$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa File: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (raw, json) Hash identifier: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw= Subject key identifier: 29:94:1F:E8:5A:0A:03:E4:4A:14:AC:18:13:C0:2B:16:EE:6F:B1:2A Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 6CA05D15517E57CA96B893B36543DBDD51278B05 Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa Signing time: Fri 03 Jan 2025 09:01:57 +0000 ROA not before: Fri 03 Jan 2025 08:56:57 +0000 ROA not after: Fri 02 Jan 2026 09:01:57 +0000 asID: 135445 IP address blocks: 103.69.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 15:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a0:5d:15:51:7e:57:ca:96:b8:93:b3:65:43:db:dd:51:27:8b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Jan 3 08:56:57 2025 GMT Not After : Jan 2 09:01:57 2026 GMT Subject: CN=29941FE85A0A03E44A14AC1813C02B16EE6FB12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:e3:c4:4c:9d:0b:9a:a5:00:de:47:a0:7e: 2d:05:cb:ba:a4:b0:c4:67:7b:5c:af:a2:b1:7d:b4: fc:ae:3b:40:5b:f2:e2:06:9c:8a:db:00:83:a6:fe: b4:94:e6:7b:b0:91:b9:50:d8:ef:9a:1e:c0:8e:98: 12:41:4b:52:80:71:4a:89:14:df:f8:5e:7d:7e:c4: bf:03:17:16:4f:fb:a0:b4:02:66:d2:84:fd:22:1c: 3e:62:45:fc:87:6e:4a:a1:75:d5:f9:4d:97:b7:de: 48:f4:09:0f:62:86:8d:77:0d:29:5a:86:b6:66:03: 44:c5:3b:ff:c6:88:a4:a8:1b:e3:17:26:dc:20:74: 37:72:1c:3a:c9:44:c5:b3:37:b0:31:92:0f:ad:27: 62:5b:fb:7b:b2:28:ba:61:3a:84:dc:2e:ab:5d:1c: 5b:45:cf:a1:1c:59:ad:ce:26:16:bd:d5:b1:f7:91: 01:cb:47:f7:fc:ca:76:e9:6c:03:78:9b:7d:b0:0b: 4c:c8:0b:d6:b6:b9:2f:51:13:16:34:a9:f8:14:e9: cf:8b:c2:d2:55:0c:10:1f:d2:a3:1d:a9:d2:a1:b5: e8:a4:94:df:f9:e2:0c:3c:5c:ce:9c:d3:b6:aa:a0: 2d:ca:18:91:51:e5:8a:07:cc:13:15:b2:26:6a:dc: d6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:94:1F:E8:5A:0A:03:E4:4A:14:AC:18:13:C0:2B:16:EE:6F:B1:2A X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.178.0/24 Signature Algorithm: sha256WithRSAEncryption 88:3a:b2:23:bb:60:b8:9e:f6:25:33:f8:79:63:cd:21:1a:1c: 48:8a:6b:8d:21:1e:a2:a2:15:1a:1e:5d:a9:90:16:59:1e:a1: 7c:c3:7c:b7:5d:2e:58:b9:aa:66:bf:9f:aa:33:73:50:08:f3: 53:fe:69:6f:ea:43:d8:3b:8a:98:55:5e:d9:94:b5:7e:5f:9c: 8e:49:0e:4a:e1:b5:3d:1a:4c:8b:a8:0e:b6:3e:04:8f:f4:64: a0:8b:a2:0f:22:a7:1a:1b:c5:16:82:91:1a:c9:ea:d8:b2:f7: 90:a4:7a:1c:63:39:4c:d1:84:cd:03:cb:85:0b:65:88:26:d3: 7e:aa:83:73:7f:fc:fa:38:67:10:2b:32:5f:c5:bd:c4:ee:08: 1e:bc:25:4b:f6:b9:f8:8c:56:17:4f:4f:f3:24:ab:ab:58:42: d7:41:39:92:a0:68:c7:39:42:f3:2f:e1:97:be:1f:09:4b:67: a9:b8:de:77:22:30:88:ab:ba:10:34:1d:92:9c:ba:0f:a3:62: 48:19:3b:11:d9:79:53:00:b1:f7:51:5b:f3:9f:7a:56:47:7e: 3a:cb:8d:82:64:b1:a0:52:53:da:a1:35:88:64:3c:a5:5d:84: c2:af:54:6f:76:80:71:fd:fc:06:d7:a9:74:ef:4f:96:29:04: ea:94:d1:b9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbKBdFVF+V8qWuJOzZUPb3VEniwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNTAxMDMwODU2NTdaFw0yNjAxMDIwOTAxNTdaMDMxMTAvBgNV BAMTKDI5OTQxRkU4NUEwQTAzRTQ0QTE0QUMxODEzQzAyQjE2RUU2RkIxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQ+PETJ0LmqUA3kegfi0Fy7qk sMRne1yvorF9tPyuO0Bb8uIGnIrbAIOm/rSU5nuwkblQ2O+aHsCOmBJBS1KAcUqJ FN/4Xn1+xL8DFxZP+6C0AmbShP0iHD5iRfyHbkqhddX5TZe33kj0CQ9iho13DSla hrZmA0TFO//GiKSoG+MXJtwgdDdyHDrJRMWzN7Axkg+tJ2Jb+3uyKLphOoTcLqtd HFtFz6EcWa3OJha91bH3kQHLR/f8ynbpbAN4m32wC0zIC9a2uS9RExY0qfgU6c+L wtJVDBAf0qMdqdKhteiklN/54gw8XM6c07aqoC3KGJFR5YoHzBMVsiZq3NZXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKZQf6FoKA+RKFKwYE8ArFu5vsSowHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4Yzc3ZWVlLTliY2MtNDAxZS04 ZjRkLTVmMjM2NzU2Mjc1Ny8wLzMxMzAzMzJlMzYzOTJlMzEzNzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0WyMA0GCSqG SIb3DQEBCwUAA4IBAQCIOrIju2C4nvYlM/h5Y80hGhxIimuNIR6iohUaHl2pkBZZ HqF8w3y3XS5Yuapmv5+qM3NQCPNT/mlv6kPYO4qYVV7ZlLV+X5yOSQ5K4bU9GkyL qA62PgSP9GSgi6IPIqcaG8UWgpEayerYsveQpHocYzlM0YTNA8uFC2WIJtN+qoNz f/z6OGcQKzJfxb3E7ggevCVL9rn4jFYXT0/zJKurWELXQTmSoGjHOULzL+GXvh8J S2epuN53IjCIq7oQNB2SnLoPo2JIGTsR2XlTALH3UVvzn3pWR346y42CZLGgUlPa oTWIZDylXYTCr1RvdoBx/fwG16l070+WKQTqlNG5 -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:12 2025 by rpki-client