$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa File: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (raw, json) Hash identifier: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM= Subject key identifier: 15:D9:22:63:DA:00:95:86:1F:D5:78:2A:5B:5A:76:B2:BC:0C:DF:CA Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 7D32009BEB1816E17576F13C56DA4B0EA252D248 Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa Signing time: Sat 08 Mar 2025 04:00:00 +0000 ROA not before: Sat 08 Mar 2025 03:55:00 +0000 ROA not after: Sat 07 Mar 2026 04:00:00 +0000 asID: 64297 IP address blocks: 103.77.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 11:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:32:00:9b:eb:18:16:e1:75:76:f1:3c:56:da:4b:0e:a2:52:d2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Mar 8 03:55:00 2025 GMT Not After : Mar 7 04:00:00 2026 GMT Subject: CN=15D92263DA0095861FD5782A5B5A76B2BC0CDFCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:f5:03:c4:15:6b:b4:6e:a4:1a:fe:5f:22: a7:95:10:24:99:b0:d4:34:d1:10:e0:33:87:14:0c: a1:85:09:8f:17:46:a4:bf:72:86:aa:82:12:87:a3: 95:44:65:bd:cc:f0:a6:74:89:f2:d4:8d:b5:3a:04: b4:ed:f7:0c:9e:94:b2:2b:58:e4:3c:fa:5a:9b:23: 0c:18:e5:56:5b:7c:ca:0e:7f:fb:15:a7:77:a8:e9: 63:a6:f5:e3:c5:ce:46:b7:3e:be:ac:68:84:85:60: 64:c9:80:cd:da:91:06:57:ce:56:a7:8e:83:af:90: fa:8d:50:72:99:8a:3b:3c:e3:d5:dd:4a:45:1a:cc: 78:21:c7:ec:06:37:61:9e:74:2b:a9:42:da:ef:65: 70:c2:09:ac:38:de:6f:bd:88:07:fe:d9:1f:f5:cd: f8:b6:85:b4:56:ec:df:2a:fe:4e:04:e3:b4:12:2b: 1c:c2:7f:56:d1:30:36:95:f7:48:ea:5b:eb:b8:2c: b9:3e:2b:66:e9:bf:19:fb:ca:ca:fa:8c:2d:dd:ab: f1:04:d0:dd:5b:15:68:3f:58:a3:4e:27:a7:5a:7b: 3d:23:57:b1:69:de:55:3d:8a:4a:b6:6f:a2:52:02: a3:07:29:bc:fa:5c:b4:34:6c:27:54:bb:d8:05:26: 07:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D9:22:63:DA:00:95:86:1F:D5:78:2A:5B:5A:76:B2:BC:0C:DF:CA X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.77.206.0/24 Signature Algorithm: sha256WithRSAEncryption 28:da:98:58:b3:7a:8c:4a:0e:48:2f:1b:b8:0f:91:f7:b1:e6: b9:5c:35:9d:77:a3:25:f9:b8:8e:44:17:f5:64:bd:cf:c7:d6: a0:db:ff:8a:c3:48:3e:af:ac:ab:07:85:e9:9e:dd:b2:59:ac: f9:4c:9d:46:e7:1f:9b:81:00:40:26:84:9b:43:b8:c0:db:e8: fa:00:f6:3e:26:a7:e3:ae:47:1a:2a:69:42:7c:df:44:b8:bd: 51:b2:2b:07:24:43:62:4f:0a:51:cf:29:7e:a5:94:8b:e7:09: 79:f1:f3:d8:f5:81:36:2a:31:93:4a:1c:99:86:a0:33:44:c5: d1:cb:66:ad:54:e0:c3:6b:1c:33:fe:15:20:c1:8c:7c:c6:d4: 6f:36:03:52:e8:cc:17:9d:b1:00:10:b5:f9:7d:24:d8:2d:34: 70:03:87:a5:1f:6c:82:3e:f0:1e:14:80:3f:4a:3a:4d:8f:77: c9:0e:41:25:10:ba:8b:59:28:44:a4:b0:1a:40:c7:12:23:06: 5f:16:c4:aa:09:08:ab:17:d6:1d:84:af:6e:33:2a:b6:cb:9a: 66:36:83:54:1c:21:a5:10:62:39:2e:6c:43:a6:60:ea:6e:d7: eb:36:e9:b3:1b:6f:e1:67:bf:9e:0a:39:ce:e4:73:7e:37:d8: a3:12:a8:04 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfTIAm+sYFuF1dvE8VtpLDqJS0kgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNTAzMDgwMzU1MDBaFw0yNjAzMDcwNDAwMDBaMDMxMTAvBgNV BAMTKDE1RDkyMjYzREEwMDk1ODYxRkQ1NzgyQTVCNUE3NkIyQkMwQ0RGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmvUDxBVrtG6kGv5fIqeVECSZ sNQ00RDgM4cUDKGFCY8XRqS/coaqghKHo5VEZb3M8KZ0ifLUjbU6BLTt9wyelLIr WOQ8+lqbIwwY5VZbfMoOf/sVp3eo6WOm9ePFzka3Pr6saISFYGTJgM3akQZXzlan joOvkPqNUHKZijs849XdSkUazHghx+wGN2GedCupQtrvZXDCCaw43m+9iAf+2R/1 zfi2hbRW7N8q/k4E47QSKxzCf1bRMDaV90jqW+u4LLk+K2bpvxn7ysr6jC3dq/EE 0N1bFWg/WKNOJ6daez0jV7Fp3lU9ikq2b6JSAqMHKbz6XLQ0bCdUu9gFJgffAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFdkiY9oAlYYf1XgqW1p2srwM38owHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ5ZGE3YjZhLTRlMWEtNDFmZi1i OGViLThjMzY0Y2QyNjRiMS8wLzMxMzAzMzJlMzczNzJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzNDMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdNzjANBgkqhkiG 9w0BAQsFAAOCAQEAKNqYWLN6jEoOSC8buA+R97HmuVw1nXejJfm4jkQX9WS9z8fW oNv/isNIPq+sqweF6Z7dslms+UydRucfm4EAQCaEm0O4wNvo+gD2Pian465HGipp QnzfRLi9UbIrByRDYk8KUc8pfqWUi+cJefHz2PWBNioxk0ocmYagM0TF0ctmrVTg w2scM/4VIMGMfMbUbzYDUujMF52xABC1+X0k2C00cAOHpR9sgj7wHhSAP0o6TY93 yQ5BJRC6i1koRKSwGkDHEiMGXxbEqgkIqxfWHYSvbjMqtsuaZjaDVBwhpRBiOS5s Q6Zg6m7X6zbpsxtv4We/ngo5zuRzfjfYoxKoBA== -----END CERTIFICATE-----Generated at Mon Apr 7 16:54:50 2025 by rpki-client