$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa File: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (raw, json) Hash identifier: Bja13TBFPvqY44yzY3aF4tzblZJ0XmcATW6a6AzOBBo= Subject key identifier: C1:16:04:2B:5F:15:1B:72:75:82:AD:17:D0:81:40:F6:B6:0B:B5:A0 Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 3657FB549A138B3A9092625B233189FDF4746536 Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa Signing time: Tue 08 Oct 2024 11:00:01 +0000 ROA not before: Tue 08 Oct 2024 10:55:01 +0000 ROA not after: Tue 07 Oct 2025 11:00:01 +0000 asID: 141616 IP address blocks: 103.161.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 13:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:57:fb:54:9a:13:8b:3a:90:92:62:5b:23:31:89:fd:f4:74:65:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Oct 8 10:55:01 2024 GMT Not After : Oct 7 11:00:01 2025 GMT Subject: CN=C116042B5F151B727582AD17D08140F6B60BB5A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:a2:74:be:f8:f6:7e:33:8b:4d:4e:dc:06: 08:19:d0:6a:a9:cf:f2:94:3e:a9:ca:66:7e:32:31: 9d:87:03:c1:6d:1c:1a:f0:76:17:cf:98:2f:19:8b: 6c:44:e8:e8:ce:b7:a9:37:62:a8:d8:85:95:e0:39: 47:3c:18:bc:f6:63:b8:32:7f:e4:d4:88:d0:90:21: 51:3c:73:d8:f9:eb:08:2e:c7:9e:1b:84:0f:26:20: ef:e4:4a:38:8a:38:23:5c:f1:70:75:aa:e4:4b:75: cc:20:07:b2:92:f0:87:8f:ee:9c:86:39:b6:33:20: cd:a2:19:44:a5:92:b7:3d:d4:f0:f2:58:54:0c:be: 47:88:19:b4:4a:69:08:f0:4e:0a:e5:96:a7:f9:4c: 47:ed:09:27:98:a2:93:bc:cf:48:7a:8d:ce:d5:ed: 1c:2c:00:47:16:3f:c1:f2:f4:6b:c0:00:58:7c:05: 0b:12:20:6a:93:1d:3b:a8:70:6e:de:ee:e4:0f:90: 1f:e2:14:c4:3a:ea:ae:bb:6d:bf:38:88:74:cc:bb: a2:cc:00:ae:7c:86:f6:58:83:d7:01:a3:2d:19:e1: 1a:ac:f8:0d:0f:19:ba:2f:c3:02:a0:cc:fe:1a:b5: 54:a6:4e:74:cb:35:56:8d:7d:d9:98:43:18:d1:19: 0e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:16:04:2B:5F:15:1B:72:75:82:AD:17:D0:81:40:F6:B6:0B:B5:A0 X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.162.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:4b:54:34:b9:99:cb:54:e1:4c:ad:17:51:1d:5e:31:0f:09: 86:dc:be:af:ba:a0:26:64:06:d2:95:a7:da:c9:68:20:63:0c: 00:03:a8:f9:45:34:1f:b5:f8:39:96:42:ba:be:e8:33:36:59: 30:dc:35:9b:16:40:30:e0:9d:d7:82:7f:4a:7f:9b:e4:d7:f6: 3d:be:16:05:47:d4:bb:b3:63:bb:69:c1:e8:42:fb:8f:9b:df: ef:cd:be:e7:e8:43:2c:97:59:b5:17:83:2e:ba:b5:60:24:2e: 5d:c0:00:f7:e8:93:09:7e:a0:af:21:90:57:70:d8:32:70:da: 36:82:9b:4e:d4:05:e6:62:a4:e6:13:c4:9e:fd:c6:1e:95:de: ff:b8:c0:9c:77:b9:6e:7a:6e:3e:7d:a9:65:17:cf:4a:f6:c7: f0:91:11:82:f8:48:ea:d3:9b:86:cb:3b:3d:45:4b:61:a4:49: be:a6:37:32:28:a1:29:b4:82:4a:7a:41:43:24:5a:8f:06:09: e1:f7:9d:14:17:e7:91:c7:70:35:24:c5:cc:6b:e6:a9:3f:f4: 54:00:d1:ec:18:46:5a:4a:01:b5:70:11:33:59:72:d7:3b:0c: 1e:88:8b:b4:45:a9:d5:6c:ac:77:9e:d0:6f:00:c6:19:91:76: 15:1f:ab:06 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNlf7VJoTizqQkmJbIzGJ/fR0ZTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNDEwMDgxMDU1MDFaFw0yNTEwMDcxMTAwMDFaMDMxMTAvBgNV BAMTKEMxMTYwNDJCNUYxNTFCNzI3NTgyQUQxN0QwODE0MEY2QjYwQkI1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vaJ0vvj2fjOLTU7cBggZ0Gqp z/KUPqnKZn4yMZ2HA8FtHBrwdhfPmC8Zi2xE6OjOt6k3YqjYhZXgOUc8GLz2Y7gy f+TUiNCQIVE8c9j56wgux54bhA8mIO/kSjiKOCNc8XB1quRLdcwgB7KS8IeP7pyG ObYzIM2iGUSlkrc91PDyWFQMvkeIGbRKaQjwTgrllqf5TEftCSeYopO8z0h6jc7V 7RwsAEcWP8Hy9GvAAFh8BQsSIGqTHTuocG7e7uQPkB/iFMQ66q67bb84iHTMu6LM AK58hvZYg9cBoy0Z4Rqs+A0PGbovwwKgzP4atVSmTnTLNVaNfdmYQxjRGQ7tAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUwRYEK18VG3J1gq0X0IFA9rYLtaAwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMDk0ZDNlLTA4OWMtNGM2OC04 MGEyLTU2YjVjYmZjMTAzZC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM2MzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjMxMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoaIwDQYJ KoZIhvcNAQELBQADggEBADxLVDS5mctU4UytF1EdXjEPCYbcvq+6oCZkBtKVp9rJ aCBjDAADqPlFNB+1+DmWQrq+6DM2WTDcNZsWQDDgndeCf0p/m+TX9j2+FgVH1Luz Y7tpwehC+4+b3+/NvufoQyyXWbUXgy66tWAkLl3AAPfokwl+oK8hkFdw2DJw2jaC m07UBeZipOYTxJ79xh6V3v+4wJx3uW56bj59qWUXz0r2x/CREYL4SOrTm4bLOz1F S2GkSb6mNzIooSm0gkp6QUMkWo8GCeH3nRQX55HHcDUkxcxr5qk/9FQA0ewYRlpK AbVwETNZctc7DB6Ii7RFqdVsrHee0G8AxhmRdhUfqwY= -----END CERTIFICATE-----Generated at Sat Apr 19 12:07:16 2025 by rpki-client