$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa File: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (raw, json) Hash identifier: V2nbf4Xerdo+UlaGtEEFCDfKfKUg2cbilII6qfqHQqs= Subject key identifier: B2:D4:95:E4:2E:7C:D5:EF:F4:D6:D3:3D:5F:64:F0:7E:C7:0B:C5:B1 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 7916B52B7AEBD5287CAF41422C3EF579C1A6FD5C Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa Signing time: Fri 07 Feb 2025 17:46:43 +0000 ROA not before: Fri 07 Feb 2025 17:41:43 +0000 ROA not after: Fri 06 Feb 2026 17:46:43 +0000 asID: 141128 IP address blocks: 103.158.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 18:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:16:b5:2b:7a:eb:d5:28:7c:af:41:42:2c:3e:f5:79:c1:a6:fd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Feb 7 17:41:43 2025 GMT Not After : Feb 6 17:46:43 2026 GMT Subject: CN=B2D495E42E7CD5EFF4D6D33D5F64F07EC70BC5B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:7a:f5:29:4a:9f:1e:8a:0c:a6:14:db:cb: c1:17:c8:4a:68:4a:96:90:9a:e4:e2:02:91:5c:65: 48:18:16:fa:be:a0:93:11:fd:10:52:7f:3a:e7:2a: fe:2d:6e:11:f9:23:19:83:13:8f:9b:b2:4c:c4:07: a2:ca:35:49:8b:65:16:3a:d7:29:a0:4b:81:79:bf: 8c:6f:51:9a:2d:7f:25:cf:0e:ab:ef:2d:e1:72:8d: d0:96:1b:6d:51:14:ac:e0:b8:2a:d0:11:68:49:52: 7e:19:50:41:58:6a:7a:0b:9a:f4:99:a8:22:1e:61: 32:55:3a:16:22:80:56:8f:00:50:aa:dc:fa:7d:c0: 6d:2e:c3:a3:33:11:b6:92:62:06:5b:c3:6b:d9:d3: df:b8:c0:5d:13:18:05:42:91:20:b5:8c:52:69:2e: 59:c8:87:24:d4:18:bc:25:f0:03:86:d7:75:82:99: 87:ba:40:0b:dc:03:1b:b2:c5:6c:0b:bc:7a:b2:68: ed:4e:f3:b3:cc:73:65:fb:fe:83:8e:7a:97:a1:9f: eb:c7:65:07:84:f1:90:82:2d:bf:ca:8a:f1:e5:3d: 19:05:1a:2f:45:d8:69:07:44:1a:2c:3b:09:8a:87: c5:06:71:7d:48:0e:8a:bc:12:5c:e2:f0:a3:11:49: 20:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D4:95:E4:2E:7C:D5:EF:F4:D6:D3:3D:5F:64:F0:7E:C7:0B:C5:B1 X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.130.0/24 Signature Algorithm: sha256WithRSAEncryption 54:02:5c:2a:d4:57:a9:fe:62:4d:44:a8:92:b9:75:63:74:28: 93:72:b1:73:e9:5b:d3:30:47:36:f6:09:52:65:61:79:84:cf: d1:21:fc:e5:96:c4:22:90:4f:60:05:cf:5f:54:ee:6a:71:15: da:13:cd:18:be:36:1c:ef:19:f8:8d:c7:82:57:85:1e:33:17: b3:30:04:69:88:b5:14:d5:c4:e3:98:9d:b2:67:20:5c:6d:07: 32:ae:ec:75:e8:17:4c:58:0f:3b:d7:31:f1:2c:00:87:dd:6e: eb:a1:ae:7c:93:89:82:79:0d:10:88:8d:b7:d8:e3:fa:ce:b7: e6:4f:bc:a9:c7:72:a3:e5:d5:4c:c7:89:44:40:31:8d:9d:59: 30:6e:cf:e4:ba:8f:93:18:49:8c:5b:4e:5d:e9:5e:30:78:c5: e6:00:97:7b:51:db:71:29:ff:cd:7d:1f:8e:60:fd:b9:ee:0e: 2c:3b:10:37:fa:f2:65:df:f0:27:cb:88:ec:7d:27:88:2c:27: 5b:9e:d0:bd:5e:bf:c0:2e:82:45:dc:a2:bb:b2:f7:2c:a7:69: b3:c9:05:06:ab:f2:99:a9:3f:d1:b7:0a:40:48:0d:4c:c1:4e: a8:36:3f:33:fe:06:e9:c2:b7:bc:e0:a2:aa:81:20:80:c0:4e: 83:31:a9:38 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUeRa1K3rr1Sh8r0FCLD71ecGm/VwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNTAyMDcxNzQxNDNaFw0yNjAyMDYxNzQ2NDNaMDMxMTAvBgNV BAMTKEIyRDQ5NUU0MkU3Q0Q1RUZGNEQ2RDMzRDVGNjRGMDdFQzcwQkM1QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTXr1KUqfHooMphTby8EXyEpo SpaQmuTiApFcZUgYFvq+oJMR/RBSfzrnKv4tbhH5IxmDE4+bskzEB6LKNUmLZRY6 1ymgS4F5v4xvUZotfyXPDqvvLeFyjdCWG21RFKzguCrQEWhJUn4ZUEFYanoLmvSZ qCIeYTJVOhYigFaPAFCq3Pp9wG0uw6MzEbaSYgZbw2vZ09+4wF0TGAVCkSC1jFJp LlnIhyTUGLwl8AOG13WCmYe6QAvcAxuyxWwLvHqyaO1O87PMc2X7/oOOepehn+vH ZQeE8ZCCLb/KivHlPRkFGi9F2GkHRBosOwmKh8UGcX1IDoq8Elzi8KMRSSC5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUstSV5C581e/01tM9X2TwfscLxbEwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1ZGVjYTgyLTg5YWItNDU4Mi04 ZTgyLThlYzhhNTFmZWM0Mi8wLzMxMzAzMzJlMzEzNTM4MmUzMTMzMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMyMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnoIwDQYJ KoZIhvcNAQELBQADggEBAFQCXCrUV6n+Yk1EqJK5dWN0KJNysXPpW9MwRzb2CVJl YXmEz9Eh/OWWxCKQT2AFz19U7mpxFdoTzRi+NhzvGfiNx4JXhR4zF7MwBGmItRTV xOOYnbJnIFxtBzKu7HXoF0xYDzvXMfEsAIfdbuuhrnyTiYJ5DRCIjbfY4/rOt+ZP vKnHcqPl1UzHiURAMY2dWTBuz+S6j5MYSYxbTl3pXjB4xeYAl3tR23Ep/819H45g /bnuDiw7EDf68mXf8CfLiOx9J4gsJ1ue0L1ev8AugkXcoruy9yynabPJBQar8pmp P9G3CkBIDUzBTqg2PzP+BunCt7zgoqqBIIDAToMxqTg= -----END CERTIFICATE-----Generated at Sun Apr 6 14:04:00 2025 by rpki-client