$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e20313339393338.roa File: 3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (raw, json) Hash identifier: Oed5Ss8UCWFYg2IP6FcmD4GyOtzzcl9PEDa+w2C64YA= Subject key identifier: 32:1B:4E:1F:21:3F:7B:65:C3:3F:A0:C2:02:C1:3C:6D:95:8E:D4:C0 Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Certificate serial: 7ABF76A0B181A8803C974CD18024F895B2636CCE Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e20313339393338.roa Signing time: Wed 04 Dec 2024 04:11:54 +0000 ROA not before: Wed 04 Dec 2024 04:06:54 +0000 ROA not after: Wed 03 Dec 2025 04:11:54 +0000 asID: 139938 IP address blocks: 103.18.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 22:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:bf:76:a0:b1:81:a8:80:3c:97:4c:d1:80:24:f8:95:b2:63:6c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Validity Not Before: Dec 4 04:06:54 2024 GMT Not After : Dec 3 04:11:54 2025 GMT Subject: CN=321B4E1F213F7B65C33FA0C202C13C6D958ED4C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:57:a4:ee:1a:e5:79:48:58:4c:c1:ac:0a: 43:7b:0a:e0:52:d4:59:f7:50:d6:1c:3b:43:9f:86: c6:14:80:e9:4e:bf:e7:c8:6a:76:ad:92:bf:bc:45: e5:e0:b5:ed:25:2f:af:5d:aa:10:1f:36:80:f8:a9: 7e:8c:f1:45:21:92:23:53:54:be:aa:6c:bf:c5:c5: 48:5d:1b:df:30:02:3a:8f:73:d7:46:e2:4e:73:96: 75:d6:f5:b5:91:53:3c:38:3c:85:be:05:f6:6a:93: a3:3e:42:ac:2d:79:08:20:75:8a:62:8a:f9:02:c2: d8:4e:f3:d8:95:df:b8:f2:a8:0c:f7:b3:77:5e:4d: 9f:02:90:1f:45:1f:89:f9:3b:93:2c:ca:b4:1a:d3: d7:a5:d3:eb:3e:f2:7b:67:01:be:c2:a1:2c:e3:ea: 5a:16:d3:3b:d4:3c:00:e8:00:ab:79:60:be:0e:27: c0:7a:e9:b5:ab:b4:87:41:34:3f:02:59:99:3f:a5: 31:f1:da:a1:ff:44:69:ef:20:40:21:f1:49:ed:9d: 18:be:c0:15:14:2c:48:3c:44:5f:02:76:89:42:bd: c6:71:b8:31:fd:e0:2b:28:ab:b0:9a:9e:a5:51:20: 7b:ff:35:43:e0:64:a4:a4:19:f9:cf:9d:87:64:bd: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1B:4E:1F:21:3F:7B:65:C3:3F:A0:C2:02:C1:3C:6D:95:8E:D4:C0 X509v3 Authority Key Identifier: keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e20313339393338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.28.0/22 Signature Algorithm: sha256WithRSAEncryption 43:fb:81:a4:6b:f6:37:f5:fc:aa:ea:e6:03:98:58:7a:af:67: 00:6e:76:dc:40:3c:62:94:cf:1b:5a:07:1f:85:80:81:70:18: b4:b9:35:8a:cd:7d:cf:3e:20:72:f7:f8:7e:33:be:18:e2:27: 7b:03:1a:f8:c6:79:e8:bc:3a:03:bf:17:55:74:24:39:e1:a2: 98:7e:ee:be:58:18:0a:8b:17:2d:b5:64:c5:82:ee:33:c0:c1: 0d:17:e8:44:27:2f:f5:a4:0c:61:f6:7f:d9:7e:d6:1a:61:0b: b0:0e:48:49:be:db:d4:e7:42:9a:ed:45:8a:41:7d:40:20:98: d5:dd:f6:37:99:92:07:34:19:7d:67:06:d0:26:35:3f:37:5c: 36:e8:a0:56:9d:6f:53:d2:26:dd:1c:7f:fd:47:f4:ff:95:ca: 19:41:53:50:9e:df:d8:6b:a5:ee:93:51:f6:a0:0c:0e:83:f0: ed:05:24:1d:6f:48:96:bd:d8:f8:e6:f4:a4:93:99:f1:77:93: 65:5a:85:d6:90:a1:ee:a3:f7:b5:96:80:a7:47:40:0d:b5:55: d1:90:9e:6c:b1:08:72:15:ad:21:72:0e:e2:24:15:5f:c7:4a: 51:3d:57:2a:64:89:28:78:e5:83:a7:79:70:cb:64:ca:6f:a1: e2:41:84:36 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUer92oLGBqIA8l0zRgCT4lbJjbM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1 MDU3QUNFNTAeFw0yNDEyMDQwNDA2NTRaFw0yNTEyMDMwNDExNTRaMDMxMTAvBgNV BAMTKDMyMUI0RTFGMjEzRjdCNjVDMzNGQTBDMjAyQzEzQzZEOTU4RUQ0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZlek7hrleUhYTMGsCkN7CuBS 1Fn3UNYcO0OfhsYUgOlOv+fIanatkr+8ReXgte0lL69dqhAfNoD4qX6M8UUhkiNT VL6qbL/FxUhdG98wAjqPc9dG4k5zlnXW9bWRUzw4PIW+BfZqk6M+QqwteQggdYpi ivkCwthO89iV37jyqAz3s3deTZ8CkB9FH4n5O5MsyrQa09el0+s+8ntnAb7CoSzj 6loW0zvUPADoAKt5YL4OJ8B66bWrtIdBND8CWZk/pTHx2qH/RGnvIEAh8UntnRi+ wBUULEg8RF8CdolCvcZxuDH94Csoq7CanqVRIHv/NUPgZKSkGfnPnYdkvVRVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMhtOHyE/e2XDP6DCAsE8bZWO1MAwHwYDVR0j BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2 RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3 QUNFNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3Y2Q2OGY0LTY5YTUtNDc1Zi1h ZWU0LTNlZjRiOGQzMDJkZC8wLzMxMzAzMzJlMzEzODJlMzIzODJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcSHDANBgkqhkiG 9w0BAQsFAAOCAQEAQ/uBpGv2N/X8qurmA5hYeq9nAG523EA8YpTPG1oHH4WAgXAY tLk1is19zz4gcvf4fjO+GOInewMa+MZ56Lw6A78XVXQkOeGimH7uvlgYCosXLbVk xYLuM8DBDRfoRCcv9aQMYfZ/2X7WGmELsA5ISb7b1OdCmu1FikF9QCCY1d32N5mS BzQZfWcG0CY1PzdcNuigVp1vU9Im3Rx//Uf0/5XKGUFTUJ7f2Gul7pNR9qAMDoPw 7QUkHW9Ilr3Y+Ob0pJOZ8XeTZVqF1pCh7qP3tZaAp0dADbVV0ZCebLEIchWtIXIO 4iQVX8dKUT1XKmSJKHjlg6d5cMtkym+h4kGENg== -----END CERTIFICATE-----Generated at Thu Apr 17 05:27:05 2025 by rpki-client