$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa File: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (raw, json) Hash identifier: 7EctcIPxfFZPW1P5p9qAy089fiBQ6Wvhy3EiPuauiGc= Subject key identifier: 39:AD:7E:E8:63:5C:2D:84:05:41:F2:BF:C2:BB:55:03:DC:33:66:2D Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 3C6DDBF1E52FBA50E8BC055CA74B5DA93587E5D6 Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa Signing time: Thu 11 Jul 2024 10:00:01 +0000 ROA not before: Thu 11 Jul 2024 09:55:01 +0000 ROA not after: Thu 10 Jul 2025 10:00:01 +0000 asID: 140474 IP address blocks: 103.153.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 14:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6d:db:f1:e5:2f:ba:50:e8:bc:05:5c:a7:4b:5d:a9:35:87:e5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Jul 11 09:55:01 2024 GMT Not After : Jul 10 10:00:01 2025 GMT Subject: CN=39AD7EE8635C2D840541F2BFC2BB5503DC33662D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:ba:fa:cb:31:72:04:0e:d1:99:75:f3:fc: a7:67:0d:c6:7c:ef:c2:98:25:17:db:e4:a6:91:b9: 03:1d:fd:1f:d5:97:0b:b9:0f:7f:42:35:0d:3f:ca: 0a:b9:7f:e1:3e:97:d2:7e:25:1a:67:ae:4c:4e:fe: ff:ef:4d:91:f8:6c:4b:8c:f1:0d:f8:b2:99:63:fd: f7:2d:aa:0b:a7:63:84:15:11:a0:b1:c0:4c:a4:f7: fa:e4:66:2b:3b:5e:03:be:1f:77:e5:c0:c7:f9:93: 6b:10:0e:b7:c3:e6:b7:dc:50:ac:59:e5:ef:ff:36: 33:4a:a6:b7:91:01:70:1c:ef:9f:83:44:71:31:f1: 16:b2:19:50:d7:53:26:6c:b7:37:20:2b:d5:a3:d3: c8:0b:42:32:1f:c5:53:be:ca:b3:a6:ec:75:8c:2c: 01:9a:74:36:eb:1d:47:15:62:e9:41:a5:fe:9e:a7: ae:e3:75:5d:dc:4c:51:bc:32:02:92:b2:ac:8d:ed: 10:0a:08:68:77:ab:72:19:c3:13:cf:54:f7:c6:41: da:24:01:2c:cd:ab:b3:b9:40:87:43:a5:32:de:39: 47:b1:ed:ff:ff:fe:bc:be:a8:8d:41:16:3d:6d:20: 28:b2:44:e1:33:c3:96:c7:e2:64:1e:1a:13:e1:80: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AD:7E:E8:63:5C:2D:84:05:41:F2:BF:C2:BB:55:03:DC:33:66:2D X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.244.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:66:40:10:c5:b0:60:a4:f7:06:7c:e4:58:83:35:a8:9d:ae: c5:fc:45:58:4f:96:e1:8b:94:5a:10:20:d1:c5:fe:02:c1:b3: 0b:b7:02:b3:c8:c6:0b:43:6b:2c:7d:50:63:c5:da:16:12:00: da:34:c3:41:06:3d:1c:aa:0b:9d:c9:30:7a:d5:c6:ab:95:a9: 7f:6b:bc:fc:c9:89:60:fb:33:44:92:bc:a7:a0:f1:05:c3:4b: 91:3a:45:da:56:2a:25:47:c8:2d:94:88:79:42:d8:32:8b:01: 78:7a:a7:95:33:3c:55:b5:4f:07:ac:32:7d:c5:81:c1:0d:7a: c1:93:46:9b:7b:99:38:16:d5:0f:e6:8e:a1:1a:03:bb:90:3b: 2a:b4:b2:70:a6:b8:de:45:89:1f:67:50:1c:70:74:0a:66:da: 5f:71:31:f4:36:16:89:f6:2d:58:1b:ee:5f:16:fd:d8:f3:68: 39:03:30:62:de:12:4a:55:f3:31:54:f2:7e:8f:83:86:36:b2: 22:f7:af:5c:06:b7:7d:ac:38:4a:00:46:b0:a2:b2:89:ee:96: 4c:25:9b:cf:ac:60:84:88:9b:d9:82:ca:fb:ab:21:49:21:18: 9f:26:f5:61:fe:e6:2c:5d:3b:8b:12:5c:7b:21:45:91:7d:60: de:43:c3:77 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPG3b8eUvulDovAVcp0tdqTWH5dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNDA3MTEwOTU1MDFaFw0yNTA3MTAxMDAwMDFaMDMxMTAvBgNV BAMTKDM5QUQ3RUU4NjM1QzJEODQwNTQxRjJCRkMyQkI1NTAzREMzMzY2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Drr6yzFyBA7RmXXz/KdnDcZ8 78KYJRfb5KaRuQMd/R/Vlwu5D39CNQ0/ygq5f+E+l9J+JRpnrkxO/v/vTZH4bEuM 8Q34splj/fctqgunY4QVEaCxwEyk9/rkZis7XgO+H3flwMf5k2sQDrfD5rfcUKxZ 5e//NjNKpreRAXAc75+DRHEx8RayGVDXUyZstzcgK9Wj08gLQjIfxVO+yrOm7HWM LAGadDbrHUcVYulBpf6ep67jdV3cTFG8MgKSsqyN7RAKCGh3q3IZwxPPVPfGQdok ASzNq7O5QIdDpTLeOUex7f///ry+qI1BFj1tICiyROEzw5bH4mQeGhPhgB79AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUOa1+6GNcLYQFQfK/wrtVA9wzZi0wHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTI2YWEzLTMwNzMtNDI3Ni1i ZDc0LWFkODZmMDk5YzI1My8wLzMxMzAzMzJlMzEzNTMzMmUzMjM0MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM3MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmfQwDQYJ KoZIhvcNAQELBQADggEBAC9mQBDFsGCk9wZ85FiDNaidrsX8RVhPluGLlFoQINHF /gLBswu3ArPIxgtDayx9UGPF2hYSANo0w0EGPRyqC53JMHrVxquVqX9rvPzJiWD7 M0SSvKeg8QXDS5E6RdpWKiVHyC2UiHlC2DKLAXh6p5UzPFW1TwesMn3FgcENesGT Rpt7mTgW1Q/mjqEaA7uQOyq0snCmuN5FiR9nUBxwdApm2l9xMfQ2Fon2LVgb7l8W /djzaDkDMGLeEkpV8zFU8n6Pg4Y2siL3r1wGt32sOEoARrCisonulkwlm8+sYISI m9mCyvurIUkhGJ8m9WH+5ixdO4sSXHshRZF9YN5Dw3c= -----END CERTIFICATE-----Generated at Sat Apr 19 01:30:15 2025 by rpki-client