$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/3130332e37352e3233372e302f32342d3234203d3e203634333130.roa File: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (raw, json) Hash identifier: zLA6/bRI9VboLYe5I2cJ3lQAESTlC0UxgoZrgcRdKsk= Subject key identifier: 0C:CF:20:55:CA:4F:51:E5:BC:B8:9A:F8:06:16:01:C2:1F:F6:ED:22 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 4F3445E092B8FD7DE150D22B0D8E471DA70EE302 Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/3130332e37352e3233372e302f32342d3234203d3e203634333130.roa Signing time: Fri 20 Sep 2024 04:25:26 +0000 ROA not before: Fri 20 Sep 2024 04:20:26 +0000 ROA not after: Fri 19 Sep 2025 04:25:26 +0000 asID: 64310 IP address blocks: 103.75.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 07:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:34:45:e0:92:b8:fd:7d:e1:50:d2:2b:0d:8e:47:1d:a7:0e:e3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Sep 20 04:20:26 2024 GMT Not After : Sep 19 04:25:26 2025 GMT Subject: CN=0CCF2055CA4F51E5BCB89AF8061601C21FF6ED22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:a6:ad:98:30:5e:46:05:d3:76:97:fd:1e: cc:c9:23:b8:b5:c4:fc:56:8a:ff:3c:19:76:55:e1: 39:cb:23:4f:c5:87:e7:50:38:8c:50:e1:d5:c3:43: ca:a2:45:b4:d0:f4:c5:68:c3:35:27:74:d2:d8:fc: 34:2f:17:53:84:da:53:46:d1:48:a2:1a:3a:d4:a2: 4a:86:be:96:bd:26:25:c3:18:eb:2f:57:cb:d8:49: aa:6e:f7:39:5c:d1:f0:c6:ef:65:6a:a4:ed:d5:b5: 00:4a:80:5f:0a:3f:8d:8f:a1:fd:8d:4e:3e:ba:ee: 6e:42:7c:de:f0:ce:15:c1:6b:fa:0e:b4:94:57:0a: 40:5f:e2:2f:10:34:2e:80:08:21:e2:58:1b:0d:4e: 2c:18:a1:72:d8:a2:be:fd:b6:0d:ac:d3:0f:20:57: 9b:e2:9b:13:16:97:1b:04:da:a6:7e:85:be:a5:f0: 7d:35:cb:80:ab:8b:1b:03:89:35:76:ef:41:82:37: 02:7a:77:99:09:8a:e5:75:68:73:d2:d2:31:bf:f4: 65:06:ad:cd:cc:af:6f:6a:d6:1a:a0:d3:ca:71:7c: 02:dc:9b:4e:a2:81:77:28:13:4e:ce:88:62:48:fc: 18:a4:1e:4f:d5:20:65:e1:08:d0:e3:14:6b:fe:21: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CF:20:55:CA:4F:51:E5:BC:B8:9A:F8:06:16:01:C2:1F:F6:ED:22 X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/3130332e37352e3233372e302f32342d3234203d3e203634333130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.237.0/24 Signature Algorithm: sha256WithRSAEncryption 91:1e:be:97:48:67:60:83:5e:d0:80:c0:d6:f0:20:cb:04:ab: 56:1d:fa:d5:02:e9:bf:c3:41:eb:4e:fb:34:da:50:82:0a:ea: 7e:39:34:ed:91:2f:cb:0b:11:c5:a6:1f:55:33:43:50:1f:76: 30:88:74:8e:0f:87:e2:e7:f6:d8:9d:83:84:f2:ec:e0:8f:9a: 1d:0a:df:56:fd:cf:da:8f:23:66:f5:df:40:7f:71:a9:8a:68: 8c:e4:b0:5a:05:2f:78:29:a2:e7:eb:c5:48:3c:97:73:4a:65: c7:93:9c:d5:ed:42:6d:5c:2e:d2:ed:77:bd:48:c4:59:bc:72: a7:ba:be:d9:7f:6e:dd:33:73:56:df:5f:a2:08:b3:4c:e4:21: 7c:68:d7:66:35:cf:32:33:b3:5b:0d:c1:28:5b:87:cd:87:e7: f9:c6:95:1e:ec:96:61:44:c6:e0:da:c0:54:41:3d:6d:96:5e: 5d:64:e3:1c:17:77:82:0d:ac:0d:7a:a6:0b:2c:38:3f:94:d0: 21:50:50:47:91:be:9b:63:79:4b:d2:b4:f2:70:df:3d:19:4a: cb:5a:ba:a7:92:55:63:cb:0c:e8:54:7a:3f:ed:e2:c2:24:4e: 08:01:40:bb:11:94:88:1f:c3:63:d2:22:31:11:7b:bb:e7:ad: b6:d2:f7:ad -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTzRF4JK4/X3hUNIrDY5HHacO4wIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNDA5MjAwNDIwMjZaFw0yNTA5MTkwNDI1MjZaMDMxMTAvBgNV BAMTKDBDQ0YyMDU1Q0E0RjUxRTVCQ0I4OUFGODA2MTYwMUMyMUZGNkVEMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURqatmDBeRgXTdpf9HszJI7i1 xPxWiv88GXZV4TnLI0/Fh+dQOIxQ4dXDQ8qiRbTQ9MVowzUndNLY/DQvF1OE2lNG 0UiiGjrUokqGvpa9JiXDGOsvV8vYSapu9zlc0fDG72VqpO3VtQBKgF8KP42Pof2N Tj667m5CfN7wzhXBa/oOtJRXCkBf4i8QNC6ACCHiWBsNTiwYoXLYor79tg2s0w8g V5vimxMWlxsE2qZ+hb6l8H01y4CrixsDiTV270GCNwJ6d5kJiuV1aHPS0jG/9GUG rc3Mr29q1hqg08pxfALcm06igXcoE07OiGJI/BikHk/VIGXhCNDjFGv+IZDVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUDM8gVcpPUeW8uJr4BhYBwh/27SIwHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxMTZmYmM5LWIzMWMtNDIyNS1h Njk3LTRmZWRiYzIzNGRiNi8wLzMxMzAzMzJlMzczNTJlMzIzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzNDMzMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdL7TANBgkqhkiG 9w0BAQsFAAOCAQEAkR6+l0hnYINe0IDA1vAgywSrVh361QLpv8NB6077NNpQggrq fjk07ZEvywsRxaYfVTNDUB92MIh0jg+H4uf22J2DhPLs4I+aHQrfVv3P2o8jZvXf QH9xqYpojOSwWgUveCmi5+vFSDyXc0plx5Oc1e1CbVwu0u13vUjEWbxyp7q+2X9u 3TNzVt9fogizTOQhfGjXZjXPMjOzWw3BKFuHzYfn+caVHuyWYUTG4NrAVEE9bZZe XWTjHBd3gg2sDXqmCyw4P5TQIVBQR5G+m2N5S9K08nDfPRlKy1q6p5JVY8sM6FR6 P+3iwiROCAFAuxGUiB/DY9IiMRF7u+etttL3rQ== -----END CERTIFICATE-----Generated at Sun Apr 20 04:58:30 2025 by rpki-client