$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa File: 3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa (raw, json) Hash identifier: TrjJa445+JUR+ayqk91EMJFWmXepW8pWumfROn/i7JY= Subject key identifier: 3F:19:BA:A7:8D:2D:F1:58:B6:AD:EE:DE:C7:86:D5:CA:2E:94:7A:18 Certificate issuer: /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4 Certificate serial: 62C67AEB72AA0BCBA59FF5FA16E14F042BEE4534 Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa Signing time: Fri 10 Jan 2025 08:00:00 +0000 ROA not before: Fri 10 Jan 2025 07:55:00 +0000 ROA not after: Fri 09 Jan 2026 08:00:00 +0000 asID: 147163 IP address blocks: 103.177.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 15:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c6:7a:eb:72:aa:0b:cb:a5:9f:f5:fa:16:e1:4f:04:2b:ee:45:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4 Validity Not Before: Jan 10 07:55:00 2025 GMT Not After : Jan 9 08:00:00 2026 GMT Subject: CN=3F19BAA78D2DF158B6ADEEDEC786D5CA2E947A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:6f:0b:0f:59:1f:3a:37:e5:a3:e2:ba:4a: 77:bd:42:eb:b0:70:b5:da:e9:99:1f:bc:45:cb:67: fa:48:b6:6f:49:15:2b:75:81:08:05:95:aa:ff:0e: a1:5c:9e:5c:e9:59:88:c2:2c:a8:fb:46:37:28:04: c9:23:51:34:82:c2:15:2d:14:bb:32:6e:d8:5b:cd: f6:96:36:ca:6b:56:74:f6:dd:7b:34:af:bc:25:98: f1:4c:54:41:8d:12:76:54:1e:33:0e:66:02:f2:fb: 47:c9:b6:0a:65:ee:98:26:1c:4d:c3:6a:7d:4e:76: ba:d3:82:7e:4f:c9:02:02:8b:0c:2f:bf:59:bc:79: f1:0f:19:66:b2:ba:7f:1f:49:37:e8:1e:68:87:c0: f4:d1:e5:99:b7:85:df:ed:0d:26:35:89:87:c1:40: 22:94:4f:05:64:93:28:ed:b7:d3:5f:0f:31:8d:9d: e5:ee:a8:84:70:24:cb:2c:76:09:b2:01:80:00:18: 18:33:bc:4f:4d:eb:24:45:92:3b:24:22:c5:f6:c5: 6d:dd:80:21:9d:b2:9c:60:7b:d9:9e:b4:e2:56:95: 66:15:31:4a:a2:e6:ed:50:d0:1a:92:cb:42:37:38: 3f:0f:48:78:03:df:3f:b2:8c:12:a7:d0:8f:60:51: a1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:19:BA:A7:8D:2D:F1:58:B6:AD:EE:DE:C7:86:D5:CA:2E:94:7A:18 X509v3 Authority Key Identifier: keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.214.0/23 Signature Algorithm: sha256WithRSAEncryption 58:80:85:e8:68:4a:9f:09:18:e0:db:8f:7e:03:87:18:6e:02: 75:0f:de:63:49:56:8e:07:6f:08:19:8d:63:2d:48:4d:c1:fd: f6:95:20:7d:d6:18:ee:f3:d2:2e:3b:c2:d1:cd:e4:c7:2e:bf: 6d:c3:d7:26:b1:be:54:ae:1b:b1:9a:98:5e:64:fd:a4:5f:2f: 04:0f:c9:3c:54:2c:e9:8d:7f:86:80:cb:f4:48:a8:3d:84:0f: 6d:39:f6:2b:96:3f:32:13:96:00:5a:01:03:d4:bf:0a:56:7f: b5:e0:07:ca:5b:18:d2:33:0c:e1:7d:e0:e7:0a:83:5b:9c:f2: 68:fb:41:2c:a0:b4:b1:9f:a1:60:ad:b1:15:52:89:f5:3b:7c: fe:4f:97:e0:f9:11:68:53:69:bf:5d:0f:89:fa:fb:ed:3c:23: a7:c7:01:00:da:aa:be:e5:f5:7a:bc:64:80:2f:cf:85:c9:0a: 85:60:98:e6:c5:eb:be:c6:5b:ac:b1:e4:33:da:32:85:60:53: 3f:34:3a:07:84:23:62:cf:1d:5d:6a:29:80:ed:af:c3:2f:9b: ff:3f:0e:e3:24:a1:3f:df:2f:70:d0:10:10:d6:6d:77:28:ef: 32:6e:aa:65:7a:60:c2:6f:12:41:bd:c6:9b:c2:51:de:c7:c0: 83:af:0f:e3 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYsZ663KqC8uln/X6FuFPBCvuRTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4NjlB NEMyMzhGNDAeFw0yNTAxMTAwNzU1MDBaFw0yNjAxMDkwODAwMDBaMDMxMTAvBgNV BAMTKDNGMTlCQUE3OEQyREYxNThCNkFERUVERUM3ODZENUNBMkU5NDdBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaG8LD1kfOjflo+K6Sne9Quuw cLXa6ZkfvEXLZ/pItm9JFSt1gQgFlar/DqFcnlzpWYjCLKj7RjcoBMkjUTSCwhUt FLsybthbzfaWNsprVnT23Xs0r7wlmPFMVEGNEnZUHjMOZgLy+0fJtgpl7pgmHE3D an1OdrrTgn5PyQICiwwvv1m8efEPGWayun8fSTfoHmiHwPTR5Zm3hd/tDSY1iYfB QCKUTwVkkyjtt9NfDzGNneXuqIRwJMssdgmyAYAAGBgzvE9N6yRFkjskIsX2xW3d gCGdspxge9metOJWlWYVMUqi5u1Q0BqSy0I3OD8PSHgD3z+yjBKn0I9gUaE7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPxm6p40t8Vi2re7ex4bVyi6UehgwHwYDVR0j BBgwFoAUrbnBlzUvgSj22qR6In04aaTCOPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzNkMmI2MC0xMmM4LTQxM2UtYjk0MS0zOTNlMDBmZGQ2NTMvMC9BREI5QzE5NzM1 MkY4MTI4RjZEQUE0N0EyMjdEMzg2OUE0QzIzOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4NjlBNEMy MzhGNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3M2QyYjYwLTEyYzgtNDEzZS1i OTQxLTM5M2UwMGZkZDY1My8wLzMxMzAzMzJlMzEzNzM3MmUzMjMxMzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzczMTM2MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnsdYwDQYJ KoZIhvcNAQELBQADggEBAFiAhehoSp8JGODbj34DhxhuAnUP3mNJVo4HbwgZjWMt SE3B/faVIH3WGO7z0i47wtHN5Mcuv23D1yaxvlSuG7GamF5k/aRfLwQPyTxULOmN f4aAy/RIqD2ED2059iuWPzITlgBaAQPUvwpWf7XgB8pbGNIzDOF94OcKg1uc8mj7 QSygtLGfoWCtsRVSifU7fP5Pl+D5EWhTab9dD4n6++08I6fHAQDaqr7l9Xq8ZIAv z4XJCoVgmObF677GW6yx5DPaMoVgUz80OgeEI2LPHV1qKYDtr8Mvm/8/DuMkoT/f L3DQEBDWbXco7zJuqmV6YMJvEkG9xpvCUd7HwIOvD+M= -----END CERTIFICATE-----Generated at Wed Apr 9 19:39:58 2025 by rpki-client