$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37322e302f32342d3234203d3e20313530343838.roa File: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (raw, json) Hash identifier: owzFX97yUwQlgrwuIyX44838/uUdwYXvl6IShRtLOss= Subject key identifier: 74:94:35:5B:FD:A7:CF:D5:5D:4B:FA:B5:05:FB:4A:E1:CE:9C:47:7B Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Certificate serial: 23FCC895635B953E0623B8C50B85BA252D4789EA Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37322e302f32342d3234203d3e20313530343838.roa Signing time: Mon 04 Nov 2024 05:01:15 +0000 ROA not before: Mon 04 Nov 2024 04:56:15 +0000 ROA not after: Mon 03 Nov 2025 05:01:15 +0000 asID: 150488 IP address blocks: 103.39.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Mar 2025 00:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:fc:c8:95:63:5b:95:3e:06:23:b8:c5:0b:85:ba:25:2d:47:89:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Validity Not Before: Nov 4 04:56:15 2024 GMT Not After : Nov 3 05:01:15 2025 GMT Subject: CN=7494355BFDA7CFD55D4BFAB505FB4AE1CE9C477B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:13:22:86:ee:de:7d:0e:3b:59:0c:66:09: 7b:b0:49:c4:06:df:22:21:ed:c4:6c:8b:64:c9:0a: 85:e7:32:1b:4b:19:64:a2:35:7d:f6:f5:d8:8a:42: c4:fb:58:bf:06:f6:81:a0:b6:c5:e5:06:15:5e:5c: 09:65:57:03:18:f2:b0:5b:c3:ea:44:64:07:40:45: 91:b9:13:5d:d3:45:88:95:0c:6c:5d:bf:22:9b:40: 5a:e4:d1:a5:fb:9f:e0:a3:f9:4d:e3:30:a5:e4:cc: 68:5e:29:dd:4c:ca:42:13:c7:cd:46:dc:5d:ec:e5: 47:06:87:2a:08:ee:9c:f9:54:fd:0c:37:dd:88:d1: 94:7a:ca:35:f0:0a:4d:89:3f:b3:e0:c8:6d:0c:c2: ff:88:4d:3c:ca:2f:11:3f:f5:da:2d:7f:80:ea:23: 5e:e7:e3:87:59:63:96:68:bc:2f:20:18:29:2c:4e: 42:e3:83:28:e5:64:9f:40:94:11:3e:34:80:f9:c4: 86:7a:f6:41:73:24:f9:25:a1:37:a6:0c:31:32:2d: 8b:9a:dd:67:3e:0d:5a:3b:2e:69:d4:e7:40:ad:60: 8a:6f:a1:da:7b:87:db:00:d6:de:46:6c:9f:3f:dd: b3:61:0a:bd:bb:b6:7e:b1:5e:5c:04:80:41:36:e6: 5c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:94:35:5B:FD:A7:CF:D5:5D:4B:FA:B5:05:FB:4A:E1:CE:9C:47:7B X509v3 Authority Key Identifier: keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37322e302f32342d3234203d3e20313530343838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.72.0/24 Signature Algorithm: sha256WithRSAEncryption 85:b5:09:40:06:70:ac:a4:b3:73:57:8a:8f:03:c1:eb:84:c4: 80:ce:98:da:15:6e:50:13:f0:4b:c3:0a:eb:19:df:20:d4:55: c2:17:46:6d:5b:91:a8:eb:98:f7:eb:87:f7:ef:24:ad:eb:cb: 16:de:ab:d1:51:71:ad:a7:61:01:0d:9c:20:69:6e:e8:e2:b5: cd:6d:02:58:e8:cd:89:1f:8c:2d:52:30:38:a4:bc:f7:22:30: b3:36:b3:e4:4c:6a:ae:db:6a:41:c2:ce:58:5a:50:f1:fb:82: e6:de:6a:6e:62:c1:76:8c:59:bf:c7:4e:34:5e:85:19:3e:ad: f0:20:15:37:5c:db:21:95:b9:30:c2:0f:44:be:e9:dd:2e:5b: 69:db:21:25:f0:b0:d3:4a:b1:ac:24:13:8e:5c:42:98:7f:6a: fc:fe:06:4c:a8:9d:2a:fc:6d:1c:99:2b:5a:9d:c6:f6:da:a1: c5:3b:0a:8b:35:14:78:d3:44:6b:5b:ca:7c:ac:f8:4d:d6:c3: 1f:7c:f4:13:3c:23:5f:2c:66:f2:f1:b2:60:f7:9a:b5:f0:28: 15:25:f1:40:4a:f9:9b:19:6c:b5:e2:06:50:82:a1:36:b2:a0: 05:a3:9a:6a:aa:bb:f0:15:32:ff:42:ae:58:91:36:66:2f:6c: f2:28:d0:60 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUI/zIlWNblT4GI7jFC4W6JS1HieowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0 OTNCNUQyOTAeFw0yNDExMDQwNDU2MTVaFw0yNTExMDMwNTAxMTVaMDMxMTAvBgNV BAMTKDc0OTQzNTVCRkRBN0NGRDU1RDRCRkFCNTA1RkI0QUUxQ0U5QzQ3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhxMihu7efQ47WQxmCXuwScQG 3yIh7cRsi2TJCoXnMhtLGWSiNX329diKQsT7WL8G9oGgtsXlBhVeXAllVwMY8rBb w+pEZAdARZG5E13TRYiVDGxdvyKbQFrk0aX7n+Cj+U3jMKXkzGheKd1MykITx81G 3F3s5UcGhyoI7pz5VP0MN92I0ZR6yjXwCk2JP7PgyG0Mwv+ITTzKLxE/9dotf4Dq I17n44dZY5ZovC8gGCksTkLjgyjlZJ9AlBE+NID5xIZ69kFzJPkloTemDDEyLYua 3Wc+DVo7LmnU50CtYIpvodp7h9sA1t5GbJ8/3bNhCr27tn6xXlwEgEE25lxXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUdJQ1W/2nz9VdS/q1BftK4c6cR3swHwYDVR0j BBgwFoAU1uVK9sQ3hoiZuZ9DEs09u0k7XSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMC9ENkU1NEFGNkM0 Mzc4Njg4OTlCOTlGNDMxMkNEM0RCQjQ5M0I1RDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0OTNC NUQyOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwYzczYWY1LWEyYzAtNDI0ZC04 NjJlLTExMmM1OGI3MjcwZS8wLzMxMzAzMzJlMzMzOTJlMzczMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcnSDANBgkqhkiG 9w0BAQsFAAOCAQEAhbUJQAZwrKSzc1eKjwPB64TEgM6Y2hVuUBPwS8MK6xnfINRV whdGbVuRqOuY9+uH9+8krevLFt6r0VFxradhAQ2cIGlu6OK1zW0CWOjNiR+MLVIw OKS89yIwszaz5ExqrttqQcLOWFpQ8fuC5t5qbmLBdoxZv8dONF6FGT6t8CAVN1zb IZW5MMIPRL7p3S5badshJfCw00qxrCQTjlxCmH9q/P4GTKidKvxtHJkrWp3G9tqh xTsKizUUeNNEa1vKfKz4TdbDH3z0EzwjXyxm8vGyYPeatfAoFSXxQEr5mxlsteIG UIKhNrKgBaOaaqq78BUy/0KuWJE2Zi9s8ijQYA== -----END CERTIFICATE-----Generated at Tue Mar 11 05:03:04 2025 by rpki-client