$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa File: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (raw, json) Hash identifier: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI= Subject key identifier: 60:9E:27:3B:E9:C0:59:19:2F:21:3A:51:6E:12:37:42:BE:8D:82:D9 Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 2FE05BF2BC41ECDA1F3582188730B930202D4769 Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa Signing time: Wed 22 Jan 2025 11:00:00 +0000 ROA not before: Wed 22 Jan 2025 10:55:00 +0000 ROA not after: Wed 21 Jan 2026 11:00:00 +0000 asID: 149340 IP address blocks: 103.178.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 08:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e0:5b:f2:bc:41:ec:da:1f:35:82:18:87:30:b9:30:20:2d:47:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Jan 22 10:55:00 2025 GMT Not After : Jan 21 11:00:00 2026 GMT Subject: CN=609E273BE9C059192F213A516E123742BE8D82D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:8c:18:3c:af:ce:07:c4:d8:b4:d1:43:dc: 63:75:c6:8f:e3:47:73:ea:cb:77:44:b0:68:2c:2c: 11:2c:4f:4e:43:90:a8:0c:e4:de:17:39:27:52:2e: 6c:34:40:6c:43:e6:ec:30:65:51:b5:6c:1f:9d:31: 28:1d:23:9e:57:2f:47:6c:1d:20:42:9a:11:f6:29: a7:29:2e:3b:fd:31:a3:eb:05:c8:68:71:66:1b:76: 0e:40:c3:4e:94:06:5c:8b:e4:36:3b:5d:9f:86:bb: d3:48:77:d4:5d:c9:b7:91:c4:01:29:c8:fa:03:ca: 86:77:52:a4:2e:61:2c:58:4a:d2:5b:48:8a:97:8e: 49:e5:c6:be:8f:11:ea:4f:a5:d6:82:34:dc:d3:91: 84:8d:b0:a1:a3:4c:47:40:d7:5a:84:b2:f0:48:14: 6a:22:a5:26:3d:a0:e0:97:5d:55:1a:e2:0a:b6:91: a3:e2:07:41:41:a1:20:9d:ac:5b:ce:c5:14:f8:ed: 15:62:40:27:60:e3:81:78:2e:71:15:17:e5:15:a6: fc:67:5f:ba:8c:33:be:00:3a:d8:39:16:46:5a:37: e4:0b:b1:41:11:0b:c4:13:4e:3a:e1:16:27:d0:35: d9:63:a2:dc:52:40:3c:a5:1b:18:18:47:d3:a7:bf: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9E:27:3B:E9:C0:59:19:2F:21:3A:51:6E:12:37:42:BE:8D:82:D9 X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.146.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:25:e2:f0:3b:54:4e:5d:8e:3d:9c:71:29:5a:6a:b1:ee:31: c8:70:21:6c:32:94:9e:6c:03:77:ff:a8:84:f5:3c:1a:fd:06: f9:1c:68:f4:30:a0:de:d2:94:4f:fd:fb:91:3b:c4:1b:df:c1: c3:fa:1b:ae:c0:e6:06:0a:63:38:6d:6e:a4:09:17:a1:4e:fd: d3:6a:d6:2c:eb:21:f5:bb:53:20:ef:06:54:ce:85:c9:97:10: 3c:43:8a:a2:9b:5e:e0:57:13:9b:e7:e1:f6:bd:ff:32:08:ce: e0:b4:2f:d8:f2:44:cb:0e:f4:da:2d:55:a7:f0:a5:55:cf:6d: b8:0d:b5:c3:4a:ad:15:8f:35:0d:cf:5f:73:7b:9d:6f:c9:9f: d8:fa:9c:70:3b:b9:8c:63:bc:50:89:eb:30:f7:cb:e0:dd:bf: 77:22:ef:a1:be:29:27:60:cb:a3:6c:d5:79:bc:3e:53:68:46: 96:03:ef:3d:fa:d4:03:b7:20:4d:f8:e1:83:41:3d:a7:0d:a1: 3c:34:7e:e8:64:2e:49:8c:80:7a:97:22:af:34:e7:dc:c5:b0: 30:e6:f4:a7:36:c7:f4:5e:69:22:8d:8d:db:ae:b1:c3:a3:5d: db:a4:c1:38:5c:ae:2d:9d:60:b9:19:f4:41:ad:b5:d5:45:c6: f2:d3:f8:f6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUL+Bb8rxB7NofNYIYhzC5MCAtR2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTAxMjIxMDU1MDBaFw0yNjAxMjExMTAwMDBaMDMxMTAvBgNV BAMTKDYwOUUyNzNCRTlDMDU5MTkyRjIxM0E1MTZFMTIzNzQyQkU4RDgyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdgowYPK/OB8TYtNFD3GN1xo/j R3Pqy3dEsGgsLBEsT05DkKgM5N4XOSdSLmw0QGxD5uwwZVG1bB+dMSgdI55XL0ds HSBCmhH2KacpLjv9MaPrBchocWYbdg5Aw06UBlyL5DY7XZ+Gu9NId9RdybeRxAEp yPoDyoZ3UqQuYSxYStJbSIqXjknlxr6PEepPpdaCNNzTkYSNsKGjTEdA11qEsvBI FGoipSY9oOCXXVUa4gq2kaPiB0FBoSCdrFvOxRT47RViQCdg44F4LnEVF+UVpvxn X7qMM74AOtg5FkZaN+QLsUERC8QTTjrhFifQNdljotxSQDylGxgYR9Onv9H1AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUYJ4nO+nAWRkvITpRbhI3Qr6NgtkwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYWI4MDQyLTBlMWMtNDNiMS1i NzAzLTYzNDM4YmUyMzI1Yi8wLzMxMzAzMzJlMzEzNzM4MmUzMTM0MzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnspIwDQYJ KoZIhvcNAQELBQADggEBAH8l4vA7VE5djj2ccSlaarHuMchwIWwylJ5sA3f/qIT1 PBr9BvkcaPQwoN7SlE/9+5E7xBvfwcP6G67A5gYKYzhtbqQJF6FO/dNq1izrIfW7 UyDvBlTOhcmXEDxDiqKbXuBXE5vn4fa9/zIIzuC0L9jyRMsO9NotVafwpVXPbbgN tcNKrRWPNQ3PX3N7nW/Jn9j6nHA7uYxjvFCJ6zD3y+Ddv3ci76G+KSdgy6Ns1Xm8 PlNoRpYD7z361AO3IE344YNBPacNoTw0fuhkLkmMgHqXIq8059zFsDDm9Kc2x/Re aSKNjduuscOjXdukwThcri2dYLkZ9EGttdVFxvLT+PY= -----END CERTIFICATE-----Generated at Sun Apr 6 17:50:19 2025 by rpki-client