$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa File: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (raw, json) Hash identifier: QdxrdH7DJeQ01d2yPs/0LNDYNMsAKR57bx9AHeSr82o= Subject key identifier: 10:4C:09:1B:74:02:12:DF:26:2A:79:DB:67:28:2A:23:08:73:40:64 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 3DE4D121A3BCA943F5286A5E9499369769E5172B Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa Signing time: Mon 02 Dec 2024 14:39:06 +0000 ROA not before: Mon 02 Dec 2024 14:34:06 +0000 ROA not after: Mon 01 Dec 2025 14:39:06 +0000 asID: 136087 IP address blocks: 103.87.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 08:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e4:d1:21:a3:bc:a9:43:f5:28:6a:5e:94:99:36:97:69:e5:17:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Dec 2 14:34:06 2024 GMT Not After : Dec 1 14:39:06 2025 GMT Subject: CN=104C091B740212DF262A79DB67282A2308734064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:b3:28:8c:ff:c1:5d:2b:96:36:a2:94:61: 56:8f:2d:e7:c3:0d:95:bc:69:2e:59:03:67:c0:61: fb:fa:ed:96:e0:38:70:db:68:b0:65:3c:0b:6f:a8: ea:a5:6d:bc:8a:57:1c:e7:4a:b4:4f:1c:7d:f3:60: cb:6f:f3:bd:de:46:79:3f:b0:98:7f:c3:6d:0b:ef: 7f:6f:bf:27:c4:a6:9b:02:5e:06:60:ed:1b:eb:ad: 95:65:3b:e3:1e:c1:8a:9e:44:ad:ab:f9:fc:45:35: c5:ed:29:1b:d6:4a:85:72:bc:c7:80:23:ac:09:6a: 96:43:26:79:c7:3f:3d:90:ed:59:3c:34:b7:29:cb: f6:b2:5b:44:42:18:25:33:0d:2a:2c:ae:55:c9:59: cd:99:f2:2e:0b:88:2f:df:0c:ae:c4:db:d4:57:b9: 1d:82:b7:2a:52:e3:8a:2c:2e:a1:32:c9:e9:35:c8: dd:09:dc:b2:aa:48:c4:c5:7c:3f:78:25:69:cb:e7: d9:e4:cb:53:fd:ef:27:f6:63:e7:60:4c:52:fd:38: a3:84:02:5c:65:b0:78:44:55:9b:15:ca:a9:5b:5b: 57:9b:dd:b4:22:95:2c:9d:0f:fb:e3:75:42:a1:dd: f9:c4:6f:3d:56:b0:a8:e2:43:24:76:f3:fe:06:aa: 82:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4C:09:1B:74:02:12:DF:26:2A:79:DB:67:28:2A:23:08:73:40:64 X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.197.0/24 Signature Algorithm: sha256WithRSAEncryption 87:a2:69:b5:e8:cc:a4:cd:16:ad:91:ac:c2:0d:9f:37:d4:7d: 2a:e4:75:eb:7f:58:82:fb:f0:2b:ee:10:87:29:4c:f5:5e:15: 57:c6:64:d1:fb:64:e6:6a:15:f2:9e:2f:5b:25:a3:5b:df:15: d1:fc:15:56:fa:9f:54:a6:08:1a:ef:08:91:09:d9:b9:2f:85: fb:f6:1f:65:48:7a:49:60:fb:29:a5:a1:3b:02:7b:63:d6:36: 88:cd:64:56:22:8c:38:d7:cc:66:82:0b:b5:56:47:90:0e:d9: 95:64:0c:32:5d:39:2a:69:4b:96:af:9c:28:58:1f:86:85:1b: be:d7:49:ce:f9:dd:9a:74:46:23:87:79:c4:ea:3f:23:1f:e0: 98:5e:85:c4:da:95:ee:fe:c2:34:bc:2b:a6:93:ae:b5:26:be: 60:46:41:a6:50:9d:6e:f8:cd:92:7b:67:a9:73:f0:87:a8:ee: a9:35:79:1a:a8:37:67:2d:ac:0a:05:a8:7e:0a:ee:29:88:ea: af:ce:7a:5e:06:57:f7:09:02:d0:85:24:a6:31:b6:ca:a2:42: a5:4d:dc:32:89:1e:95:63:eb:b1:e2:70:45:e0:e6:7d:09:a3: d6:0c:79:5b:46:e6:3a:64:67:cb:0d:ef:b1:3e:9e:2a:08:7f: 37:d4:4a:2a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPeTRIaO8qUP1KGpelJk2l2nlFyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNDEyMDIxNDM0MDZaFw0yNTEyMDExNDM5MDZaMDMxMTAvBgNV BAMTKDEwNEMwOTFCNzQwMjEyREYyNjJBNzlEQjY3MjgyQTIzMDg3MzQwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCie7MojP/BXSuWNqKUYVaPLefD DZW8aS5ZA2fAYfv67ZbgOHDbaLBlPAtvqOqlbbyKVxznSrRPHH3zYMtv873eRnk/ sJh/w20L739vvyfEppsCXgZg7RvrrZVlO+MewYqeRK2r+fxFNcXtKRvWSoVyvMeA I6wJapZDJnnHPz2Q7Vk8NLcpy/ayW0RCGCUzDSosrlXJWc2Z8i4LiC/fDK7E29RX uR2CtypS44osLqEyyek1yN0J3LKqSMTFfD94JWnL59nky1P97yf2Y+dgTFL9OKOE AlxlsHhEVZsVyqlbW1eb3bQilSydD/vjdUKh3fnEbz1WsKjiQyR28/4GqoLPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEEwJG3QCEt8mKnnbZygqIwhzQGQwHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2ZTYzY2QyLWZiM2MtNDFiMi1i OTZiLWFiMjM0NDIwYTIxMS8wLzMxMzAzMzJlMzgzNzJlMzEzOTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1fFMA0GCSqG SIb3DQEBCwUAA4IBAQCHomm16MykzRatkazCDZ831H0q5HXrf1iC+/Ar7hCHKUz1 XhVXxmTR+2TmahXyni9bJaNb3xXR/BVW+p9Upgga7wiRCdm5L4X79h9lSHpJYPsp paE7Antj1jaIzWRWIow418xmggu1VkeQDtmVZAwyXTkqaUuWr5woWB+GhRu+10nO +d2adEYjh3nE6j8jH+CYXoXE2pXu/sI0vCumk661Jr5gRkGmUJ1u+M2Se2epc/CH qO6pNXkaqDdnLawKBah+Cu4piOqvznpeBlf3CQLQhSSmMbbKokKlTdwyiR6VY+ux 4nBF4OZ9CaPWDHlbRuY6ZGfLDe+xPp4qCH831Eoq -----END CERTIFICATE-----Generated at Mon Apr 21 05:33:09 2025 by rpki-client