$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa File: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (raw, json) Hash identifier: kEwMr1mIRZGwTHrXfoM+k+XYrDWcsMsreXoEQMVJdUg= Subject key identifier: 8E:E0:E7:66:10:F3:5C:F0:3A:43:4E:32:DF:D2:56:18:3F:ED:91:26 Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 2752F52083419496DF77426AB15BA9D63C67498A Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa Signing time: Mon 10 Feb 2025 09:02:19 +0000 ROA not before: Mon 10 Feb 2025 08:57:19 +0000 ROA not after: Mon 09 Feb 2026 09:02:19 +0000 asID: 149933 IP address blocks: 103.191.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 08:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:52:f5:20:83:41:94:96:df:77:42:6a:b1:5b:a9:d6:3c:67:49:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Feb 10 08:57:19 2025 GMT Not After : Feb 9 09:02:19 2026 GMT Subject: CN=8EE0E76610F35CF03A434E32DFD256183FED9126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c2:44:1a:6a:8c:60:11:eb:94:52:b4:60:52: 5a:84:ed:45:2b:e2:07:5c:8c:12:7d:25:c2:06:0a: ae:4e:f2:22:aa:4a:b3:d3:27:5f:d6:7f:71:85:5b: 27:82:8f:96:d5:86:4d:65:93:8d:73:ae:8b:a8:f2: 3c:91:97:84:1a:8e:e9:d2:d6:f3:bc:17:22:48:ae: fe:b6:b8:cb:59:93:bf:7b:49:d0:bd:2d:33:79:79: f7:e9:53:e6:f5:c8:e7:d7:64:b6:ea:82:10:df:a3: 9d:10:fd:50:f9:1b:9f:e8:f7:3c:8f:a4:29:81:bf: 7f:32:8e:ca:a3:0e:58:8f:23:f5:7e:d7:ac:3d:5b: 80:35:33:d8:8f:09:4c:5f:4c:d5:e1:07:f3:83:98: 19:f6:37:f5:d3:77:a7:5b:d9:4f:1d:cf:d8:ea:3b: ce:1e:12:d0:9f:65:2f:46:53:4d:55:ab:d5:b3:1c: 8b:a5:89:63:3f:3c:a5:3d:4c:02:18:65:e0:61:8d: 01:b9:18:3f:a4:80:4e:d4:07:f6:d9:2a:bb:05:c4: 3f:93:29:d5:ff:25:13:89:b6:ab:f1:28:fa:50:1a: 93:a0:96:81:4b:48:8d:98:31:d5:a0:2d:36:16:76: f0:ef:b7:53:45:40:7a:db:c4:54:b0:a3:27:d6:72: 8a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E0:E7:66:10:F3:5C:F0:3A:43:4E:32:DF:D2:56:18:3F:ED:91:26 X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.171.0/24 Signature Algorithm: sha256WithRSAEncryption 40:b7:4f:c9:57:c5:ea:d8:4b:74:a1:0d:13:01:54:cc:62:f4: bf:07:bb:c7:39:e7:87:d3:06:86:d0:95:cb:22:a7:81:7b:ff: c1:cc:50:a6:ed:37:17:88:96:08:93:63:b0:cc:46:cd:82:db: 2f:78:03:57:36:ba:a2:bf:36:b4:5c:97:2b:22:d0:8e:33:aa: 08:3d:e6:57:3e:04:59:c1:82:50:10:cb:79:eb:96:ed:4a:39: b6:fc:39:66:8b:5e:fd:3c:dd:28:82:87:26:1c:2f:56:0b:91: 6b:ca:9a:87:e3:d3:e0:c6:eb:f1:de:79:6c:8c:63:55:fc:20: 85:19:7f:06:b3:9c:2f:1c:2d:7d:bd:e4:af:50:f3:23:b9:06: f6:52:ff:4b:50:94:9c:26:5a:47:7c:d1:da:7a:93:9c:55:e8: 4e:0c:ca:f6:34:17:76:14:66:60:66:e3:36:30:9f:d5:e2:6f: 25:68:fd:2b:eb:87:0d:e9:08:b2:ee:13:dc:57:dc:f4:29:56: b5:4f:2a:79:4f:69:55:ff:16:e0:1a:54:64:f5:e0:a7:55:9a: 11:80:b3:e7:c1:24:ab:2b:a9:ae:d6:68:4a:09:09:25:92:02: c9:a3:ca:eb:fa:27:c5:02:c2:17:16:30:50:2a:37:c8:72:cd: 2e:7e:d8:51 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJ1L1IINBlJbfd0JqsVup1jxnSYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNTAyMTAwODU3MTlaFw0yNjAyMDkwOTAyMTlaMDMxMTAvBgNV BAMTKDhFRTBFNzY2MTBGMzVDRjAzQTQzNEUzMkRGRDI1NjE4M0ZFRDkxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrwkQaaoxgEeuUUrRgUlqE7UUr 4gdcjBJ9JcIGCq5O8iKqSrPTJ1/Wf3GFWyeCj5bVhk1lk41zrouo8jyRl4QajunS 1vO8FyJIrv62uMtZk797SdC9LTN5effpU+b1yOfXZLbqghDfo50Q/VD5G5/o9zyP pCmBv38yjsqjDliPI/V+16w9W4A1M9iPCUxfTNXhB/ODmBn2N/XTd6db2U8dz9jq O84eEtCfZS9GU01Vq9WzHIuliWM/PKU9TAIYZeBhjQG5GD+kgE7UB/bZKrsFxD+T KdX/JROJtqvxKPpQGpOgloFLSI2YMdWgLTYWdvDvt1NFQHrbxFSwoyfWcopxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUjuDnZhDzXPA6Q04y39JWGD/tkSYwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1YzFlMmYzLTRmYmQtNDRiYi04 M2YwLWJiNWFmZTY0NTc1ZS8wLzMxMzAzMzJlMzEzOTMxMmUzMTM3MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMzMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv6swDQYJ KoZIhvcNAQELBQADggEBAEC3T8lXxerYS3ShDRMBVMxi9L8Hu8c554fTBobQlcsi p4F7/8HMUKbtNxeIlgiTY7DMRs2C2y94A1c2uqK/NrRclysi0I4zqgg95lc+BFnB glAQy3nrlu1KObb8OWaLXv083SiChyYcL1YLkWvKmofj0+DG6/HeeWyMY1X8IIUZ fwaznC8cLX295K9Q8yO5BvZS/0tQlJwmWkd80dp6k5xV6E4MyvY0F3YUZmBm4zYw n9XibyVo/Svrhw3pCLLuE9xX3PQpVrVPKnlPaVX/FuAaVGT14KdVmhGAs+fBJKsr qa7WaEoJCSWSAsmjyuv6J8UCwhcWMFAqN8hyzS5+2FE= -----END CERTIFICATE-----Generated at Mon Apr 21 04:05:15 2025 by rpki-client