$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa File: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (raw, json) Hash identifier: 8zAQ86fhc8OVdskGyzWu9yQ7r5OHZaWOc1iXuXRtqpY= Subject key identifier: 51:3B:11:AF:51:1E:05:B5:B2:62:A0:75:E3:76:E8:66:A7:F4:92:54 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 0F8702FB5302386CCE50F34F1912D9ED4E18F566 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa Signing time: Sat 13 Jul 2024 12:00:02 +0000 ROA not before: Sat 13 Jul 2024 11:55:02 +0000 ROA not after: Sat 12 Jul 2025 12:00:02 +0000 asID: 136856 IP address blocks: 103.102.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Feb 2025 12:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:87:02:fb:53:02:38:6c:ce:50:f3:4f:19:12:d9:ed:4e:18:f5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Jul 13 11:55:02 2024 GMT Not After : Jul 12 12:00:02 2025 GMT Subject: CN=513B11AF511E05B5B262A075E376E866A7F49254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:40:37:22:43:6f:36:da:8d:a2:e1:fb:5f:cd: 42:22:98:dc:83:be:dd:6f:df:8a:e4:82:07:25:82: b4:42:7c:b1:10:59:22:a4:b1:43:58:d6:ef:4e:f7: 27:e9:27:e7:53:9c:78:9e:f0:1f:6b:37:d1:e5:8e: 6f:67:65:1d:32:54:c0:91:80:19:84:6a:ec:64:7a: be:a3:0a:e2:35:78:9f:b6:82:3d:e6:1d:cb:dd:71: 70:a2:b6:7a:d8:fe:ef:66:db:45:3a:04:75:3a:15: fa:6c:81:e1:6b:a1:f3:9d:9e:d8:2a:eb:1d:c2:88: 32:00:39:36:93:17:90:e3:73:7b:f0:ce:3d:d5:c2: 3e:80:ca:d0:59:67:b4:bb:d8:90:66:4f:ff:f1:9a: 8e:58:5a:d0:49:dc:c4:11:95:90:01:26:dc:cb:e7: 92:8a:49:ec:83:f3:02:d3:27:34:bd:b1:9a:6a:55: b7:5b:aa:96:20:36:65:1e:bc:6d:5f:2d:a1:d3:82: 94:34:8a:74:b5:21:2a:ee:6a:35:49:50:1a:bf:2d: d1:ef:dd:0e:98:22:37:59:6a:56:06:2e:df:eb:63: 29:5e:1d:64:82:8e:bc:b4:ff:41:bf:18:1c:4a:d4: 80:58:c9:b7:a3:2e:70:93:11:80:2e:47:dd:8f:a9: c8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3B:11:AF:51:1E:05:B5:B2:62:A0:75:E3:76:E8:66:A7:F4:92:54 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.115.0/24 Signature Algorithm: sha256WithRSAEncryption 48:d3:16:83:fa:fa:5a:9d:86:23:e5:7f:bd:42:94:46:4f:f9: 19:de:b8:87:ba:9a:de:b4:9d:5e:f7:d0:83:61:84:57:af:cd: 1c:10:21:8e:68:51:9d:37:23:07:75:8d:3e:5f:4c:ff:a3:38: fa:33:10:dc:7c:5e:51:11:9a:d7:06:e5:c0:99:9d:94:4a:d2: 30:d2:e0:f1:ca:f5:0a:ed:b5:83:df:82:c3:1f:6e:4c:dd:73: 08:e8:5e:cf:8a:1d:4e:14:1b:7c:b4:9a:ff:e0:fe:49:2f:3a: bf:5f:6d:4d:0a:a8:71:a1:7a:b5:32:9e:db:76:f9:4a:ff:39: f6:3d:2b:4d:d9:4a:e8:4f:8d:4f:71:f9:ab:3a:81:0d:96:04: 5d:bb:ed:5e:ea:ed:d0:37:7f:88:25:d7:b1:fb:7b:ec:fa:6f: 6f:42:fa:78:44:7b:dd:9c:42:14:76:85:d3:11:24:40:87:05: 93:09:b7:89:bc:fb:79:67:a3:a0:66:57:cc:7b:63:c5:1a:6d: 4a:25:82:7f:37:56:69:b4:94:dd:d5:59:5d:44:f0:63:51:c9: f9:bc:19:d1:ee:da:da:34:85:5b:03:fe:3e:54:65:9f:3a:aa: 37:db:3b:8c:60:f7:f1:15:5c:d5:aa:19:93:18:6d:30:80:67: 57:55:ab:d5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUD4cC+1MCOGzOUPNPGRLZ7U4Y9WYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNDA3MTMxMTU1MDJaFw0yNTA3MTIxMjAwMDJaMDMxMTAvBgNV BAMTKDUxM0IxMUFGNTExRTA1QjVCMjYyQTA3NUUzNzZFODY2QTdGNDkyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeQDciQ2822o2i4ftfzUIimNyD vt1v34rkggclgrRCfLEQWSKksUNY1u9O9yfpJ+dTnHie8B9rN9Hljm9nZR0yVMCR gBmEauxker6jCuI1eJ+2gj3mHcvdcXCitnrY/u9m20U6BHU6FfpsgeFrofOdntgq 6x3CiDIAOTaTF5Djc3vwzj3Vwj6AytBZZ7S72JBmT//xmo5YWtBJ3MQRlZABJtzL 55KKSeyD8wLTJzS9sZpqVbdbqpYgNmUevG1fLaHTgpQ0inS1ISruajVJUBq/LdHv 3Q6YIjdZalYGLt/rYyleHWSCjry0/0G/GBxK1IBYybejLnCTEYAuR92PqchnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUUTsRr1EeBbWyYqB143boZqf0klQwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1YzdhNDA0LWViM2YtNGNmMS05 OWY5LTgyNzk2MTY2MWYzMS8wLzMxMzAzMzJlMzEzMDMyMmUzMTMxMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZnMwDQYJ KoZIhvcNAQELBQADggEBAEjTFoP6+lqdhiPlf71ClEZP+RneuIe6mt60nV730INh hFevzRwQIY5oUZ03Iwd1jT5fTP+jOPozENx8XlERmtcG5cCZnZRK0jDS4PHK9Qrt tYPfgsMfbkzdcwjoXs+KHU4UG3y0mv/g/kkvOr9fbU0KqHGherUyntt2+Ur/OfY9 K03ZSuhPjU9x+as6gQ2WBF277V7q7dA3f4gl17H7e+z6b29C+nhEe92cQhR2hdMR JECHBZMJt4m8+3lno6BmV8x7Y8UabUolgn83Vmm0lN3VWV1E8GNRyfm8GdHu2to0 hVsD/j5UZZ86qjfbO4xg9/EVXNWqGZMYbTCAZ1dVq9U= -----END CERTIFICATE-----Generated at Fri Feb 21 11:09:33 2025 by rpki-client