$ rpki-client -vvf repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa File: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (raw, json) Hash identifier: 4cy73GpoIhrbBwWEHzZbeszIn1wa4LuzDMIx+M8dUCI= Subject key identifier: 6D:2B:67:25:04:83:79:4B:30:61:A5:D7:DF:00:D2:DD:E6:F8:B0:4B Certificate issuer: /CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Certificate serial: 1610750E581E353E33A11FA819354FC4DA1A2CE9 Authority key identifier: 6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa Signing time: Wed 01 May 2024 08:00:00 +0000 ROA not before: Wed 01 May 2024 07:55:00 +0000 ROA not after: Wed 30 Apr 2025 08:00:00 +0000 asID: 142335 IP address blocks: 103.169.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 05:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:10:75:0e:58:1e:35:3e:33:a1:1f:a8:19:35:4f:c4:da:1a:2c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Validity Not Before: May 1 07:55:00 2024 GMT Not After : Apr 30 08:00:00 2025 GMT Subject: CN=6D2B67250483794B3061A5D7DF00D2DDE6F8B04B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:f7:55:f7:e0:cb:e9:d5:17:09:b7:a8:b8: 45:d5:28:b4:56:b7:fb:35:4c:23:02:0e:16:8f:cc: ff:64:08:6f:0b:1e:22:c7:06:2a:c3:a5:2e:dc:2e: bd:c4:94:11:68:dc:49:29:27:71:18:6f:ad:d3:3b: ce:45:9f:35:70:c1:08:a8:11:46:16:6e:ff:8d:46: 18:83:f2:7b:21:3a:e3:37:8d:e4:60:ed:bd:1d:04: 66:d4:1a:0e:df:b7:46:83:cc:8b:7f:47:37:e8:22: 33:01:86:76:2d:60:54:b2:5e:2d:fc:d0:b5:42:f8: 0b:c1:bd:1f:e1:4d:89:7f:f8:37:bc:99:27:55:48: ff:9a:4c:d9:c8:27:1b:8d:ae:48:78:bf:6b:40:bd: 0d:cc:f7:e6:f5:0c:da:41:97:b5:9a:7c:c5:84:b2: fb:06:ab:bf:0f:a0:ea:c7:09:9c:a9:e5:ac:42:d9: 8b:d8:c1:d4:16:57:8c:a9:f0:da:da:04:e6:cc:ec: 10:53:5f:d8:7f:f9:64:67:34:06:b4:c2:70:9a:31: dd:be:bd:4e:c9:8a:a5:a9:41:3f:1a:3c:9f:60:b1: 34:87:7d:13:4d:58:82:55:16:77:21:49:9c:fa:9d: fa:d2:be:09:11:6e:ba:c1:48:90:04:65:11:ea:1e: bd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2B:67:25:04:83:79:4B:30:61:A5:D7:DF:00:D2:DD:E6:F8:B0:4B X509v3 Authority Key Identifier: keyid:6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.10.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:07:3e:07:9f:fc:e3:be:c1:e3:ea:f2:4b:eb:72:31:38:e4: 56:0f:5b:fc:75:25:5e:17:65:92:0a:2c:0d:fa:0f:3a:97:72: f0:c1:fb:05:e4:cb:44:bb:9e:09:a8:7c:ce:35:7d:0c:cb:80: c9:d0:51:62:31:4b:78:8a:4f:c2:5c:ab:2e:b1:97:9c:e5:10: a0:6b:fe:2c:ec:94:db:aa:1d:e5:a1:32:b4:a2:92:a5:f1:92: 0e:5f:18:9f:be:9d:1d:ce:95:f8:41:dc:68:e4:3a:fa:f7:f0: b5:5c:8f:72:e7:3f:2b:62:f9:67:ee:ca:8d:e5:5b:95:5f:a9: 4c:7b:ee:7f:ad:c0:80:a3:90:28:3f:7c:e4:de:70:22:fc:7f: 0d:51:51:49:16:57:27:57:23:ce:d5:e6:0f:c1:c7:67:f0:cd: 70:14:d8:94:dd:19:d4:c4:7d:ef:33:cb:92:67:e1:48:89:91: d1:cd:bb:ec:32:80:14:22:45:64:d6:70:14:d8:31:99:ca:7c: 2e:ce:39:c0:8f:a1:69:18:0b:10:09:29:04:01:d7:02:c0:e0: 1e:00:83:f1:38:ac:9f:3b:b5:04:c6:eb:ed:26:ba:84:38:a8: 6b:28:bb:1d:49:bc:82:8e:9f:97:1e:00:26:c5:af:93:0c:a0: 02:59:7c:ce -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFhB1DlgeNT4zoR+oGTVPxNoaLOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZB RUY4RURFRjAeFw0yNDA1MDEwNzU1MDBaFw0yNTA0MzAwODAwMDBaMDMxMTAvBgNV BAMTKDZEMkI2NzI1MDQ4Mzc5NEIzMDYxQTVEN0RGMDBEMkRERTZGOEIwNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WvdV9+DL6dUXCbeouEXVKLRW t/s1TCMCDhaPzP9kCG8LHiLHBirDpS7cLr3ElBFo3EkpJ3EYb63TO85FnzVwwQio EUYWbv+NRhiD8nshOuM3jeRg7b0dBGbUGg7ft0aDzIt/RzfoIjMBhnYtYFSyXi38 0LVC+AvBvR/hTYl/+De8mSdVSP+aTNnIJxuNrkh4v2tAvQ3M9+b1DNpBl7WafMWE svsGq78PoOrHCZyp5axC2YvYwdQWV4yp8NraBObM7BBTX9h/+WRnNAa0wnCaMd2+ vU7JiqWpQT8aPJ9gsTSHfRNNWIJVFnchSZz6nfrSvgkRbrrBSJAEZRHqHr1NAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbStnJQSDeUswYaXX3wDS3eb4sEswHwYDVR0j BBgwFoAUbjyJ5qPjxhpzFYo8/4KQn6747e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWFhOGNiZS03MThiLTQ5NTMtYjc4OS02MGZhODU3YWVjOGQvMC82RTNDODlFNkEz RTNDNjFBNzMxNThBM0NGRjgyOTA5RkFFRjhFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZBRUY4 RURFRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlYWE4Y2JlLTcxOGItNDk1My1i Nzg5LTYwZmE4NTdhZWM4ZC8wLzMxMzAzMzJlMzEzNjM5MmUzMTMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6kKMA0GCSqG SIb3DQEBCwUAA4IBAQAsBz4Hn/zjvsHj6vJL63IxOORWD1v8dSVeF2WSCiwN+g86 l3LwwfsF5MtEu54JqHzONX0My4DJ0FFiMUt4ik/CXKsusZec5RCga/4s7JTbqh3l oTK0opKl8ZIOXxifvp0dzpX4Qdxo5Dr69/C1XI9y5z8rYvln7sqN5VuVX6lMe+5/ rcCAo5AoP3zk3nAi/H8NUVFJFlcnVyPO1eYPwcdn8M1wFNiU3RnUxH3vM8uSZ+FI iZHRzbvsMoAUIkVk1nAU2DGZynwuzjnAj6FpGAsQCSkEAdcCwOAeAIPxOKyfO7UE xuvtJrqEOKhrKLsdSbyCjp+XHgAmxa+TDKACWXzO -----END CERTIFICATE-----Generated at Tue Mar 11 05:04:54 2025 by rpki-client