$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa File: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (raw, json) Hash identifier: hm/9X3cuyk8jd/AB2iBbcuodpHF2xW4uztYBSuY3yNU= Subject key identifier: 74:92:25:AB:BF:0D:66:DF:A8:3B:EF:D5:24:FB:6A:7E:0E:48:DB:CF Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 19092AA2A78A17D259135438A4C9DA35CC95C96B Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa Signing time: Mon 01 Jul 2024 01:02:28 +0000 ROA not before: Mon 01 Jul 2024 00:57:28 +0000 ROA not after: Mon 30 Jun 2025 01:02:28 +0000 asID: 46026 IP address blocks: 103.135.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 16:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:09:2a:a2:a7:8a:17:d2:59:13:54:38:a4:c9:da:35:cc:95:c9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Jul 1 00:57:28 2024 GMT Not After : Jun 30 01:02:28 2025 GMT Subject: CN=749225ABBF0D66DFA83BEFD524FB6A7E0E48DBCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:91:ae:67:f0:f2:15:53:53:7d:b8:dd:6d: 71:71:4a:b5:7c:06:2a:c7:42:49:1b:89:b9:e4:f6: 7b:9d:af:22:a5:91:87:de:83:31:e2:26:9f:96:58: 28:ac:ce:9b:19:61:ce:76:25:01:ac:ef:46:8f:7c: ad:d3:4a:86:00:ab:86:ad:f0:09:08:d0:10:8d:49: b7:6a:ec:aa:8a:49:49:da:38:45:cc:51:65:d2:f4: c2:bd:c3:15:0b:ef:bf:e4:0d:f4:81:10:5e:74:cb: e2:9d:eb:19:6d:46:ee:4d:2b:58:0b:03:47:cb:46: 92:19:c6:69:e2:33:75:e4:a1:a8:45:12:61:c2:df: da:f4:60:9c:f5:9f:69:db:9c:4a:df:c0:9f:de:02: 9a:f5:35:ca:ee:25:69:ee:45:e6:01:8f:87:e3:21: dc:de:29:59:08:4a:62:16:cc:d6:13:01:a4:ac:21: a5:00:33:79:56:3f:c2:73:42:f2:d8:9a:9e:7d:50: c1:35:cc:85:be:dc:18:fd:01:91:ad:85:a1:44:76: 3c:a6:b7:fd:2c:0f:c9:74:e5:86:68:36:56:47:07: d5:49:e5:6c:78:58:32:b9:08:f0:f3:64:1a:97:6c: 32:95:10:2e:f8:c5:b5:86:22:fc:c1:57:ed:a8:49: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:92:25:AB:BF:0D:66:DF:A8:3B:EF:D5:24:FB:6A:7E:0E:48:DB:CF X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.75.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:eb:69:06:e2:a0:a4:49:4d:3f:60:2b:a0:a3:ac:0b:09:0a: e3:d7:f0:6e:d7:87:fe:21:ca:dd:50:83:b9:8e:bf:44:e6:ae: 4f:ee:5b:94:8d:f2:1c:84:c4:2e:a5:44:a9:d7:1f:6f:e2:73: cb:6d:72:08:af:ab:73:13:85:0f:d4:45:0c:bf:68:41:d1:0f: e5:67:ab:4e:23:6f:06:8f:26:61:01:69:96:c5:56:d9:d4:a7: 2a:f8:00:a8:58:2a:be:4d:fb:18:e1:d8:17:f4:db:33:6c:66: 15:f1:8c:f5:35:84:fe:86:de:db:0a:7c:23:58:04:95:2a:e9: 76:fd:50:db:91:ec:c8:90:06:5e:6d:01:8b:90:1b:a8:8c:1b: f5:1b:0d:64:9f:58:bc:d2:3b:ea:da:cf:5b:89:20:ee:91:10: e5:c8:8c:5e:53:13:6a:55:df:af:7f:29:76:41:78:5a:72:a8: 4b:d8:8e:cb:9f:40:88:24:26:04:70:01:32:72:a1:24:c0:d4: 9c:1d:7e:ad:10:5b:6b:97:9f:30:af:b9:08:cf:b8:94:fe:73: c4:c2:0b:55:f9:9a:ac:f8:c9:eb:49:b8:54:29:15:a5:3a:d9: f4:50:94:95:af:57:3c:72:54:79:b7:46:bb:74:9d:c7:a3:91: 7c:f3:8c:34 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGQkqoqeKF9JZE1Q4pMnaNcyVyWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNDA3MDEwMDU3MjhaFw0yNTA2MzAwMTAyMjhaMDMxMTAvBgNV BAMTKDc0OTIyNUFCQkYwRDY2REZBODNCRUZENTI0RkI2QTdFMEU0OERCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCslZGuZ/DyFVNTfbjdbXFxSrV8 BirHQkkbibnk9nudryKlkYfegzHiJp+WWCiszpsZYc52JQGs70aPfK3TSoYAq4at 8AkI0BCNSbdq7KqKSUnaOEXMUWXS9MK9wxUL77/kDfSBEF50y+Kd6xltRu5NK1gL A0fLRpIZxmniM3XkoahFEmHC39r0YJz1n2nbnErfwJ/eApr1NcruJWnuReYBj4fj IdzeKVkISmIWzNYTAaSsIaUAM3lWP8JzQvLYmp59UME1zIW+3Bj9AZGthaFEdjym t/0sD8l05YZoNlZHB9VJ5Wx4WDK5CPDzZBqXbDKVEC74xbWGIvzBV+2oSYyrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUdJIlq78NZt+oO+/VJPtqfg5I288wHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzAzMzJlMzEzMzM1MmUzNzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeHSzANBgkqhkiG 9w0BAQsFAAOCAQEAmutpBuKgpElNP2AroKOsCwkK49fwbteH/iHK3VCDuY6/ROau T+5blI3yHITELqVEqdcfb+Jzy21yCK+rcxOFD9RFDL9oQdEP5WerTiNvBo8mYQFp lsVW2dSnKvgAqFgqvk37GOHYF/TbM2xmFfGM9TWE/obe2wp8I1gElSrpdv1Q25Hs yJAGXm0Bi5AbqIwb9RsNZJ9YvNI76trPW4kg7pEQ5ciMXlMTalXfr38pdkF4WnKo S9iOy59AiCQmBHABMnKhJMDUnB1+rRBba5efMK+5CM+4lP5zxMILVfmarPjJ60m4 VCkVpTrZ9FCUla9XPHJUebdGu3Sdx6ORfPOMNA== -----END CERTIFICATE-----Generated at Mon Apr 21 01:28:06 2025 by rpki-client