$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa File: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (raw, json) Hash identifier: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY= Subject key identifier: CF:1F:C0:28:7E:BA:F3:EC:AE:50:8A:CA:DC:38:46:40:05:65:4F:69 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 1EE083835E4413F433613DA3CF2FD63F078ABDA4 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa Signing time: Fri 03 Jan 2025 08:00:02 +0000 ROA not before: Fri 03 Jan 2025 07:55:02 +0000 ROA not after: Fri 02 Jan 2026 08:00:02 +0000 asID: 131735 IP address blocks: 103.231.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 05:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e0:83:83:5e:44:13:f4:33:61:3d:a3:cf:2f:d6:3f:07:8a:bd:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Jan 3 07:55:02 2025 GMT Not After : Jan 2 08:00:02 2026 GMT Subject: CN=CF1FC0287EBAF3ECAE508ACADC38464005654F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:1b:e4:09:86:a0:ce:cc:9f:c2:e6:b9:fb: c8:cf:30:86:96:f9:e1:d1:95:81:74:83:25:c5:7a: c2:0c:de:ec:c5:18:92:a4:39:4e:b6:2d:2c:4c:bb: 16:d5:cd:1c:40:13:74:26:9b:b6:28:e0:ec:23:65: 58:16:30:62:be:ef:d0:3a:f8:34:00:5c:46:ae:20: 85:82:71:c2:5a:e6:30:b4:ba:bb:87:bb:93:10:a0: 45:f9:42:fd:df:98:4d:42:eb:cd:f9:42:df:88:e0: 0c:f4:0b:b2:09:1f:0c:3f:e6:a4:87:b7:82:90:e9: 1f:d5:4a:e7:49:2d:51:6a:39:c9:09:31:85:56:54: 50:b9:3d:a5:26:66:98:2f:31:8a:17:04:a7:03:f9: 50:19:1c:35:a8:0a:48:fc:21:82:c8:cf:b9:20:7f: 6d:2e:ff:bc:a6:58:92:07:44:11:64:5c:2c:ba:0b: 7e:7a:ae:ca:78:e1:47:05:e5:59:4b:aa:eb:b2:39: df:5b:98:dc:92:ad:b7:a9:60:09:77:6c:f5:c6:85: 94:26:10:99:79:aa:13:a5:aa:3b:d4:69:40:29:ed: ba:75:8c:1a:45:9a:ee:1c:e9:3b:ad:d4:a2:b7:68: 40:e5:1f:b6:99:0f:18:33:26:a6:33:4d:35:65:e2: e3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1F:C0:28:7E:BA:F3:EC:AE:50:8A:CA:DC:38:46:40:05:65:4F:69 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.231.81.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:0d:03:24:67:d2:0a:8a:7d:b8:64:c9:90:d8:69:35:fa:6a: d1:c2:2c:8c:4d:9f:e1:00:f4:56:91:f1:60:74:92:8e:35:c7: 49:28:de:d1:03:bf:98:84:f1:8f:c1:d8:6e:cb:9c:25:2f:a2: d1:40:74:55:b5:01:23:5c:87:b7:52:df:da:2b:56:cf:2e:03: c9:af:dc:57:28:a9:6f:aa:bb:79:88:34:1c:a4:cf:68:61:c5: 1e:3a:bb:ff:df:65:14:b8:3c:ae:62:ad:22:d0:ab:10:ca:be: 40:4d:70:7a:ae:81:21:43:77:c8:47:cf:63:eb:da:5a:4c:d1: f0:e5:24:03:01:8d:c7:4e:bc:7d:85:13:c4:95:f9:40:3d:3d: 5a:5a:27:b5:d6:5b:7d:3c:8f:7d:80:2a:ba:cf:ba:5c:e5:c9: 1f:4d:a0:80:7b:08:f8:4c:03:ec:ea:7a:fd:e6:36:38:69:65: a9:2c:9f:98:ca:6c:f5:c6:41:91:77:2a:32:79:31:7b:63:12: 34:be:56:06:00:fd:47:0a:7e:b1:18:7f:e3:c1:4d:08:12:6d: d7:81:7b:88:4f:4d:3e:4f:29:47:66:45:86:8d:d0:bd:d6:05: 24:7e:e3:2a:3b:9d:59:5d:29:a0:06:af:4a:b9:b1:01:08:34: ad:4f:1e:bf -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHuCDg15EE/QzYT2jzy/WPweKvaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTAxMDMwNzU1MDJaFw0yNjAxMDIwODAwMDJaMDMxMTAvBgNV BAMTKENGMUZDMDI4N0VCQUYzRUNBRTUwOEFDQURDMzg0NjQwMDU2NTRGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YhvkCYagzsyfwua5+8jPMIaW +eHRlYF0gyXFesIM3uzFGJKkOU62LSxMuxbVzRxAE3Qmm7Yo4OwjZVgWMGK+79A6 +DQAXEauIIWCccJa5jC0uruHu5MQoEX5Qv3fmE1C6835Qt+I4Az0C7IJHww/5qSH t4KQ6R/VSudJLVFqOckJMYVWVFC5PaUmZpgvMYoXBKcD+VAZHDWoCkj8IYLIz7kg f20u/7ymWJIHRBFkXCy6C356rsp44UcF5VlLquuyOd9bmNySrbepYAl3bPXGhZQm EJl5qhOlqjvUaUAp7bp1jBpFmu4c6Tut1KK3aEDlH7aZDxgzJqYzTTVl4uPvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzx/AKH668+yuUIrK3DhGQAVlT2kwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhNDkzYmUxLWYwNjQtNDllNi05 NDlhLWNiM2VjYmZjOGY0Ni8wLzMxMzAzMzJlMzIzMzMxMmUzODMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+dRMA0GCSqG SIb3DQEBCwUAA4IBAQCbDQMkZ9IKin24ZMmQ2Gk1+mrRwiyMTZ/hAPRWkfFgdJKO NcdJKN7RA7+YhPGPwdhuy5wlL6LRQHRVtQEjXIe3Ut/aK1bPLgPJr9xXKKlvqrt5 iDQcpM9oYcUeOrv/32UUuDyuYq0i0KsQyr5ATXB6roEhQ3fIR89j69paTNHw5SQD AY3HTrx9hRPElflAPT1aWie11lt9PI99gCq6z7pc5ckfTaCAewj4TAPs6nr95jY4 aWWpLJ+Yymz1xkGRdyoyeTF7YxI0vlYGAP1HCn6xGH/jwU0IEm3XgXuIT00+TylH ZkWGjdC91gUkfuMqO51ZXSmgBq9KubEBCDStTx6/ -----END CERTIFICATE-----Generated at Thu Apr 17 23:58:36 2025 by rpki-client