$ rpki-client -vvf repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa File: 3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa (raw, json) Hash identifier: P26CLYaAiMviaHDVXlCPRfno/SeqGYyHaQquQlltu00= Subject key identifier: DA:47:5D:C6:3F:37:31:65:C4:AE:EE:84:F2:22:70:98:CF:4E:C4:49 Certificate issuer: /CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Certificate serial: 2348A7BC1EA81C5022FCACC3EFC5A86D47071D2A Authority key identifier: 7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa Signing time: Fri 27 Dec 2024 07:01:29 +0000 ROA not before: Fri 27 Dec 2024 06:56:29 +0000 ROA not after: Fri 26 Dec 2025 07:01:29 +0000 asID: 141126 IP address blocks: 103.213.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:48:a7:bc:1e:a8:1c:50:22:fc:ac:c3:ef:c5:a8:6d:47:07:1d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Validity Not Before: Dec 27 06:56:29 2024 GMT Not After : Dec 26 07:01:29 2025 GMT Subject: CN=DA475DC63F373165C4AEEE84F2227098CF4EC449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:77:01:63:8c:2e:50:ea:5e:25:e9:37:6a: 3f:2a:01:76:46:5a:76:ec:87:fc:54:a8:27:34:f3: d9:39:c8:77:1f:69:6e:16:8c:12:2c:2c:3e:0f:35: 6e:df:35:e0:b9:41:92:d0:1f:e8:4e:9d:d4:01:b1: e6:48:7c:11:fa:18:29:30:84:52:13:56:e9:66:12: ae:1e:4c:ec:e4:a4:33:94:3a:34:e5:f4:a8:c1:7a: f6:ae:07:ea:c6:1c:53:f3:ee:ee:b3:ea:09:10:d0: 14:15:c9:b9:6f:11:09:11:32:4a:af:20:45:4f:46: b1:04:64:88:ea:c3:18:42:16:f0:9a:60:fe:75:af: ad:a1:78:8f:47:c6:99:37:b4:f1:37:36:7b:91:a3: 51:cf:8b:33:7e:d2:54:6b:e1:12:eb:14:79:da:57: 8d:65:ff:c1:b0:1f:ae:a1:ce:50:2f:05:cb:d2:b6: 6a:4f:b5:45:76:70:b3:5c:5f:33:27:a6:95:15:bb: bf:5c:cf:42:fc:b9:6a:87:3c:75:4d:e7:ea:45:7c: 2a:39:03:4d:05:87:30:d5:0d:14:45:33:9d:47:1e: 81:f2:7e:70:c2:25:73:9a:2e:2d:70:f8:cd:af:b8: 87:6c:d3:4e:e2:8d:a4:62:af:88:1f:45:0b:00:b5: 43:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:47:5D:C6:3F:37:31:65:C4:AE:EE:84:F2:22:70:98:CF:4E:C4:49 X509v3 Authority Key Identifier: keyid:7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.231.0/24 Signature Algorithm: sha256WithRSAEncryption 05:b8:c9:d6:99:75:6e:89:83:22:93:52:81:15:cb:f6:13:c0: de:cb:f0:2a:79:79:ea:09:37:d3:e8:05:89:0b:1d:a4:05:2f: 17:81:2c:83:d8:3b:7e:6b:f9:70:f1:9a:af:e4:b5:26:1f:e3: 6f:df:b3:5e:d9:92:e9:f4:46:a9:4a:80:51:48:59:ba:12:f9: 04:6b:a9:1d:38:c4:cb:6a:31:fa:fe:78:81:6a:80:7c:50:cb: 96:ec:37:87:87:c2:9b:67:17:4e:a9:89:5e:f0:dd:b4:0f:e5: ba:82:6c:ab:19:e8:ba:d7:12:02:3d:b6:b2:8d:db:a3:a5:aa: b1:f5:54:53:38:4d:48:8c:7e:11:03:fc:92:db:76:e1:4a:4b: 45:92:f9:06:8e:26:eb:eb:93:d1:64:b9:b1:cd:55:86:7f:f8: 40:c8:5b:0a:3e:99:4f:db:fb:82:b1:9c:71:29:54:9a:41:98: 0e:2c:d4:90:e8:dd:1f:2c:34:e0:fe:3d:bb:06:54:fb:fe:d0: ff:a8:2f:b3:2a:ec:89:b3:b6:22:0d:a4:73:d0:8c:42:f1:20: bc:8d:e1:f0:b6:08:4f:35:04:63:0c:99:8a:4d:14:bc:f8:e0: 4a:e9:b7:bb:b1:af:99:b8:ba:8e:ed:88:aa:7f:85:ed:5b:ec: a0:f5:55:28 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUI0invB6oHFAi/KzD78WobUcHHSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FE MTY1RkE3NzAeFw0yNDEyMjcwNjU2MjlaFw0yNTEyMjYwNzAxMjlaMDMxMTAvBgNV BAMTKERBNDc1REM2M0YzNzMxNjVDNEFFRUU4NEYyMjI3MDk4Q0Y0RUM0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8ncBY4wuUOpeJek3aj8qAXZG Wnbsh/xUqCc089k5yHcfaW4WjBIsLD4PNW7fNeC5QZLQH+hOndQBseZIfBH6GCkw hFITVulmEq4eTOzkpDOUOjTl9KjBevauB+rGHFPz7u6z6gkQ0BQVyblvEQkRMkqv IEVPRrEEZIjqwxhCFvCaYP51r62heI9Hxpk3tPE3NnuRo1HPizN+0lRr4RLrFHna V41l/8GwH66hzlAvBcvStmpPtUV2cLNcXzMnppUVu79cz0L8uWqHPHVN5+pFfCo5 A00FhzDVDRRFM51HHoHyfnDCJXOaLi1w+M2vuIds007ijaRir4gfRQsAtUN5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU2kddxj83MWXEru6E8iJwmM9OxEkwHwYDVR0j BBgwFoAUfmp4as72hPN3WPxKbYUXytFl+ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjI5MmJhOC1hZDFhLTQxMzktOGMyMC01YjUyNmRhOTcwYmQvMC83RTZBNzg2QUNF RjY4NEYzNzc1OEZDNEE2RDg1MTdDQUQxNjVGQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FEMTY1 RkE3Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyMjkyYmE4LWFkMWEtNDEzOS04 YzIwLTViNTI2ZGE5NzBiZC8wLzMxMzAzMzJlMzIzMTMzMmUzMjMzMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMyMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn1ecwDQYJ KoZIhvcNAQELBQADggEBAAW4ydaZdW6JgyKTUoEVy/YTwN7L8Cp5eeoJN9PoBYkL HaQFLxeBLIPYO35r+XDxmq/ktSYf42/fs17Zkun0RqlKgFFIWboS+QRrqR04xMtq Mfr+eIFqgHxQy5bsN4eHwptnF06piV7w3bQP5bqCbKsZ6LrXEgI9trKN26OlqrH1 VFM4TUiMfhED/JLbduFKS0WS+QaOJuvrk9FkubHNVYZ/+EDIWwo+mU/b+4KxnHEp VJpBmA4s1JDo3R8sNOD+PbsGVPv+0P+oL7Mq7ImztiINpHPQjELxILyN4fC2CE81 BGMMmYpNFLz44Erpt7uxr5m4uo7tiKp/he1b7KD1VSg= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:49 2025 by rpki-client