$ rpki-client -vvf repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa File: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (raw, json) Hash identifier: 9iQrzztLoFvpsEnzNnL5P1t1/bjXuRlh5hUEQazNDWU= Subject key identifier: 74:1F:CE:F1:51:86:E0:A5:10:9F:1C:AE:4C:A9:26:9D:E7:B2:01:2B Certificate issuer: /CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Certificate serial: 481A66CF8AB4E148FFDE202DAC44D7D65D2EA1B2 Authority key identifier: B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa Signing time: Tue 31 Dec 2024 01:00:02 +0000 ROA not before: Tue 31 Dec 2024 00:55:02 +0000 ROA not after: Tue 30 Dec 2025 01:00:02 +0000 asID: 139973 IP address blocks: 103.147.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 03:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1a:66:cf:8a:b4:e1:48:ff:de:20:2d:ac:44:d7:d6:5d:2e:a1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Validity Not Before: Dec 31 00:55:02 2024 GMT Not After : Dec 30 01:00:02 2025 GMT Subject: CN=741FCEF15186E0A5109F1CAE4CA9269DE7B2012B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:e0:75:bb:29:7f:3c:8a:4a:e9:1a:17:e5: 94:e6:cc:9a:8f:a2:78:a7:32:40:f3:43:f3:dd:18: cf:d7:b9:2f:89:fa:68:56:14:b4:f9:7d:a8:4a:ab: ef:24:1d:13:a1:22:46:df:a7:a1:f7:c1:e7:82:3e: 0d:63:f3:8f:ae:e9:ae:c7:67:a0:8e:36:78:b0:58: d9:94:b0:5b:a4:65:50:bb:69:a7:d8:5a:e3:20:00: 07:89:70:67:a8:4e:32:35:3a:b5:88:03:3b:00:d0: 42:11:64:de:3e:18:68:8f:3c:30:99:90:3b:5f:95: 85:44:7a:2a:52:25:04:01:6d:44:28:37:a4:7b:dd: 85:27:6f:35:f1:c5:bb:0f:72:29:61:57:6b:63:26: 09:3b:04:45:ec:48:5f:56:9b:bc:a0:57:02:99:fa: e0:37:c9:9c:30:1a:88:85:98:d4:97:96:67:7e:82: a4:85:de:77:d2:be:6c:c9:a2:86:ae:52:04:78:64: 50:7b:22:d9:1e:69:9e:36:4d:62:00:6b:6a:d0:5c: 13:33:26:d6:c8:8b:71:3d:0b:e5:38:dd:e3:d4:fd: 5e:9d:42:9b:47:7c:59:2f:e4:41:a6:80:53:67:3f: 5c:ff:80:9d:27:62:60:b2:ed:a4:de:e2:c9:02:11: f6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1F:CE:F1:51:86:E0:A5:10:9F:1C:AE:4C:A9:26:9D:E7:B2:01:2B X509v3 Authority Key Identifier: keyid:B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.245.0/24 Signature Algorithm: sha256WithRSAEncryption 19:d6:97:14:d6:65:fd:16:e4:d8:f9:3a:49:bd:97:85:f3:90: 29:9a:38:ba:af:a1:fb:03:c7:c1:e8:99:90:70:9c:8d:85:19: c5:cf:e8:b9:a5:d3:57:7e:47:8a:f0:80:26:be:56:16:37:02: f4:4f:c4:01:1d:e7:8e:3e:9b:3a:1d:58:89:e7:50:b1:4b:73: 1e:bb:28:b8:28:76:c0:34:16:d6:d8:af:20:ea:61:46:79:e0: b8:8c:43:d5:28:69:f6:5e:30:77:ec:6d:c0:f9:89:d9:09:9b: c5:81:27:3b:7a:32:f7:74:ad:24:93:1d:b8:61:68:e2:52:2d: 3a:d7:cd:e7:c0:97:78:65:c7:9c:dd:75:1f:07:18:e9:f5:cc: 00:c0:d2:02:b2:53:50:52:04:93:f1:f0:a3:61:28:77:29:c1: 15:58:97:87:43:7c:28:ab:07:13:fa:53:d6:43:5d:4f:12:ae: f7:38:df:31:d6:87:9d:e8:c0:83:9e:8c:13:35:3e:ef:bb:ab: 6c:96:d9:58:1e:db:20:a9:8e:b7:8f:b4:93:37:f4:c3:13:29: 1c:8f:da:26:c2:49:bc:ca:2f:f7:3e:94:36:26:34:00:0f:90: 43:ef:00:e1:c0:4a:40:51:f3:fd:61:36:99:5a:49:38:69:0a: af:c4:e3:38 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSBpmz4q04Uj/3iAtrETX1l0uobIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5 QTREN0JENjAeFw0yNDEyMzEwMDU1MDJaFw0yNTEyMzAwMTAwMDJaMDMxMTAvBgNV BAMTKDc0MUZDRUYxNTE4NkUwQTUxMDlGMUNBRTRDQTkyNjlERTdCMjAxMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt++B1uyl/PIpK6RoX5ZTmzJqP oninMkDzQ/PdGM/XuS+J+mhWFLT5fahKq+8kHROhIkbfp6H3weeCPg1j84+u6a7H Z6CONniwWNmUsFukZVC7aafYWuMgAAeJcGeoTjI1OrWIAzsA0EIRZN4+GGiPPDCZ kDtflYVEeipSJQQBbUQoN6R73YUnbzXxxbsPcilhV2tjJgk7BEXsSF9Wm7ygVwKZ +uA3yZwwGoiFmNSXlmd+gqSF3nfSvmzJooauUgR4ZFB7ItkeaZ42TWIAa2rQXBMz JtbIi3E9C+U43ePU/V6dQptHfFkv5EGmgFNnP1z/gJ0nYmCy7aTe4skCEfbzAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUdB/O8VGG4KUQnxyuTKkmneeyASswHwYDVR0j BBgwFoAUsQ/M4Ccg6WTSk0Lg8738Z5pNe9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTU5MzQ0NS1hMjVkLTQ4ZTAtYWJjMi1hYjA1ZTA2NTA2NTUvMC9CMTBGQ0NFMDI3 MjBFOTY0RDI5MzQyRTBGM0JERkM2NzlBNEQ3QkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5QTRE N0JENi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1NTkzNDQ1LWEyNWQtNDhlMC1h YmMyLWFiMDVlMDY1MDY1NS8wLzMxMzAzMzJlMzEzNDM3MmUzMjM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk/UwDQYJ KoZIhvcNAQELBQADggEBABnWlxTWZf0W5Nj5Okm9l4XzkCmaOLqvofsDx8HomZBw nI2FGcXP6Lml01d+R4rwgCa+VhY3AvRPxAEd544+mzodWInnULFLcx67KLgodsA0 FtbYryDqYUZ54LiMQ9UoafZeMHfsbcD5idkJm8WBJzt6Mvd0rSSTHbhhaOJSLTrX zefAl3hlx5zddR8HGOn1zADA0gKyU1BSBJPx8KNhKHcpwRVYl4dDfCirBxP6U9ZD XU8Srvc43zHWh53owIOejBM1Pu+7q2yW2Vge2yCpjrePtJM39MMTKRyP2ibCSbzK L/c+lDYmNAAPkEPvAOHASkBR8/1hNplaSThpCq/E4zg= -----END CERTIFICATE-----Generated at Sun Apr 6 11:13:13 2025 by rpki-client