$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa File: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: FwEnmWvpQPi3X//OQNwFe+4W6d+oidU+6VtbWJyAezc= Subject key identifier: AA:D7:E1:55:2B:EF:42:18:5F:3B:83:32:24:3A:24:B6:05:09:D6:93 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 2A7E69481D223B264778151B28A93A69F7F47146 Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa Signing time: Wed 04 Dec 2024 09:00:00 +0000 ROA not before: Wed 04 Dec 2024 08:55:00 +0000 ROA not after: Wed 03 Dec 2025 09:00:00 +0000 asID: 135478 IP address blocks: 103.129.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 18:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7e:69:48:1d:22:3b:26:47:78:15:1b:28:a9:3a:69:f7:f4:71:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: Dec 4 08:55:00 2024 GMT Not After : Dec 3 09:00:00 2025 GMT Subject: CN=AAD7E1552BEF42185F3B8332243A24B60509D693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:a3:78:b8:cf:f2:63:1f:e9:54:6a:7e:e9: b8:84:02:02:db:41:96:9d:32:d1:45:97:ef:42:9c: 94:f1:47:50:c9:68:9f:ca:9d:5b:28:f3:e3:66:89: ec:23:3b:a3:d4:98:5f:28:9d:c3:6d:9b:8c:77:d8: 4a:62:d4:80:66:46:e7:d0:bb:4c:18:0e:3d:bb:a4: ab:dc:93:fa:f9:e6:6e:7e:0b:53:e6:92:52:c0:3b: 1f:80:15:90:e1:1a:92:83:34:31:ab:de:cb:27:6b: 18:88:f1:3e:0b:cb:b5:3c:1a:14:0c:4e:72:54:e2: 0e:cd:9c:bf:d0:22:b8:28:25:31:71:28:a2:04:77: 54:3e:88:eb:9f:44:39:d7:f3:3e:eb:c8:02:e3:4a: 3f:04:90:f1:62:a9:52:ca:73:b9:b5:59:f0:66:c6: 28:a6:13:2c:f7:4c:77:fc:c6:92:99:ef:96:70:bf: e4:f0:8f:1e:98:ed:8a:34:49:e0:c5:26:97:d8:9c: af:ff:7c:d7:c9:29:bc:ab:6f:13:f8:67:c4:50:0d: a6:17:14:8e:19:35:ad:27:f9:7f:7e:0c:a2:9e:c9: e3:05:b5:04:24:d1:34:8a:c0:63:f3:18:fe:7a:87: 46:7a:f3:35:d7:40:d3:0d:48:51:85:c2:54:d5:42: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:E1:55:2B:EF:42:18:5F:3B:83:32:24:3A:24:B6:05:09:D6:93 X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.22.0/23 Signature Algorithm: sha256WithRSAEncryption 76:a4:54:52:cb:47:c3:af:a9:f4:40:dc:76:5f:e1:47:0d:c8: e8:35:21:29:fb:57:d1:a8:d1:98:fc:30:54:0d:00:ac:ee:1d: d2:29:2c:e0:51:0a:af:79:b9:fc:fb:26:0b:4d:a9:37:e5:17: 3a:70:98:d0:e8:fe:20:b5:a0:39:ef:f0:36:77:db:0c:a2:03: 55:4e:6f:ee:25:9c:f6:84:b0:fb:47:77:a5:ee:3e:b0:aa:ac: 81:d2:e6:bc:72:8c:6e:57:30:8c:24:be:c2:04:7b:03:35:8f: 2a:02:af:53:e0:95:8f:e7:f1:b4:8a:3a:dc:c7:2d:25:f9:7a: a6:77:76:e7:73:0e:3a:73:e0:a8:78:1d:6a:2d:0c:ce:f5:4b: c2:08:a4:ff:68:54:89:94:31:3d:d0:ab:1c:23:43:9e:20:eb: 4f:29:07:06:bf:10:58:20:b4:4b:74:e3:d1:bd:2a:c4:9b:1d: a3:28:98:36:e7:f3:f4:92:9d:a9:30:f4:40:69:f1:4b:35:63: 6d:f6:d8:65:d0:58:0e:35:2c:dd:66:05:f1:c4:9e:35:ba:be: d9:09:47:0e:fc:bb:22:67:a7:6b:75:4e:04:fe:eb:9e:ec:7c: d3:d6:02:60:ba:75:84:ad:8d:3a:c8:01:8b:5c:79:16:98:e6: cf:01:b7:08 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKn5pSB0iOyZHeBUbKKk6aff0cUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNDEyMDQwODU1MDBaFw0yNTEyMDMwOTAwMDBaMDMxMTAvBgNV BAMTKEFBRDdFMTU1MkJFRjQyMTg1RjNCODMzMjI0M0EyNEI2MDUwOUQ2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdO6N4uM/yYx/pVGp+6biEAgLb QZadMtFFl+9CnJTxR1DJaJ/KnVso8+NmiewjO6PUmF8oncNtm4x32Epi1IBmRufQ u0wYDj27pKvck/r55m5+C1PmklLAOx+AFZDhGpKDNDGr3ssnaxiI8T4Ly7U8GhQM TnJU4g7NnL/QIrgoJTFxKKIEd1Q+iOufRDnX8z7ryALjSj8EkPFiqVLKc7m1WfBm xiimEyz3THf8xpKZ75Zwv+Twjx6Y7Yo0SeDFJpfYnK//fNfJKbyrbxP4Z8RQDaYX FI4ZNa0n+X9+DKKeyeMFtQQk0TSKwGPzGP56h0Z68zXXQNMNSFGFwlTVQv4jAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqtfhVSvvQhhfO4MyJDoktgUJ1pMwHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2NTQyODM5LTI4NTgtNDlmMC1h Y2RmLWZhN2QzYWI5YzU1OC8wLzMxMzAzMzJlMzEzMjM5MmUzMjMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4EWMA0GCSqG SIb3DQEBCwUAA4IBAQB2pFRSy0fDr6n0QNx2X+FHDcjoNSEp+1fRqNGY/DBUDQCs 7h3SKSzgUQqvebn8+yYLTak35Rc6cJjQ6P4gtaA57/A2d9sMogNVTm/uJZz2hLD7 R3el7j6wqqyB0ua8coxuVzCMJL7CBHsDNY8qAq9T4JWP5/G0ijrcxy0l+Xqmd3bn cw46c+CoeB1qLQzO9UvCCKT/aFSJlDE90KscI0OeIOtPKQcGvxBYILRLdOPRvSrE mx2jKJg25/P0kp2pMPRAafFLNWNt9thl0FgONSzdZgXxxJ41ur7ZCUcO/LsiZ6dr dU4E/uue7HzT1gJgunWErY06yAGLXHkWmObPAbcI -----END CERTIFICATE-----Generated at Sun Apr 6 19:36:44 2025 by rpki-client