$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa File: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (raw, json) Hash identifier: q5y0x20QRi/wrHXnT1ANwgoYKODaVTFPhwpND9w3YmQ= Subject key identifier: 40:7B:3C:6A:E7:F1:02:5B:D9:66:87:4E:0E:40:A1:A3:66:CD:2D:94 Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F Certificate serial: 6905103579A2F94E806144DA1B4DAA330D17554C Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa Signing time: Thu 06 Mar 2025 03:00:02 +0000 ROA not before: Thu 06 Mar 2025 02:55:02 +0000 ROA not after: Thu 05 Mar 2026 03:00:02 +0000 asID: 131773 IP address blocks: 103.134.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 05:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:05:10:35:79:a2:f9:4e:80:61:44:da:1b:4d:aa:33:0d:17:55:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F Validity Not Before: Mar 6 02:55:02 2025 GMT Not After : Mar 5 03:00:02 2026 GMT Subject: CN=407B3C6AE7F1025BD966874E0E40A1A366CD2D94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:fb:7f:ce:d3:c3:c8:20:1a:3f:78:18:12: 0a:d1:fc:52:3c:83:d3:0f:e1:b7:d4:49:97:33:e4: e5:52:ca:aa:e1:0a:a4:91:2a:3d:03:f2:e4:2d:6b: f9:11:ae:88:6e:f5:19:a1:24:af:6c:c4:97:06:41: 3c:82:85:40:10:44:f3:fb:e6:07:6a:d3:c3:d1:41: 76:14:00:b5:36:55:be:f8:da:ff:55:4f:78:80:46: 3e:6a:19:f2:ea:5b:8c:e0:7d:31:d1:40:6b:26:bc: ed:67:fd:23:08:8f:0f:f5:77:a3:c6:77:5b:3e:a4: dc:54:08:fd:05:2f:79:89:9d:06:bb:b3:37:de:0e: 60:4a:ef:ef:35:4c:06:66:52:c9:c1:4e:61:e7:af: f7:fb:4d:0a:55:2a:a8:c7:00:ca:51:bc:f8:2b:cd: f5:38:85:fe:35:be:22:29:a2:d8:df:36:60:0b:47: 2d:03:26:71:f5:5e:a9:c5:c7:4a:20:be:2e:81:77: 91:ff:49:f7:64:1b:ec:23:2e:5e:d7:31:8e:f3:f3: 64:56:04:f4:ec:24:fb:ba:b5:92:71:48:6a:47:c4: 47:d9:da:9e:60:05:6c:d0:eb:a7:fd:b6:2e:39:3d: 70:06:d7:4b:22:26:67:35:d1:1c:fe:f6:c7:0e:d4: d3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7B:3C:6A:E7:F1:02:5B:D9:66:87:4E:0E:40:A1:A3:66:CD:2D:94 X509v3 Authority Key Identifier: keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.244.0/22 Signature Algorithm: sha256WithRSAEncryption 12:dc:42:d7:06:d8:7e:d3:68:73:f1:f4:8a:1a:ee:76:63:11: 6c:a3:80:31:08:a6:86:0a:d3:ee:c7:6b:20:77:4f:d1:a0:bb: 20:e1:b3:ab:1e:e8:16:10:d3:89:72:4f:71:fb:a8:36:ed:74: d1:cb:18:a4:c6:48:c1:21:66:1c:b0:1f:e2:ef:f9:6d:74:f1: b7:91:26:ca:b4:48:eb:f1:e4:23:49:20:ac:bb:df:ba:47:71: 8b:d2:a9:d6:3e:97:18:ea:09:de:00:c1:46:c2:34:97:fc:47: 8a:01:6a:8a:9e:f7:d6:88:b6:80:19:b0:2d:29:da:59:41:bd: 80:fc:89:b1:34:e4:b0:74:c4:81:b4:c8:88:4a:73:90:b8:9d: 58:93:f8:85:9e:a7:52:5a:29:e7:a6:5c:2a:25:d1:46:46:4e: 95:db:4f:ba:d5:0c:58:dd:f9:5f:b3:3b:0b:34:fd:6e:57:c5: b5:52:50:9e:73:e0:91:f4:7c:84:29:6e:5d:1e:5a:1a:8b:73: 6a:bb:3e:96:d5:ef:c9:bc:8a:64:61:81:ed:d6:20:86:51:45: fa:4e:17:93:02:08:f3:ab:2a:b6:21:49:0e:a9:c5:1e:de:30: e4:3a:34:85:dc:58:76:16:36:5e:6f:0f:b9:c3:0a:c7:55:6c: 30:07:6b:a7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUaQUQNXmi+U6AYUTaG02qMw0XVUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlE MkZEODk2RjAeFw0yNTAzMDYwMjU1MDJaFw0yNjAzMDUwMzAwMDJaMDMxMTAvBgNV BAMTKDQwN0IzQzZBRTdGMTAyNUJEOTY2ODc0RTBFNDBBMUEzNjZDRDJEOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1ft/ztPDyCAaP3gYEgrR/FI8 g9MP4bfUSZcz5OVSyqrhCqSRKj0D8uQta/kRrohu9RmhJK9sxJcGQTyChUAQRPP7 5gdq08PRQXYUALU2Vb742v9VT3iARj5qGfLqW4zgfTHRQGsmvO1n/SMIjw/1d6PG d1s+pNxUCP0FL3mJnQa7szfeDmBK7+81TAZmUsnBTmHnr/f7TQpVKqjHAMpRvPgr zfU4hf41viIpotjfNmALRy0DJnH1XqnFx0ogvi6Bd5H/SfdkG+wjLl7XMY7z82RW BPTsJPu6tZJxSGpHxEfZ2p5gBWzQ66f9ti45PXAG10siJmc10Rz+9scO1NMBAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUQHs8aufxAlvZZodODkCho2bNLZQwHwYDVR0j BBgwFoAUN+7L0EXKJ57VA3KshoMQmdL9iW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjdkZTA3MS0zYWFhLTRlMmUtOTc0ZS1hNzhjODE3MjlmMDYvMC8zN0VFQ0JEMDQ1 Q0EyNzlFRDUwMzcyQUM4NjgzMTA5OUQyRkQ4OTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlEMkZE ODk2Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyN2RlMDcxLTNhYWEtNGUyZS05 NzRlLWE3OGM4MTcyOWYwNi8wLzMxMzAzMzJlMzEzMzM0MmUzMjM0MzQyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMTMzMzEzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnhvQwDQYJ KoZIhvcNAQELBQADggEBABLcQtcG2H7TaHPx9Ioa7nZjEWyjgDEIpoYK0+7HayB3 T9GguyDhs6se6BYQ04lyT3H7qDbtdNHLGKTGSMEhZhywH+Lv+W108beRJsq0SOvx 5CNJIKy737pHcYvSqdY+lxjqCd4AwUbCNJf8R4oBaoqe99aItoAZsC0p2llBvYD8 ibE05LB0xIG0yIhKc5C4nViT+IWep1JaKeemXCol0UZGTpXbT7rVDFjd+V+zOws0 /W5XxbVSUJ5z4JH0fIQpbl0eWhqLc2q7PpbV78m8imRhge3WIIZRRfpOF5MCCPOr KrYhSQ6pxR7eMOQ6NIXcWHYWNl5vD7nDCsdVbDAHa6c= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:42 2025 by rpki-client