$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa File: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (raw, json) Hash identifier: jf5znzRFy2+P6OoEH2nJsLB6FzpE4dX49Aqe9OCR/Ck= Subject key identifier: BD:49:03:E7:BD:3F:1F:C5:7F:41:98:65:4C:E5:07:FC:DB:10:51:B5 Certificate issuer: /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Certificate serial: 3B2DA1C26617A1555344E34BE5B4E0336CA6244E Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa Signing time: Thu 28 Nov 2024 12:00:01 +0000 ROA not before: Thu 28 Nov 2024 11:55:01 +0000 ROA not after: Thu 27 Nov 2025 12:00:01 +0000 asID: 139431 IP address blocks: 103.143.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 10:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:2d:a1:c2:66:17:a1:55:53:44:e3:4b:e5:b4:e0:33:6c:a6:24:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Validity Not Before: Nov 28 11:55:01 2024 GMT Not After : Nov 27 12:00:01 2025 GMT Subject: CN=BD4903E7BD3F1FC57F4198654CE507FCDB1051B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:27:6f:8a:85:c9:38:1a:ab:df:14:54:e0: 8b:6d:30:67:18:38:c0:6b:48:51:f9:3f:13:9f:01: 01:4c:4d:70:6c:8d:7d:a8:92:06:8b:b0:6d:03:65: 82:6c:ed:36:05:c3:ff:5c:ac:d6:3d:fc:d2:c8:5f: b1:4b:7b:e1:1a:84:b3:73:c3:7c:f3:6c:9c:3f:f0: 74:c8:37:e0:3e:1e:64:a2:42:db:6b:f7:50:fd:fb: f9:b8:82:ac:2f:81:67:92:87:2e:fb:25:9a:8d:75: ee:38:5e:05:9f:fb:c1:44:22:28:d3:51:2a:2d:93: 08:c1:37:ab:0a:ce:88:27:9e:45:e8:41:85:61:05: fd:76:3a:f4:2f:96:52:b5:42:b2:c0:35:23:42:d7: eb:09:ac:a8:98:05:4f:83:9a:a7:f9:c7:2e:f4:40: ec:c3:00:29:bd:33:3f:04:95:94:5b:ba:ce:1d:9c: a2:53:ec:62:b9:de:3b:fb:ce:c7:89:fd:36:5e:b5: b8:a3:58:8c:15:57:d8:87:44:a1:80:09:13:36:df: 13:34:01:be:14:b0:7b:12:a7:c9:e2:5c:09:2f:7a: 65:91:45:89:a9:c0:bd:83:c6:e7:79:65:cb:1e:ce: d6:e8:50:23:94:42:aa:ec:b0:9d:1e:45:f0:b5:93: 3a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:49:03:E7:BD:3F:1F:C5:7F:41:98:65:4C:E5:07:FC:DB:10:51:B5 X509v3 Authority Key Identifier: keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.22.0/24 Signature Algorithm: sha256WithRSAEncryption 91:05:cf:0a:8d:56:55:65:27:a2:41:2d:6d:c3:9b:3e:ff:c3: 09:12:2b:56:3c:53:15:7e:83:a5:e6:87:8a:04:ee:f4:a1:3b: ed:0b:11:d2:66:5e:21:f5:77:9f:17:95:3c:7f:88:6c:11:66: 2e:74:15:ac:54:90:84:ef:ad:e9:a9:25:6d:c2:18:3e:4a:f2: da:46:cc:90:11:67:c8:41:e8:c7:32:60:03:10:a8:40:31:2c: b1:6e:1f:4a:a5:03:bd:4c:bd:dc:ed:c2:8d:15:95:eb:5c:5c: 15:87:ea:04:9a:0d:dd:a1:04:fa:53:7a:29:fd:f5:c9:11:d4: 2e:97:e3:b8:3b:3c:3a:83:73:29:b8:01:fb:96:33:86:b7:d9: 56:b0:71:aa:30:9b:22:15:78:b0:1a:bc:42:1a:75:41:a4:fa: 35:2f:db:75:d9:f0:af:55:23:96:19:c2:98:7f:62:6d:2b:93: 63:98:62:04:a0:b0:f5:55:45:78:2c:e4:6d:33:d5:ec:93:08: c7:57:d5:9f:85:2c:b8:07:70:49:e2:29:94:eb:e1:42:bd:13: 6e:fc:1c:d5:b5:d5:b0:1c:92:1b:57:8a:14:c4:b8:6a:f2:40: 4d:3b:e5:bb:a6:fd:38:85:c7:f5:0e:9f:aa:4c:84:1e:da:98: df:ad:d1:db -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOy2hwmYXoVVTRONL5bTgM2ymJE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0 QkRGN0FFNzAeFw0yNDExMjgxMTU1MDFaFw0yNTExMjcxMjAwMDFaMDMxMTAvBgNV BAMTKEJENDkwM0U3QkQzRjFGQzU3RjQxOTg2NTRDRTUwN0ZDREIxMDUxQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaydvioXJOBqr3xRU4IttMGcY OMBrSFH5PxOfAQFMTXBsjX2okgaLsG0DZYJs7TYFw/9crNY9/NLIX7FLe+EahLNz w3zzbJw/8HTIN+A+HmSiQttr91D9+/m4gqwvgWeShy77JZqNde44XgWf+8FEIijT USotkwjBN6sKzognnkXoQYVhBf12OvQvllK1QrLANSNC1+sJrKiYBU+Dmqf5xy70 QOzDACm9Mz8ElZRbus4dnKJT7GK53jv7zseJ/TZetbijWIwVV9iHRKGACRM23xM0 Ab4UsHsSp8niXAkvemWRRYmpwL2Dxud5ZcseztboUCOUQqrssJ0eRfC1kzr/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUvUkD570/H8V/QZhlTOUH/NsQUbUwHwYDVR0j BBgwFoAUU11G9AROLMISk8wGGieDB0vfeucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDZmMzNmMi1mMDZlLTRlYjYtYWU2MS01NTI5YmNhMWNkY2QvMC81MzVENDZGNDA0 NEUyQ0MyMTI5M0NDMDYxQTI3ODMwNzRCREY3QUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0QkRG N0FFNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0NmYzM2YyLWYwNmUtNGViNi1h ZTYxLTU1MjliY2ExY2RjZC8wLzMxMzAzMzJlMzEzNDMzMmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ48WMA0GCSqG SIb3DQEBCwUAA4IBAQCRBc8KjVZVZSeiQS1tw5s+/8MJEitWPFMVfoOl5oeKBO70 oTvtCxHSZl4h9XefF5U8f4hsEWYudBWsVJCE763pqSVtwhg+SvLaRsyQEWfIQejH MmADEKhAMSyxbh9KpQO9TL3c7cKNFZXrXFwVh+oEmg3doQT6U3op/fXJEdQul+O4 Ozw6g3MpuAH7ljOGt9lWsHGqMJsiFXiwGrxCGnVBpPo1L9t12fCvVSOWGcKYf2Jt K5NjmGIEoLD1VUV4LORtM9XskwjHV9WfhSy4B3BJ4imU6+FCvRNu/BzVtdWwHJIb V4oUxLhq8kBNO+W7pv04hcf1Dp+qTIQe2pjfrdHb -----END CERTIFICATE-----Generated at Fri Feb 21 11:08:57 2025 by rpki-client