$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa File: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (raw, json) Hash identifier: SVE74EJY+/yLTeg5MgiV8Avr9GoudO2JkbEn1L8oc7s= Subject key identifier: 76:02:60:CA:33:01:D1:C9:C1:44:13:7C:F6:60:EF:1A:F0:8E:CD:F1 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 6172FF2C70B42788B4D5B8C74914493C148E20A1 Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa Signing time: Thu 16 Jan 2025 17:00:00 +0000 ROA not before: Thu 16 Jan 2025 16:55:00 +0000 ROA not after: Thu 15 Jan 2026 17:00:00 +0000 asID: 141612 IP address blocks: 103.161.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:72:ff:2c:70:b4:27:88:b4:d5:b8:c7:49:14:49:3c:14:8e:20:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Jan 16 16:55:00 2025 GMT Not After : Jan 15 17:00:00 2026 GMT Subject: CN=760260CA3301D1C9C144137CF660EF1AF08ECDF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6c:5c:e9:fc:0e:5a:b7:49:cb:44:04:62:e8: a1:ec:7a:18:b4:a1:03:96:79:08:7b:4d:c0:8a:f0: 89:17:bb:2f:3d:2c:36:c8:8e:95:e0:55:8d:85:1c: a9:86:d8:3f:f6:b3:7b:8b:06:70:82:93:e8:f7:c0: 19:b0:d8:10:cc:01:c5:08:68:c0:64:b2:35:93:05: f6:ef:29:ae:85:1d:31:95:1d:48:97:8c:8a:6a:15: 84:6c:df:f0:0b:5f:c4:dd:f5:19:70:65:9c:3e:01: e5:35:df:5d:0d:84:0a:32:2d:70:30:0d:63:3b:a1: 2d:ce:01:18:2b:4b:18:4b:2d:7a:68:03:6a:c3:73: ae:8a:ad:90:b9:03:43:0b:48:70:79:46:4c:ff:9a: e6:3d:d1:87:5d:2c:a3:c9:92:8c:3b:31:0d:7b:90: 6f:a1:44:22:d8:00:e3:73:f8:4a:14:8b:c7:3a:c7: 1c:95:37:03:a0:3c:df:a4:67:6f:2e:ce:97:44:1f: fe:78:78:2f:e4:d6:59:86:9d:f8:e8:b2:9b:80:7a: 4c:ff:5c:68:68:3d:a0:a9:d3:b9:51:89:64:de:d9: cc:b2:b0:bb:c6:13:2f:d1:4e:59:21:02:9e:29:37: 20:6c:52:3b:57:e5:66:2f:c9:3d:83:6d:6e:fa:c1: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:02:60:CA:33:01:D1:C9:C1:44:13:7C:F6:60:EF:1A:F0:8E:CD:F1 X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.114.0/23 Signature Algorithm: sha256WithRSAEncryption 87:60:98:94:01:b1:ca:cc:37:a2:d5:5d:df:e1:01:8e:f9:53: dc:1d:5b:c7:81:0a:7e:0d:1a:94:87:13:7a:04:5a:2c:51:70: 03:47:58:af:c4:1d:09:46:b0:06:53:d1:bd:71:7d:ee:a6:ec: 2b:b2:6c:75:62:a6:7d:b1:44:43:d9:ca:d1:73:73:48:4b:e6: 6c:10:1e:7e:72:45:dc:19:b5:d6:43:18:7b:70:f8:7a:96:bc: 0d:01:a2:8e:0e:75:8d:6e:fc:d0:9c:c9:69:90:84:07:70:c2: 9b:73:51:4c:eb:58:61:0f:ed:14:b2:32:92:03:f9:32:3e:70: 8c:6a:5f:83:ef:17:1e:b2:dc:5a:5f:54:20:9a:0d:26:45:c4: d9:e9:f6:57:4d:0f:27:b2:c1:5e:46:3c:a1:93:9f:05:8c:de: 0b:2f:7e:d9:60:02:53:63:f7:ea:df:b8:a5:04:82:30:cd:2f: 62:a5:a5:66:47:99:70:c8:36:1d:9c:50:ef:a8:1e:27:95:a2: 8d:6d:07:55:6d:af:81:39:5d:0c:5d:ed:83:76:62:9a:d3:a3: 63:f0:36:6b:c3:42:6c:09:e1:71:41:86:a3:6c:4d:b6:87:71: 9f:82:27:ee:6b:96:3f:82:8c:3c:e8:7c:1f:4d:a8:e7:e1:d3: 10:42:96:06 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYXL/LHC0J4i01bjHSRRJPBSOIKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNTAxMTYxNjU1MDBaFw0yNjAxMTUxNzAwMDBaMDMxMTAvBgNV BAMTKDc2MDI2MENBMzMwMUQxQzlDMTQ0MTM3Q0Y2NjBFRjFBRjA4RUNERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwbFzp/A5at0nLRARi6KHsehi0 oQOWeQh7TcCK8IkXuy89LDbIjpXgVY2FHKmG2D/2s3uLBnCCk+j3wBmw2BDMAcUI aMBksjWTBfbvKa6FHTGVHUiXjIpqFYRs3/ALX8Td9RlwZZw+AeU1310NhAoyLXAw DWM7oS3OARgrSxhLLXpoA2rDc66KrZC5A0MLSHB5Rkz/muY90YddLKPJkow7MQ17 kG+hRCLYAONz+EoUi8c6xxyVNwOgPN+kZ28uzpdEH/54eC/k1lmGnfjospuAekz/ XGhoPaCp07lRiWTe2cyysLvGEy/RTlkhAp4pNyBsUjtX5WYvyT2DbW76wYOdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUdgJgyjMB0cnBRBN89mDvGvCOzfEwHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk3OTVhMzc4LWQ2OWUtNDUyZS1h YzY3LTNiNzQ5MDM5YThjOC8wLzMxMzAzMzJlMzEzNjMxMmUzMTMxMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoXIwDQYJ KoZIhvcNAQELBQADggEBAIdgmJQBscrMN6LVXd/hAY75U9wdW8eBCn4NGpSHE3oE WixRcANHWK/EHQlGsAZT0b1xfe6m7CuybHVipn2xREPZytFzc0hL5mwQHn5yRdwZ tdZDGHtw+HqWvA0Boo4OdY1u/NCcyWmQhAdwwptzUUzrWGEP7RSyMpID+TI+cIxq X4PvFx6y3FpfVCCaDSZFxNnp9ldNDyeywV5GPKGTnwWM3gsvftlgAlNj9+rfuKUE gjDNL2KlpWZHmXDINh2cUO+oHieVoo1tB1Vtr4E5XQxd7YN2YprTo2PwNmvDQmwJ 4XFBhqNsTbaHcZ+CJ+5rlj+CjDzofB9NqOfh0xBClgY= -----END CERTIFICATE-----Generated at Sun Apr 6 20:14:32 2025 by rpki-client