$ rpki-client -vvf repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa File: 3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa (raw, json) Hash identifier: yCac+KeTfH0lkjTAK49G4zxY27cUgoZJXWm+CK7QM48= Subject key identifier: 83:70:7E:B6:C4:9F:62:C6:7B:6B:E1:9B:2E:7F:D0:4D:08:DA:3F:12 Certificate issuer: /CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53 Certificate serial: 383BF64E02A1FE72B7DD5FA48C906D88DBBB9789 Authority key identifier: AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa Signing time: Thu 12 Dec 2024 17:00:56 +0000 ROA not before: Thu 12 Dec 2024 16:55:56 +0000 ROA not after: Thu 11 Dec 2025 17:00:56 +0000 asID: 142354 IP address blocks: 103.169.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 17:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3b:f6:4e:02:a1:fe:72:b7:dd:5f:a4:8c:90:6d:88:db:bb:97:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53 Validity Not Before: Dec 12 16:55:56 2024 GMT Not After : Dec 11 17:00:56 2025 GMT Subject: CN=83707EB6C49F62C67B6BE19B2E7FD04D08DA3F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:64:2f:cb:a9:8c:77:9f:1b:96:94:d3:40: 7f:36:78:c1:f9:9a:6e:c4:17:e6:d8:f9:76:37:3f: f1:13:4b:55:0c:0d:19:6c:5a:f1:0a:f8:11:75:08: 78:34:87:e9:5a:b1:ec:62:c3:33:0a:5e:1e:1a:ba: a6:dc:ca:aa:18:35:a5:88:c0:14:3b:ce:12:b2:bc: 7f:05:6e:13:a8:b5:db:4e:d5:81:b8:fe:9b:1f:f7: 10:d7:8e:85:10:9a:3c:9d:13:75:87:16:32:ce:a5: 1a:92:f7:20:b7:3b:20:f9:8f:a4:d9:45:7a:64:b0: 17:76:6d:de:68:90:1b:51:33:a1:53:cc:8b:75:d0: e9:2d:90:f4:17:9b:ff:4d:b9:a9:93:9e:95:81:68: af:89:03:42:69:3a:b1:4c:d2:97:ca:20:93:4f:64: 6e:fd:1e:ec:12:c9:db:8f:ef:59:8d:3e:ae:f5:39: 04:49:1b:68:eb:f3:63:a6:b8:4a:ae:4e:e5:2f:b9: aa:2e:aa:7f:c2:18:29:7a:59:37:aa:df:db:b1:ca: 60:59:08:db:80:59:a5:d4:2d:93:c2:3c:a2:46:d8: 0e:bc:ca:e5:c8:5a:59:09:a3:b2:23:81:06:a4:6c: 8c:98:ca:ee:32:6d:11:49:e0:04:3b:d1:ed:cf:49: 96:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:70:7E:B6:C4:9F:62:C6:7B:6B:E1:9B:2E:7F:D0:4D:08:DA:3F:12 X509v3 Authority Key Identifier: keyid:AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.225.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:d5:31:9d:33:0b:34:ce:2e:18:0c:94:ca:ca:8d:e9:cd:e8: a4:a7:33:87:fe:45:6b:c6:40:fe:2f:80:f5:94:8a:b2:bc:ac: 5f:41:af:dd:f5:90:1f:96:1a:10:48:3b:89:f8:0e:ac:fb:39: 82:94:db:8d:f2:2d:86:57:66:4b:f9:b4:5d:98:32:86:86:88: 27:47:fe:87:6b:a1:6a:3c:9e:01:21:39:f3:1b:92:64:88:36: 14:8f:fc:9b:23:fc:92:e5:7d:1c:a2:c5:72:98:d2:08:98:05: 31:96:ae:b8:b8:81:94:c4:2b:66:d5:f9:ef:eb:16:33:17:1e: 62:2a:74:8b:93:61:e1:d5:83:db:f2:29:f4:ab:ba:10:b4:c3: 4b:66:e5:94:2b:4b:1f:93:b2:f5:23:58:7a:b0:4f:91:b3:4f: a2:cd:05:b4:71:d1:8a:e1:83:2d:f0:fc:e1:7b:f9:97:cc:05: 34:78:a2:80:c5:4d:33:1a:eb:9b:11:1c:58:5c:c0:0d:5e:a6: 62:58:d9:95:99:8b:a9:f6:07:90:fe:fa:02:ec:e3:3a:ad:b9: 3c:e7:9e:33:f1:4a:65:de:31:68:e7:17:99:c4:c3:7d:ca:ee: 81:46:98:ff:c9:8f:1f:82:88:cc:96:97:77:f3:19:98:8d:28: 3c:64:f5:60 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUODv2TgKh/nK33V+kjJBtiNu7l4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyQTBGNkIzMDI0QkZGMTE0NThENzJDOEU1NjIzRkI3 NDg2N0Y1MzAeFw0yNDEyMTIxNjU1NTZaFw0yNTEyMTExNzAwNTZaMDMxMTAvBgNV BAMTKDgzNzA3RUI2QzQ5RjYyQzY3QjZCRTE5QjJFN0ZEMDREMDhEQTNGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqGQvy6mMd58blpTTQH82eMH5 mm7EF+bY+XY3P/ETS1UMDRlsWvEK+BF1CHg0h+lasexiwzMKXh4auqbcyqoYNaWI wBQ7zhKyvH8FbhOotdtO1YG4/psf9xDXjoUQmjydE3WHFjLOpRqS9yC3OyD5j6TZ RXpksBd2bd5okBtRM6FTzIt10OktkPQXm/9NuamTnpWBaK+JA0JpOrFM0pfKIJNP ZG79HuwSyduP71mNPq71OQRJG2jr82OmuEquTuUvuaouqn/CGCl6WTeq39uxymBZ CNuAWaXULZPCPKJG2A68yuXIWlkJo7IjgQakbIyYyu4ybRFJ4AQ70e3PSZYPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUg3B+tsSfYsZ7a+GbLn/QTQjaPxIwHwYDVR0j BBgwFoAUrSoPazAkv/EUWNcsjlYj+3SGf1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFmNGRlNS01MDM3LTQ5MTctOWE5My0wMTkyYzY5NTliZmIvMC9BRDJBMEY2QjMw MjRCRkYxMTQ1OEQ3MkM4RTU2MjNGQjc0ODY3RjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyQTBGNkIzMDI0QkZGMTE0NThENzJDOEU1NjIzRkI3NDg2 N0Y1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY2YWY0ZGU1LTUwMzctNDkxNy05 YTkzLTAxOTJjNjk1OWJmYi8wLzMxMzAzMzJlMzEzNjM5MmUzMjMyMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqeEwDQYJ KoZIhvcNAQELBQADggEBAG3VMZ0zCzTOLhgMlMrKjenN6KSnM4f+RWvGQP4vgPWU irK8rF9Br931kB+WGhBIO4n4Dqz7OYKU243yLYZXZkv5tF2YMoaGiCdH/odroWo8 ngEhOfMbkmSINhSP/Jsj/JLlfRyixXKY0giYBTGWrri4gZTEK2bV+e/rFjMXHmIq dIuTYeHVg9vyKfSruhC0w0tm5ZQrSx+TsvUjWHqwT5GzT6LNBbRx0Yrhgy3w/OF7 +ZfMBTR4ooDFTTMa65sRHFhcwA1epmJY2ZWZi6n2B5D++gLs4zqtuTznnjPxSmXe MWjnF5nEw33K7oFGmP/Jjx+CiMyWl3fzGZiNKDxk9WA= -----END CERTIFICATE-----Generated at Sun Apr 6 13:56:59 2025 by rpki-client