$ rpki-client -vvf repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa File: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (raw, json) Hash identifier: wLJhuvg5cB3B041BJhH14/dahrjMuNKBOMiBv1ZxMUg= Subject key identifier: D9:18:ED:33:BB:36:F8:85:BF:43:68:1C:57:7B:BE:5F:9B:E2:94:C8 Certificate issuer: /CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Certificate serial: 1FEF48340761E8B3B72E48B559E9A755E6A31A02 Authority key identifier: 15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa Signing time: Fri 20 Sep 2024 09:01:11 +0000 ROA not before: Fri 20 Sep 2024 08:56:11 +0000 ROA not after: Fri 19 Sep 2025 09:01:11 +0000 asID: 149710 IP address blocks: 103.121.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 20:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ef:48:34:07:61:e8:b3:b7:2e:48:b5:59:e9:a7:55:e6:a3:1a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Validity Not Before: Sep 20 08:56:11 2024 GMT Not After : Sep 19 09:01:11 2025 GMT Subject: CN=D918ED33BB36F885BF43681C577BBE5F9BE294C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:78:64:3b:b0:ff:7e:55:1f:56:42:97:d8:e5: 48:3b:54:0b:36:7f:6a:42:6c:9c:ed:38:d0:1e:1a: 15:f6:22:f2:37:d6:39:2f:20:b5:0f:e3:e5:e9:f5: b0:a9:c9:ad:b2:e2:ce:74:98:b3:79:c7:8d:ca:f7: d7:a1:5c:3c:43:51:3f:e9:3d:32:7a:9f:46:be:63: a2:ce:64:c4:a9:53:98:91:6c:c3:8e:86:3a:26:b7: 32:c4:4e:4e:70:0d:a5:a8:4a:a1:3b:90:e2:2f:3d: 9b:89:c0:31:a3:3b:f6:06:e1:cf:17:72:5d:c7:33: d4:18:e1:60:0a:bd:43:2b:2a:9f:bf:62:37:a6:94: 75:b4:27:c9:9e:fb:f2:d5:a1:37:30:5a:4e:98:f9: fd:30:2a:cb:fd:d6:a5:13:71:13:db:d3:df:84:f9: ae:1b:0e:8b:b5:68:69:0d:cb:b8:9d:a4:44:b1:27: 8d:3a:33:34:b3:e9:b8:80:92:29:de:40:da:51:2c: 18:60:fd:33:23:9e:5f:ea:1c:aa:72:ea:2e:e3:15: 3f:ae:92:6e:df:12:02:35:b6:6a:50:2b:71:44:0e: 9e:40:25:d8:6b:a1:18:bf:16:8f:27:87:2e:37:bf: 21:2f:7d:33:d4:ac:8a:87:9e:38:78:29:02:08:1b: 4b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:18:ED:33:BB:36:F8:85:BF:43:68:1C:57:7B:BE:5F:9B:E2:94:C8 X509v3 Authority Key Identifier: keyid:15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.196.0/24 Signature Algorithm: sha256WithRSAEncryption 91:6d:96:0c:9c:cb:14:98:63:6e:90:34:ae:58:d1:cb:e6:b1: 41:f5:e0:04:40:0f:10:8c:d5:98:1c:a0:5d:5e:d4:4c:5b:62: fd:4d:0e:d2:e9:e9:15:83:43:21:6f:1b:b5:e7:2e:75:50:62: 41:b3:7a:a4:61:b9:c3:18:a6:a8:5b:d8:79:71:18:5e:05:f1: 8d:b6:18:ae:ad:f4:6f:00:44:17:e0:82:bb:61:75:33:4a:18: c0:3f:cb:ab:79:e5:41:8a:81:7b:61:69:5c:5d:5b:a8:e4:e7: 0d:8b:1f:c0:33:9a:81:ed:52:83:b8:f8:7a:8b:cc:70:2e:67: d7:2f:6d:a5:0b:67:53:3d:af:b0:61:f1:13:05:55:70:1b:33: 01:ff:1c:35:da:1d:45:e3:ca:cb:31:d3:f6:df:2b:ae:75:c4: 1c:6a:57:ff:59:57:59:a5:f0:7a:fd:e8:a4:6d:45:0c:a7:07: 87:31:4e:7e:5a:d0:e2:85:da:cf:f9:54:5a:af:ae:e6:87:a8: 61:24:7c:9b:93:60:dd:60:58:eb:32:ec:4e:51:98:59:f1:5d: 1a:b2:bb:7e:47:ab:68:3d:43:85:6a:a2:9e:bd:3f:de:87:6c: f3:80:94:db:26:ca:f4:43:5a:97:8a:43:90:93:60:7f:a7:5a: 59:2f:4a:a5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUH+9INAdh6LO3Lki1WemnVeajGgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4 NjhCMUZBNzAeFw0yNDA5MjAwODU2MTFaFw0yNTA5MTkwOTAxMTFaMDMxMTAvBgNV BAMTKEQ5MThFRDMzQkIzNkY4ODVCRjQzNjgxQzU3N0JCRTVGOUJFMjk0QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyeGQ7sP9+VR9WQpfY5Ug7VAs2 f2pCbJztONAeGhX2IvI31jkvILUP4+Xp9bCpya2y4s50mLN5x43K99ehXDxDUT/p PTJ6n0a+Y6LOZMSpU5iRbMOOhjomtzLETk5wDaWoSqE7kOIvPZuJwDGjO/YG4c8X cl3HM9QY4WAKvUMrKp+/YjemlHW0J8me+/LVoTcwWk6Y+f0wKsv91qUTcRPb09+E +a4bDou1aGkNy7idpESxJ406MzSz6biAkineQNpRLBhg/TMjnl/qHKpy6i7jFT+u km7fEgI1tmpQK3FEDp5AJdhroRi/Fo8nhy43vyEvfTPUrIqHnjh4KQIIG0tjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU2RjtM7s2+IW/Q2gcV3u+X5vilMgwHwYDVR0j BBgwFoAUFX6IF+QTs6iyhmGQrYIVHoaLH6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NkNjBiMi0wZjU3LTRmYzUtYmM2Mi0xZDliNmM0OGZjZjAvMC8xNTdFODgxN0U0 MTNCM0E4QjI4NjYxOTBBRDgyMTUxRTg2OEIxRkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4NjhC MUZBNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzY2Q2MGIyLTBmNTctNGZjNS1i YzYyLTFkOWI2YzQ4ZmNmMC8wLzMxMzAzMzJlMzEzMjMxMmUzMTM5MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnecQwDQYJ KoZIhvcNAQELBQADggEBAJFtlgycyxSYY26QNK5Y0cvmsUH14ARADxCM1ZgcoF1e 1ExbYv1NDtLp6RWDQyFvG7XnLnVQYkGzeqRhucMYpqhb2HlxGF4F8Y22GK6t9G8A RBfggrthdTNKGMA/y6t55UGKgXthaVxdW6jk5w2LH8AzmoHtUoO4+HqLzHAuZ9cv baULZ1M9r7Bh8RMFVXAbMwH/HDXaHUXjyssx0/bfK651xBxqV/9ZV1ml8Hr96KRt RQynB4cxTn5a0OKF2s/5VFqvruaHqGEkfJuTYN1gWOsy7E5RmFnxXRqyu35Hq2g9 Q4Vqop69P96HbPOAlNsmyvRDWpeKQ5CTYH+nWlkvSqU= -----END CERTIFICATE-----Generated at Fri Feb 21 11:25:33 2025 by rpki-client