$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa File: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (raw, json) Hash identifier: Cf8zuOBPe5ne4FbCX/nB71vXdpt4+lQ9NgMPpci6uTA= Subject key identifier: 88:13:3D:84:C7:7A:F6:4A:F3:5A:3E:12:BD:8D:C7:5A:E5:A6:9F:B2 Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 643D852106A0243AC74B6006BACFD34B8B7DC02A Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa Signing time: Sun 24 Nov 2024 08:00:00 +0000 ROA not before: Sun 24 Nov 2024 07:55:00 +0000 ROA not after: Sun 23 Nov 2025 08:00:00 +0000 asID: 134658 IP address blocks: 103.55.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 10:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3d:85:21:06:a0:24:3a:c7:4b:60:06:ba:cf:d3:4b:8b:7d:c0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Nov 24 07:55:00 2024 GMT Not After : Nov 23 08:00:00 2025 GMT Subject: CN=88133D84C77AF64AF35A3E12BD8DC75AE5A69FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:c5:24:c4:dc:c0:b0:a7:91:9f:d4:bf:88: 95:c8:78:20:33:53:f4:79:68:62:8e:1a:4a:b2:7d: dd:2c:32:9c:3c:6f:13:0e:85:37:b3:bd:59:c3:eb: 83:06:96:cf:26:4b:5e:58:41:51:00:11:36:3a:b8: 57:d9:bf:52:ae:ac:6b:30:ee:99:5d:ab:fb:bf:00: 61:74:ab:98:f6:ee:f7:a8:53:b4:a9:53:61:e2:8a: 00:2d:7c:f6:36:e3:b2:31:ce:de:71:e5:22:d5:66: 8c:e3:1a:77:53:71:75:42:c5:eb:f9:43:8b:01:94: a5:7a:65:d9:6d:e2:4b:6d:24:8d:7c:12:bd:40:0d: 24:b2:ec:ad:2b:90:ef:29:32:ea:f2:25:42:5a:50: fb:6d:1a:53:3f:4f:5f:67:a9:00:c2:d4:06:a9:6e: da:6e:d5:57:f1:b9:e9:92:17:38:90:d7:e0:f6:c6: 7b:da:13:f7:14:e8:b3:61:a7:f1:32:ee:27:6c:93: e4:2c:69:68:db:2a:a9:b7:b7:58:00:04:07:da:44: 5f:cb:23:8b:80:26:cf:99:fa:11:bd:46:3d:21:26: e6:ff:88:d9:4a:1f:5d:7a:85:fd:56:db:df:ad:3b: 4f:9e:22:c9:e0:1f:16:f6:63:c8:b4:be:af:50:cd: 6a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:13:3D:84:C7:7A:F6:4A:F3:5A:3E:12:BD:8D:C7:5A:E5:A6:9F:B2 X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.226.0/24 Signature Algorithm: sha256WithRSAEncryption 50:ae:78:77:c3:33:52:06:bf:4f:cd:a7:69:7a:5c:24:0d:08: 3b:c8:ec:95:93:97:ae:b8:44:80:28:42:74:db:3e:4d:65:b5: 0f:78:df:51:42:ec:c1:f4:d4:8b:22:64:d7:ff:5a:61:3f:b3: ee:b6:72:50:59:c7:6b:bc:19:39:9f:8d:e7:07:c3:69:a6:15: e2:cc:9e:39:1f:26:ae:14:0b:4c:91:fd:5a:a4:9b:a5:48:c9: 70:de:1d:bf:53:e0:d7:ad:aa:aa:88:88:57:02:b1:2a:08:80: 2c:d8:9e:82:e5:ec:0e:20:8a:3d:6e:db:df:f6:6e:04:1f:ed: bc:df:02:9f:fe:2f:12:7d:f0:a4:8e:0a:51:08:ec:4c:03:ea: 54:63:ba:00:55:b1:e1:ef:88:67:16:2f:47:87:39:03:ce:95: a0:9f:5b:67:98:e4:92:c9:be:6f:0b:24:dc:01:35:1d:7b:7c: 18:9e:37:5c:80:5c:fa:6d:5f:e7:2c:1f:cf:76:58:7f:2a:fe: 66:16:98:96:92:5f:46:e4:dd:db:1c:fc:ab:d1:a0:97:03:e1: 40:63:f8:81:41:34:55:d2:df:55:15:6f:eb:47:f7:6c:2d:f1: 4e:bc:2f:8a:86:f8:54:7d:87:69:bc:39:a7:64:8d:da:de:e2: 9f:3b:f6:6c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZD2FIQagJDrHS2AGus/TS4t9wCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNDExMjQwNzU1MDBaFw0yNTExMjMwODAwMDBaMDMxMTAvBgNV BAMTKDg4MTMzRDg0Qzc3QUY2NEFGMzVBM0UxMkJEOERDNzVBRTVBNjlGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCza8UkxNzAsKeRn9S/iJXIeCAz U/R5aGKOGkqyfd0sMpw8bxMOhTezvVnD64MGls8mS15YQVEAETY6uFfZv1KurGsw 7pldq/u/AGF0q5j27veoU7SpU2HiigAtfPY247Ixzt5x5SLVZozjGndTcXVCxev5 Q4sBlKV6Zdlt4kttJI18Er1ADSSy7K0rkO8pMuryJUJaUPttGlM/T19nqQDC1Aap btpu1VfxuemSFziQ1+D2xnvaE/cU6LNhp/Ey7idsk+QsaWjbKqm3t1gABAfaRF/L I4uAJs+Z+hG9Rj0hJub/iNlKH116hf1W29+tO0+eIsngHxb2Y8i0vq9QzWpVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUiBM9hMd69krzWj4SvY3HWuWmn7IwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZTNkZDk1LTJhODUtNDM5ZS04 NGYyLTk3MmEyM2UzMjcxZS8wLzMxMzAzMzJlMzUzNTJlMzIzMjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM0MzYzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzfiMA0GCSqG SIb3DQEBCwUAA4IBAQBQrnh3wzNSBr9PzadpelwkDQg7yOyVk5euuESAKEJ02z5N ZbUPeN9RQuzB9NSLImTX/1phP7PutnJQWcdrvBk5n43nB8NpphXizJ45HyauFAtM kf1apJulSMlw3h2/U+DXraqqiIhXArEqCIAs2J6C5ewOIIo9btvf9m4EH+283wKf /i8SffCkjgpRCOxMA+pUY7oAVbHh74hnFi9HhzkDzpWgn1tnmOSSyb5vCyTcATUd e3wYnjdcgFz6bV/nLB/Pdlh/Kv5mFpiWkl9G5N3bHPyr0aCXA+FAY/iBQTRV0t9V FW/rR/dsLfFOvC+KhvhUfYdpvDmnZI3a3uKfO/Zs -----END CERTIFICATE-----Generated at Sun Apr 6 08:32:59 2025 by rpki-client