$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa File: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (raw, json) Hash identifier: xk/oq0Im59/1PSqJezgmhIR9KNhuRTqxicwm+ExglFA= Subject key identifier: B5:22:BB:81:A5:F6:8C:3C:79:48:48:DB:FF:4E:98:AB:2A:0F:32:23 Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF Certificate serial: 7559B390EA987E2830B15871D303FFD750762292 Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa Signing time: Fri 28 Jun 2024 02:00:00 +0000 ROA not before: Fri 28 Jun 2024 01:55:00 +0000 ROA not after: Fri 27 Jun 2025 02:00:00 +0000 asID: 149891 IP address blocks: 103.190.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 14:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:59:b3:90:ea:98:7e:28:30:b1:58:71:d3:03:ff:d7:50:76:22:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Validity Not Before: Jun 28 01:55:00 2024 GMT Not After : Jun 27 02:00:00 2025 GMT Subject: CN=B522BB81A5F68C3C794848DBFF4E98AB2A0F3223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:85:bc:53:57:5c:3e:f9:cc:39:ea:85:88: b0:84:b2:ca:1c:7e:da:6a:c6:54:ad:dd:45:25:39: a5:75:59:5e:15:ad:92:56:c0:5f:d0:c5:f8:3b:72: 6b:de:e0:d8:50:8f:86:b4:2d:83:56:95:10:da:39: c0:14:0c:89:48:25:a1:4b:2e:4b:8b:6a:aa:cc:f8: 2a:c8:4c:04:57:73:df:75:25:d0:cb:a4:f2:b5:f2: b5:2d:0d:7f:57:c6:3f:32:78:ab:b6:bc:fc:39:ca: 6a:29:08:7a:24:6d:94:73:47:d8:c1:55:13:f4:bc: 45:6b:03:a5:ed:02:7c:07:34:ae:5e:43:bb:08:73: 31:48:98:69:59:a3:f0:f7:d4:2c:4d:5b:a6:48:c9: da:98:67:61:af:8f:86:d8:7c:de:df:1c:a1:50:3f: e2:aa:6a:b8:05:b9:1e:88:d2:36:4a:eb:92:49:39: f7:96:81:34:a5:a6:f8:ce:98:f5:11:48:fc:19:4d: a3:b6:3e:77:8d:fb:61:7d:87:44:80:cb:c5:88:c8: 04:b8:46:2a:0e:4e:6c:d8:ae:85:07:f3:1c:82:82: 23:ff:d8:90:b9:6f:57:f4:e9:a1:5e:c4:47:b0:58: ac:69:fd:a1:af:90:ec:31:73:11:28:bf:05:cf:bb: cf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:22:BB:81:A5:F6:8C:3C:79:48:48:DB:FF:4E:98:AB:2A:0F:32:23 X509v3 Authority Key Identifier: keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.31.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:5f:75:f4:7e:e1:6a:4b:3f:99:ca:81:23:d1:4e:3d:a1:e0: 7f:6a:b4:06:49:fd:7d:0d:fe:90:23:3f:b8:b1:8d:fc:f7:f4: 41:34:9a:ae:9c:e3:67:cf:29:ca:d4:df:91:c8:72:50:08:e5: 2e:09:6c:15:d2:04:04:33:f3:7d:9e:f4:c9:5d:39:39:2c:0a: 45:cc:c3:04:44:ee:98:7e:dd:48:6b:0d:92:5e:47:a6:2f:14: d1:f8:61:88:3b:37:cf:b9:85:99:7e:ed:37:9c:d2:ad:82:ae: cc:38:e5:08:d5:58:44:68:ef:74:7e:de:d2:45:4d:f5:6c:51: 1f:20:35:cc:79:37:01:62:ee:46:47:a0:f3:8c:a6:e6:d8:86: 65:97:07:fe:b3:47:ae:d2:a5:29:05:62:ec:8f:0a:34:06:0f: 72:5b:92:f7:1d:fc:a9:86:ce:54:55:2e:b2:4c:d9:e5:7d:0d: 3d:77:74:8a:90:d2:0d:cb:ac:d6:8d:42:dd:37:cf:a4:83:fc: d6:f6:bc:9c:e5:78:8c:fe:18:c5:81:d9:ae:c1:aa:6f:18:9e: 69:f7:7a:5a:2d:8d:35:8f:89:e4:27:a6:37:e4:ad:a7:8d:e1: 8d:0c:c1:0b:ed:a0:82:d5:b9:0a:d9:4b:29:95:38:b6:df:87: 68:fb:99:a4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdVmzkOqYfigwsVhx0wP/11B2IpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5 ODQ5ODlBRjAeFw0yNDA2MjgwMTU1MDBaFw0yNTA2MjcwMjAwMDBaMDMxMTAvBgNV BAMTKEI1MjJCQjgxQTVGNjhDM0M3OTQ4NDhEQkZGNEU5OEFCMkEwRjMyMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KIW8U1dcPvnMOeqFiLCEssoc ftpqxlSt3UUlOaV1WV4VrZJWwF/Qxfg7cmve4NhQj4a0LYNWlRDaOcAUDIlIJaFL LkuLaqrM+CrITARXc991JdDLpPK18rUtDX9Xxj8yeKu2vPw5ymopCHokbZRzR9jB VRP0vEVrA6XtAnwHNK5eQ7sIczFImGlZo/D31CxNW6ZIydqYZ2Gvj4bYfN7fHKFQ P+KqargFuR6I0jZK65JJOfeWgTSlpvjOmPURSPwZTaO2PneN+2F9h0SAy8WIyAS4 RioOTmzYroUH8xyCgiP/2JC5b1f06aFexEewWKxp/aGvkOwxcxEovwXPu89FAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtSK7gaX2jDx5SEjb/06YqyoPMiMwHwYDVR0j BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5 ODlBRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWUxMjZmLTgxOTItNGQyOC1i MjVlLWRlYWJkYjc5ZWIyMS8wLzMxMzAzMzJlMzEzOTMwMmUzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ74fMA0GCSqG SIb3DQEBCwUAA4IBAQCLX3X0fuFqSz+ZyoEj0U49oeB/arQGSf19Df6QIz+4sY38 9/RBNJqunONnzynK1N+RyHJQCOUuCWwV0gQEM/N9nvTJXTk5LApFzMMERO6Yft1I aw2SXkemLxTR+GGIOzfPuYWZfu03nNKtgq7MOOUI1VhEaO90ft7SRU31bFEfIDXM eTcBYu5GR6DzjKbm2IZllwf+s0eu0qUpBWLsjwo0Bg9yW5L3Hfyphs5UVS6yTNnl fQ09d3SKkNINy6zWjULdN8+kg/zW9ryc5XiM/hjFgdmuwapvGJ5p93paLY01j4nk J6Y35K2njeGNDMEL7aCC1bkK2UsplTi234do+5mk -----END CERTIFICATE-----Generated at Mon Apr 21 02:48:18 2025 by rpki-client