$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa File: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (raw, json) Hash identifier: gijCUxucdKPAfR8IZPnyVJTjCBFpS+iFvueSFcvPeQ4= Subject key identifier: 0F:48:F6:89:7D:5F:62:93:0B:BD:6B:02:BF:84:E2:61:9E:15:7D:D5 Certificate issuer: /CN=7195906BF48238F96B0510D75000910A519133F7 Certificate serial: 11BC9323BC131CE741B7234660419E83C6DF96B6 Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa Signing time: Tue 31 Dec 2024 07:02:16 +0000 ROA not before: Tue 31 Dec 2024 06:57:16 +0000 ROA not after: Tue 30 Dec 2025 07:02:16 +0000 asID: 142311 IP address blocks: 103.168.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 13:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bc:93:23:bc:13:1c:e7:41:b7:23:46:60:41:9e:83:c6:df:96:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7195906BF48238F96B0510D75000910A519133F7 Validity Not Before: Dec 31 06:57:16 2024 GMT Not After : Dec 30 07:02:16 2025 GMT Subject: CN=0F48F6897D5F62930BBD6B02BF84E2619E157DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:a9:ee:be:9d:b3:48:c7:9e:ce:7b:a1:1a: df:7d:c0:26:f3:5e:86:a2:86:fd:45:2e:bf:2f:85: 67:1c:07:72:08:82:84:85:cc:4f:f1:6e:03:f6:3a: 0c:a8:87:bd:68:4e:f6:d3:7f:8e:43:bd:d0:72:9f: 35:a7:ff:e5:88:e8:12:57:44:57:bd:a3:09:53:3c: 96:39:8c:b9:a8:32:c5:5f:bd:5b:d3:72:96:55:d7: fe:38:58:24:f2:8e:8f:15:6f:23:89:09:01:ad:eb: 87:0a:1f:6d:d8:3b:0d:c6:a0:dc:e9:12:34:fd:8f: 2d:a4:ee:1e:75:50:40:92:b9:26:e6:8d:54:aa:b9: 28:69:00:8a:f1:b2:bf:e9:cf:77:99:d1:14:e3:43: c0:53:ca:fc:f0:e4:53:61:8d:4c:4e:be:9c:6b:4d: d6:07:ed:bd:b7:33:26:09:47:99:58:bb:3d:21:80: f0:26:b7:03:27:91:59:fb:58:11:26:6c:12:76:02: cd:47:a2:3a:98:a8:8a:22:5a:48:a6:59:93:d6:53: fd:a9:b3:bb:01:2b:24:2c:64:1e:1e:0c:be:f2:43: 79:93:54:c4:67:75:24:e8:94:17:42:56:0b:bd:93: 32:b8:92:bb:12:5c:48:eb:6f:0c:85:04:f7:c9:42: 2b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:48:F6:89:7D:5F:62:93:0B:BD:6B:02:BF:84:E2:61:9E:15:7D:D5 X509v3 Authority Key Identifier: keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.150.0/24 Signature Algorithm: sha256WithRSAEncryption 04:94:b6:9d:d7:78:66:9c:9f:12:e8:07:0f:5f:8b:4f:f1:21: 3d:4c:32:72:4b:72:dc:af:42:75:52:23:04:bc:54:96:a5:2f: 2e:2c:7d:73:be:9f:29:ce:02:f2:b5:02:27:da:d4:17:82:b3: fb:af:2a:67:d5:b0:7b:ac:a2:49:30:fd:0c:b1:e5:d7:82:1c: 45:59:a5:1b:26:60:c4:48:8d:17:bd:1a:6e:48:29:5e:bd:c7: a4:b2:2f:13:65:f4:59:e7:4a:f1:25:55:38:4d:b8:9f:f1:0e: f8:03:1a:4b:74:cc:66:29:ae:52:a4:0f:81:63:d0:3a:d2:85: 2d:7b:76:c9:58:29:95:79:c3:d0:33:e2:02:21:d3:92:13:2a: 97:11:6d:2e:ba:d2:55:9c:16:e6:2e:fd:82:3e:9f:ea:e9:c6: 17:d1:f4:5d:0a:53:ab:7c:84:40:1d:b7:7c:11:9b:db:ee:2c: f7:80:da:b7:4e:f4:04:8e:9d:43:8e:6b:97:a3:e8:4c:e0:88: 54:2b:fd:5f:a5:cb:ed:34:02:19:9a:7f:82:20:b1:d6:47:95: 91:0b:b3:31:2b:69:29:85:9a:f0:71:ff:06:80:79:c4:a5:e1: 6e:69:ab:ab:fc:1e:ff:df:42:3f:94:cd:75:47:d0:a1:d5:3f: 61:e8:32:7d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEbyTI7wTHOdBtyNGYEGeg8bflrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1 MTkxMzNGNzAeFw0yNDEyMzEwNjU3MTZaFw0yNTEyMzAwNzAyMTZaMDMxMTAvBgNV BAMTKDBGNDhGNjg5N0Q1RjYyOTMwQkJENkIwMkJGODRFMjYxOUUxNTdERDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlganuvp2zSMeeznuhGt99wCbz Xoaihv1FLr8vhWccB3IIgoSFzE/xbgP2Ogyoh71oTvbTf45DvdBynzWn/+WI6BJX RFe9owlTPJY5jLmoMsVfvVvTcpZV1/44WCTyjo8VbyOJCQGt64cKH23YOw3GoNzp EjT9jy2k7h51UECSuSbmjVSquShpAIrxsr/pz3eZ0RTjQ8BTyvzw5FNhjUxOvpxr TdYH7b23MyYJR5lYuz0hgPAmtwMnkVn7WBEmbBJ2As1HojqYqIoiWkimWZPWU/2p s7sBKyQsZB4eDL7yQ3mTVMRndSTolBdCVgu9kzK4krsSXEjrbwyFBPfJQiupAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUD0j2iX1fYpMLvWsCv4TiYZ4VfdUwHwYDVR0j BBgwFoAUcZWQa/SCOPlrBRDXUACRClGRM/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzMyZWVlMS0xMGY3LTQ1N2QtYThjNS01ZjdmNzQxYTYzZGEvMC83MTk1OTA2QkY0 ODIzOEY5NkIwNTEwRDc1MDAwOTEwQTUxOTEzM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1MTkx MzNGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjMzJlZWUxLTEwZjctNDU3ZC1h OGM1LTVmN2Y3NDFhNjNkYS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqJYwDQYJ KoZIhvcNAQELBQADggEBAASUtp3XeGacnxLoBw9fi0/xIT1MMnJLctyvQnVSIwS8 VJalLy4sfXO+nynOAvK1Aifa1BeCs/uvKmfVsHusokkw/Qyx5deCHEVZpRsmYMRI jRe9Gm5IKV69x6SyLxNl9FnnSvElVThNuJ/xDvgDGkt0zGYprlKkD4Fj0DrShS17 dslYKZV5w9Az4gIh05ITKpcRbS660lWcFuYu/YI+n+rpxhfR9F0KU6t8hEAdt3wR m9vuLPeA2rdO9ASOnUOOa5ej6EzgiFQr/V+ly+00Ahmaf4IgsdZHlZELszEraSmF mvBx/waAecSl4W5pq6v8Hv/fQj+UzXVH0KHVP2HoMn0= -----END CERTIFICATE-----Generated at Mon Apr 7 16:49:24 2025 by rpki-client