$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33362e36382e302f32342d3234203d3e20313333333631.roa File: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (raw, json) Hash identifier: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s= Subject key identifier: CB:0D:D3:13:8A:30:4C:14:40:9F:E7:B2:3A:86:04:F9:EC:36:D3:84 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 0FE0A3BF1AEEE8E1E640DBC2B8142ABC6586C25C Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33362e36382e302f32342d3234203d3e20313333333631.roa Signing time: Thu 27 Feb 2025 08:00:00 +0000 ROA not before: Thu 27 Feb 2025 07:55:00 +0000 ROA not after: Thu 26 Feb 2026 08:00:00 +0000 asID: 133361 IP address blocks: 103.36.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 12:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e0:a3:bf:1a:ee:e8:e1:e6:40:db:c2:b8:14:2a:bc:65:86:c2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Feb 27 07:55:00 2025 GMT Not After : Feb 26 08:00:00 2026 GMT Subject: CN=CB0DD3138A304C14409FE7B23A8604F9EC36D384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:d3:24:76:79:54:b9:e0:63:0b:71:45:b7: fa:db:44:0f:f7:f0:a0:8b:b4:d7:f2:d6:e7:e7:8e: a1:10:26:43:ba:e7:8a:e3:af:1e:93:78:74:9a:7f: b3:21:79:28:f9:e2:ca:12:f2:8d:27:17:52:de:2a: a8:f7:aa:14:ba:69:e1:1a:4e:eb:40:32:4a:45:19: e9:1d:57:7e:44:e2:69:39:eb:b7:f8:01:91:ad:ff: ed:b3:15:ed:03:c5:04:78:67:62:a2:5c:3f:8b:1f: ee:4d:fa:81:4a:66:58:30:d2:c4:70:e9:bc:bb:05: 67:50:0c:75:67:40:10:c7:1d:c7:81:4a:96:99:af: 21:b1:94:0b:3c:48:65:c8:59:e6:bb:a5:63:ad:5e: 2f:18:80:6e:d8:25:10:e7:80:35:1b:46:e2:76:ae: d2:20:47:f2:f4:46:fa:27:6a:65:be:5b:a6:e1:cc: 3e:dd:fc:bf:23:32:34:5f:95:78:fc:9d:74:22:d5: 7d:70:6d:f9:b4:b8:76:d1:44:e4:78:80:cc:4f:79: 59:5c:4b:c1:3e:32:cb:3b:17:e3:4d:c0:f8:24:7f: 98:39:5e:eb:4f:bf:70:52:e4:58:e2:c8:0b:0b:8d: 9d:c4:d8:d7:cc:dd:b6:98:cf:34:be:6e:7c:53:e7: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0D:D3:13:8A:30:4C:14:40:9F:E7:B2:3A:86:04:F9:EC:36:D3:84 X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33362e36382e302f32342d3234203d3e20313333333631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.68.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c9:1b:65:ce:f5:d5:a2:c8:b7:fd:4e:7b:c4:47:6f:b9:92: b0:f2:74:28:1d:80:be:36:86:10:6d:12:80:f6:ba:ab:d1:ae: 83:ca:9c:e6:b6:52:a0:31:f3:85:61:2c:5e:1a:ff:be:2c:81: 54:84:55:b1:66:82:3f:5d:41:b5:09:3c:b6:c1:b4:eb:b7:a1: d7:63:53:df:6b:76:62:0f:38:ff:b1:dd:ed:39:af:4a:0c:c5: 32:82:3d:14:35:c2:b7:6a:12:8c:bb:d4:43:0b:7d:ae:3b:89: 54:3d:9f:04:5f:78:46:96:41:26:c5:85:f1:af:6e:ae:71:4a: 04:48:cf:1d:b1:be:8c:75:42:b1:3e:fc:de:d8:67:66:d0:d9: 2f:13:38:f2:e6:a5:b3:97:c9:fd:cf:f3:1c:44:3a:65:a5:d8: d2:f0:80:d2:fd:20:e8:84:d0:d7:3d:bd:15:98:90:30:91:85: 30:b2:18:76:cc:5f:bf:2e:4e:e3:ff:74:ef:1e:f3:0c:c5:d9: 48:44:63:d2:c7:8a:f1:61:3d:b1:0d:bc:1b:93:73:b8:d8:b1: 12:ea:de:87:b6:61:b5:ad:15:7d:e9:52:87:97:9d:a0:60:94: 78:d6:40:65:07:0f:07:f7:33:71:8a:bd:8a:0f:2e:2c:60:ad: 9d:d5:6f:95 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUD+Cjvxru6OHmQNvCuBQqvGWGwlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNTAyMjcwNzU1MDBaFw0yNjAyMjYwODAwMDBaMDMxMTAvBgNV BAMTKENCMEREMzEzOEEzMDRDMTQ0MDlGRTdCMjNBODYwNEY5RUMzNkQzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9x9MkdnlUueBjC3FFt/rbRA/3 8KCLtNfy1ufnjqEQJkO654rjrx6TeHSaf7MheSj54soS8o0nF1LeKqj3qhS6aeEa TutAMkpFGekdV35E4mk567f4AZGt/+2zFe0DxQR4Z2KiXD+LH+5N+oFKZlgw0sRw 6by7BWdQDHVnQBDHHceBSpaZryGxlAs8SGXIWea7pWOtXi8YgG7YJRDngDUbRuJ2 rtIgR/L0RvonamW+W6bhzD7d/L8jMjRflXj8nXQi1X1wbfm0uHbRROR4gMxPeVlc S8E+Mss7F+NNwPgkf5g5XutPv3BS5FjiyAsLjZ3E2NfM3baYzzS+bnxT568HAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUyw3TE4owTBRAn+eyOoYE+ew204QwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiMzEzZDE3LTViOWItNGQyMy05 NDI0LTc0NTc5NTA4YmE1NC8wLzMxMzAzMzJlMzMzNjJlMzYzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMzMzMzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGckRDANBgkqhkiG 9w0BAQsFAAOCAQEABckbZc711aLIt/1Oe8RHb7mSsPJ0KB2AvjaGEG0SgPa6q9Gu g8qc5rZSoDHzhWEsXhr/viyBVIRVsWaCP11BtQk8tsG067eh12NT32t2Yg84/7Hd 7TmvSgzFMoI9FDXCt2oSjLvUQwt9rjuJVD2fBF94RpZBJsWF8a9urnFKBEjPHbG+ jHVCsT783thnZtDZLxM48uals5fJ/c/zHEQ6ZaXY0vCA0v0g6ITQ1z29FZiQMJGF MLIYdsxfvy5O4/907x7zDMXZSERj0seK8WE9sQ28G5NzuNixEureh7Zhta0VfelS h5edoGCUeNZAZQcPB/czcYq9ig8uLGCtndVvlQ== -----END CERTIFICATE-----Generated at Sun Apr 6 11:08:31 2025 by rpki-client