$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa File: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (raw, json) Hash identifier: 3yNadH5UObiEmtHARrnQZT+Op/4Y8C9oXLlSYOYGT5c= Subject key identifier: 20:2D:71:43:5A:4A:82:23:FE:BD:AC:AD:68:64:97:18:7C:51:81:F3 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 0CBDAD9806CE77819C44D62B2D92827C3E521CFC Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa Signing time: Fri 14 Jun 2024 10:00:01 +0000 ROA not before: Fri 14 Jun 2024 09:55:01 +0000 ROA not after: Fri 13 Jun 2025 10:00:01 +0000 asID: 17440 IP address blocks: 103.209.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 18:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bd:ad:98:06:ce:77:81:9c:44:d6:2b:2d:92:82:7c:3e:52:1c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Jun 14 09:55:01 2024 GMT Not After : Jun 13 10:00:01 2025 GMT Subject: CN=202D71435A4A8223FEBDACAD686497187C5181F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:1b:1a:59:25:cd:e4:61:fe:63:40:1f:02: 63:75:a9:3d:9a:2c:70:9c:5b:f3:d6:0e:0f:be:2b: 34:36:ae:86:9f:60:19:2f:25:33:81:f7:cd:51:f5: 14:b9:b5:97:70:ce:2d:99:1f:08:95:e4:27:e3:55: ad:b7:36:25:22:5a:71:7a:2e:14:bd:10:57:3a:14: 4b:33:7a:5f:d6:23:eb:6c:c0:99:a2:17:b9:38:1f: 59:86:f8:ef:e8:49:80:91:f2:b3:da:a7:48:57:08: cf:de:8f:f6:c2:5d:0c:87:82:22:59:f6:03:16:f0: 04:1c:ff:92:f6:3f:40:7f:8c:bc:49:2b:fb:a6:60: e2:3f:51:f5:39:a1:20:97:cf:6d:8f:04:7c:7b:0a: de:da:1d:75:9e:bf:f2:6b:8c:a2:b3:ab:5c:c4:cb: 24:c4:5d:9f:97:29:46:8a:cf:3c:51:13:1b:0f:68: 27:05:dd:b7:e9:7c:c0:2b:42:e3:d4:dd:21:f4:b6: 42:79:2b:c5:6f:05:1d:20:fb:a8:6d:f9:74:69:7f: c5:fe:63:66:c3:34:15:1b:1c:bf:69:d8:bc:44:dc: 71:22:ae:27:50:e2:26:f8:a5:89:20:c6:c2:1b:9c: 51:01:c4:3f:9e:3a:04:db:ef:12:01:9f:c2:76:59: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2D:71:43:5A:4A:82:23:FE:BD:AC:AD:68:64:97:18:7C:51:81:F3 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.250.0/24 Signature Algorithm: sha256WithRSAEncryption 32:22:8f:07:b8:a9:2f:77:21:ea:42:e8:01:64:7c:44:17:34: fa:e9:45:77:d2:b3:e9:b3:1d:de:8b:86:bf:26:eb:67:b0:9f: 37:b5:fa:87:a2:da:96:4e:20:a3:43:41:54:6a:c3:08:c1:82: 74:e2:2a:83:98:c3:f5:31:60:69:97:44:d1:78:45:4a:1f:12: 09:e5:e8:6b:95:68:90:da:55:f4:9d:1b:3e:01:9f:07:c6:c2: f4:d3:86:b3:d4:c7:df:d6:c0:02:68:93:7b:fb:8a:b0:a6:85: fa:6a:88:3f:14:f9:72:55:03:f3:c8:72:dd:db:5c:e6:a1:b0: 8a:41:12:84:1a:a2:74:c4:3f:8b:1e:97:74:70:49:a4:a2:3b: 34:00:2b:6f:b1:cb:42:25:81:3d:5f:39:f3:27:53:f9:8e:5b: b1:82:87:17:85:af:0b:2b:b9:e1:a2:e2:cb:36:fe:61:e0:84: 51:c4:fd:b6:28:dd:36:c1:28:f9:e3:2c:f3:aa:7d:7b:48:8d: 4d:2d:f4:c4:57:6b:5f:69:bb:88:8d:74:b7:29:ad:87:d1:31: 1e:75:9f:e7:6f:fa:b4:af:1f:4c:f0:da:b9:26:4e:4f:3e:2c: 93:bf:01:bb:3b:32:74:f5:88:d8:c5:32:7b:35:78:a2:80:2b: 04:9e:55:ef -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDL2tmAbOd4GcRNYrLZKCfD5SHPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNDA2MTQwOTU1MDFaFw0yNTA2MTMxMDAwMDFaMDMxMTAvBgNV BAMTKDIwMkQ3MTQzNUE0QTgyMjNGRUJEQUNBRDY4NjQ5NzE4N0M1MTgxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KxsaWSXN5GH+Y0AfAmN1qT2a LHCcW/PWDg++KzQ2roafYBkvJTOB981R9RS5tZdwzi2ZHwiV5CfjVa23NiUiWnF6 LhS9EFc6FEszel/WI+tswJmiF7k4H1mG+O/oSYCR8rPap0hXCM/ej/bCXQyHgiJZ 9gMW8AQc/5L2P0B/jLxJK/umYOI/UfU5oSCXz22PBHx7Ct7aHXWev/JrjKKzq1zE yyTEXZ+XKUaKzzxRExsPaCcF3bfpfMArQuPU3SH0tkJ5K8VvBR0g+6ht+XRpf8X+ Y2bDNBUbHL9p2LxE3HEiridQ4ib4pYkgxsIbnFEBxD+eOgTb7xIBn8J2WRqnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUIC1xQ1pKgiP+vaytaGSXGHxRgfMwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjMDc0Y2Q4LTI4MzAtNGVhYi1i ZGQ0LWE4MDdlYzUxMTVkYS8wLzMxMzAzMzJlMzIzMDM5MmUzMjM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9H6MA0GCSqG SIb3DQEBCwUAA4IBAQAyIo8HuKkvdyHqQugBZHxEFzT66UV30rPpsx3ei4a/Jutn sJ83tfqHotqWTiCjQ0FUasMIwYJ04iqDmMP1MWBpl0TReEVKHxIJ5ehrlWiQ2lX0 nRs+AZ8HxsL004az1Mff1sACaJN7+4qwpoX6aog/FPlyVQPzyHLd21zmobCKQRKE GqJ0xD+LHpd0cEmkojs0ACtvsctCJYE9XznzJ1P5jluxgocXha8LK7nhouLLNv5h 4IRRxP22KN02wSj54yzzqn17SI1NLfTEV2tfabuIjXS3Ka2H0TEedZ/nb/q0rx9M 8Nq5Jk5PPiyTvwG7OzJ09YjYxTJ7NXiigCsEnlXv -----END CERTIFICATE-----Generated at Fri Feb 21 11:06:11 2025 by rpki-client