$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa File: 3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa (raw, json) Hash identifier: VMNDp3Q2brC3XAq98nR7SUn0JBQnPNYJkRtff0QZOr8= Subject key identifier: 3A:D0:5C:D5:66:7C:2B:D5:D9:49:B5:57:68:D9:8F:E7:E2:72:3D:2D Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 1C279F218B394837F2FECBBE88A20D7D707034A1 Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa Signing time: Tue 31 Dec 2024 08:00:05 +0000 ROA not before: Tue 31 Dec 2024 07:55:05 +0000 ROA not after: Tue 30 Dec 2025 08:00:05 +0000 asID: 58487 IP address blocks: 103.253.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 12:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:27:9f:21:8b:39:48:37:f2:fe:cb:be:88:a2:0d:7d:70:70:34:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Dec 31 07:55:05 2024 GMT Not After : Dec 30 08:00:05 2025 GMT Subject: CN=3AD05CD5667C2BD5D949B55768D98FE7E2723D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:c6:85:00:72:6c:7a:de:5b:25:45:00:0a: 59:6c:6f:89:6e:b6:3f:bb:99:a7:82:bf:9e:ca:1d: fc:98:ab:50:15:15:76:34:7a:ae:a6:68:b4:c3:77: e8:59:c3:cb:57:1a:22:1b:dc:6c:ce:db:29:e9:53: df:72:0a:5a:2e:bb:48:ae:27:c1:c8:0e:2b:92:e9: 8a:b0:5d:a9:88:ed:8c:47:9e:bc:5d:22:3b:e5:64: cd:49:13:fd:d0:ee:49:47:1f:b6:55:5d:f6:e6:8d: 0e:1a:73:a8:79:4d:57:6d:3b:2e:fd:4e:87:7c:a6: 49:1f:2e:c2:22:ce:a3:87:58:88:38:d3:c4:58:03: e7:7f:b0:2c:99:81:9a:63:8c:8a:d9:a4:35:4a:6a: 94:08:55:23:0b:e2:7c:e8:ed:b1:5e:07:ec:8a:d3: 90:8c:70:61:91:64:b9:d8:f8:61:17:06:56:c0:e5: 92:f9:71:f6:74:a9:5c:cf:27:52:13:4c:f7:3b:41: a5:14:f1:5c:43:9f:da:3a:d9:d0:c2:83:1c:ae:13: 7d:73:98:3b:d2:fb:41:aa:66:ff:97:aa:0b:82:f5: 8c:c1:9c:4a:cb:7c:bf:d8:8c:c6:aa:2f:a8:36:28: 7f:f0:de:cd:74:4a:ae:11:33:c1:90:e5:c1:58:b8: a3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D0:5C:D5:66:7C:2B:D5:D9:49:B5:57:68:D9:8F:E7:E2:72:3D:2D X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.212.0/22 Signature Algorithm: sha256WithRSAEncryption 42:97:8c:1b:1e:81:8b:b7:38:51:61:f8:72:01:f8:a3:26:ad: 35:a5:be:d9:30:e1:d7:ad:72:68:3c:c7:40:e2:25:43:3f:09: 7d:e2:c6:dd:0d:8e:26:99:7b:33:bd:7f:a2:50:40:4d:93:db: e6:dc:10:ef:fa:37:77:88:e8:4b:92:aa:47:06:0f:7f:13:ba: 0c:61:ff:26:bb:9a:3f:3b:f0:27:14:46:c1:48:9c:10:b0:7d: 10:95:3b:b4:09:a8:5b:c8:e9:e0:16:de:90:98:cb:a4:5d:f8: 0f:47:b8:37:5f:27:f4:66:01:ef:d3:fc:e0:d3:1c:d9:f2:58: c4:ed:38:84:fe:08:3d:b5:64:6b:7f:62:e5:52:8a:a4:ce:4a: a9:db:31:ed:47:5d:2a:8b:0e:35:12:8a:0f:a2:c2:36:62:b4: 1c:f8:d0:f0:bc:68:41:17:dc:7a:d9:8f:65:3f:14:5f:88:cb: c8:5d:c1:65:b1:36:99:81:7f:13:8a:53:08:e0:ca:29:13:55: 56:ca:93:1b:1a:e5:e7:45:e5:dc:b3:74:43:db:58:dc:c9:85: 23:b0:9b:27:84:fd:ba:7b:fe:b5:c8:88:05:5b:d5:ab:d1:05: 42:de:83:b0:ac:c4:b1:4a:e2:61:46:82:2a:5a:f1:07:38:36: ae:6d:d5:42 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHCefIYs5SDfy/su+iKINfXBwNKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNDEyMzEwNzU1MDVaFw0yNTEyMzAwODAwMDVaMDMxMTAvBgNV BAMTKDNBRDA1Q0Q1NjY3QzJCRDVEOTQ5QjU1NzY4RDk4RkU3RTI3MjNEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JcaFAHJset5bJUUACllsb4lu tj+7maeCv57KHfyYq1AVFXY0eq6maLTDd+hZw8tXGiIb3GzO2ynpU99yClouu0iu J8HIDiuS6YqwXamI7YxHnrxdIjvlZM1JE/3Q7klHH7ZVXfbmjQ4ac6h5TVdtOy79 Tod8pkkfLsIizqOHWIg408RYA+d/sCyZgZpjjIrZpDVKapQIVSML4nzo7bFeB+yK 05CMcGGRZLnY+GEXBlbA5ZL5cfZ0qVzPJ1ITTPc7QaUU8VxDn9o62dDCgxyuE31z mDvS+0GqZv+XqguC9YzBnErLfL/YjMaqL6g2KH/w3s10Sq4RM8GQ5cFYuKPxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOtBc1WZ8K9XZSbVXaNmP5+JyPS0wHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMxMzAzMzJlMzIzNTMzMmUzMjMxMzIyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzNTM4MzQzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/3UMA0GCSqG SIb3DQEBCwUAA4IBAQBCl4wbHoGLtzhRYfhyAfijJq01pb7ZMOHXrXJoPMdA4iVD Pwl94sbdDY4mmXszvX+iUEBNk9vm3BDv+jd3iOhLkqpHBg9/E7oMYf8mu5o/O/An FEbBSJwQsH0QlTu0CahbyOngFt6QmMukXfgPR7g3Xyf0ZgHv0/zg0xzZ8ljE7TiE /gg9tWRrf2LlUoqkzkqp2zHtR10qiw41EooPosI2YrQc+NDwvGhBF9x62Y9lPxRf iMvIXcFlsTaZgX8TilMI4MopE1VWypMbGuXnReXcs3RD21jcyYUjsJsnhP26e/61 yIgFW9Wr0QVC3oOwrMSxSuJhRoIqWvEHODaubdVC -----END CERTIFICATE-----Generated at Sun Apr 6 09:33:09 2025 by rpki-client