$ rpki-client -vvf repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32332d3233203d3e20313530323734.roa File: 3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (raw, json) Hash identifier: Na4r9r8nnow4eud4P32zyb2HwE34kjIncW5/HOVTmbY= Subject key identifier: 03:68:2B:41:E4:CE:AC:2C:B9:2F:9E:60:EB:A3:E9:BF:1B:C1:2E:1D Certificate issuer: /CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Certificate serial: 1D466007CA8D173282C25F83895F7C93DDF7E2F5 Authority key identifier: 9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32332d3233203d3e20313530323734.roa Signing time: Thu 20 Feb 2025 04:02:49 +0000 ROA not before: Thu 20 Feb 2025 03:57:49 +0000 ROA not after: Thu 19 Feb 2026 04:02:49 +0000 asID: 150274 IP address blocks: 103.39.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Feb 2025 10:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:46:60:07:ca:8d:17:32:82:c2:5f:83:89:5f:7c:93:dd:f7:e2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B Validity Not Before: Feb 20 03:57:49 2025 GMT Not After : Feb 19 04:02:49 2026 GMT Subject: CN=03682B41E4CEAC2CB92F9E60EBA3E9BF1BC12E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:bd:76:c2:8d:66:94:06:33:66:db:48:27: ee:5c:07:90:c9:75:e9:88:c5:13:7b:db:54:37:1a: ce:07:a3:5a:71:81:e4:21:07:00:c0:8e:8f:02:3c: 3b:98:89:7a:36:2e:12:cd:86:e5:03:a2:a6:23:3d: 36:46:db:7c:85:36:4c:94:d2:9c:35:bb:62:3f:9b: c2:cd:dc:68:59:b0:68:9f:5a:06:6d:7a:37:9d:17: 15:5f:08:b8:d3:83:cf:48:bf:2b:86:5d:c6:2a:83: a1:fb:74:e4:fa:ae:2e:9d:8e:fc:c5:12:6a:de:54: f6:3a:02:b2:c9:b1:ca:9d:7c:07:1c:d9:78:e6:c7: 3c:ac:94:1b:84:67:f1:ac:b1:9e:62:82:b1:f1:6f: b9:a0:ac:d3:e5:b5:e9:56:f1:5d:92:9a:8b:4b:ed: 65:52:72:db:45:59:08:03:bf:fb:7d:f2:5c:75:5c: 37:a1:a3:16:65:b2:a1:cd:f7:54:63:a2:d5:93:ee: a7:d0:97:1e:20:4c:c9:01:01:d4:79:71:fe:19:bf: a4:63:42:1c:18:38:c6:55:4d:3c:0c:0d:08:e2:a4: c5:64:74:56:62:63:1a:76:2b:b8:0f:63:1b:b9:cd: 3e:2e:40:99:8f:6f:5a:63:6e:b6:b8:c9:0b:88:2c: ef:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:68:2B:41:E4:CE:AC:2C:B9:2F:9E:60:EB:A3:E9:BF:1B:C1:2E:1D X509v3 Authority Key Identifier: keyid:9F:FC:46:BA:A3:F1:95:22:AF:5B:DD:60:DF:7D:E9:2E:94:F5:AB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC46BAA3F19522AF5BDD60DF7DE92E94F5AB7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32332d3233203d3e20313530323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.70.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:d6:e7:6f:83:63:5c:a3:1f:7c:16:f2:dc:94:b9:d2:e9:55: 38:18:5b:f7:f0:41:ae:5b:b3:e6:08:c2:07:2c:8a:45:4f:5f: 42:46:73:36:84:2d:17:94:4b:45:36:b2:de:3e:c1:77:bf:95: 67:f9:7f:12:90:54:37:6b:1f:37:c2:3b:bb:a9:73:45:11:61: 6b:a5:90:ff:41:ca:32:8e:de:56:50:da:a4:f1:7e:75:10:a2: 6e:a7:c5:e1:90:02:63:ad:bd:a2:83:e4:30:42:6a:63:a6:e7: c9:fa:85:fd:e2:49:94:55:8c:d3:56:89:9f:43:08:44:03:fb: 57:7f:07:36:a4:4c:93:f6:f7:c4:1d:95:09:27:f8:df:82:d5: d4:2b:da:e7:ee:d6:86:ee:90:54:90:e7:22:02:8d:22:35:e0: 92:6d:79:af:24:5a:07:2d:44:94:c0:b3:a8:95:15:c3:04:9c: 4a:02:59:eb:8b:00:04:c0:a9:af:7f:e9:a0:f2:38:35:22:1c: b3:fa:33:97:bf:a5:a4:6e:05:96:b3:87:d2:df:47:ae:0c:21: fd:2a:cf:c3:f1:94:40:dd:9a:85:42:68:ed:42:ee:2e:fc:71: 25:98:e7:71:67:0b:95:ea:fc:b4:c5:c7:4c:81:26:f5:ed:52: 76:89:5a:0d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHUZgB8qNFzKCwl+DiV98k9334vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5 NEY1QUI3QjAeFw0yNTAyMjAwMzU3NDlaFw0yNjAyMTkwNDAyNDlaMDMxMTAvBgNV BAMTKDAzNjgyQjQxRTRDRUFDMkNCOTJGOUU2MEVCQTNFOUJGMUJDMTJFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsb12wo1mlAYzZttIJ+5cB5DJ demIxRN721Q3Gs4Ho1pxgeQhBwDAjo8CPDuYiXo2LhLNhuUDoqYjPTZG23yFNkyU 0pw1u2I/m8LN3GhZsGifWgZtejedFxVfCLjTg89IvyuGXcYqg6H7dOT6ri6djvzF EmreVPY6ArLJscqdfAcc2XjmxzyslBuEZ/GssZ5igrHxb7mgrNPltelW8V2SmotL 7WVScttFWQgDv/t98lx1XDehoxZlsqHN91RjotWT7qfQlx4gTMkBAdR5cf4Zv6Rj QhwYOMZVTTwMDQjipMVkdFZiYxp2K7gPYxu5zT4uQJmPb1pjbra4yQuILO8TAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUA2grQeTOrCy5L55g66PpvxvBLh0wHwYDVR0j BBgwFoAUn/xGuqPxlSKvW91g333pLpT1q3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTU3ZDU0My1iYWYwLTQzNDgtODg1Ny0zZDI2MDFjM2E4MDMvMC85RkZDNDZCQUEz RjE5NTIyQUY1QkRENjBERjdERTkyRTk0RjVBQjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzQ2QkFBM0YxOTUyMkFGNUJERDYwREY3REU5MkU5NEY1 QUI3Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlNTdkNTQzLWJhZjAtNDM0OC04 ODU3LTNkMjYwMWMzYTgwMy8wLzMxMzAzMzJlMzMzOTJlMzczMDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMDMyMzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcnRjANBgkqhkiG 9w0BAQsFAAOCAQEAbdbnb4NjXKMffBby3JS50ulVOBhb9/BBrluz5gjCByyKRU9f QkZzNoQtF5RLRTay3j7Bd7+VZ/l/EpBUN2sfN8I7u6lzRRFha6WQ/0HKMo7eVlDa pPF+dRCibqfF4ZACY629ooPkMEJqY6bnyfqF/eJJlFWM01aJn0MIRAP7V38HNqRM k/b3xB2VCSf434LV1Cva5+7Whu6QVJDnIgKNIjXgkm15ryRaBy1ElMCzqJUVwwSc SgJZ64sABMCpr3/poPI4NSIcs/ozl7+lpG4FlrOH0t9Hrgwh/SrPw/GUQN2ahUJo 7ULuLvxxJZjncWcLler8tMXHTIEm9e1SdolaDQ== -----END CERTIFICATE-----Generated at Fri Feb 21 11:17:47 2025 by rpki-client