$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa File: 3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa (raw, json) Hash identifier: rLdsEk/Nq9G97gkUzhGIrN3ctiuj1EF/XqFTuKSgtbw= Subject key identifier: 1F:4C:02:23:6F:EA:42:3E:FD:CE:80:AA:CD:37:7C:C8:05:89:71:E8 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 138B9F578E1E19AF3B57376DCDFC09AE8B66AD51 Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa Signing time: Tue 26 Nov 2024 11:21:33 +0000 ROA not before: Tue 26 Nov 2024 11:16:33 +0000 ROA not after: Tue 25 Nov 2025 11:21:33 +0000 asID: 9251 IP address blocks: 103.253.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 23:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8b:9f:57:8e:1e:19:af:3b:57:37:6d:cd:fc:09:ae:8b:66:ad:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Nov 26 11:16:33 2024 GMT Not After : Nov 25 11:21:33 2025 GMT Subject: CN=1F4C02236FEA423EFDCE80AACD377CC8058971E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:19:71:4f:08:df:76:53:06:65:c0:2d:8d: 72:64:dd:cf:57:94:00:3c:ed:8e:67:2b:13:e4:28: 09:26:1b:3f:cc:ad:5d:02:49:62:11:05:d3:b7:b9: 32:70:a4:ec:a2:90:d3:51:4c:e0:bd:05:64:2c:fb: 77:49:8b:a6:37:2c:fa:82:e0:0d:6b:08:45:f7:61: 57:93:f4:f7:01:00:a3:87:74:fe:6e:a3:cc:34:ce: eb:0e:36:f9:db:f3:c7:a7:fb:5c:d9:d0:bf:46:02: 33:7f:83:f1:7a:93:26:07:95:46:60:79:e1:83:b3: fa:87:d2:8d:45:0e:6c:6c:82:bc:a0:50:58:09:a2: c6:9d:66:26:da:f4:00:1d:de:56:39:3e:06:e5:66: 8d:bc:a8:0f:07:ed:18:4d:36:ed:ae:39:4e:f2:da: 8a:9b:7d:b2:c9:6b:d7:dd:95:b2:40:71:5f:63:d4: e9:e7:13:96:f9:8f:e9:b2:18:03:00:a5:cb:ee:02: 2e:e1:99:0d:c4:d0:69:93:5f:49:68:9a:98:c7:b7: b2:66:5e:19:c0:ba:5c:3e:42:56:c5:ae:9e:bc:80: a0:4d:1b:a2:f7:ac:f4:41:70:95:35:36:7c:a1:46: 4d:9f:3a:4b:54:cb:54:44:af:cd:a0:e5:97:a8:f4: ad:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4C:02:23:6F:EA:42:3E:FD:CE:80:AA:CD:37:7C:C8:05:89:71:E8 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.106.0/23 Signature Algorithm: sha256WithRSAEncryption be:33:de:c5:0b:e4:7e:75:8b:47:77:b4:25:e5:44:2e:4a:01: 18:f7:25:94:23:d2:9a:11:cc:14:62:52:fa:41:14:0e:69:e3: 04:be:4d:14:75:eb:66:46:3c:1d:18:3e:4e:df:97:ae:81:86: 0d:03:02:25:cd:e9:bb:54:6c:d7:db:1e:f9:b6:3c:fc:99:d6: 70:b4:be:04:c6:58:ef:33:b2:90:79:d8:d0:d8:a4:39:e0:3e: 8f:50:7f:3a:5c:9c:6b:c0:cc:1b:4f:64:95:76:6a:cb:6e:30: 50:5a:4b:70:63:3a:58:76:ff:58:10:e1:79:be:5c:ac:9f:8a: fb:e4:e0:82:50:5e:68:6d:c3:50:60:80:da:56:5a:bf:25:37: 49:18:81:b9:b9:cf:02:00:a2:21:08:9d:19:23:52:6b:9f:df: 7b:07:08:73:22:fc:08:02:bc:95:f6:bb:61:6c:05:1a:3b:fe: dd:48:b1:13:df:14:87:96:cf:57:e8:21:68:f7:a3:e4:82:09: 32:62:1c:b4:7b:2d:20:d2:a0:35:34:a1:49:0f:9f:e0:90:43: 7b:b1:92:a9:ad:a8:65:ae:fd:12:ad:e3:93:1a:5d:b9:1c:b1: b0:1d:56:3b:e8:ad:d7:a3:e2:99:c3:16:74:16:99:7b:c7:7b: c6:22:aa:ad -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUE4ufV44eGa87VzdtzfwJrotmrVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNDExMjYxMTE2MzNaFw0yNTExMjUxMTIxMzNaMDMxMTAvBgNV BAMTKDFGNEMwMjIzNkZFQTQyM0VGRENFODBBQUNEMzc3Q0M4MDU4OTcxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrhlxTwjfdlMGZcAtjXJk3c9X lAA87Y5nKxPkKAkmGz/MrV0CSWIRBdO3uTJwpOyikNNRTOC9BWQs+3dJi6Y3LPqC 4A1rCEX3YVeT9PcBAKOHdP5uo8w0zusONvnb88en+1zZ0L9GAjN/g/F6kyYHlUZg eeGDs/qH0o1FDmxsgrygUFgJosadZiba9AAd3lY5PgblZo28qA8H7RhNNu2uOU7y 2oqbfbLJa9fdlbJAcV9j1OnnE5b5j+myGAMApcvuAi7hmQ3E0GmTX0lompjHt7Jm XhnAulw+QlbFrp68gKBNG6L3rPRBcJU1NnyhRk2fOktUy1REr82g5Zeo9K1tAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUH0wCI2/qQj79zoCqzTd8yAWJcegwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzAzMzJlMzIzNTMzMmUzMTMwMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzOTMyMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWf9ajANBgkqhkiG 9w0BAQsFAAOCAQEAvjPexQvkfnWLR3e0JeVELkoBGPcllCPSmhHMFGJS+kEUDmnj BL5NFHXrZkY8HRg+Tt+XroGGDQMCJc3pu1Rs19se+bY8/JnWcLS+BMZY7zOykHnY 0NikOeA+j1B/Olyca8DMG09klXZqy24wUFpLcGM6WHb/WBDheb5crJ+K++TgglBe aG3DUGCA2lZavyU3SRiBubnPAgCiIQidGSNSa5/fewcIcyL8CAK8lfa7YWwFGjv+ 3UixE98Uh5bPV+ghaPej5IIJMmIctHstINKgNTShSQ+f4JBDe7GSqa2oZa79Eq3j kxpduRyxsB1WO+it16PimcMWdBaZe8d7xiKqrQ== -----END CERTIFICATE-----Generated at Mon Apr 7 01:15:23 2025 by rpki-client