$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa File: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (raw, json) Hash identifier: b0fuY1pKKFn/0Zi2JNlIa5wt7XKTYP6sji14ARgrEj0= Subject key identifier: 79:89:09:21:3B:4A:5B:F8:F5:C6:39:04:87:C3:CB:D6:67:3F:EF:D7 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 398F608E6D442DE3B42E8F673EF4735B28D019B6 Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa Signing time: Fri 13 Dec 2024 03:03:24 +0000 ROA not before: Fri 13 Dec 2024 02:58:24 +0000 ROA not after: Fri 12 Dec 2025 03:03:24 +0000 asID: 151503 IP address blocks: 103.215.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 18:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8f:60:8e:6d:44:2d:e3:b4:2e:8f:67:3e:f4:73:5b:28:d0:19:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Dec 13 02:58:24 2024 GMT Not After : Dec 12 03:03:24 2025 GMT Subject: CN=798909213B4A5BF8F5C6390487C3CBD6673FEFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:e4:a1:5e:d1:69:88:83:a8:55:01:e9:54: 54:b1:e4:21:f6:7a:9c:ec:1a:d1:2e:bd:c1:20:f9: 36:3b:b1:53:17:2f:5f:af:f0:f4:fa:76:5c:8e:76: cd:59:87:03:d8:dd:d0:39:d3:e1:04:e1:8f:95:07: 8f:f5:1c:ff:84:9a:e4:74:da:b0:7c:f9:02:00:4b: a7:01:e4:22:07:8f:40:bf:03:76:62:49:69:11:95: 8a:e6:de:39:4a:2a:60:cd:27:c1:4b:79:81:41:f7: 53:7b:3f:e8:29:57:49:d4:44:5f:b1:09:9d:df:3b: 8d:85:50:68:bc:55:0b:18:43:76:b7:66:f4:59:87: 88:68:b8:a3:06:6e:e8:bd:0d:c8:c7:24:4b:33:f6: d8:db:62:f3:95:6b:21:bc:51:47:6b:a1:d3:cb:88: 66:0b:12:6f:41:84:de:db:fd:52:16:d4:ff:8e:6f: 0c:9c:26:70:6b:e5:c2:3f:eb:79:da:44:f4:f6:cc: 09:c7:c9:90:f4:0c:cd:fc:99:7a:23:59:ed:7d:c6: 2e:b6:20:83:08:7e:82:96:10:65:42:10:6e:d6:a1: 62:1d:92:36:ba:c9:83:93:64:71:56:2c:88:a9:48: f1:5c:d0:20:b1:f5:4a:0d:67:4b:a7:06:78:99:ca: e2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:89:09:21:3B:4A:5B:F8:F5:C6:39:04:87:C3:CB:D6:67:3F:EF:D7 X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.215.60.0/24 Signature Algorithm: sha256WithRSAEncryption 09:fd:1e:65:73:8d:c8:15:0b:60:3a:6f:a5:c1:52:96:fb:80: f0:66:73:d1:cf:d0:51:63:c3:af:58:67:bd:60:c1:e3:aa:7a: 6d:fa:63:4d:b4:1a:b7:48:cf:08:4b:ea:9b:07:e4:3a:24:b9: 85:77:39:9f:2b:5b:5b:6c:ca:8a:57:da:5e:cc:61:e8:89:59: b6:ab:f1:ff:24:06:5b:0b:1f:a6:bf:8f:74:9e:d5:dc:bf:57: 55:f3:0b:39:ab:d6:ca:7c:80:e9:ee:f8:c0:91:05:d4:e3:af: 18:5f:3a:5f:6d:93:fb:a2:5d:33:d3:92:71:84:aa:6c:f1:32: 5e:e6:ae:64:68:ea:01:fb:1f:8f:79:4c:2a:38:3f:9e:a4:80: 58:74:c3:a3:1d:03:d5:72:04:11:e4:eb:7c:27:72:95:4e:44: 03:7c:19:2d:51:ab:e5:81:19:3c:b9:78:b5:eb:ec:df:35:2b: 16:fa:0b:03:76:cd:1d:bd:46:f8:62:ec:e6:f7:1b:d1:92:51: c5:6b:a8:e3:05:19:ca:94:b7:85:23:45:d7:f4:ff:43:11:96: ac:53:df:94:ba:e8:10:7f:ff:6b:56:11:ca:e8:2b:b6:14:4d: aa:26:c9:37:c0:e8:1c:40:fd:97:67:54:83:a2:5d:98:77:e8: e7:53:c4:4e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOY9gjm1ELeO0Lo9nPvRzWyjQGbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNDEyMTMwMjU4MjRaFw0yNTEyMTIwMzAzMjRaMDMxMTAvBgNV BAMTKDc5ODkwOTIxM0I0QTVCRjhGNUM2MzkwNDg3QzNDQkQ2NjczRkVGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzeShXtFpiIOoVQHpVFSx5CH2 epzsGtEuvcEg+TY7sVMXL1+v8PT6dlyOds1ZhwPY3dA50+EE4Y+VB4/1HP+EmuR0 2rB8+QIAS6cB5CIHj0C/A3ZiSWkRlYrm3jlKKmDNJ8FLeYFB91N7P+gpV0nURF+x CZ3fO42FUGi8VQsYQ3a3ZvRZh4houKMGbui9DcjHJEsz9tjbYvOVayG8UUdrodPL iGYLEm9BhN7b/VIW1P+ObwycJnBr5cI/63naRPT2zAnHyZD0DM38mXojWe19xi62 IIMIfoKWEGVCEG7WoWIdkja6yYOTZHFWLIipSPFc0CCx9UoNZ0unBniZyuJfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUeYkJITtKW/j1xjkEh8PL1mc/79cwHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MTZjMDRkLWQ5ZTAtNGMxZi04 YTE0LWUyM2JmMjc0NDU5Mi8wLzMxMzAzMzJlMzIzMTM1MmUzNjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9c8MA0GCSqG SIb3DQEBCwUAA4IBAQAJ/R5lc43IFQtgOm+lwVKW+4DwZnPRz9BRY8OvWGe9YMHj qnpt+mNNtBq3SM8IS+qbB+Q6JLmFdzmfK1tbbMqKV9pezGHoiVm2q/H/JAZbCx+m v490ntXcv1dV8ws5q9bKfIDp7vjAkQXU468YXzpfbZP7ol0z05JxhKps8TJe5q5k aOoB+x+PeUwqOD+epIBYdMOjHQPVcgQR5Ot8J3KVTkQDfBktUavlgRk8uXi16+zf NSsW+gsDds0dvUb4Yuzm9xvRklHFa6jjBRnKlLeFI0XX9P9DEZasU9+UuugQf/9r VhHK6Cu2FE2qJsk3wOgcQP2XZ1SDol2Yd+jnU8RO -----END CERTIFICATE-----Generated at Sun Apr 20 13:56:01 2025 by rpki-client