef:16:f1:c1:64:da:00:16:18:65:bc:99:fc:36:6e: 4a:11:a2:4c:ed:d9:29:ca:5c:67:a0:ae:cf:1b:67: 47:76:33:27:2a:fc:ac:3b:ac:0e:43:4f:3a:9e:25: f1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D6:72:40:C8:A7:5F:1C:E8:37:F1:53:B4:4A:F3:B3:F3:59:90:4F X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.104.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:25:f5:7f:41:a6:ae:66:03:53:42:dd:b3:72:34:76:11:6d: 8c:12:5d:84:05:69:83:c6:6b:58:40:15:a5:cd:61:45:52:31: 36:dc:1a:a6:13:2f:e0:ae:0f:85:2b:64:3c:fe:b5:47:3c:e4: 53:56:b6:b7:55:4e:cc:43:f9:11:9f:39:51:92:b1:c0:d9:d9: 0d:3f:26:37:18:30:f4:ec:7e:8b:1a:31:38:66:a7:2b:b6:6d: cf:0d:80:47:77:7b:5b:25:fd:9c:99:19:e7:57:cb:dc:25:27: 91:35:ac:da:0e:a9:af:15:09:4f:8b:0b:9c:db:42:fb:e4:98: 0e:a4:8c:9c:1e:76:12:6d:f9:74:d9:00:ed:7e:8d:53:a1:1c: ac:5d:ec:18:d8:c7:e6:92:33:db:b4:97:e0:4a:ab:a8:ec:4e: 11:07:68:23:26:96:aa:45:5f:0f:00:b8:1d:08:b8:50:76:60: 50:03:cd:f3:7f:7d:66:28:17:c5:b6:db:d7:58:8c:2d:e5:4d: 86:d4:b4:1c:94:3e:fa:77:d8:c3:0d:68:40:c8:f4:11:b3:b7: a9:6b:11:fc:67:07:16:47:88:5e:30:c2:df:e6:8d:14:6c:64: 06:d8:c5:56:84:e9:6b:d1:d7:33:a0:51:53:a2:19:6e:12:ba: eb:e8:47:1d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDTJnKsp/k4uHDWKnLoq9xm8RMmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTAxMDYxNTEyMTZaFw0yNjAxMDUxNTE3MTZaMDMxMTAvBgNV BAMTKDExRDY3MjQwQzhBNzVGMUNFODM3RjE1M0I0NEFGM0IzRjM1OTkwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIN0lkpCwU8/MS/DnCCfRuSQMg YbtvzUsUa+ugesrjkDqrnV8CJ02jCu3EJatLX9DC7eadmk7gyJ0+N2/TtzbFbF7L +U0MpVqp3p6BiCdcYC9i1DTlaETRB9Q4VQVZ4zlocrQv/jqgPw7ol3M1gxU5qGXM uIHXvHdwgfNAF6m0aA57k44VZ33r+mwim29cUt1C5404ObBeVbxv64MHt1udvNB+ /jry6pqzqvaOos5XLwJ/QHuRNddkl6c2jlrw0+1ydpfY+AMmYoVv7LC+C74fbe8W 8cFk2gAWGGW8mfw2bkoRokzt2SnKXGegrs8bZ0d2Mycq/Kw7rA5DTzqeJfE5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUEdZyQMinXxzoN/FTtErzs/NZkE8wHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzMmNhZTNmLWIzMjktNDQxYi05 N2ZjLTViYjlmY2MwNTFkMi8wLzMxMzAzMzJlMzEzMTM1MmUzMTMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzM2MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnc2gwDQYJ KoZIhvcNAQELBQADggEBAAsl9X9Bpq5mA1NC3bNyNHYRbYwSXYQFaYPGa1hAFaXN YUVSMTbcGqYTL+CuD4UrZDz+tUc85FNWtrdVTsxD+RGfOVGSscDZ2Q0/JjcYMPTs fosaMThmpyu2bc8NgEd3e1sl/ZyZGedXy9wlJ5E1rNoOqa8VCU+LC5zbQvvkmA6k jJwedhJt+XTZAO1+jVOhHKxd7BjYx+aSM9u0l+BKq6jsThEHaCMmlqpFXw8AuB0I uFB2YFADzfN/fWYoF8W229dYjC3lTYbUtByUPvp32MMNaEDI9BGzt6lrEfxnBxZH iF4wwt/mjRRsZAbYxVaE6WvR1zOgUVOiGW4SuuvoRx0= -----END CERTIFICATE-----Generated at Sun Apr 6 14:39:04 2025 by rpki-client