$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa File: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (raw, json) Hash identifier: 5JVOP3sJ/KSoAnVd3nPwui1KeY41b5QAHZTJ/a/8gnU= Subject key identifier: 1B:84:4B:0F:98:84:6E:C4:8D:48:36:49:6A:A5:68:B4:2D:76:67:86 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 64707A7ED94ADABC541DB358F10A4ABF686A94CE Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa Signing time: Tue 14 Jan 2025 07:00:02 +0000 ROA not before: Tue 14 Jan 2025 06:55:02 +0000 ROA not after: Tue 13 Jan 2026 07:00:02 +0000 asID: 24529 IP address blocks: 103.217.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 19:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:70:7a:7e:d9:4a:da:bc:54:1d:b3:58:f1:0a:4a:bf:68:6a:94:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Jan 14 06:55:02 2025 GMT Not After : Jan 13 07:00:02 2026 GMT Subject: CN=1B844B0F98846EC48D4836496AA568B42D766786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:6d:d2:e1:a8:b6:aa:e4:69:7f:83:cf:1d: f6:7c:fa:39:b3:c5:2b:31:35:ce:73:14:6f:53:df: ca:91:50:41:45:94:db:1b:a2:d7:41:bf:b2:46:5d: 42:32:2b:1b:8a:89:de:fd:8c:af:ea:e2:f2:76:60: 82:24:dc:37:a9:bb:60:ac:d2:88:01:6b:8d:e7:a5: e1:94:e3:c3:e8:44:47:e8:64:f0:bd:f0:04:f8:f0: 10:37:79:f4:0f:f7:45:96:93:bd:42:8e:79:49:3d: 0a:4c:36:2f:f2:84:39:96:8c:ef:c3:55:94:67:51: 91:fa:00:6e:30:51:ac:ee:4a:0a:cf:99:01:8c:1e: d5:b3:1b:11:44:92:57:3d:06:71:b0:26:9f:5c:d4: 15:9e:d8:42:b6:2b:f7:19:6e:37:c7:7e:c3:ef:bd: 56:62:72:e2:e4:b8:10:a2:69:40:b4:1c:d3:f6:d1: 3f:03:99:2b:75:fc:e5:93:df:e9:46:fb:59:6d:03: 8e:0b:e9:e6:3d:fa:8b:94:52:d7:67:de:43:a5:e9: e0:9d:a3:4a:c6:b5:05:f3:13:1f:22:e5:c3:37:03: b5:64:0a:ca:ab:03:ab:77:d1:5f:bb:9f:4c:7e:70: 09:60:b6:28:c6:f5:88:18:b3:a7:6c:a7:57:fe:59: 7c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:84:4B:0F:98:84:6E:C4:8D:48:36:49:6A:A5:68:B4:2D:76:67:86 X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.217.218.0/24 Signature Algorithm: sha256WithRSAEncryption c6:27:a3:34:7d:31:b1:5c:a5:7d:ac:d4:96:d6:3d:c2:b5:db: f7:c9:a1:c6:1e:eb:7f:3e:c0:25:50:70:7c:a3:16:ff:90:5e: b2:fb:60:b9:d3:fe:1c:12:07:f3:68:65:99:10:32:d1:93:e5: 46:31:62:3f:75:86:43:a7:05:7e:c8:12:65:57:d1:a3:a5:c4: 2c:af:42:11:d9:14:d2:8d:94:1e:42:c9:77:30:18:7f:67:f2: 4c:61:b3:8d:53:f9:13:06:21:3c:7f:9c:68:40:2d:85:c8:bd: f6:bd:34:cb:d8:c5:1e:b3:bb:c9:85:df:c0:7c:33:41:de:78: d1:6a:a4:d4:a9:90:07:a6:0c:60:12:05:7f:b6:55:ff:55:3d: ca:14:14:5f:20:a7:c7:c4:3c:50:5a:d0:c4:ad:0c:ca:9d:9d: e6:d1:e3:ef:a3:61:3b:c5:3f:e5:ac:83:a3:b1:80:d2:cc:45: a7:a1:ad:38:e3:c9:fa:20:f8:37:60:00:1a:0e:67:3e:ce:85: 38:63:ba:37:fa:ad:bf:cc:7d:23:11:c2:46:6b:ce:2a:c9:da: 44:61:2e:6b:f6:d6:bf:1d:b2:4e:4b:0c:ca:3a:30:97:57:ca: 50:5c:42:58:18:59:52:5e:a3:eb:6b:d4:4b:0e:98:10:5c:89: 99:da:f1:83 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZHB6ftlK2rxUHbNY8QpKv2hqlM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNTAxMTQwNjU1MDJaFw0yNjAxMTMwNzAwMDJaMDMxMTAvBgNV BAMTKDFCODQ0QjBGOTg4NDZFQzQ4RDQ4MzY0OTZBQTU2OEI0MkQ3NjY3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52G3S4ai2quRpf4PPHfZ8+jmz xSsxNc5zFG9T38qRUEFFlNsbotdBv7JGXUIyKxuKid79jK/q4vJ2YIIk3Depu2Cs 0ogBa43npeGU48PoREfoZPC98AT48BA3efQP90WWk71CjnlJPQpMNi/yhDmWjO/D VZRnUZH6AG4wUazuSgrPmQGMHtWzGxFEklc9BnGwJp9c1BWe2EK2K/cZbjfHfsPv vVZicuLkuBCiaUC0HNP20T8DmSt1/OWT3+lG+1ltA44L6eY9+ouUUtdn3kOl6eCd o0rGtQXzEx8i5cM3A7VkCsqrA6t30V+7n0x+cAlgtijG9YgYs6dsp1f+WXwJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUG4RLD5iEbsSNSDZJaqVotC12Z4YwHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyMmY1MTUyLWEyOTUtNDdiNy1h ZGRjLWZiZmVmMzI0N2UzYi8wLzMxMzAzMzJlMzIzMTM3MmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9naMA0GCSqG SIb3DQEBCwUAA4IBAQDGJ6M0fTGxXKV9rNSW1j3Ctdv3yaHGHut/PsAlUHB8oxb/ kF6y+2C50/4cEgfzaGWZEDLRk+VGMWI/dYZDpwV+yBJlV9GjpcQsr0IR2RTSjZQe Qsl3MBh/Z/JMYbONU/kTBiE8f5xoQC2FyL32vTTL2MUes7vJhd/AfDNB3njRaqTU qZAHpgxgEgV/tlX/VT3KFBRfIKfHxDxQWtDErQzKnZ3m0ePvo2E7xT/lrIOjsYDS zEWnoa0448n6IPg3YAAaDmc+zoU4Y7o3+q2/zH0jEcJGa84qydpEYS5r9ta/HbJO SwzKOjCXV8pQXEJYGFlSXqPra9RLDpgQXImZ2vGD -----END CERTIFICATE-----Generated at Tue Apr 8 16:01:24 2025 by rpki-client