$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa File: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (raw, json) Hash identifier: ymwaUvhXT8JXSJrNzjbP7gt7yXJ53LxTJX8Voq/f/74= Subject key identifier: 82:91:1A:6A:7F:1F:D5:6B:3A:A7:62:5E:E0:8D:BC:A0:9C:B5:96:B2 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 505FD92A20D8939B3BD3086772AF6F53637D96CB Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa Signing time: Wed 27 Nov 2024 04:00:00 +0000 ROA not before: Wed 27 Nov 2024 03:55:00 +0000 ROA not after: Wed 26 Nov 2025 04:00:00 +0000 asID: 131706 IP address blocks: 110.76.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 09:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5f:d9:2a:20:d8:93:9b:3b:d3:08:67:72:af:6f:53:63:7d:96:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Nov 27 03:55:00 2024 GMT Not After : Nov 26 04:00:00 2025 GMT Subject: CN=82911A6A7F1FD56B3AA7625EE08DBCA09CB596B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:7a:c1:4d:8d:be:c8:1a:fd:e1:b6:59:a1: ab:55:49:04:9a:4d:3f:ca:86:ac:c1:5a:57:40:e2: 12:1e:8b:dd:09:d1:ab:2f:e4:c5:e2:ee:9f:fb:2b: cc:e1:17:39:89:1c:49:8d:77:47:d7:b2:65:9d:94: 0c:67:eb:d6:05:23:fe:6b:f4:96:1f:c7:1c:4f:43: 73:42:4d:da:3e:15:ba:74:aa:70:ab:12:2b:47:bc: 9f:e4:b1:fa:78:97:0c:2a:4a:39:43:d5:9b:bd:d7: 64:a6:ac:83:e5:83:88:0e:e3:54:1c:d0:88:a7:34: 4e:f3:f9:d0:9d:a8:3d:83:17:3a:51:6e:84:d7:d0: ab:ed:08:d7:d8:03:58:93:6f:79:ef:f4:d1:b1:3e: 82:13:a5:6d:80:47:b0:e2:8f:64:1c:0b:53:01:37: 1b:2d:b9:79:00:f0:0e:0f:5f:2a:fc:20:67:b5:64: 3d:9e:ed:ac:39:dc:67:0e:0d:7e:38:fe:87:f1:ba: 85:77:be:fb:f4:84:4d:2f:b4:6c:2f:1d:96:6f:59: c0:5a:bf:88:8a:2e:95:f9:b4:bb:12:c4:33:14:95: 89:53:04:c4:5d:ea:1c:91:1b:2e:16:93:dc:de:eb: 26:dd:94:8c:51:06:58:b5:91:bc:92:a8:70:8c:34: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:91:1A:6A:7F:1F:D5:6B:3A:A7:62:5E:E0:8D:BC:A0:9C:B5:96:B2 X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.76.150.0/24 Signature Algorithm: sha256WithRSAEncryption 33:97:3c:aa:4b:d6:97:af:5a:ff:1e:bb:41:4d:e5:7b:f1:7e: c9:05:5c:ca:dd:8c:ac:a9:59:68:33:7d:59:89:3f:ae:e5:35: 54:43:71:7a:e3:f6:ba:9b:33:0b:06:57:77:6e:09:54:16:69: 14:2b:e1:d5:90:ea:00:42:cf:d7:ed:9d:b7:6f:8c:55:d8:8d: 16:58:c8:04:01:d2:63:c4:32:ab:ad:e8:9d:09:a3:ab:88:a3: 58:56:f4:89:66:aa:02:f4:b5:17:21:67:28:d8:ba:a8:14:ca: 41:e8:69:a8:63:4b:6a:1e:a1:fd:96:71:86:b6:d6:b7:63:c6: 13:2e:09:ae:e9:61:47:fa:25:bb:cb:05:92:d0:29:ba:f3:88: 96:ef:10:43:a0:1e:87:64:40:ee:dc:aa:a5:b4:55:d0:aa:b4: 4d:4e:1a:03:79:1d:ac:bd:71:01:e9:be:56:e7:5b:f1:fe:ca: 5a:71:af:e1:6e:6a:39:f8:01:f0:24:e1:a3:df:37:5a:0d:7b: 3b:d0:7c:79:bf:0f:7f:d7:0b:88:21:88:6d:59:f5:f9:89:4c: 3c:a5:3e:f8:f5:2c:2d:77:a1:e8:78:73:2c:8a:5d:d7:42:32: de:d7:49:83:c8:5b:ef:9d:32:05:1d:ba:c0:78:67:6c:18:19: 41:06:73:fa -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUF/ZKiDYk5s70whncq9vU2N9lsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNDExMjcwMzU1MDBaFw0yNTExMjYwNDAwMDBaMDMxMTAvBgNV BAMTKDgyOTExQTZBN0YxRkQ1NkIzQUE3NjI1RUUwOERCQ0EwOUNCNTk2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXHrBTY2+yBr94bZZoatVSQSa TT/KhqzBWldA4hIei90J0asv5MXi7p/7K8zhFzmJHEmNd0fXsmWdlAxn69YFI/5r 9JYfxxxPQ3NCTdo+Fbp0qnCrEitHvJ/ksfp4lwwqSjlD1Zu912SmrIPlg4gO41Qc 0IinNE7z+dCdqD2DFzpRboTX0KvtCNfYA1iTb3nv9NGxPoITpW2AR7Dij2QcC1MB NxstuXkA8A4PXyr8IGe1ZD2e7aw53GcODX44/ofxuoV3vvv0hE0vtGwvHZZvWcBa v4iKLpX5tLsSxDMUlYlTBMRd6hyRGy4Wk9ze6ybdlIxRBli1kbySqHCMNFb9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgpEaan8f1Ws6p2Je4I28oJy1lrIwHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNTQ4YmFkLTdmZWQtNDFmZC1i NDJlLTc4MDM3MmM0NTI1NS8wLzMxMzEzMDJlMzczNjJlMzEzNTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbkyWMA0GCSqG SIb3DQEBCwUAA4IBAQAzlzyqS9aXr1r/HrtBTeV78X7JBVzK3YysqVloM31ZiT+u 5TVUQ3F64/a6mzMLBld3bglUFmkUK+HVkOoAQs/X7Z23b4xV2I0WWMgEAdJjxDKr reidCaOriKNYVvSJZqoC9LUXIWco2LqoFMpB6GmoY0tqHqH9lnGGtta3Y8YTLgmu 6WFH+iW7ywWS0Cm684iW7xBDoB6HZEDu3KqltFXQqrRNThoDeR2svXEB6b5W51vx /spaca/hbmo5+AHwJOGj3zdaDXs70Hx5vw9/1wuIIYhtWfX5iUw8pT749Swtd6Ho eHMsil3XQjLe10mDyFvvnTIFHbrAeGdsGBlBBnP6 -----END CERTIFICATE-----Generated at Wed Apr 9 16:27:42 2025 by rpki-client