$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa File: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (raw, json) Hash identifier: kHBDyPefqsguh5TCEwR1/CilgDV5vN4olgvGsk/91XM= Subject key identifier: 84:0B:4D:9B:04:C9:2B:C0:A0:3E:47:36:5A:02:79:29:16:9B:C5:97 Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Certificate serial: 411BB91B4BC7148B9B0773DE5A458540B87EAC4B Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa Signing time: Mon 20 Jan 2025 09:00:34 +0000 ROA not before: Mon 20 Jan 2025 08:55:34 +0000 ROA not after: Mon 19 Jan 2026 09:00:34 +0000 asID: 136094 IP address blocks: 103.89.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Feb 2025 20:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1b:b9:1b:4b:c7:14:8b:9b:07:73:de:5a:45:85:40:b8:7e:ac:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Validity Not Before: Jan 20 08:55:34 2025 GMT Not After : Jan 19 09:00:34 2026 GMT Subject: CN=840B4D9B04C92BC0A03E47365A027929169BC597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:30:06:e0:df:00:e9:ab:6e:7b:cf:c0:61: d8:ea:38:fe:19:1f:db:08:5b:55:50:19:1c:16:0b: bf:b1:15:c4:97:1e:87:cc:ad:3d:45:1b:51:5c:77: fc:91:8a:39:3c:a7:0a:3c:c7:b0:fd:2f:3b:42:46: 34:42:ba:0f:3c:47:65:34:e0:18:ac:a4:8b:1d:67: 82:9a:50:3c:85:72:36:f4:e3:d8:e6:25:b6:06:71: 31:99:d0:02:48:bc:8b:89:5b:e5:47:da:68:7c:c1: c8:9a:f0:1a:31:65:67:ec:d6:b6:c2:18:b4:4b:44: 32:0f:4e:2d:9f:0d:f0:3a:a7:33:d7:4a:81:4c:10: d9:82:26:8c:a4:43:d5:b2:13:16:23:86:de:90:d2: 87:36:7a:7e:4d:a4:c7:11:d5:ac:13:4a:0d:72:fc: 46:c5:47:6d:61:4e:fe:56:86:8c:bb:22:b1:34:be: 1a:f7:1e:d2:5e:e5:0d:f5:dd:9e:5e:79:70:ed:9c: 26:d6:2e:17:90:7b:ca:83:27:af:83:a8:67:62:6f: 66:52:e7:53:92:59:c1:9e:5c:31:86:8b:d8:8d:1d: 1f:28:72:aa:96:b1:19:51:57:6c:8e:5e:57:09:f6: 0c:24:14:27:06:30:ed:7b:d1:d4:74:d8:3a:9c:27: 1e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0B:4D:9B:04:C9:2B:C0:A0:3E:47:36:5A:02:79:29:16:9B:C5:97 X509v3 Authority Key Identifier: keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.124.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:da:7a:e0:55:35:97:26:20:76:93:27:fd:e2:6c:61:e0:3a: c1:fd:54:bf:09:b9:9a:ef:a2:e9:81:f9:69:b7:e7:7c:63:c8: c3:28:5f:3b:c8:e3:b3:c1:2c:85:aa:8c:4b:42:2f:c8:40:4a: 8c:d6:d3:ba:33:95:f5:99:bb:3b:3e:61:e4:e5:24:23:49:12: 5c:c2:eb:1b:ba:bb:d7:b9:75:ae:9b:ac:ff:b7:0c:23:04:c2: 74:56:7b:f3:a9:0d:43:c8:b6:b3:3f:cb:e4:af:d0:ee:c9:d4: 19:c9:35:78:9d:ff:7a:c6:54:5e:a5:31:1a:3a:f6:2e:3a:66: be:e9:5b:af:c8:50:b1:41:fa:22:96:94:e3:97:e7:06:c8:a6: c3:8f:e3:b2:3f:7f:e4:77:7c:bf:a9:28:1c:7b:f1:5b:13:67: ee:fd:ab:bb:62:38:39:ab:f1:ea:3c:cf:8a:fc:da:35:40:ce: b9:6e:12:22:30:d4:e9:9e:76:e8:a9:46:2d:5f:62:06:72:14: 81:0c:78:9c:7e:4e:ef:3d:07:e8:c5:9d:f7:c1:18:6c:c2:bd: 1e:3c:7a:b3:15:ef:12:e3:74:da:12:ba:17:6a:07:b1:f4:64: eb:a4:7f:1c:5b:a2:a7:36:c9:8b:5b:2c:8e:f0:5e:98:51:fb: 96:7d:00:36 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQRu5G0vHFIubB3PeWkWFQLh+rEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky N0U4MTVFODAeFw0yNTAxMjAwODU1MzRaFw0yNjAxMTkwOTAwMzRaMDMxMTAvBgNV BAMTKDg0MEI0RDlCMDRDOTJCQzBBMDNFNDczNjVBMDI3OTI5MTY5QkM1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0TAG4N8A6atue8/AYdjqOP4Z H9sIW1VQGRwWC7+xFcSXHofMrT1FG1Fcd/yRijk8pwo8x7D9LztCRjRCug88R2U0 4BispIsdZ4KaUDyFcjb049jmJbYGcTGZ0AJIvIuJW+VH2mh8wcia8BoxZWfs1rbC GLRLRDIPTi2fDfA6pzPXSoFMENmCJoykQ9WyExYjht6Q0oc2en5NpMcR1awTSg1y /EbFR21hTv5Whoy7IrE0vhr3HtJe5Q313Z5eeXDtnCbWLheQe8qDJ6+DqGdib2ZS 51OSWcGeXDGGi9iNHR8ocqqWsRlRV2yOXlcJ9gwkFCcGMO170dR02DqcJx5NAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhAtNmwTJK8CgPkc2WgJ5KRabxZcwHwYDVR0j BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4 MTVFOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkYTE0ZTNhLTViZTAtNDZkMS05 MDNjLTA1OWIwYjY4ODgyMS8wLzMxMzAzMzJlMzgzOTJlMzEzMjM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ1l8MA0GCSqG SIb3DQEBCwUAA4IBAQCa2nrgVTWXJiB2kyf94mxh4DrB/VS/Cbma76Lpgflpt+d8 Y8jDKF87yOOzwSyFqoxLQi/IQEqM1tO6M5X1mbs7PmHk5SQjSRJcwusburvXuXWu m6z/twwjBMJ0VnvzqQ1DyLazP8vkr9DuydQZyTV4nf96xlRepTEaOvYuOma+6Vuv yFCxQfoilpTjl+cGyKbDj+OyP3/kd3y/qSgce/FbE2fu/au7Yjg5q/HqPM+K/No1 QM65bhIiMNTpnnboqUYtX2IGchSBDHicfk7vPQfoxZ33wRhswr0ePHqzFe8S43Ta EroXagex9GTrpH8cW6KnNsmLWyyO8F6YUfuWfQA2 -----END CERTIFICATE-----Generated at Fri Feb 21 11:21:57 2025 by rpki-client