$ rpki-client -vvf repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230362e302f32342d3234203d3e203538343837.roa File: 3130332e38342e3230362e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: 7arGMuC545SXWQKW/CPxALp6qAEVOocmqFJNcs6tC24= Subject key identifier: 2E:49:CF:70:10:9F:90:3A:4C:A2:2E:E8:4B:26:F3:D0:6E:BA:81:CF Certificate issuer: /CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Certificate serial: 1E9B4655508267DEBFD74DE600D39DEF6F06F5AB Authority key identifier: FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230362e302f32342d3234203d3e203538343837.roa Signing time: Tue 24 Dec 2024 11:00:02 +0000 ROA not before: Tue 24 Dec 2024 10:55:02 +0000 ROA not after: Tue 23 Dec 2025 11:00:02 +0000 asID: 58487 IP address blocks: 103.84.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 02:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9b:46:55:50:82:67:de:bf:d7:4d:e6:00:d3:9d:ef:6f:06:f5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Validity Not Before: Dec 24 10:55:02 2024 GMT Not After : Dec 23 11:00:02 2025 GMT Subject: CN=2E49CF70109F903A4CA22EE84B26F3D06EBA81CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:f3:18:64:7b:9a:58:d6:1d:16:ea:33:8a: 76:5a:50:18:38:2c:aa:54:a5:63:70:37:a4:f6:85: 83:5b:14:85:54:c1:3c:7d:2b:06:7a:02:80:4e:fa: f2:97:a5:5d:59:54:e7:2f:d4:46:72:58:91:90:d0: 6c:25:cc:9f:58:8f:ae:77:9d:15:49:47:44:df:97: 9e:5f:41:9c:88:eb:55:bb:d6:01:f7:66:35:6d:6b: b2:33:cd:8f:c4:80:e2:77:f4:bd:b4:5b:20:d4:73: 83:63:36:90:30:71:46:0c:70:8b:23:a2:49:2f:3d: 3c:0a:a2:31:25:f0:42:45:9c:0c:8a:4e:7a:5e:d4: 41:56:5d:63:9e:bf:3f:4e:1f:4d:8e:b8:a5:49:bd: af:1f:19:c2:9f:ac:1b:c8:19:33:50:1b:70:f8:51: d3:18:56:8c:b3:40:11:0f:9f:cb:44:bf:9c:20:cd: 6f:7a:72:36:4d:45:8f:5d:16:99:8e:dc:da:ad:f0: 38:86:91:9e:01:c4:f3:76:52:c1:63:f2:f0:82:5a: 8e:97:e0:f4:a2:f3:65:10:05:68:d4:b8:64:5f:80: 39:4d:66:81:11:54:b1:d1:2b:0c:8a:e0:b3:25:64: 6b:0a:43:3e:86:6a:bc:17:28:e6:b1:46:1a:a5:44: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:49:CF:70:10:9F:90:3A:4C:A2:2E:E8:4B:26:F3:D0:6E:BA:81:CF X509v3 Authority Key Identifier: keyid:FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230362e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.206.0/24 Signature Algorithm: sha256WithRSAEncryption 87:e6:fd:be:31:cd:f2:4b:f5:e5:c6:25:b3:43:e9:8f:a3:9d: 1b:85:b1:71:66:95:1a:54:47:63:dd:03:9f:4b:90:3f:ec:1c: 04:30:e8:2f:73:f8:e7:bc:78:b4:d2:6b:9e:31:41:12:52:c6: 37:33:19:17:e2:6a:0a:01:6b:66:ad:ff:0d:d3:26:5a:0a:7b: 5a:44:c9:25:dc:36:4b:98:b0:21:5d:67:c7:9f:4b:8e:0b:1e: 8e:da:d0:2d:a6:3f:56:e8:06:0f:06:c3:76:13:df:a0:3b:cf: 13:8e:63:a1:be:ac:ce:5c:be:16:5b:6c:81:e5:1d:80:a2:e5: fa:4c:d6:71:ec:3c:3b:8b:04:f6:0a:37:5f:0f:07:16:a1:45: 66:b6:f3:e3:52:e1:ac:32:8c:46:22:e8:47:d6:0f:0c:9b:36: 74:54:89:f3:3e:e2:4e:0c:32:d8:b9:36:52:6e:bd:ad:ff:fa: dd:6a:bd:ad:a3:5c:93:17:fc:70:b2:46:e6:84:cf:95:ea:84: 6b:3b:f0:61:35:19:b4:ca:7d:0b:3f:fb:ea:eb:81:b4:0e:72: 36:1d:8e:d7:fa:c5:2f:c4:77:ea:c3:26:94:48:88:03:36:92: 02:69:62:8a:bc:fa:c0:e7:a3:53:ab:66:fe:8b:76:20:b0:f1: be:b5:a9:04 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHptGVVCCZ96/103mANOd728G9aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3 MURDQUNBMTAeFw0yNDEyMjQxMDU1MDJaFw0yNTEyMjMxMTAwMDJaMDMxMTAvBgNV BAMTKDJFNDlDRjcwMTA5RjkwM0E0Q0EyMkVFODRCMjZGM0QwNkVCQTgxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGUvMYZHuaWNYdFuozinZaUBg4 LKpUpWNwN6T2hYNbFIVUwTx9KwZ6AoBO+vKXpV1ZVOcv1EZyWJGQ0GwlzJ9Yj653 nRVJR0Tfl55fQZyI61W71gH3ZjVta7IzzY/EgOJ39L20WyDUc4NjNpAwcUYMcIsj okkvPTwKojEl8EJFnAyKTnpe1EFWXWOevz9OH02OuKVJva8fGcKfrBvIGTNQG3D4 UdMYVoyzQBEPn8tEv5wgzW96cjZNRY9dFpmO3Nqt8DiGkZ4BxPN2UsFj8vCCWo6X 4PSi82UQBWjUuGRfgDlNZoERVLHRKwyK4LMlZGsKQz6GarwXKOaxRhqlRF43AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULknPcBCfkDpMoi7oSybz0G66gc8wHwYDVR0j BBgwFoAU/8w8h5JQ9jUWVK/i7RN+7XHcrKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGVlYTA4Yy0zZmQyLTQ4OGUtYTU3NC05ZjliYjYzMWE2MmIvMC9GRkNDM0M4Nzky NTBGNjM1MTY1NEFGRTJFRDEzN0VFRDcxRENBQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3MURD QUNBMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwZWVhMDhjLTNmZDItNDg4ZS1h NTc0LTlmOWJiNjMxYTYyYi8wLzMxMzAzMzJlMzgzNDJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdUzjANBgkqhkiG 9w0BAQsFAAOCAQEAh+b9vjHN8kv15cYls0Ppj6OdG4WxcWaVGlRHY90Dn0uQP+wc BDDoL3P457x4tNJrnjFBElLGNzMZF+JqCgFrZq3/DdMmWgp7WkTJJdw2S5iwIV1n x59LjgsejtrQLaY/VugGDwbDdhPfoDvPE45job6szly+FltsgeUdgKLl+kzWcew8 O4sE9go3Xw8HFqFFZrbz41LhrDKMRiLoR9YPDJs2dFSJ8z7iTgwy2Lk2Um69rf/6 3Wq9raNckxf8cLJG5oTPleqEazvwYTUZtMp9Cz/76uuBtA5yNh2O1/rFL8R36sMm lEiIAzaSAmliirz6wOejU6tm/ot2ILDxvrWpBA== -----END CERTIFICATE-----Generated at Thu Apr 17 05:21:25 2025 by rpki-client