$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa File: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (raw, json) Hash identifier: Z7Z02l6lwQScJffXxbcOwRM3DR/Zcud+xbv6JirEUW0= Subject key identifier: 92:12:3A:7A:22:81:5E:76:7C:3F:91:6B:9B:DE:28:63:E5:13:47:A1 Certificate issuer: /CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Certificate serial: 1D174D3DB06C5AA16D5596AF7C0689F81687C364 Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa Signing time: Mon 20 Jan 2025 10:01:05 +0000 ROA not before: Mon 20 Jan 2025 09:56:05 +0000 ROA not after: Mon 19 Jan 2026 10:01:05 +0000 asID: 150553 IP address blocks: 103.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:17:4d:3d:b0:6c:5a:a1:6d:55:96:af:7c:06:89:f8:16:87:c3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5 Validity Not Before: Jan 20 09:56:05 2025 GMT Not After : Jan 19 10:01:05 2026 GMT Subject: CN=92123A7A22815E767C3F916B9BDE2863E51347A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:f5:18:30:fc:c1:90:42:3b:c5:01:b3:1c: 75:9f:da:84:37:52:69:4b:4d:84:69:ce:e7:22:33: d1:07:55:86:93:c5:59:fa:2d:11:93:2c:24:48:6b: d6:13:b7:d2:83:2d:02:90:ac:30:3c:52:0c:31:7d: be:8d:2a:b4:b1:9e:25:65:4c:f5:ad:43:74:e7:48: cd:21:8d:42:72:fb:f0:72:a2:21:04:9b:ff:7e:26: c9:ee:04:a4:5e:78:24:40:43:91:bb:3c:5c:a0:40: 31:21:8a:56:ec:0b:b9:39:0a:9d:43:5b:f5:97:0f: 1e:a2:ad:51:df:ed:9f:50:31:ea:3e:3c:2a:69:70: 8b:94:98:6d:75:44:98:f7:b5:54:28:ea:f0:3a:aa: 37:d5:48:25:d9:9a:bd:db:6c:33:1e:4d:88:bd:cf: 75:ed:f1:4b:64:f7:f1:64:d6:b9:f4:c6:30:f8:63: b2:90:4d:f8:7e:a0:2a:ea:45:4a:27:25:68:c9:df: 9c:49:b6:b5:80:a4:96:d7:d2:35:9a:fc:6d:9c:a1: 30:28:2f:8d:a6:13:1e:18:42:1a:82:dc:dd:b9:47: 15:a2:31:e6:ec:20:d5:11:bc:08:62:72:3b:24:8f: eb:04:a1:73:50:bb:18:f2:a9:f4:15:64:47:eb:0f: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:12:3A:7A:22:81:5E:76:7C:3F:91:6B:9B:DE:28:63:E5:13:47:A1 X509v3 Authority Key Identifier: keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.81.255.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:52:4f:2e:cc:36:63:55:52:22:0d:27:3f:70:22:74:ee:ba: f4:84:cd:bf:99:42:f9:18:69:f9:17:89:0e:f0:0d:60:72:a5: 90:0d:26:82:1f:81:59:39:df:2b:99:58:02:af:bf:e0:00:a2: f2:63:79:3d:00:c7:be:40:47:19:9a:a9:98:ad:74:91:b3:63: 2a:6c:a5:91:39:33:1e:e2:dd:61:50:83:b7:b2:0c:b4:53:6b: f2:30:d1:db:e3:e0:8d:a7:00:20:35:a7:01:d1:e8:be:e5:a2: e3:b9:be:3f:21:1f:4a:ef:59:33:e5:d1:c4:7b:20:0c:6b:92: 85:cb:bc:06:21:9c:a7:5e:07:63:51:ad:39:2f:96:33:3c:2a: fa:36:b0:6a:70:fe:47:12:c5:7d:02:0c:6b:29:66:38:83:ea: c6:18:71:c1:be:1e:34:3a:6e:4c:b5:b6:3c:f7:e3:d2:7f:c8: f1:9c:c8:d1:89:93:2a:ff:7e:fd:5f:d6:7d:c6:3c:88:cc:a4: 53:9b:e1:2e:f6:9a:95:cc:c4:0d:44:d4:91:a5:07:2b:75:e7: b4:08:b5:6e:fa:8e:d6:8b:38:8f:64:4a:10:c0:2b:9f:8f:a9: d0:75:cc:92:89:77:2c:4a:cf:47:3c:f2:bf:39:e7:a7:e9:64: 3f:87:d9:a9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHRdNPbBsWqFtVZavfAaJ+BaHw2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRD NEU5NzhFNTAeFw0yNTAxMjAwOTU2MDVaFw0yNjAxMTkxMDAxMDVaMDMxMTAvBgNV BAMTKDkyMTIzQTdBMjI4MTVFNzY3QzNGOTE2QjlCREUyODYzRTUxMzQ3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5svUYMPzBkEI7xQGzHHWf2oQ3 UmlLTYRpzuciM9EHVYaTxVn6LRGTLCRIa9YTt9KDLQKQrDA8Ugwxfb6NKrSxniVl TPWtQ3TnSM0hjUJy+/ByoiEEm/9+JsnuBKReeCRAQ5G7PFygQDEhilbsC7k5Cp1D W/WXDx6irVHf7Z9QMeo+PCppcIuUmG11RJj3tVQo6vA6qjfVSCXZmr3bbDMeTYi9 z3Xt8Utk9/Fk1rn0xjD4Y7KQTfh+oCrqRUonJWjJ35xJtrWApJbX0jWa/G2coTAo L42mEx4YQhqC3N25RxWiMebsINURvAhicjskj+sEoXNQuxjyqfQVZEfrD2efAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkhI6eiKBXnZ8P5Frm94oY+UTR6EwHwYDVR0j BBgwFoAUdD11RBYCMpGKtass2QIhtMTpeOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGZkNDIzNC0xMzIzLTRmMGUtYjY4Ni0xZDcyYWNiODgwMjkvMC83NDNENzU0NDE2 MDIzMjkxOEFCNUFCMkNEOTAyMjFCNEM0RTk3OEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRDNEU5 NzhFNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZmQ0MjM0LTEzMjMtNGYwZS1i Njg2LTFkNzJhY2I4ODAyOS8wLzMxMzAzMzJlMzgzMTJlMzIzNTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1H/MA0GCSqG SIb3DQEBCwUAA4IBAQBrUk8uzDZjVVIiDSc/cCJ07rr0hM2/mUL5GGn5F4kO8A1g cqWQDSaCH4FZOd8rmVgCr7/gAKLyY3k9AMe+QEcZmqmYrXSRs2MqbKWROTMe4t1h UIO3sgy0U2vyMNHb4+CNpwAgNacB0ei+5aLjub4/IR9K71kz5dHEeyAMa5KFy7wG IZynXgdjUa05L5YzPCr6NrBqcP5HEsV9AgxrKWY4g+rGGHHBvh40Om5MtbY89+PS f8jxnMjRiZMq/379X9Z9xjyIzKRTm+Eu9pqVzMQNRNSRpQcrdee0CLVu+o7WiziP ZEoQwCufj6nQdcySiXcsSs9HPPK/Oeen6WQ/h9mp -----END CERTIFICATE-----Generated at Sun Apr 6 13:57:03 2025 by rpki-client