$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa File: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (raw, json) Hash identifier: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w= Subject key identifier: 52:2C:12:CB:E1:EB:DB:61:E1:44:A1:AC:AB:A4:C0:A5:F6:0A:F6:67 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 6DD49FC372ECC5D6A8E3D8F14C1C471F49A9FFFF Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa Signing time: Thu 19 Dec 2024 02:00:01 +0000 ROA not before: Thu 19 Dec 2024 01:55:01 +0000 ROA not after: Thu 18 Dec 2025 02:00:01 +0000 asID: 141965 IP address blocks: 103.165.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d4:9f:c3:72:ec:c5:d6:a8:e3:d8:f1:4c:1c:47:1f:49:a9:ff:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Dec 19 01:55:01 2024 GMT Not After : Dec 18 02:00:01 2025 GMT Subject: CN=522C12CBE1EBDB61E144A1ACABA4C0A5F60AF667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:10:58:30:d9:9f:5e:b0:5b:24:e7:60:84: 9f:40:da:c6:a6:a0:84:ff:93:f3:61:a7:d0:4d:83: 69:89:e0:97:5d:cb:77:5f:fe:85:04:08:40:90:92: 8e:2c:2d:9f:22:fd:b9:ab:50:7d:09:77:b3:5d:f8: c0:5a:e4:1c:36:7c:58:44:d6:7c:3f:64:0c:85:95: 1f:89:68:49:55:3b:d3:ea:de:e0:3a:b7:9f:27:36: d6:78:bd:39:03:70:a9:98:94:b2:1f:26:cf:a9:10: b6:46:60:87:10:1f:89:f9:79:31:4c:53:a1:79:e4: cb:f8:90:03:11:f7:56:a3:46:af:e7:8a:14:c3:94: 31:d6:ac:41:97:0b:0d:84:4d:07:5d:d5:fb:16:ee: 56:32:ff:41:0a:a7:ed:93:01:51:a4:92:59:9b:3c: eb:62:a1:b6:b6:c8:1b:0c:0c:a9:53:00:3f:c6:fc: 25:b5:19:d3:a9:cb:68:89:5b:4a:6e:4d:56:fc:1a: fd:80:51:a5:1f:bf:5c:e4:e6:c5:b4:37:8c:a4:7e: 28:e3:3d:36:70:1c:de:0d:df:2d:b3:d0:19:a8:da: e4:48:d4:b1:16:30:9f:1b:c5:dd:5f:9d:57:a3:f2: 1d:eb:90:17:72:ba:9a:41:71:d9:d6:3a:41:41:0d: 93:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2C:12:CB:E1:EB:DB:61:E1:44:A1:AC:AB:A4:C0:A5:F6:0A:F6:67 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.154.0/24 Signature Algorithm: sha256WithRSAEncryption 40:ac:2c:42:59:bd:7b:fa:06:ea:3c:79:46:ea:78:56:a8:62: 3e:96:5d:fd:7e:86:1d:ad:3e:89:86:12:7c:38:58:18:e0:63: 16:dd:1c:be:ce:84:5b:c5:9c:3c:4c:3b:fe:6c:6e:ea:ae:f8: a8:23:f8:f5:34:42:d8:fa:58:15:39:f7:f6:e6:71:69:44:73: d5:a6:7f:84:d1:31:3f:9f:33:86:e2:18:24:43:1b:4b:40:08: b1:c8:ba:b8:75:50:1e:ba:a4:e1:6f:01:44:c9:f6:b2:f9:e9: c5:bb:47:ed:07:4d:d3:ca:8a:ef:1d:a5:29:54:3c:76:9b:5f: 7f:0d:41:e7:c7:f9:c6:33:81:26:a1:53:b5:b7:35:04:91:f5: 21:4e:26:05:9f:b7:ad:78:2b:35:58:f9:68:89:1f:51:b9:83: dc:82:52:a3:d9:0a:58:3f:b2:6e:b3:5f:7c:2d:9b:7c:a1:f4: 3e:c6:68:5d:a1:09:ac:e9:5a:9d:90:e4:09:46:1b:68:af:0c: 16:66:c8:f8:7f:f9:5e:fb:8e:0e:d7:bc:73:a7:93:5e:b5:b3: da:a2:22:ee:79:50:95:d8:87:30:de:01:27:1c:fb:fd:87:64: d7:20:90:cc:35:9c:42:d4:40:d5:1f:44:1a:84:e9:21:8d:40: d9:50:79:ca -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUbdSfw3Lsxdao49jxTBxHH0mp//8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNDEyMTkwMTU1MDFaFw0yNTEyMTgwMjAwMDFaMDMxMTAvBgNV BAMTKDUyMkMxMkNCRTFFQkRCNjFFMTQ0QTFBQ0FCQTRDMEE1RjYwQUY2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPhBYMNmfXrBbJOdghJ9A2sam oIT/k/Nhp9BNg2mJ4Jddy3df/oUECECQko4sLZ8i/bmrUH0Jd7Nd+MBa5Bw2fFhE 1nw/ZAyFlR+JaElVO9Pq3uA6t58nNtZ4vTkDcKmYlLIfJs+pELZGYIcQH4n5eTFM U6F55Mv4kAMR91ajRq/nihTDlDHWrEGXCw2ETQdd1fsW7lYy/0EKp+2TAVGkklmb POtioba2yBsMDKlTAD/G/CW1GdOpy2iJW0puTVb8Gv2AUaUfv1zk5sW0N4ykfijj PTZwHN4N3y2z0Bmo2uRI1LEWMJ8bxd1fnVej8h3rkBdyuppBcdnWOkFBDZPVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUUiwSy+Hr22HhRKGsq6TApfYK9mcwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjZjM1YTQ3LTJjY2UtNDg3Zi1h YTI3LWM5ZTlkZTYzNWJlYy8wLzMxMzAzMzJlMzEzNjM1MmUzMTM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM2MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpZowDQYJ KoZIhvcNAQELBQADggEBAECsLEJZvXv6Buo8eUbqeFaoYj6WXf1+hh2tPomGEnw4 WBjgYxbdHL7OhFvFnDxMO/5sbuqu+Kgj+PU0Qtj6WBU59/bmcWlEc9Wmf4TRMT+f M4biGCRDG0tACLHIurh1UB66pOFvAUTJ9rL56cW7R+0HTdPKiu8dpSlUPHabX38N QefH+cYzgSahU7W3NQSR9SFOJgWft614KzVY+WiJH1G5g9yCUqPZClg/sm6zX3wt m3yh9D7GaF2hCazpWp2Q5AlGG2ivDBZmyPh/+V77jg7XvHOnk161s9qiIu55UJXY hzDeAScc+/2HZNcgkMw1nELUQNUfRBqE6SGNQNlQeco= -----END CERTIFICATE-----Generated at Sun Apr 6 14:36:50 2025 by rpki-client