$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa File: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (raw, json) Hash identifier: LMlg0YtMMAZTGP6EzKXImD6a6ZjUtLMQ+VabkB5A5lc= Subject key identifier: 2E:59:A3:12:13:D7:3A:07:8E:2E:CD:7A:A8:62:88:29:75:A1:D2:0A Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44 Certificate serial: 245C2D09DFE8048C5CD6B2BB9017C62DB8F9E638 Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa Signing time: Wed 01 Jan 2025 05:00:02 +0000 ROA not before: Wed 01 Jan 2025 04:55:02 +0000 ROA not after: Wed 31 Dec 2025 05:00:02 +0000 asID: 141073 IP address blocks: 103.155.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 17:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5c:2d:09:df:e8:04:8c:5c:d6:b2:bb:90:17:c6:2d:b8:f9:e6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44 Validity Not Before: Jan 1 04:55:02 2025 GMT Not After : Dec 31 05:00:02 2025 GMT Subject: CN=2E59A31213D73A078E2ECD7AA862882975A1D20A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:ac:5e:53:d2:25:21:8a:63:e8:d7:ba:b1: 82:4c:a7:83:0e:db:ce:e9:af:82:a6:92:60:3c:a2: 63:f7:e3:04:3f:92:23:7d:c1:05:fd:e0:f0:3e:f7: 62:39:ba:8c:af:76:bb:08:a2:97:b7:9e:e3:83:56: 1c:26:95:d8:f8:ec:42:c5:fa:bf:ea:61:32:e1:7f: d3:05:2a:fe:39:cf:b1:4c:ae:26:3d:8b:fa:b2:cb: 56:82:4d:13:f2:22:8a:4f:f6:c7:56:23:44:8b:ba: d7:f7:73:05:6f:a3:c4:be:fe:5c:50:e4:01:b9:dd: 6c:3e:8d:2a:23:bd:43:a0:c3:40:37:40:0b:a5:16: 9d:c0:3e:27:84:6b:73:b7:d5:97:b7:c7:c6:63:77: 2b:84:e2:4a:eb:09:c0:6e:4e:0b:dc:43:f8:ab:5e: 50:0a:0d:42:fd:7b:75:0b:cd:6c:2f:cc:ac:49:a0: 85:de:2f:db:f7:71:86:14:e5:15:6f:10:7e:17:b2: 6f:93:88:b7:da:cc:8a:e6:f2:c8:7a:0d:f8:0d:d8: d5:26:4f:c4:85:44:e7:88:90:5b:e1:4c:0a:fd:22: d6:5e:12:76:3f:4c:ab:73:d4:a5:38:92:69:fe:27: 99:5c:e0:6f:f8:ee:2e:43:d2:89:1c:e0:38:d1:9a: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:59:A3:12:13:D7:3A:07:8E:2E:CD:7A:A8:62:88:29:75:A1:D2:0A X509v3 Authority Key Identifier: keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.200.0/23 Signature Algorithm: sha256WithRSAEncryption 61:d7:85:77:c5:d0:2f:46:6d:4f:64:13:1c:ec:3d:a7:e7:9f: da:00:a3:bd:a8:db:1d:8d:e3:da:c9:06:ca:db:f9:ac:24:8f: ea:15:7f:37:61:e5:3e:11:ae:69:f6:92:0a:1d:e3:37:0c:4a: 73:e2:49:6c:50:e7:28:e2:21:ce:05:30:39:82:2a:00:b2:df: 83:84:27:10:f8:e0:18:f7:b7:df:41:2b:46:70:f3:c4:54:dd: c7:47:93:41:c8:a3:ea:44:44:58:95:ee:b0:d6:6a:6e:57:cd: 86:dc:79:f4:e9:12:e3:04:7e:b4:37:be:57:6e:d3:a1:fd:ac: 64:fa:6e:f1:fc:62:30:79:1c:62:ed:35:e5:3e:be:98:2a:af: 15:80:d1:36:0d:79:55:17:f1:11:79:a9:2f:b9:42:9a:f0:e8: 42:a9:93:f6:50:64:f6:f6:0d:86:be:c0:45:15:da:02:82:5e: 44:da:7e:21:dd:f9:e3:72:39:fd:21:b3:f3:0b:7c:1a:f7:f1: dc:2d:f4:9c:b0:1a:4b:fc:4f:55:9a:c6:da:22:04:e0:c5:bd: e3:98:a5:b1:bc:94:51:b7:c6:ac:1a:83:39:f9:1b:9a:36:3d: 26:e9:ec:9e:f5:6e:b5:3b:d9:60:bf:5a:ea:55:bc:38:77:f8: f5:d3:d9:2a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJFwtCd/oBIxc1rK7kBfGLbj55jgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZE NkU1NUU0NDAeFw0yNTAxMDEwNDU1MDJaFw0yNTEyMzEwNTAwMDJaMDMxMTAvBgNV BAMTKDJFNTlBMzEyMTNENzNBMDc4RTJFQ0Q3QUE4NjI4ODI5NzVBMUQyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VaxeU9IlIYpj6Ne6sYJMp4MO 287pr4KmkmA8omP34wQ/kiN9wQX94PA+92I5uoyvdrsIope3nuODVhwmldj47ELF +r/qYTLhf9MFKv45z7FMriY9i/qyy1aCTRPyIopP9sdWI0SLutf3cwVvo8S+/lxQ 5AG53Ww+jSojvUOgw0A3QAulFp3APieEa3O31Ze3x8ZjdyuE4krrCcBuTgvcQ/ir XlAKDUL9e3ULzWwvzKxJoIXeL9v3cYYU5RVvEH4Xsm+TiLfazIrm8sh6DfgN2NUm T8SFROeIkFvhTAr9ItZeEnY/TKtz1KU4kmn+J5lc4G/47i5D0okc4DjRmvShAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQULlmjEhPXOgeOLs16qGKIKXWh0gowHwYDVR0j BBgwFoAULRiVY5f6YFWkQVPKvwcwP9blXkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODU4Zjg1Yy1hNDU4LTRhNTgtYmJkZS00YmZiMzQzZGM0YjAvMC8yRDE4OTU2Mzk3 RkE2MDU1QTQ0MTUzQ0FCRjA3MzAzRkQ2RTU1RTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZENkU1 NUU0NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NThmODVjLWE0NTgtNGE1OC1i YmRlLTRiZmIzNDNkYzRiMC8wLzMxMzAzMzJlMzEzNTM1MmUzMjMwMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnm8gwDQYJ KoZIhvcNAQELBQADggEBAGHXhXfF0C9GbU9kExzsPafnn9oAo72o2x2N49rJBsrb +awkj+oVfzdh5T4Rrmn2kgod4zcMSnPiSWxQ5yjiIc4FMDmCKgCy34OEJxD44Bj3 t99BK0Zw88RU3cdHk0HIo+pERFiV7rDWam5XzYbcefTpEuMEfrQ3vldu06H9rGT6 bvH8YjB5HGLtNeU+vpgqrxWA0TYNeVUX8RF5qS+5Qprw6EKpk/ZQZPb2DYa+wEUV 2gKCXkTafiHd+eNyOf0hs/MLfBr38dwt9JywGkv8T1WaxtoiBODFveOYpbG8lFG3 xqwagzn5G5o2PSbp7J71brU72WC/WupVvDh3+PXT2So= -----END CERTIFICATE-----Generated at Mon Apr 7 16:56:43 2025 by rpki-client