$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa File: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (raw, json) Hash identifier: Lk7MgzxdNvFWTQC60iPK0vpuf42JvMwfykIHdcb6dFo= Subject key identifier: 87:9E:A1:FE:DF:6D:3A:B7:66:E4:95:36:A9:81:A4:83:00:80:01:7C Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Certificate serial: 2B086B4107E6C870FA32DA8D00222A9532156012 Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa Signing time: Fri 27 Dec 2024 16:30:32 +0000 ROA not before: Fri 27 Dec 2024 16:25:32 +0000 ROA not after: Fri 26 Dec 2025 16:30:32 +0000 asID: 138821 IP address blocks: 103.136.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 12:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:08:6b:41:07:e6:c8:70:fa:32:da:8d:00:22:2a:95:32:15:60:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53 Validity Not Before: Dec 27 16:25:32 2024 GMT Not After : Dec 26 16:30:32 2025 GMT Subject: CN=879EA1FEDF6D3AB766E49536A981A4830080017C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:c7:e6:18:3d:4c:bb:48:9c:9d:1f:0a:10: fb:8f:05:21:7d:0d:d4:6f:7a:4a:9a:9f:b1:2e:ab: 28:68:12:d4:94:b8:b9:a6:a2:f0:e6:2c:4b:97:6d: 14:34:60:11:33:62:db:01:30:a2:24:31:b0:b0:a2: d1:bf:6e:d1:b8:6d:32:b2:68:f9:16:47:3d:75:20: df:ce:ba:df:f1:79:98:e3:7b:cf:a5:8d:b5:ba:0c: 86:6e:ec:0a:fd:ad:a5:d4:84:a5:7e:7d:d9:a8:b9: 2f:9a:29:04:a9:69:46:7a:f2:db:e2:67:29:88:e2: 72:3d:9c:40:28:a8:31:7d:32:66:8e:c9:a0:84:cd: cb:2a:2f:14:96:6d:6b:3f:7c:9a:14:2d:18:95:76: 8b:2f:13:0c:be:13:7e:41:52:2b:9d:c1:59:3c:da: e0:a8:ee:29:cb:e1:fc:31:f5:ba:35:f6:d6:2f:3c: a5:92:a1:d6:0d:b7:9d:91:55:16:a4:9e:77:0e:38: b6:70:ac:c3:fe:dc:4d:d4:0f:26:e4:71:c4:d2:cc: 74:12:be:5b:d0:43:42:db:4b:8a:94:8c:52:69:4c: b9:ad:e2:da:ad:9d:27:5e:bd:36:9e:8e:46:f9:1b: 85:69:ae:ff:12:48:f4:5e:bf:b7:b8:55:86:f1:9c: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9E:A1:FE:DF:6D:3A:B7:66:E4:95:36:A9:81:A4:83:00:80:01:7C X509v3 Authority Key Identifier: keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.12.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:e8:13:0e:5c:ec:33:a2:a5:32:ad:6e:c0:10:09:bd:67:22: 2e:e1:2e:5a:82:ea:bc:65:12:60:34:51:23:d8:88:34:68:83: 1c:a9:d3:06:ac:e6:79:54:cd:f4:a1:f0:73:69:68:58:08:83: e2:2f:11:11:21:1c:39:ca:6e:52:0b:f3:b4:64:27:bc:5a:13: 53:3c:3f:35:0a:3d:a5:98:0c:c2:f1:66:e1:a9:5c:64:07:e8: cc:da:13:a8:82:52:e3:bc:2a:cc:48:34:2a:f0:69:88:99:ab: c3:2b:3e:33:b5:1d:33:a6:94:ec:f9:ed:57:ff:90:6f:77:11: 40:0e:8f:6e:2a:11:72:74:09:5f:c8:de:24:0f:ea:41:1c:24: a2:6b:25:34:5d:ca:c2:63:81:eb:d4:3c:06:e5:12:fe:64:b1: ed:ca:c8:d5:9d:11:4f:80:fb:be:9b:cc:9d:24:b0:4d:6a:d8: 20:26:5a:b5:60:96:00:05:c6:8c:ac:15:69:29:a2:e4:5d:ca: a2:58:a8:1b:4b:20:f5:76:cf:5c:59:6d:33:e8:8c:15:4d:56: 4c:03:80:ef:b2:a5:88:1f:56:71:80:43:e5:ce:1c:60:ac:a8: 15:c6:8e:e7:2e:70:3c:3d:f2:b7:73:9e:d9:ff:6f:f3:4b:ad: ea:ad:b9:1f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKwhrQQfmyHD6MtqNACIqlTIVYBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC RkIzN0I1MzAeFw0yNDEyMjcxNjI1MzJaFw0yNTEyMjYxNjMwMzJaMDMxMTAvBgNV BAMTKDg3OUVBMUZFREY2RDNBQjc2NkU0OTUzNkE5ODFBNDgzMDA4MDAxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT3MfmGD1Mu0icnR8KEPuPBSF9 DdRvekqan7EuqyhoEtSUuLmmovDmLEuXbRQ0YBEzYtsBMKIkMbCwotG/btG4bTKy aPkWRz11IN/Out/xeZjje8+ljbW6DIZu7Ar9raXUhKV+fdmouS+aKQSpaUZ68tvi ZymI4nI9nEAoqDF9MmaOyaCEzcsqLxSWbWs/fJoULRiVdosvEwy+E35BUiudwVk8 2uCo7inL4fwx9bo19tYvPKWSodYNt52RVRaknncOOLZwrMP+3E3UDybkccTSzHQS vlvQQ0LbS4qUjFJpTLmt4tqtnSdevTaejkb5G4Vprv8SSPRev7e4VYbxnN1LAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUh56h/t9tOrdm5JU2qYGkgwCAAXwwHwYDVR0j BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4 OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz N0I1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMWIxYzFiLTY1NmMtNDg5ZC05 ZWQzLWNjYzc3YzgzMDE4ZC8wLzMxMzAzMzJlMzEzMzM2MmUzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4gMMA0GCSqG SIb3DQEBCwUAA4IBAQCa6BMOXOwzoqUyrW7AEAm9ZyIu4S5aguq8ZRJgNFEj2Ig0 aIMcqdMGrOZ5VM30ofBzaWhYCIPiLxERIRw5ym5SC/O0ZCe8WhNTPD81Cj2lmAzC 8WbhqVxkB+jM2hOoglLjvCrMSDQq8GmImavDKz4ztR0zppTs+e1X/5BvdxFADo9u KhFydAlfyN4kD+pBHCSiayU0XcrCY4Hr1DwG5RL+ZLHtysjVnRFPgPu+m8ydJLBN atggJlq1YJYABcaMrBVpKaLkXcqiWKgbSyD1ds9cWW0z6IwVTVZMA4DvsqWIH1Zx gEPlzhxgrKgVxo7nLnA8PfK3c57Z/2/zS63qrbkf -----END CERTIFICATE-----Generated at Mon Apr 7 16:49:37 2025 by rpki-client