$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa File: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (raw, json) Hash identifier: KW5knR4ALt6hLV7qJyhXL5J0Aia4lk+P8+shKebFztw= Subject key identifier: C3:D7:1D:72:09:EA:7A:8D:51:71:C1:87:A3:8C:6D:75:3E:81:74:59 Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Certificate serial: 2362EF47EDFE30C0BAF015C0C3C753573D42A927 Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa Signing time: Tue 17 Dec 2024 16:00:00 +0000 ROA not before: Tue 17 Dec 2024 15:55:00 +0000 ROA not after: Tue 16 Dec 2025 16:00:00 +0000 asID: 141613 IP address blocks: 103.161.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 17:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:62:ef:47:ed:fe:30:c0:ba:f0:15:c0:c3:c7:53:57:3d:42:a9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Validity Not Before: Dec 17 15:55:00 2024 GMT Not After : Dec 16 16:00:00 2025 GMT Subject: CN=C3D71D7209EA7A8D5171C187A38C6D753E817459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:57:12:b9:38:be:96:ef:46:1a:3d:a3:e8: cf:66:fe:9f:5e:ab:c9:ea:a0:46:02:49:72:c9:7b: 43:5f:14:93:e7:a3:9b:1b:2d:16:0d:c4:1a:17:60: c9:83:79:8a:1a:1d:da:fa:1c:30:fc:a6:3e:77:f7: e0:29:ca:46:37:63:26:73:0d:9c:68:a9:7e:4d:10: e4:d2:07:05:80:22:de:f5:7e:60:94:15:08:29:6c: 78:ff:e7:d4:ea:94:1b:2d:15:62:bc:cb:7d:61:18: eb:ae:2a:51:b4:3b:9c:00:8c:f3:b0:7f:f0:e7:94: db:ae:a6:15:fc:11:40:17:c4:be:0d:f1:0b:30:55: 1b:b1:25:42:17:c4:96:eb:92:5a:82:7e:d6:15:b8: bb:a4:22:b3:4a:60:44:b3:7e:da:be:82:b2:d1:b4: 74:d5:dd:1d:a7:e0:3e:4f:88:52:1e:d1:a1:41:8b: e8:68:a1:ca:fa:c8:c8:57:a8:b1:68:17:a8:86:e8: 51:e3:3c:8c:57:9b:22:58:02:d3:41:d7:86:6a:1f: 54:dd:f9:19:08:61:af:bb:30:77:ed:4f:1b:41:3e: 8a:77:f2:a8:40:4d:88:cf:29:ce:a5:e3:45:02:31: b3:dd:15:2c:93:08:7c:77:c5:53:45:5f:1e:15:75: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D7:1D:72:09:EA:7A:8D:51:71:C1:87:A3:8C:6D:75:3E:81:74:59 X509v3 Authority Key Identifier: keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.130.0/23 Signature Algorithm: sha256WithRSAEncryption b5:b9:70:fa:23:a5:f8:30:2a:6d:92:73:77:d6:25:71:5f:03: e2:8e:05:6a:8f:ab:d8:1c:ba:d4:ad:b5:3e:58:b6:26:4d:cf: 58:29:1a:62:74:b3:cf:42:ae:98:ed:3c:b9:91:47:74:5d:60: 0a:d4:4f:84:50:dd:cf:45:09:05:5c:76:e9:18:6e:2a:95:97: fc:99:11:59:37:e2:30:77:9d:cb:e4:86:f7:d9:67:5b:8a:0f: 2a:a0:20:82:7b:1d:ad:04:9f:5f:f8:e7:bf:fc:36:eb:7e:07: 2f:ea:64:9b:56:bc:dd:ec:e2:63:ae:b7:53:dc:56:c8:97:c0: a4:fe:d9:40:20:29:a8:52:82:4d:fe:98:55:51:3b:a1:ca:85: 1a:38:0d:a7:ce:72:03:26:79:54:64:b8:76:12:c4:d6:ad:dd: ec:35:28:b1:9a:be:b7:2b:63:3e:82:c2:64:7d:ce:e2:f8:55: 8f:3a:84:af:d7:6e:25:a6:77:48:0d:16:69:d5:67:14:28:22: fe:a8:45:93:5f:02:77:c6:6f:c3:5d:9c:a2:5c:e2:01:7e:54: 91:08:b1:88:23:a6:f0:dc:2a:ec:90:32:22:1f:de:da:d5:c8: 71:a2:af:da:51:42:e6:d3:ae:27:a9:98:65:5c:12:70:cc:a1: 13:39:9d:3f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUI2LvR+3+MMC68BXAw8dTVz1CqScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQy MEU4MkZCQzAeFw0yNDEyMTcxNTU1MDBaFw0yNTEyMTYxNjAwMDBaMDMxMTAvBgNV BAMTKEMzRDcxRDcyMDlFQTdBOEQ1MTcxQzE4N0EzOEM2RDc1M0U4MTc0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvGVcSuTi+lu9GGj2j6M9m/p9e q8nqoEYCSXLJe0NfFJPno5sbLRYNxBoXYMmDeYoaHdr6HDD8pj539+ApykY3YyZz DZxoqX5NEOTSBwWAIt71fmCUFQgpbHj/59TqlBstFWK8y31hGOuuKlG0O5wAjPOw f/DnlNuuphX8EUAXxL4N8QswVRuxJUIXxJbrklqCftYVuLukIrNKYESzftq+grLR tHTV3R2n4D5PiFIe0aFBi+hoocr6yMhXqLFoF6iG6FHjPIxXmyJYAtNB14ZqH1Td +RkIYa+7MHftTxtBPop38qhATYjPKc6l40UCMbPdFSyTCHx3xVNFXx4VdWjTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUw9cdcgnqeo1RccGHo4xtdT6BdFkwHwYDVR0j BBgwFoAU8lbtDGjUjnDdvjRzZE/bpCDoL7wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMC9GMjU2RUQwQzY4 RDQ4RTcwRERCRTM0NzM2NDRGREJBNDIwRTgyRkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQyMEU4 MkZCQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNWM3M2NjLTk4NWUtNGU5Mi1i YTY5LWNkOGJmZmU0YTUzZC8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoYIwDQYJ KoZIhvcNAQELBQADggEBALW5cPojpfgwKm2Sc3fWJXFfA+KOBWqPq9gcutSttT5Y tiZNz1gpGmJ0s89CrpjtPLmRR3RdYArUT4RQ3c9FCQVcdukYbiqVl/yZEVk34jB3 ncvkhvfZZ1uKDyqgIIJ7Ha0En1/457/8Nut+By/qZJtWvN3s4mOut1PcVsiXwKT+ 2UAgKahSgk3+mFVRO6HKhRo4DafOcgMmeVRkuHYSxNat3ew1KLGavrcrYz6CwmR9 zuL4VY86hK/XbiWmd0gNFmnVZxQoIv6oRZNfAnfGb8NdnKJc4gF+VJEIsYgjpvDc KuyQMiIf3trVyHGir9pRQubTriepmGVcEnDMoRM5nT8= -----END CERTIFICATE-----Generated at Sun Apr 6 08:18:31 2025 by rpki-client