$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa File: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (raw, json) Hash identifier: omQCe9i6UAQabn658NY546AFhSlSDQxwejMwWzEAolo= Subject key identifier: 1E:9C:D3:D0:94:D8:A8:95:C0:42:0F:96:9D:68:A3:E6:1D:B8:9C:FD Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Certificate serial: 14312D5F984882F8D48657D6DA7372FCB4EFA1B8 Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa Signing time: Wed 18 Dec 2024 15:00:02 +0000 ROA not before: Wed 18 Dec 2024 14:55:02 +0000 ROA not after: Wed 17 Dec 2025 15:00:02 +0000 asID: 149373 IP address blocks: 103.180.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 15:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:31:2d:5f:98:48:82:f8:d4:86:57:d6:da:73:72:fc:b4:ef:a1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Validity Not Before: Dec 18 14:55:02 2024 GMT Not After : Dec 17 15:00:02 2025 GMT Subject: CN=1E9CD3D094D8A895C0420F969D68A3E61DB89CFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:60:e1:df:a2:79:72:df:1c:a5:ae:4a:2c: f5:41:98:fd:ed:6f:f8:f7:3b:3e:4b:5a:10:78:4a: b5:2b:be:ed:c5:fd:76:e2:01:82:d3:0a:f8:0b:22: d1:6c:b2:48:e9:9d:fa:8b:a0:61:83:aa:3f:1b:11: 96:21:05:78:be:82:54:12:95:be:94:18:80:16:35: 42:d6:29:15:8d:58:5e:78:3d:5d:82:3f:49:f6:62: 0d:4f:54:11:5c:fe:8c:00:be:e5:e8:17:08:4d:c5: 79:a7:22:c4:9c:20:02:60:01:fd:f4:80:84:52:b8: 19:94:98:bf:c0:3b:52:cf:a5:6a:57:c1:59:10:d4: c7:74:d0:51:a5:b8:ff:4a:ad:ef:d0:47:87:04:48: 7d:31:e9:51:c4:3c:00:db:af:17:f4:1e:d9:f2:8e: d3:31:9c:ec:57:49:04:d8:b9:59:8b:74:a8:4b:f8: f5:69:52:b7:2c:05:31:e1:0a:8e:dc:22:67:a9:03: c9:ae:7b:dc:32:ec:bc:dd:7a:a7:d4:14:e4:1d:8e: 5d:57:43:04:a9:e3:59:90:c9:25:88:b9:cd:80:d8: 06:88:bb:d2:9a:12:86:82:22:79:8f:0b:3a:17:42: fa:5a:d4:04:6e:8b:6b:53:7a:e4:8a:16:f8:84:1d: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9C:D3:D0:94:D8:A8:95:C0:42:0F:96:9D:68:A3:E6:1D:B8:9C:FD X509v3 Authority Key Identifier: keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.251.0/24 Signature Algorithm: sha256WithRSAEncryption 93:41:ab:7f:12:79:4a:9a:ea:3a:9c:94:74:11:97:2e:d1:3f: f2:05:b9:db:cc:20:1a:4d:40:cd:72:67:03:94:41:52:e6:3d: 39:d2:a4:fb:c7:ef:6e:5c:c1:88:b9:1b:1c:e7:56:43:52:01: 36:8a:70:58:32:c7:ee:47:93:d7:cd:5a:35:ee:4c:6e:db:07: 8b:f9:26:bf:52:56:99:a0:3c:b8:b9:34:6a:6c:4e:95:57:54: 17:8a:37:72:eb:de:79:35:3a:39:b1:91:64:0d:9f:7b:d1:7c: 78:63:f5:77:c5:59:de:96:96:6c:67:56:bc:36:f4:d3:3a:1d: ca:fa:f4:06:db:84:01:c8:b5:42:b0:e9:bb:e7:d3:70:fc:5e: 76:e2:c4:6c:fd:da:6e:33:f7:6d:eb:df:51:82:52:bf:97:85: 3c:ef:82:50:5e:8d:fc:ae:54:3b:c5:37:09:d5:51:d3:f2:6b: 92:4c:a2:57:02:ec:24:bf:47:d1:d3:21:22:5f:a6:6b:aa:d8: 5f:5d:c8:ee:09:a9:66:3e:f1:ab:d2:88:7c:c6:0e:c4:79:be: 06:bf:f7:d2:6d:46:78:8a:87:53:aa:b2:74:be:0c:83:74:43: 60:1e:a4:eb:26:be:ab:57:73:86:49:28:f0:13:29:1f:44:81: 6a:21:1c:6f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUFDEtX5hIgvjUhlfW2nNy/LTvobgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB MTBBMUUyMDAeFw0yNDEyMTgxNDU1MDJaFw0yNTEyMTcxNTAwMDJaMDMxMTAvBgNV BAMTKDFFOUNEM0QwOTREOEE4OTVDMDQyMEY5NjlENjhBM0U2MURCODlDRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BGDh36J5ct8cpa5KLPVBmP3t b/j3Oz5LWhB4SrUrvu3F/XbiAYLTCvgLItFsskjpnfqLoGGDqj8bEZYhBXi+glQS lb6UGIAWNULWKRWNWF54PV2CP0n2Yg1PVBFc/owAvuXoFwhNxXmnIsScIAJgAf30 gIRSuBmUmL/AO1LPpWpXwVkQ1Md00FGluP9Kre/QR4cESH0x6VHEPADbrxf0Htny jtMxnOxXSQTYuVmLdKhL+PVpUrcsBTHhCo7cImepA8mue9wy7LzdeqfUFOQdjl1X QwSp41mQySWIuc2A2AaIu9KaEoaCInmPCzoXQvpa1ARui2tTeuSKFviEHd/1AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUHpzT0JTYqJXAQg+WnWij5h24nP0wHwYDVR0j BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB MUUyMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyNDlkMzg3LTcwY2YtNDBlOS04 NzU5LTliODZlMGM2NTEyOC8wLzMxMzAzMzJlMzEzODMwMmUzMjM1MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntPswDQYJ KoZIhvcNAQELBQADggEBAJNBq38SeUqa6jqclHQRly7RP/IFudvMIBpNQM1yZwOU QVLmPTnSpPvH725cwYi5GxznVkNSATaKcFgyx+5Hk9fNWjXuTG7bB4v5Jr9SVpmg PLi5NGpsTpVXVBeKN3Lr3nk1OjmxkWQNn3vRfHhj9XfFWd6WlmxnVrw29NM6Hcr6 9AbbhAHItUKw6bvn03D8XnbixGz92m4z923r31GCUr+XhTzvglBejfyuVDvFNwnV UdPya5JMolcC7CS/R9HTISJfpmuq2F9dyO4JqWY+8avSiHzGDsR5vga/99JtRniK h1OqsnS+DIN0Q2AepOsmvqtXc4ZJKPATKR9EgWohHG8= -----END CERTIFICATE-----Generated at Sun Apr 6 13:54:14 2025 by rpki-client