$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313530323736.roa File: 3130332e34312e3234392e302f32342d3234203d3e20313530323736.roa (raw, json) Hash identifier: vy4zhIdLEqZCtXS9+fGip5FORyw2IGWmyRchCzclHqY= Subject key identifier: 80:2A:D0:A3:CC:DD:87:37:B0:95:9C:88:44:BC:AD:84:80:96:A5:F3 Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 5C33F6B2E07DFA0322F10F37A5713570C9B4FDF3 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313530323736.roa Signing time: Wed 19 Mar 2025 05:56:15 +0000 ROA not before: Wed 19 Mar 2025 05:51:15 +0000 ROA not after: Wed 18 Mar 2026 05:56:15 +0000 asID: 150276 IP address blocks: 103.41.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:33:f6:b2:e0:7d:fa:03:22:f1:0f:37:a5:71:35:70:c9:b4:fd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Mar 19 05:51:15 2025 GMT Not After : Mar 18 05:56:15 2026 GMT Subject: CN=802AD0A3CCDD8737B0959C8844BCAD848096A5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:bf:08:6c:ad:41:61:62:a6:34:63:10:06: 8d:a0:be:e6:96:04:cd:d2:79:e0:a6:df:26:5c:8f: 97:76:5b:8b:ae:44:c8:da:0d:78:7c:ad:53:4b:ca: 05:9e:37:31:bc:74:b6:af:00:ab:22:a1:be:c0:e7: 3a:8e:3a:48:47:79:83:bc:52:89:43:cb:7b:9b:9e: 5c:4e:87:0e:2f:ec:7a:6f:46:30:73:a4:f3:7a:4f: 9e:44:0b:c1:2c:7d:fc:d0:1c:93:2e:8a:7b:c9:70: 87:84:10:67:66:89:7b:5e:59:de:18:86:14:4c:1d: 3d:0f:0f:12:bb:2b:4d:64:8a:61:1e:16:ba:c1:83: 21:5d:9e:12:4e:4a:ea:bd:e9:56:53:2f:50:0b:5f: da:47:49:4a:26:b4:fe:f2:7e:e2:6a:44:cd:08:5b: e1:c7:25:03:f9:03:36:7e:b4:43:8f:32:d0:fb:91: 76:28:25:ab:8a:e1:87:c4:b5:30:cd:74:cd:be:2f: 25:d1:f0:e9:e4:67:63:f7:a4:26:8f:83:46:7f:5e: b7:22:44:2d:c5:7e:2f:1b:bc:5c:fc:97:ee:45:00: a2:d6:21:b2:fc:67:91:54:eb:c6:7f:b8:ab:a1:f2: 46:f9:77:04:ae:1a:b2:f7:13:0a:4c:d4:79:2b:16: 30:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2A:D0:A3:CC:DD:87:37:B0:95:9C:88:44:BC:AD:84:80:96:A5:F3 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313530323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.249.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:fc:c8:9d:53:e4:25:eb:86:c9:50:f9:30:9c:5d:dd:d4:e2: 55:ee:34:58:bd:e2:96:ff:31:ed:15:a1:e7:a2:c0:a7:5c:71: 58:fa:1b:b7:19:66:40:d5:8f:38:6a:85:49:96:da:7b:8d:11: 4b:3f:49:e4:85:97:f9:6c:61:c9:1e:8a:02:f3:06:07:c0:74: 0d:52:13:91:49:64:15:23:65:3b:1b:a5:12:96:54:8a:ac:88: 2b:c4:02:61:b7:c8:4e:42:ad:d4:ea:77:5e:18:b1:9d:b1:b8: ab:2a:d1:81:08:41:9f:51:03:64:c1:1c:ab:5b:11:f7:73:5b: 70:79:1b:0c:a7:17:09:c1:b3:c3:3c:dc:22:ec:22:20:a4:e1: 0b:cc:c1:da:b1:e6:5d:5c:6f:7b:47:f5:74:88:8b:94:49:52: cf:bb:a9:3c:bc:e1:e4:06:37:26:9e:df:89:93:cd:94:58:13: 94:52:49:dd:69:99:40:6e:17:aa:05:d1:38:e8:57:68:d5:a9: d0:80:82:2c:db:fe:24:47:f8:0b:b8:cd:cd:51:c1:2f:51:cd: 67:01:cc:9d:1c:ed:8b:26:e3:4e:69:39:67:dc:9d:2a:67:16: 3b:67:36:3e:a5:79:1a:9f:70:4c:84:eb:a4:93:bd:f6:63:19: ac:2e:ca:90 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXDP2suB9+gMi8Q83pXE1cMm0/fMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNTAzMTkwNTUxMTVaFw0yNjAzMTgwNTU2MTVaMDMxMTAvBgNV BAMTKDgwMkFEMEEzQ0NERDg3MzdCMDk1OUM4ODQ0QkNBRDg0ODA5NkE1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4n78IbK1BYWKmNGMQBo2gvuaW BM3SeeCm3yZcj5d2W4uuRMjaDXh8rVNLygWeNzG8dLavAKsiob7A5zqOOkhHeYO8 UolDy3ubnlxOhw4v7HpvRjBzpPN6T55EC8EsffzQHJMuinvJcIeEEGdmiXteWd4Y hhRMHT0PDxK7K01kimEeFrrBgyFdnhJOSuq96VZTL1ALX9pHSUomtP7yfuJqRM0I W+HHJQP5AzZ+tEOPMtD7kXYoJauK4YfEtTDNdM2+LyXR8OnkZ2P3pCaPg0Z/Xrci RC3Ffi8bvFz8l+5FAKLWIbL8Z5FU68Z/uKuh8kb5dwSuGrL3EwpM1HkrFjBBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgCrQo8zdhzewlZyIRLythICWpfMwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3NTI3N2U4LTdkMGYtNDE4NC05 YzI4LWE2NjM1ZWZlZjI5Yy8wLzMxMzAzMzJlMzQzMTJlMzIzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyn5MA0GCSqG SIb3DQEBCwUAA4IBAQBL/MidU+Ql64bJUPkwnF3d1OJV7jRYveKW/zHtFaHnosCn XHFY+hu3GWZA1Y84aoVJltp7jRFLP0nkhZf5bGHJHooC8wYHwHQNUhORSWQVI2U7 G6USllSKrIgrxAJht8hOQq3U6ndeGLGdsbirKtGBCEGfUQNkwRyrWxH3c1tweRsM pxcJwbPDPNwi7CIgpOELzMHaseZdXG97R/V0iIuUSVLPu6k8vOHkBjcmnt+Jk82U WBOUUkndaZlAbheqBdE46Fdo1anQgIIs2/4kR/gLuM3NUcEvUc1nAcydHO2LJuNO aTln3J0qZxY7ZzY+pXkan3BMhOukk732YxmsLsqQ -----END CERTIFICATE-----Generated at Sun Apr 6 07:44:48 2025 by rpki-client