$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa File: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (raw, json) Hash identifier: x9KAwuYt5DTVIqeonpimiYMYtffpoHRl4k7CjCNGMTQ= Subject key identifier: 54:86:1A:B1:74:1E:E6:5A:CB:1D:13:26:C9:28:AD:43:6B:90:06:5B Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 440F04BC10FA2DB675B459E2EFD5363392C8E14D Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa Signing time: Thu 28 Nov 2024 23:00:01 +0000 ROA not before: Thu 28 Nov 2024 22:55:01 +0000 ROA not after: Thu 27 Nov 2025 23:00:01 +0000 asID: 141639 IP address blocks: 103.162.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 20:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0f:04:bc:10:fa:2d:b6:75:b4:59:e2:ef:d5:36:33:92:c8:e1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Nov 28 22:55:01 2024 GMT Not After : Nov 27 23:00:01 2025 GMT Subject: CN=54861AB1741EE65ACB1D1326C928AD436B90065B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:3e:ad:7d:cc:12:26:55:56:cf:6f:ae:7f: 0a:1e:f8:03:b3:5f:ca:ac:83:2e:5c:7e:07:d1:86: c4:cc:c2:68:07:91:a6:f5:eb:36:28:ac:d1:f1:89: 79:3f:8b:5c:cb:82:b6:c8:e8:2f:27:01:b0:c4:19: 13:d8:38:9c:85:7c:b3:b7:04:1e:f8:a6:6d:a0:6f: 08:de:b3:4e:d3:23:7a:7d:69:71:37:6b:ab:91:02: 10:fb:b6:92:ae:e9:95:04:be:c1:59:c1:40:db:82: e6:e4:67:22:2e:f1:5d:f2:59:70:bb:e7:0e:e8:7c: 71:89:c1:4a:b4:19:c5:1a:d8:94:01:5a:03:e4:04: 53:62:e7:e3:c4:5b:f6:f6:77:53:a4:a5:7b:d6:36: f5:29:45:ad:5b:14:43:0b:46:45:1b:67:18:bf:23: 07:8a:5e:2a:f2:cd:8c:44:43:54:69:30:8f:62:80: bb:60:82:65:84:d3:31:e5:8f:bd:16:52:af:1b:cc: dd:1f:a9:51:5d:6c:de:69:1d:6b:9b:a9:b1:21:1b: 6d:16:79:e6:d7:49:1e:29:42:96:8a:5d:90:95:19: f3:90:37:d9:5b:90:d6:ec:1c:ed:bd:e8:c6:37:0a: b8:30:6a:ae:65:f9:83:10:be:8e:60:3e:b8:2c:e5: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:86:1A:B1:74:1E:E6:5A:CB:1D:13:26:C9:28:AD:43:6B:90:06:5B X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.36.0/23 Signature Algorithm: sha256WithRSAEncryption 10:68:44:32:de:ad:70:8d:b5:32:b2:17:f8:37:3d:4c:2d:a5: 37:18:dc:96:2c:c8:b1:5f:29:f8:9f:ee:3d:92:b1:89:7c:1e: b3:35:49:a9:ab:8e:2b:a5:17:94:34:04:21:18:53:9e:0d:b7: 41:a5:19:56:8f:45:34:38:4c:d3:cc:57:29:a5:9d:d3:42:8e: 23:94:67:60:08:5f:5f:3a:32:96:5a:d4:37:75:92:e7:95:1c: 0e:53:8e:26:22:78:ea:83:b2:7d:3f:af:b3:5a:97:9f:d3:6f: 2f:de:48:b5:50:4b:9d:b2:ff:07:5e:49:45:22:fb:29:80:22: cb:f9:94:d4:89:cd:e6:b0:d2:0a:23:12:42:a2:6c:87:c1:12: 47:3e:6a:89:8f:0d:89:a5:1d:ba:bc:ba:18:ea:de:99:26:ef: ed:f8:d6:5c:5f:53:07:0c:bc:ef:1d:f9:01:ec:e3:40:9d:96: 07:b9:95:ef:d7:c8:92:e2:90:c0:be:c8:82:9b:6a:cb:db:a7: 4c:44:8e:41:e4:0d:29:20:85:46:f6:b3:3a:2a:89:0d:b3:f6: e8:91:5f:ee:df:60:58:11:53:5a:80:05:f9:5a:32:cd:21:4e: 85:e6:27:47:f5:ff:b2:27:42:9a:81:04:50:13:8e:c6:53:e4: 38:2f:9c:12 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURA8EvBD6LbZ1tFni79U2M5LI4U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNDExMjgyMjU1MDFaFw0yNTExMjcyMzAwMDFaMDMxMTAvBgNV BAMTKDU0ODYxQUIxNzQxRUU2NUFDQjFEMTMyNkM5MjhBRDQzNkI5MDA2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKj6tfcwSJlVWz2+ufwoe+AOz X8qsgy5cfgfRhsTMwmgHkab16zYorNHxiXk/i1zLgrbI6C8nAbDEGRPYOJyFfLO3 BB74pm2gbwjes07TI3p9aXE3a6uRAhD7tpKu6ZUEvsFZwUDbgubkZyIu8V3yWXC7 5w7ofHGJwUq0GcUa2JQBWgPkBFNi5+PEW/b2d1OkpXvWNvUpRa1bFEMLRkUbZxi/ IweKXiryzYxEQ1RpMI9igLtggmWE0zHlj70WUq8bzN0fqVFdbN5pHWubqbEhG20W eebXSR4pQpaKXZCVGfOQN9lbkNbsHO296MY3Crgwaq5l+YMQvo5gPrgs5ahnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVIYasXQe5lrLHRMmySitQ2uQBlswHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2ZjNhZTk3LWY1MmUtNDk3Ny05 MGQxLTQzNDlhYWQwNTJhOC8wLzMxMzAzMzJlMzEzNjMyMmUzMzM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMxMzYzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6IkMA0GCSqG SIb3DQEBCwUAA4IBAQAQaEQy3q1wjbUyshf4Nz1MLaU3GNyWLMixXyn4n+49krGJ fB6zNUmpq44rpReUNAQhGFOeDbdBpRlWj0U0OEzTzFcppZ3TQo4jlGdgCF9fOjKW WtQ3dZLnlRwOU44mInjqg7J9P6+zWpef028v3ki1UEudsv8HXklFIvspgCLL+ZTU ic3msNIKIxJComyHwRJHPmqJjw2JpR26vLoY6t6ZJu/t+NZcX1MHDLzvHfkB7ONA nZYHuZXv18iS4pDAvsiCm2rL26dMRI5B5A0pIIVG9rM6KokNs/bokV/u32BYEVNa gAX5WjLNIU6F5idH9f+yJ0KagQRQE47GU+Q4L5wS -----END CERTIFICATE-----Generated at Sun Apr 6 11:01:41 2025 by rpki-client