$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa File: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (raw, json) Hash identifier: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA= Subject key identifier: A0:49:43:8F:38:B2:7A:8B:32:3F:89:06:B5:9D:15:12:46:75:BC:C8 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 37509A4BF7E5CA9CFBB10AAC09B2AAFA1F65B153 Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa Signing time: Tue 11 Feb 2025 02:46:08 +0000 ROA not before: Tue 11 Feb 2025 02:41:08 +0000 ROA not after: Tue 10 Feb 2026 02:46:08 +0000 asID: 133830 IP address blocks: 110.76.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 18:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:50:9a:4b:f7:e5:ca:9c:fb:b1:0a:ac:09:b2:aa:fa:1f:65:b1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Feb 11 02:41:08 2025 GMT Not After : Feb 10 02:46:08 2026 GMT Subject: CN=A049438F38B27A8B323F8906B59D15124675BCC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5d:57:53:cd:30:f0:d0:ff:4d:48:74:80:3d: f9:2a:6b:b5:00:6e:ac:fd:d9:6d:89:09:a7:9e:74: 1b:0d:e4:2f:39:69:d8:7f:0a:10:5f:85:1a:16:7f: 6e:bc:72:e1:a5:f7:66:fc:ad:39:c0:6e:e3:ce:ec: cf:16:32:1c:bb:d1:fe:97:9a:ec:ac:e2:41:1b:97: 99:4c:07:bf:1d:70:ab:a9:a8:40:4d:06:29:ce:a4: b8:6b:c6:f9:2d:a9:19:c0:91:d8:81:c4:47:35:1e: 74:7f:7c:b3:53:9c:ae:fd:ef:1d:5f:38:95:8c:7c: 17:87:68:58:c5:e3:5e:72:0c:66:a6:92:7f:e0:4b: 1e:aa:48:fc:ad:2b:c8:55:49:5e:4f:5c:97:34:99: cd:2e:99:71:12:14:95:0a:b5:7a:d9:e6:67:2b:5d: ba:2b:2c:5a:58:f4:a9:fa:2d:07:7f:ef:91:a4:50: 50:d4:2e:09:85:67:c1:e7:d1:5c:4c:cf:93:15:28: d2:26:98:30:54:71:6d:14:82:fe:53:ae:d7:6e:53: 34:e8:2f:9f:1e:0f:e6:c4:67:e0:76:69:85:d0:14: 3f:fc:cd:41:ae:a5:88:eb:28:37:5b:b6:2f:85:e4: 44:72:45:4e:06:d5:ac:1c:1d:75:9b:65:e9:a7:d1: 99:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:49:43:8F:38:B2:7A:8B:32:3F:89:06:B5:9D:15:12:46:75:BC:C8 X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.76.151.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:0f:3a:92:e3:bd:9d:3a:67:74:d3:ec:13:49:11:64:3a:58: 37:96:ec:bd:d5:b1:06:58:3e:a8:69:0f:11:1c:3e:a9:0b:7c: 38:1c:07:89:58:30:df:b5:38:a9:c7:e1:87:b0:4d:30:67:db: c9:e1:31:e2:da:f6:1e:16:64:9a:3f:8d:04:1d:e7:d8:51:30: 5a:dd:3f:83:d9:e7:1a:c8:8f:bc:8e:b4:69:f6:02:45:7a:57: 49:9a:71:63:95:97:27:58:70:34:7a:ac:78:ba:ee:cb:e9:69: 10:98:c7:9d:1e:1a:d8:dc:86:36:17:8f:23:62:a3:14:ab:9b: a4:27:b2:01:11:6e:8e:80:a9:2f:50:c9:63:f3:eb:23:94:d8: 4b:40:7d:15:78:e8:8f:ee:2f:bb:57:84:01:00:4d:1a:62:71: 22:09:a9:b7:5a:08:93:f1:0f:56:58:41:8d:3e:55:75:b4:71: 54:fc:b1:af:97:87:cd:d6:e5:18:a1:13:31:81:9a:4b:68:1a: a1:78:be:56:86:4e:d3:c7:9d:19:be:c5:58:be:ce:08:1a:98: ad:12:33:da:d4:fb:6a:5b:f7:56:6c:c9:f7:43:82:f3:9c:f7: af:76:5d:77:44:ac:4d:4a:35:22:34:9d:a0:da:93:db:ae:f5: 6a:c5:07:04 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUN1CaS/flypz7sQqsCbKq+h9lsVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNTAyMTEwMjQxMDhaFw0yNjAyMTAwMjQ2MDhaMDMxMTAvBgNV BAMTKEEwNDk0MzhGMzhCMjdBOEIzMjNGODkwNkI1OUQxNTEyNDY3NUJDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmXVdTzTDw0P9NSHSAPfkqa7UA bqz92W2JCaeedBsN5C85adh/ChBfhRoWf268cuGl92b8rTnAbuPO7M8WMhy70f6X muys4kEbl5lMB78dcKupqEBNBinOpLhrxvktqRnAkdiBxEc1HnR/fLNTnK797x1f OJWMfBeHaFjF415yDGamkn/gSx6qSPytK8hVSV5PXJc0mc0umXESFJUKtXrZ5mcr XborLFpY9Kn6LQd/75GkUFDULgmFZ8Hn0VxMz5MVKNImmDBUcW0Ugv5TrtduUzTo L58eD+bEZ+B2aYXQFD/8zUGupYjrKDdbti+F5ERyRU4G1awcHXWbZemn0ZnzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoElDjziyeosyP4kGtZ0VEkZ1vMgwHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNTQ4YmFkLTdmZWQtNDFmZC1i NDJlLTc4MDM3MmM0NTI1NS8wLzMxMzEzMDJlMzczNjJlMzEzNTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbkyXMA0GCSqG SIb3DQEBCwUAA4IBAQAeDzqS472dOmd00+wTSRFkOlg3luy91bEGWD6oaQ8RHD6p C3w4HAeJWDDftTipx+GHsE0wZ9vJ4THi2vYeFmSaP40EHefYUTBa3T+D2ecayI+8 jrRp9gJFeldJmnFjlZcnWHA0eqx4uu7L6WkQmMedHhrY3IY2F48jYqMUq5ukJ7IB EW6OgKkvUMlj8+sjlNhLQH0VeOiP7i+7V4QBAE0aYnEiCam3WgiT8Q9WWEGNPlV1 tHFU/LGvl4fN1uUYoRMxgZpLaBqheL5Whk7Tx50ZvsVYvs4IGpitEjPa1PtqW/dW bMn3Q4LznPevdl13RKxNSjUiNJ2g2pPbrvVqxQcE -----END CERTIFICATE-----Generated at Wed Apr 16 22:14:19 2025 by rpki-client