$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa File: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (raw, json) Hash identifier: 1cZaLW2bYSVuCFR3p6/QnCg+KIF2tEt9ZDlyjUYN2tI= Subject key identifier: DB:CE:68:BB:88:CA:F8:17:08:E9:B8:79:B6:1E:5E:98:A8:15:1D:9D Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44 Certificate serial: 76A4B4A114FFA361ABC4DB3B286B89A8DFEEFCDA Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa Signing time: Wed 18 Dec 2024 04:53:00 +0000 ROA not before: Wed 18 Dec 2024 04:48:00 +0000 ROA not after: Wed 17 Dec 2025 04:53:00 +0000 asID: 141073 IP address blocks: 103.155.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Mar 2025 18:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a4:b4:a1:14:ff:a3:61:ab:c4:db:3b:28:6b:89:a8:df:ee:fc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44 Validity Not Before: Dec 18 04:48:00 2024 GMT Not After : Dec 17 04:53:00 2025 GMT Subject: CN=DBCE68BB88CAF81708E9B879B61E5E98A8151D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:14:1e:2d:a4:5e:c3:89:c6:21:7f:9c:7d: b4:86:c4:80:e1:e6:0a:b8:fd:6b:d0:db:48:76:8c: 68:c4:02:7e:30:01:c2:a3:9b:b6:6a:6c:f9:d6:91: dc:35:18:c9:98:b1:fc:62:82:57:a7:1d:74:39:d2: f9:16:20:3f:33:1d:fd:97:40:54:fe:06:d3:43:f3: 55:32:2b:a2:eb:73:2a:95:41:34:d2:97:a4:ce:2e: b7:e1:07:93:eb:b5:1b:7a:c5:5d:9f:2c:5c:45:c4: 5d:cc:da:d1:9d:64:ed:9e:70:35:bd:5a:d6:1a:45: 0b:c8:e4:07:b2:a2:9f:d6:75:37:a0:32:0c:aa:67: 70:58:77:59:dc:2b:f9:b7:1c:2e:a8:02:93:1b:c7: 65:68:92:f1:4c:30:7c:47:d0:9a:99:37:fd:79:0b: ca:6c:d1:0a:13:84:b1:3e:4b:89:2b:a6:71:ab:3d: 7e:75:d6:52:a7:66:ad:9b:f6:c7:d1:e0:15:22:6f: ff:9e:18:1e:ff:42:ff:1a:11:80:d2:f1:66:e6:12: 9c:f2:e5:f8:a1:44:9b:74:90:16:ed:9b:1c:3e:47: 1e:cf:cc:61:3d:4f:2e:01:a2:9c:30:d4:4a:ad:f4: f7:40:a9:90:e0:d2:82:38:8b:b2:91:86:23:33:36: 4a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CE:68:BB:88:CA:F8:17:08:E9:B8:79:B6:1E:5E:98:A8:15:1D:9D X509v3 Authority Key Identifier: keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.200.0/23 Signature Algorithm: sha256WithRSAEncryption 75:59:62:85:4a:6f:ac:df:9f:20:ee:60:9b:84:85:ea:4f:07: 74:6a:db:75:75:0d:10:c5:46:1d:a7:a4:4a:5d:0d:0b:d2:b2: 38:78:55:a6:85:20:fb:c3:0b:a2:82:46:1a:3f:82:d2:4b:ee: 83:9f:fa:ec:9c:8a:a3:a8:31:99:f0:ed:98:c5:c5:65:32:f8: 5e:aa:39:66:fc:d4:10:29:97:63:e8:df:c2:e0:4a:ab:3f:b6: b1:24:d2:b5:a4:23:7a:dc:5b:aa:c0:20:59:17:6c:5f:ef:6a: 2c:e5:19:34:7b:18:98:24:26:2e:24:07:f3:97:dc:13:a0:ba: b0:71:0a:35:41:aa:93:b4:24:e5:3c:01:51:89:2d:aa:00:4b: e1:32:91:4f:76:5a:46:b5:da:f8:19:cc:0a:99:10:ad:ef:8b: ec:aa:f8:9d:c3:72:97:4b:23:ce:33:87:04:b8:68:f8:2a:62: 62:fa:c8:73:73:9f:d2:7f:22:66:1e:f0:6d:82:32:9b:6d:56: 20:3d:4c:fa:63:a4:37:88:c9:f7:6e:a2:71:4b:f0:9d:c1:17: 8a:e3:bf:9e:a9:8c:85:00:24:77:c8:01:2f:70:12:87:d7:9e: 0c:29:d0:ef:5d:89:69:d8:99:32:f4:1b:cc:e5:75:54:bb:8d: 28:79:a4:38 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUdqS0oRT/o2GrxNs7KGuJqN/u/NowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZE NkU1NUU0NDAeFw0yNDEyMTgwNDQ4MDBaFw0yNTEyMTcwNDUzMDBaMDMxMTAvBgNV BAMTKERCQ0U2OEJCODhDQUY4MTcwOEU5Qjg3OUI2MUU1RTk4QTgxNTFEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfBQeLaRew4nGIX+cfbSGxIDh 5gq4/WvQ20h2jGjEAn4wAcKjm7ZqbPnWkdw1GMmYsfxiglenHXQ50vkWID8zHf2X QFT+BtND81UyK6LrcyqVQTTSl6TOLrfhB5PrtRt6xV2fLFxFxF3M2tGdZO2ecDW9 WtYaRQvI5Aeyop/WdTegMgyqZ3BYd1ncK/m3HC6oApMbx2VokvFMMHxH0JqZN/15 C8ps0QoThLE+S4krpnGrPX511lKnZq2b9sfR4BUib/+eGB7/Qv8aEYDS8WbmEpzy 5fihRJt0kBbtmxw+Rx7PzGE9Ty4Bopww1Eqt9PdAqZDg0oI4i7KRhiMzNkoDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU285ou4jK+BcI6bh5th5emKgVHZ0wHwYDVR0j BBgwFoAULRiVY5f6YFWkQVPKvwcwP9blXkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODU4Zjg1Yy1hNDU4LTRhNTgtYmJkZS00YmZiMzQzZGM0YjAvMC8yRDE4OTU2Mzk3 RkE2MDU1QTQ0MTUzQ0FCRjA3MzAzRkQ2RTU1RTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZENkU1 NUU0NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NThmODVjLWE0NTgtNGE1OC1i YmRlLTRiZmIzNDNkYzRiMC8wLzMxMzAzMzJlMzEzNTM1MmUzMjMwMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnm8gwDQYJ KoZIhvcNAQELBQADggEBAHVZYoVKb6zfnyDuYJuEhepPB3Rq23V1DRDFRh2npEpd DQvSsjh4VaaFIPvDC6KCRho/gtJL7oOf+uyciqOoMZnw7ZjFxWUy+F6qOWb81BAp l2Po38LgSqs/trEk0rWkI3rcW6rAIFkXbF/vaizlGTR7GJgkJi4kB/OX3BOgurBx CjVBqpO0JOU8AVGJLaoAS+EykU92Wka12vgZzAqZEK3vi+yq+J3DcpdLI84zhwS4 aPgqYmL6yHNzn9J/ImYe8G2CMpttViA9TPpjpDeIyfduonFL8J3BF4rjv56pjIUA JHfIAS9wEofXngwp0O9diWnYmTL0G8zldVS7jSh5pDg= -----END CERTIFICATE-----Generated at Tue Mar 11 05:05:35 2025 by rpki-client