$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37332e302f32342d3234203d3e203436303236.roa File: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (raw, json) Hash identifier: 2/x4Qw/F/zsfsvc9JOJlY2G2LhkflQn7lD5v28Bqntk= Subject key identifier: FE:93:C3:AC:D3:E5:C9:12:6D:14:E4:C2:A6:5A:67:06:E9:EA:DC:67 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 1BCAF21728CD27C4A272033F1B6C0120C8F485B8 Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37332e302f32342d3234203d3e203436303236.roa Signing time: Mon 01 Jul 2024 01:02:27 +0000 ROA not before: Mon 01 Jul 2024 00:57:27 +0000 ROA not after: Mon 30 Jun 2025 01:02:27 +0000 asID: 46026 IP address blocks: 103.135.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 17:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ca:f2:17:28:cd:27:c4:a2:72:03:3f:1b:6c:01:20:c8:f4:85:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Jul 1 00:57:27 2024 GMT Not After : Jun 30 01:02:27 2025 GMT Subject: CN=FE93C3ACD3E5C9126D14E4C2A65A6706E9EADC67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:9d:18:fc:59:69:eb:85:5e:85:4a:03:39: 1c:9e:cd:30:a5:97:a2:62:59:c8:74:8a:43:cb:46: 2a:96:65:72:42:a2:25:54:a1:88:a3:17:57:e4:f2: f9:8c:f0:97:3c:fd:3b:c2:12:09:37:9b:d5:ca:41: 55:3f:d1:a5:b4:bd:6e:39:28:6c:59:1d:94:67:30: ff:f3:3e:a6:9d:6d:92:cb:1e:23:0b:32:5e:a4:34: 76:0a:67:8f:04:73:c0:09:4d:22:7f:31:9b:ab:77: 02:c7:a2:de:e5:a2:6e:66:a9:4e:38:ba:42:88:22: f1:25:4d:2a:74:c4:6a:1f:70:f4:d4:ac:63:af:38: 8c:9a:de:0c:dd:ac:b4:78:34:a9:8a:7f:24:44:8c: a8:17:41:5e:3f:e4:8d:c1:64:cb:19:95:4d:70:f6: 1b:d2:a0:0b:6e:8f:0e:c5:22:48:9a:a1:b3:fb:a7: 88:20:e3:60:af:89:26:23:12:bd:b7:d6:d1:a8:d7: 03:74:ff:16:78:1c:be:da:c3:0a:01:1c:5d:88:7c: 92:c3:2a:c2:e2:da:a7:13:98:b0:cc:19:e2:5c:d3: 8f:b7:9f:d9:ca:20:20:04:e2:fb:6c:7f:e2:70:59: f8:3c:d7:22:2b:3f:e4:50:62:96:de:71:77:c4:45: 90:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:93:C3:AC:D3:E5:C9:12:6D:14:E4:C2:A6:5A:67:06:E9:EA:DC:67 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37332e302f32342d3234203d3e203436303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.73.0/24 Signature Algorithm: sha256WithRSAEncryption 09:33:3b:14:29:04:85:83:a5:f4:99:3e:31:1c:a5:18:54:03: 56:fc:5f:4e:45:4e:9c:27:14:83:31:55:67:25:76:f8:80:7f: c5:57:de:85:3f:fd:16:8f:d9:96:d6:0a:08:4c:c4:d2:ac:fc: f5:21:4e:1b:1c:27:3e:82:2a:fe:b8:84:d2:37:fc:5e:35:62: 46:f3:06:ba:7e:3d:62:8a:ce:fc:aa:f6:a1:66:35:76:6d:e9: 57:84:6a:74:d5:c0:1d:82:61:eb:01:98:c5:3e:f3:60:4b:09: f9:45:12:95:19:21:01:c6:ab:e4:8d:ac:79:b9:82:70:0e:2a: 6e:22:b9:9d:4b:d9:31:19:7f:8e:77:1e:90:98:4e:f9:c7:85: 20:65:e7:32:af:b6:08:86:bf:8d:67:e4:bb:a6:5c:6e:07:a5: 0b:3c:c2:ff:cf:1f:0f:fe:b4:34:70:dd:27:dc:ef:6e:28:19: f0:e8:ad:94:03:83:b9:23:a6:24:96:a6:9d:43:d3:01:be:5e: 48:6d:e2:5b:bc:ec:a1:1a:c7:99:b9:49:73:99:a3:20:c8:c5: 42:09:16:c8:ec:8a:12:f4:b5:ab:b6:6b:f2:e9:5f:d4:07:fd: d8:45:a2:56:9a:ff:e0:c1:a7:13:f9:3f:56:7a:78:0c:07:cf: 61:8c:b1:16 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUG8ryFyjNJ8SicgM/G2wBIMj0hbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNDA3MDEwMDU3MjdaFw0yNTA2MzAwMTAyMjdaMDMxMTAvBgNV BAMTKEZFOTNDM0FDRDNFNUM5MTI2RDE0RTRDMkE2NUE2NzA2RTlFQURDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUJp0Y/Flp64VehUoDORyezTCl l6JiWch0ikPLRiqWZXJCoiVUoYijF1fk8vmM8Jc8/TvCEgk3m9XKQVU/0aW0vW45 KGxZHZRnMP/zPqadbZLLHiMLMl6kNHYKZ48Ec8AJTSJ/MZurdwLHot7lom5mqU44 ukKIIvElTSp0xGofcPTUrGOvOIya3gzdrLR4NKmKfyREjKgXQV4/5I3BZMsZlU1w 9hvSoAtujw7FIkiaobP7p4gg42CviSYjEr231tGo1wN0/xZ4HL7awwoBHF2IfJLD KsLi2qcTmLDMGeJc04+3n9nKICAE4vtsf+JwWfg81yIrP+RQYpbecXfERZC7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU/pPDrNPlyRJtFOTCplpnBunq3GcwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzAzMzJlMzEzMzM1MmUzNzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeHSTANBgkqhkiG 9w0BAQsFAAOCAQEACTM7FCkEhYOl9Jk+MRylGFQDVvxfTkVOnCcUgzFVZyV2+IB/ xVfehT/9Fo/ZltYKCEzE0qz89SFOGxwnPoIq/riE0jf8XjViRvMGun49YorO/Kr2 oWY1dm3pV4RqdNXAHYJh6wGYxT7zYEsJ+UUSlRkhAcar5I2sebmCcA4qbiK5nUvZ MRl/jncekJhO+ceFIGXnMq+2CIa/jWfku6ZcbgelCzzC/88fD/60NHDdJ9zvbigZ 8OitlAODuSOmJJamnUPTAb5eSG3iW7zsoRrHmblJc5mjIMjFQgkWyOyKEvS1q7Zr 8ulf1Af92EWiVpr/4MGnE/k/Vnp4DAfPYYyxFg== -----END CERTIFICATE-----Generated at Fri Feb 21 11:03:29 2025 by rpki-client