$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa File: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (raw, json) Hash identifier: mb2pM5mXThua6WdA1EeTpxCUj69c6y3IginfkESyKCw= Subject key identifier: CB:7D:BF:94:8F:F1:56:AD:F8:72:74:93:44:F7:8A:5F:66:9A:26:1E Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 4358E75C4AFD09BAB5B7E3E25613EB47D9858B43 Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa Signing time: Wed 04 Dec 2024 09:03:10 +0000 ROA not before: Wed 04 Dec 2024 08:58:10 +0000 ROA not after: Wed 03 Dec 2025 09:03:10 +0000 asID: 135478 IP address blocks: 103.121.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 04:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:58:e7:5c:4a:fd:09:ba:b5:b7:e3:e2:56:13:eb:47:d9:85:8b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: Dec 4 08:58:10 2024 GMT Not After : Dec 3 09:03:10 2025 GMT Subject: CN=CB7DBF948FF156ADF872749344F78A5F669A261E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:5a:45:e5:64:b0:2a:c3:64:60:81:24:46: c9:cd:d8:6d:7a:ed:1b:ea:36:97:cf:2c:19:a3:c4: d5:1f:fd:07:21:23:10:94:9d:a9:f0:0a:28:c7:fa: f9:6a:9c:b0:dc:22:b0:be:b3:51:56:02:be:da:1c: cc:b8:18:da:2f:f3:d7:10:8a:b3:49:09:15:ff:d6: d4:44:3b:6e:f4:0d:44:9a:fc:5b:3f:e6:0a:df:1d: f0:62:2f:af:d2:fa:61:a9:43:33:62:f5:0e:38:eb: f4:0a:07:a5:a8:af:88:bc:4d:67:51:9e:83:92:34: 63:38:8a:fd:71:0a:61:1d:b7:8b:05:41:05:34:e3: 59:43:9d:32:e7:9d:d9:80:57:35:20:8c:ed:0e:8b: 29:8e:5a:72:68:52:93:79:31:bf:76:24:11:49:db: e6:30:09:63:22:87:58:29:76:96:d8:3c:88:b9:14: 05:59:69:e9:86:dc:47:c9:91:32:fc:ca:f6:b6:02: b6:ed:c0:8f:77:13:e9:76:8a:0d:0a:4f:8f:80:4c: 72:ef:93:5b:bd:a7:e6:25:3d:e5:f1:ef:5c:e6:e2: 5d:e8:aa:ec:07:db:21:7a:1d:c6:03:23:a2:ba:49: 50:97:e3:2e:27:4c:c7:e3:a4:32:8f:c3:ab:ba:de: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7D:BF:94:8F:F1:56:AD:F8:72:74:93:44:F7:8A:5F:66:9A:26:1E X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.244.0/23 Signature Algorithm: sha256WithRSAEncryption 16:6e:b0:d8:92:34:51:e8:a7:c1:8e:2d:c8:c2:b2:b2:56:5b: d6:1f:cc:cb:6c:7e:ce:57:89:ac:52:96:dd:7b:de:56:a3:ad: d2:96:d3:d6:94:35:d2:93:9c:40:55:2c:1c:96:dc:32:d1:2c: 45:cf:cc:bf:cf:b2:6b:02:98:6b:23:d5:22:f2:99:1a:c9:ec: aa:c7:80:46:6c:b6:3d:91:f5:e6:c6:0c:3c:d0:e9:e6:7d:15: 0e:1b:52:c0:a4:42:d8:a7:b5:56:48:fd:e8:9d:15:0c:09:c3: 94:09:31:fd:20:e6:69:df:9b:2c:1a:82:e0:75:5e:7f:c7:ca: 8c:4d:aa:a8:d5:bd:1a:bd:d0:53:39:c3:e7:9b:a8:c6:3b:6d: bb:02:8c:b2:d2:27:cd:04:6a:af:93:02:32:ac:91:ca:02:47: b2:9a:8c:44:88:11:36:98:bc:8d:ff:f2:94:cd:c1:d2:11:0e: 42:4d:aa:2d:d1:36:4c:92:e7:63:2f:58:ee:b5:15:a9:7c:c3: 49:25:d6:cc:c2:35:fa:6c:b3:db:84:21:6c:db:d8:10:dc:32: e1:42:46:f3:ed:be:0c:b9:a8:97:36:4b:6e:bb:98:cb:8e:1c: e7:8a:42:55:ce:2e:44:1c:aa:33:76:8d:cb:9c:3d:6c:c8:b4: e9:63:68:a7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQ1jnXEr9Cbq1t+PiVhPrR9mFi0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYw QzEyMENGODAeFw0yNDEyMDQwODU4MTBaFw0yNTEyMDMwOTAzMTBaMDMxMTAvBgNV BAMTKENCN0RCRjk0OEZGMTU2QURGODcyNzQ5MzQ0Rjc4QTVGNjY5QTI2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIz1pF5WSwKsNkYIEkRsnN2G16 7RvqNpfPLBmjxNUf/QchIxCUnanwCijH+vlqnLDcIrC+s1FWAr7aHMy4GNov89cQ irNJCRX/1tREO270DUSa/Fs/5grfHfBiL6/S+mGpQzNi9Q446/QKB6Wor4i8TWdR noOSNGM4iv1xCmEdt4sFQQU041lDnTLnndmAVzUgjO0OiymOWnJoUpN5Mb92JBFJ 2+YwCWMih1gpdpbYPIi5FAVZaemG3EfJkTL8yva2ArbtwI93E+l2ig0KT4+ATHLv k1u9p+YlPeXx71zm4l3oquwH2yF6HcYDI6K6SVCX4y4nTMfjpDKPw6u63q8bAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUy32/lI/xVq34cnSTRPeKX2aaJh4wHwYDVR0j BBgwFoAU/KVf5ovxR64g8AxF2tzflgwSDPgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhC RjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIwQ0Y4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYwQzEy MENGOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5NWVlOGZjLTZlZmUtNDE1ZC1i NmMxLTBmMGNjY2YyNjE0NC8wLzMxMzAzMzJlMzEzMjMxMmUzMjM0MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnefQwDQYJ KoZIhvcNAQELBQADggEBABZusNiSNFHop8GOLcjCsrJWW9YfzMtsfs5XiaxSlt17 3lajrdKW09aUNdKTnEBVLByW3DLRLEXPzL/PsmsCmGsj1SLymRrJ7KrHgEZstj2R 9ebGDDzQ6eZ9FQ4bUsCkQtintVZI/eidFQwJw5QJMf0g5mnfmywaguB1Xn/HyoxN qqjVvRq90FM5w+ebqMY7bbsCjLLSJ80Eaq+TAjKskcoCR7KajESIETaYvI3/8pTN wdIRDkJNqi3RNkyS52MvWO61Fal8w0kl1szCNfpss9uEIWzb2BDcMuFCRvPtvgy5 qJc2S267mMuOHOeKQlXOLkQcqjN2jcucPWzItOljaKc= -----END CERTIFICATE-----Generated at Sun Apr 6 09:00:13 2025 by rpki-client