$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa File: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (raw, json) Hash identifier: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U= Subject key identifier: DC:6C:7C:9F:74:AB:C0:D9:4A:88:94:75:06:AA:DD:92:40:84:F8:2E Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 0EA2B6F09F437D7E316A89B65F25EA9127CB345C Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa Signing time: Wed 05 Feb 2025 13:56:54 +0000 ROA not before: Wed 05 Feb 2025 13:51:54 +0000 ROA not after: Wed 04 Feb 2026 13:56:54 +0000 asID: 36352 IP address blocks: 103.120.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a2:b6:f0:9f:43:7d:7e:31:6a:89:b6:5f:25:ea:91:27:cb:34:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Feb 5 13:51:54 2025 GMT Not After : Feb 4 13:56:54 2026 GMT Subject: CN=DC6C7C9F74ABC0D94A88947506AADD924084F82E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:4f:90:03:6d:93:62:1e:45:45:df:cf:8e: 3d:9d:b4:52:41:62:c4:ec:81:48:48:eb:82:79:84: e3:fd:cc:e3:db:d8:83:8e:ca:21:c2:0f:72:b0:55: 82:da:bf:f8:ac:60:c8:7d:55:e7:62:c4:9e:49:0f: ea:00:71:3e:36:de:1f:bb:f3:83:d4:95:f5:19:b6: 8a:f6:18:b0:80:1a:a2:60:b9:b8:84:c5:81:d9:b6: 29:8f:ef:8f:aa:c5:39:34:2b:1e:99:25:50:d9:d2: bb:2e:55:f9:c7:64:9e:b3:14:ac:da:ab:94:56:d0: a6:8a:2f:f5:45:cb:92:b8:9b:a1:00:d7:83:a8:94: 95:05:13:d1:bc:f3:ad:4a:22:98:a1:82:da:9b:11: a7:89:87:5e:00:de:fb:e9:57:2b:86:9b:30:43:d2: 51:c5:10:3b:c8:d7:40:3f:ac:e5:8e:81:a5:dc:33: 27:64:b6:32:6d:32:8a:23:b4:ba:9a:4f:22:3e:79: f3:7d:30:cf:4f:d4:f2:84:bf:63:87:c1:34:f1:a2: 09:36:d2:1f:94:82:ed:4f:d1:c9:8b:8e:9b:fd:a2: c8:62:50:27:4e:88:a2:46:52:be:7b:98:d3:d1:87: 5c:2e:3a:84:3c:4e:cc:12:47:f9:0f:5b:fb:bf:ec: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6C:7C:9F:74:AB:C0:D9:4A:88:94:75:06:AA:DD:92:40:84:F8:2E X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.204.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:a4:69:7f:2c:b7:b5:fd:64:b8:b7:47:d4:df:22:80:00:42: 94:72:23:b9:3f:06:a9:e2:4b:73:64:72:67:08:d1:63:45:cb: 93:08:a6:06:29:f4:30:7c:0f:eb:5d:b2:34:c5:61:04:88:1b: b9:0f:5a:32:b3:2e:f4:56:ce:a6:30:70:00:d5:e3:8b:1e:35: c3:e5:f9:3d:12:32:f3:ed:4f:03:fa:8f:bf:a7:57:8e:34:10: e1:cf:3a:e9:86:0e:7e:47:2a:3a:06:61:88:3a:47:3d:a1:66: 92:ac:5d:d9:32:50:ab:b1:fc:53:86:5d:6a:0a:58:1a:7f:09: 92:97:ac:34:fc:97:1d:68:46:e2:4d:10:8a:3a:97:86:14:31: be:9c:94:79:d1:5b:51:4f:a3:3c:e5:34:91:cb:50:1e:dd:85: 6f:e6:17:94:39:ae:f3:43:d0:52:ff:b5:5c:5c:70:76:c3:7c: 7e:7f:9a:63:95:bc:2b:8e:22:03:be:0b:d1:30:36:1d:42:ea: 7d:48:e4:68:21:d5:9c:79:12:f6:49:42:8c:28:06:3f:c1:60: 4e:67:89:ec:9d:c2:78:c0:ba:c7:3f:a3:ed:66:f9:58:c2:c0: 42:a9:4b:87:08:93:c2:e8:ef:95:84:05:c7:6c:71:bd:3a:ce: ae:e0:6f:58 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDqK28J9DfX4xaom2XyXqkSfLNFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTAyMDUxMzUxNTRaFw0yNjAyMDQxMzU2NTRaMDMxMTAvBgNV BAMTKERDNkM3QzlGNzRBQkMwRDk0QTg4OTQ3NTA2QUFERDkyNDA4NEY4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUk+QA22TYh5FRd/Pjj2dtFJB YsTsgUhI64J5hOP9zOPb2IOOyiHCD3KwVYLav/isYMh9VedixJ5JD+oAcT423h+7 84PUlfUZtor2GLCAGqJgubiExYHZtimP74+qxTk0Kx6ZJVDZ0rsuVfnHZJ6zFKza q5RW0KaKL/VFy5K4m6EA14OolJUFE9G8861KIpihgtqbEaeJh14A3vvpVyuGmzBD 0lHFEDvI10A/rOWOgaXcMydktjJtMoojtLqaTyI+efN9MM9P1PKEv2OHwTTxogk2 0h+Ugu1P0cmLjpv9oshiUCdOiKJGUr57mNPRh1wuOoQ8TswSR/kPW/u/7K+nAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3Gx8n3SrwNlKiJR1BqrdkkCE+C4wHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0MGYzN2MwLTM4MGMtNDA1My1i M2JhLWIzMmVmMDM1YzI4Zi8wLzMxMzAzMzJlMzEzMjMwMmUzMjMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM2MzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3jMMA0GCSqG SIb3DQEBCwUAA4IBAQCepGl/LLe1/WS4t0fU3yKAAEKUciO5Pwap4ktzZHJnCNFj RcuTCKYGKfQwfA/rXbI0xWEEiBu5D1oysy70Vs6mMHAA1eOLHjXD5fk9EjLz7U8D +o+/p1eONBDhzzrphg5+Ryo6BmGIOkc9oWaSrF3ZMlCrsfxThl1qClgafwmSl6w0 /JcdaEbiTRCKOpeGFDG+nJR50VtRT6M85TSRy1Ae3YVv5heUOa7zQ9BS/7VcXHB2 w3x+f5pjlbwrjiIDvgvRMDYdQup9SORoIdWceRL2SUKMKAY/wWBOZ4nsncJ4wLrH P6PtZvlYwsBCqUuHCJPC6O+VhAXHbHG9Os6u4G9Y -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:05 2025 by rpki-client