$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa File: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (raw, json) Hash identifier: scqosPwH5BL2/2imBhyJZEPHHItlqeTByFILkve6Gxg= Subject key identifier: 44:91:02:AC:53:F7:9E:5A:69:C8:AB:9A:5B:E7:1E:1C:A1:29:76:95 Certificate issuer: /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Certificate serial: 5A932370DE1D1D3DAEF553DFEDC968E40BD16368 Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa Signing time: Thu 06 Mar 2025 11:00:00 +0000 ROA not before: Thu 06 Mar 2025 10:55:00 +0000 ROA not after: Thu 05 Mar 2026 11:00:00 +0000 asID: 149697 IP address blocks: 103.186.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 01:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:93:23:70:de:1d:1d:3d:ae:f5:53:df:ed:c9:68:e4:0b:d1:63:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Validity Not Before: Mar 6 10:55:00 2025 GMT Not After : Mar 5 11:00:00 2026 GMT Subject: CN=449102AC53F79E5A69C8AB9A5BE71E1CA1297695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:cc:4b:29:00:99:8e:2f:98:52:80:fe:8c: 66:3f:a9:75:9c:92:f4:e0:26:a8:1a:bc:88:af:48: 8c:2d:c5:74:06:0a:61:e8:e1:3e:05:5b:bb:62:55: 54:35:43:84:46:36:23:23:e8:f5:8f:91:e6:31:d7: 5c:f0:ff:d3:50:b8:08:4e:d0:e0:0f:c4:66:ed:c3: 0b:25:2e:0a:c4:3a:e0:83:e9:06:67:05:78:37:0e: fc:5a:d4:72:43:12:6e:8f:ac:50:0c:90:55:38:72: 58:ae:26:a8:89:85:fd:9b:01:0d:24:7d:47:6b:5c: f9:45:fc:3e:e6:b6:bf:c7:66:1b:e4:61:51:b8:8e: 20:df:13:20:e9:a2:28:d3:87:d4:0b:94:77:c1:5b: ed:c3:07:82:0a:b1:01:eb:8e:02:e6:89:bb:18:1f: 41:eb:2b:91:6e:2f:49:4a:e9:8d:d5:1b:53:17:26: 59:13:ef:0a:fb:01:9c:5e:ca:5c:09:5a:47:ca:c2: e2:7e:e6:15:48:69:50:3b:e7:b8:1c:e1:5b:89:14: 76:26:53:6a:b8:a0:98:1a:7b:0b:23:d4:c4:1f:d1: 91:47:e1:ec:27:3f:95:dc:60:d0:62:dd:93:0a:5c: 75:39:12:da:87:0c:d0:41:8f:a8:d8:7f:1d:6d:61: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:91:02:AC:53:F7:9E:5A:69:C8:AB:9A:5B:E7:1E:1C:A1:29:76:95 X509v3 Authority Key Identifier: keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.92.0/24 Signature Algorithm: sha256WithRSAEncryption 12:3d:ac:c3:ae:10:b3:a3:6d:da:d5:16:ad:54:6a:53:9d:e5: e2:b7:71:ff:e0:b5:69:60:ac:05:1c:38:a2:53:bf:9a:4b:40: 43:96:11:f3:12:18:60:51:78:dc:1b:eb:e7:45:df:1b:22:70: 3c:b2:1c:f5:77:51:69:7c:fd:29:da:62:50:9f:96:ef:9e:06: 24:5d:eb:6f:77:e0:52:f3:44:fa:cc:a3:59:ad:89:c7:27:cf: 1e:c4:aa:99:fc:73:ba:9c:2e:ac:66:52:51:b2:bb:c8:c8:e2: 01:d4:6d:b1:9b:42:4b:4e:d2:8d:c6:7d:de:a3:f8:e5:1e:4a: 57:8f:c1:de:76:d2:8d:48:e5:59:6b:85:8f:b0:b9:ab:b8:05: 35:ad:3a:03:39:72:54:e3:2e:83:3f:4f:85:b5:ee:b9:c1:59: 09:54:24:00:8b:4a:8b:89:44:be:73:69:0c:89:c9:07:2e:4a: 20:8a:b9:e3:c3:69:ba:48:05:1e:09:44:84:0a:5b:94:a7:1f: fb:8e:5d:b7:eb:83:21:9a:46:1a:16:cd:a3:a6:38:1f:5a:e9: c6:30:f8:c7:73:27:7b:06:33:dc:e9:52:15:76:45:1c:37:0a: 91:47:17:66:fb:ec:20:d9:fa:4d:ee:3a:61:d7:94:d8:d8:00: 36:8b:50:6d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWpMjcN4dHT2u9VPf7clo5AvRY2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdF MkZGMjYzRTAeFw0yNTAzMDYxMDU1MDBaFw0yNjAzMDUxMTAwMDBaMDMxMTAvBgNV BAMTKDQ0OTEwMkFDNTNGNzlFNUE2OUM4QUI5QTVCRTcxRTFDQTEyOTc2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC568xLKQCZji+YUoD+jGY/qXWc kvTgJqgavIivSIwtxXQGCmHo4T4FW7tiVVQ1Q4RGNiMj6PWPkeYx11zw/9NQuAhO 0OAPxGbtwwslLgrEOuCD6QZnBXg3Dvxa1HJDEm6PrFAMkFU4cliuJqiJhf2bAQ0k fUdrXPlF/D7mtr/HZhvkYVG4jiDfEyDpoijTh9QLlHfBW+3DB4IKsQHrjgLmibsY H0HrK5FuL0lK6Y3VG1MXJlkT7wr7AZxeylwJWkfKwuJ+5hVIaVA757gc4VuJFHYm U2q4oJgaewsj1MQf0ZFH4ewnP5XcYNBi3ZMKXHU5EtqHDNBBj6jYfx1tYdt9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURJECrFP3nlppyKuaW+ceHKEpdpUwHwYDVR0j BBgwFoAUhuZ5Wsq5nPKc58fhDX/M5+L/Jj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGUxYWM3Yy05MDRkLTQ5M2YtYmE1ZS01ZTA4MzdkY2JkMjkvMC84NkU2Nzk1QUNB Qjk5Q0YyOUNFN0M3RTEwRDdGQ0NFN0UyRkYyNjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdFMkZG MjYzRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0ZTFhYzdjLTkwNGQtNDkzZi1i YTVlLTVlMDgzN2RjYmQyOS8wLzMxMzAzMzJlMzEzODM2MmUzOTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7pcMA0GCSqG SIb3DQEBCwUAA4IBAQASPazDrhCzo23a1RatVGpTneXit3H/4LVpYKwFHDiiU7+a S0BDlhHzEhhgUXjcG+vnRd8bInA8shz1d1FpfP0p2mJQn5bvngYkXetvd+BS80T6 zKNZrYnHJ88exKqZ/HO6nC6sZlJRsrvIyOIB1G2xm0JLTtKNxn3eo/jlHkpXj8He dtKNSOVZa4WPsLmruAU1rToDOXJU4y6DP0+Fte65wVkJVCQAi0qLiUS+c2kMickH Lkogirnjw2m6SAUeCUSECluUpx/7jl2364MhmkYaFs2jpjgfWunGMPjHcyd7BjPc 6VIVdkUcNwqRRxdm++wg2fpN7jph15TY2AA2i1Bt -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:03 2025 by rpki-client