$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32342d3234203d3e203436303236.roa File: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (raw, json) Hash identifier: mkruWkyUTX+c2Tw+0w7WwT3w2s3+OGAbVUZStH/a/n8= Subject key identifier: EF:A7:C1:ED:17:DE:46:A4:98:0B:78:B1:A0:51:39:82:E7:B8:1A:A0 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 6631A15E950A1FAF202E85937C88CA48044DCB81 Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32342d3234203d3e203436303236.roa Signing time: Mon 01 Jul 2024 01:02:27 +0000 ROA not before: Mon 01 Jul 2024 00:57:27 +0000 ROA not after: Mon 30 Jun 2025 01:02:27 +0000 asID: 46026 IP address blocks: 103.135.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:31:a1:5e:95:0a:1f:af:20:2e:85:93:7c:88:ca:48:04:4d:cb:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Jul 1 00:57:27 2024 GMT Not After : Jun 30 01:02:27 2025 GMT Subject: CN=EFA7C1ED17DE46A4980B78B1A0513982E7B81AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:cf:7f:18:c9:47:9c:f7:5c:fe:bc:70:45: 12:b2:ff:7a:9e:3a:59:0e:c9:a0:70:24:00:64:09: 36:72:02:be:c2:f3:33:34:76:62:62:34:7e:29:51: 30:85:e0:42:cb:9a:81:4c:29:15:36:8c:61:8d:4c: 7d:07:5b:1f:8e:17:13:e0:ef:d5:28:96:8f:e8:76: a0:03:21:2a:63:c8:d4:13:a8:e4:54:6a:de:9e:d1: 4f:ad:2e:5f:65:50:cb:ca:1a:ef:c3:cf:be:ba:05: ff:ac:02:ae:30:76:6c:88:74:9e:4a:fa:63:47:6b: df:75:2b:d2:68:f2:ac:83:0a:14:20:c0:93:f5:66: 40:26:a7:31:b4:8a:c3:a8:45:70:22:01:ba:c8:8d: a1:93:c8:0f:ba:45:d4:0f:59:0f:c8:34:46:91:56: 30:d5:9c:46:4c:7b:48:29:21:ef:3b:d1:8b:2f:b1: 12:ea:5f:15:72:99:90:ef:03:ff:fc:2a:b3:6c:d7: ad:40:29:a6:54:8c:26:59:d5:3e:ff:30:84:f1:d4: c8:47:8c:41:f9:b3:ca:77:4e:20:d3:92:a6:0a:8e: 3a:81:80:49:e7:6d:e6:38:7a:15:e1:e3:8e:33:50: 45:e4:5e:56:d8:ac:13:10:62:34:60:86:e6:36:36: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A7:C1:ED:17:DE:46:A4:98:0B:78:B1:A0:51:39:82:E7:B8:1A:A0 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32342d3234203d3e203436303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.72.0/24 Signature Algorithm: sha256WithRSAEncryption 43:09:1c:0a:62:3c:ff:1b:58:24:c7:8f:8a:8d:6e:3c:e0:e8: 7e:52:72:d4:38:17:da:12:f1:d9:4f:9e:9c:ca:4b:11:4d:e3: 0f:56:10:46:e5:79:5e:99:28:23:24:2f:b7:8a:6c:12:52:d1: 69:00:5b:c3:df:08:f1:0d:4d:d0:1e:68:18:ab:29:2d:a1:38: 8a:b7:31:57:bc:92:c6:55:0c:8b:a7:52:83:18:f9:98:ba:4e: ac:03:fe:55:f7:e5:b5:e6:00:2e:1b:69:dc:e2:0b:03:a1:ce: 0d:10:ba:be:03:ee:b4:90:af:1e:70:1e:1a:82:4d:c2:ae:e1: 13:45:59:99:90:7c:fb:cc:2b:af:5f:96:0b:d5:46:74:9d:6b: 14:6a:13:52:2c:d6:ed:64:f5:b4:48:75:f9:26:ce:da:2f:33: b7:28:45:a5:93:63:9d:80:1b:a3:dd:4c:a2:12:a2:d9:45:b6: 90:41:e9:36:85:6d:95:2b:a7:ef:dd:06:b5:20:bc:b7:8a:bd: cb:72:4f:80:cb:f1:c9:45:c3:46:a1:62:01:8c:ee:fc:9c:ac: 78:e9:da:55:e6:6f:a3:dc:4f:77:3c:76:2a:90:e3:d5:db:70: 83:82:2f:98:80:c5:6a:a4:15:e2:7c:59:ef:bf:fb:9d:4f:f2: 8f:08:38:1b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZjGhXpUKH68gLoWTfIjKSARNy4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNDA3MDEwMDU3MjdaFw0yNTA2MzAwMTAyMjdaMDMxMTAvBgNV BAMTKEVGQTdDMUVEMTdERTQ2QTQ5ODBCNzhCMUEwNTEzOTgyRTdCODFBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXc9/GMlHnPdc/rxwRRKy/3qe OlkOyaBwJABkCTZyAr7C8zM0dmJiNH4pUTCF4ELLmoFMKRU2jGGNTH0HWx+OFxPg 79Uolo/odqADISpjyNQTqORUat6e0U+tLl9lUMvKGu/Dz766Bf+sAq4wdmyIdJ5K +mNHa991K9Jo8qyDChQgwJP1ZkAmpzG0isOoRXAiAbrIjaGTyA+6RdQPWQ/INEaR VjDVnEZMe0gpIe870YsvsRLqXxVymZDvA//8KrNs161AKaZUjCZZ1T7/MITx1MhH jEH5s8p3TiDTkqYKjjqBgEnnbeY4ehXh444zUEXkXlbYrBMQYjRghuY2NuQHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU76fB7RfeRqSYC3ixoFE5gue4GqAwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzAzMzJlMzEzMzM1MmUzNzMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeHSDANBgkqhkiG 9w0BAQsFAAOCAQEAQwkcCmI8/xtYJMePio1uPODoflJy1DgX2hLx2U+enMpLEU3j D1YQRuV5XpkoIyQvt4psElLRaQBbw98I8Q1N0B5oGKspLaE4ircxV7ySxlUMi6dS gxj5mLpOrAP+VfflteYALhtp3OILA6HODRC6vgPutJCvHnAeGoJNwq7hE0VZmZB8 +8wrr1+WC9VGdJ1rFGoTUizW7WT1tEh1+SbO2i8ztyhFpZNjnYAbo91MohKi2UW2 kEHpNoVtlSun790GtSC8t4q9y3JPgMvxyUXDRqFiAYzu/JyseOnaVeZvo9xPdzx2 KpDj1dtwg4IvmIDFaqQV4nxZ77/7nU/yjwg4Gw== -----END CERTIFICATE-----Generated at Sun Apr 20 02:51:55 2025 by rpki-client