$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/3130332e32302e31362e302f32342d3234203d3e20313439393633.roa File: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (raw, json) Hash identifier: /oTxpeHjPJYhl6hW+GlWq1U1CfO/JzPNZlsGo0jZga0= Subject key identifier: FC:E4:BA:0F:3C:0F:88:88:76:22:4F:AD:80:BA:C2:A5:67:6D:DA:7F Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 74D62BD8E02EA6BED39461D57FBA47BC61E26EB7 Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/3130332e32302e31362e302f32342d3234203d3e20313439393633.roa Signing time: Tue 25 Jun 2024 05:00:00 +0000 ROA not before: Tue 25 Jun 2024 04:55:00 +0000 ROA not after: Tue 24 Jun 2025 05:00:00 +0000 asID: 149963 IP address blocks: 103.20.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 21:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d6:2b:d8:e0:2e:a6:be:d3:94:61:d5:7f:ba:47:bc:61:e2:6e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Jun 25 04:55:00 2024 GMT Not After : Jun 24 05:00:00 2025 GMT Subject: CN=FCE4BA0F3C0F888876224FAD80BAC2A5676DDA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d9:b6:05:04:b2:af:75:f9:3a:58:6d:19:c0: 0a:0e:d5:1f:74:b7:4f:6e:64:d1:9b:4f:bd:0b:51: 1a:1e:65:43:7d:18:dc:b5:32:45:e2:b7:45:6e:96: ad:18:30:4e:f7:c8:68:5e:7c:b4:02:d1:d6:29:2b: 23:8c:fc:6c:30:10:33:9b:64:f6:64:8c:90:9a:c8: f7:0c:61:7f:63:89:3c:18:d2:c5:ce:7b:4a:7b:e1: 52:69:e7:b8:ed:13:d8:c4:fd:d8:9c:38:01:0e:cb: 4c:54:7e:75:0d:a7:1f:42:6f:83:43:75:b7:ca:8d: 8d:ea:ab:97:33:95:76:f8:83:79:25:70:4d:48:ab: dc:cc:65:d8:48:20:d2:30:92:8a:92:0b:06:40:0c: 01:c8:53:72:76:73:6d:6a:c2:9c:07:f9:1b:0b:37: 10:28:59:34:21:22:c3:d4:ea:7c:e3:84:9c:30:88: 86:d5:6d:95:8e:95:b6:7c:64:9d:ac:d9:76:34:d6: 0c:f7:56:d2:87:e8:3f:d4:7d:26:99:29:af:48:cb: ac:34:90:ec:60:34:ee:8f:19:f6:23:d0:d1:e8:55: fc:ac:26:a9:26:9d:2d:f3:6b:26:f7:c2:a5:8e:85: 1a:24:a3:e8:ee:21:08:9f:f8:a8:35:7c:17:22:63: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:BA:0F:3C:0F:88:88:76:22:4F:AD:80:BA:C2:A5:67:6D:DA:7F X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/3130332e32302e31362e302f32342d3234203d3e20313439393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.16.0/24 Signature Algorithm: sha256WithRSAEncryption b4:fa:14:f0:fa:90:af:b7:5b:89:08:ed:9e:58:fa:48:59:9a: 22:4e:94:5c:df:58:99:04:63:7a:61:dd:97:5a:b0:8e:7a:40: ed:2d:0c:b7:f1:c0:ca:ac:8b:e1:97:77:61:2f:a5:ed:e6:66: ca:52:e0:da:d0:e5:e5:5b:cb:c8:a3:11:26:a1:90:4c:fc:cf: 34:e2:c8:15:02:19:9d:5b:ca:cb:9b:f4:27:2d:c0:22:42:35: 7d:b6:21:f7:b5:5c:ec:93:54:bb:03:83:99:f2:bd:1f:44:a8: 81:a3:2d:79:6b:bf:b1:2f:40:03:83:5d:ff:aa:32:ca:b0:de: 62:d3:e5:d5:23:6b:5f:1f:03:49:0f:11:88:9b:ec:29:cc:2f: 1b:2e:00:1b:d5:b6:f2:71:2e:0c:e5:73:d6:e0:c9:e7:94:fc: e8:67:56:31:75:55:b0:57:4f:f7:69:d8:4d:62:36:a3:b9:c0: 0a:01:d1:5d:b1:cf:4e:54:fc:15:42:ce:3d:3d:b8:7a:21:c0: 2a:ee:b5:29:e5:96:a4:87:49:57:3b:7b:a6:42:45:ce:77:f4: a0:77:c6:ba:e9:ae:ee:6b:0f:75:d8:3a:44:d2:4f:f5:5b:d6: 90:8c:86:40:b5:6d:22:7a:a3:25:70:bb:6e:59:fb:5d:d8:8e: ec:32:3e:d7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdNYr2OAupr7TlGHVf7pHvGHibrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNDA2MjUwNDU1MDBaFw0yNTA2MjQwNTAwMDBaMDMxMTAvBgNV BAMTKEZDRTRCQTBGM0MwRjg4ODg3NjIyNEZBRDgwQkFDMkE1Njc2RERBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn2bYFBLKvdfk6WG0ZwAoO1R90 t09uZNGbT70LURoeZUN9GNy1MkXit0Vulq0YME73yGhefLQC0dYpKyOM/GwwEDOb ZPZkjJCayPcMYX9jiTwY0sXOe0p74VJp57jtE9jE/dicOAEOy0xUfnUNpx9Cb4ND dbfKjY3qq5czlXb4g3klcE1Iq9zMZdhIINIwkoqSCwZADAHIU3J2c21qwpwH+RsL NxAoWTQhIsPU6nzjhJwwiIbVbZWOlbZ8ZJ2s2XY01gz3VtKH6D/UfSaZKa9Iy6w0 kOxgNO6PGfYj0NHoVfysJqkmnS3zayb3wqWOhRoko+juIQif+Kg1fBciY3lZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU/OS6DzwPiIh2Ik+tgLrCpWdt2n8wHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0M2RiN2QyLWIzZmQtNDIxNC1i NmE0LWQwMTYyZjk1ZTcyZS8wLzMxMzAzMzJlMzIzMDJlMzEzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM5MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcUEDANBgkqhkiG 9w0BAQsFAAOCAQEAtPoU8PqQr7dbiQjtnlj6SFmaIk6UXN9YmQRjemHdl1qwjnpA 7S0Mt/HAyqyL4Zd3YS+l7eZmylLg2tDl5VvLyKMRJqGQTPzPNOLIFQIZnVvKy5v0 Jy3AIkI1fbYh97Vc7JNUuwODmfK9H0SogaMteWu/sS9AA4Nd/6oyyrDeYtPl1SNr Xx8DSQ8RiJvsKcwvGy4AG9W28nEuDOVz1uDJ55T86GdWMXVVsFdP92nYTWI2o7nA CgHRXbHPTlT8FULOPT24eiHAKu61KeWWpIdJVzt7pkJFznf0oHfGuumu7msPddg6 RNJP9VvWkIyGQLVtInqjJXC7bln7XdiO7DI+1w== -----END CERTIFICATE-----Generated at Fri Feb 21 11:10:03 2025 by rpki-client