$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa File: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (raw, json) Hash identifier: lz/aRA5xwGbvGMSgXL70n8EEkKYV5RNTgznI5gnec7Q= Subject key identifier: 45:38:3E:35:A7:BF:DD:E5:B0:8A:BE:B6:77:60:E4:62:C1:D0:BB:DF Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Certificate serial: 5CB9451370AC89C4367293B6B5F3AC139AE4B5B2 Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa Signing time: Thu 30 Jan 2025 03:00:00 +0000 ROA not before: Thu 30 Jan 2025 02:55:00 +0000 ROA not after: Thu 29 Jan 2026 03:00:00 +0000 asID: 135444 IP address blocks: 103.235.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Mar 2025 17:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b9:45:13:70:ac:89:c4:36:72:93:b6:b5:f3:ac:13:9a:e4:b5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Validity Not Before: Jan 30 02:55:00 2025 GMT Not After : Jan 29 03:00:00 2026 GMT Subject: CN=45383E35A7BFDDE5B08ABEB67760E462C1D0BBDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:5e:32:10:d4:b4:06:d8:ce:ee:92:37:c2: 42:00:de:ab:a5:4a:b4:a7:e6:88:2e:d4:0e:ee:59: ac:05:54:e6:ae:69:a2:49:aa:1b:7d:4a:68:a4:69: 9f:b4:9b:06:b1:2c:c5:63:f5:65:40:d6:c9:92:0f: 5f:4d:6c:42:fd:83:91:98:39:b6:c0:00:e4:a9:3f: 69:0b:11:01:ef:cb:ab:81:2d:ed:dc:b3:be:73:1e: 10:f9:1b:21:fe:ac:aa:2d:68:ad:b8:2d:34:d0:10: 46:f1:61:d3:44:d6:02:55:7c:55:c5:02:db:33:8d: b6:91:f6:a1:34:dc:a6:21:3d:f9:20:43:94:7d:be: 77:03:77:3e:c1:cf:8a:9b:30:18:d7:77:f3:bd:1c: 88:d4:18:5c:23:2e:e6:a2:8d:89:de:83:17:87:8d: 15:28:3e:9f:67:35:b7:92:92:77:3c:b1:ec:02:ef: bf:f3:f5:e7:3c:81:50:f2:2e:34:28:75:4b:fc:e7: c4:4b:f8:e7:57:da:fd:95:f2:dd:ee:03:0b:f8:98: 98:41:8b:f3:45:06:c3:f1:e2:32:a3:6b:ed:2a:18: 8e:fe:50:2f:15:bf:75:9e:ac:2c:10:60:03:6f:d1: 2e:0b:ff:93:53:5a:7f:97:96:8f:dc:02:43:e7:9a: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:38:3E:35:A7:BF:DD:E5:B0:8A:BE:B6:77:60:E4:62:C1:D0:BB:DF X509v3 Authority Key Identifier: keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.75.0/24 Signature Algorithm: sha256WithRSAEncryption b2:a7:ce:1c:75:36:45:0b:84:ac:62:b7:e4:4c:6b:d7:90:f8: 82:ed:aa:87:98:e5:b9:13:be:55:14:72:e3:1b:2f:77:2a:42: 71:63:c9:06:9e:bb:01:f9:b8:0c:74:6d:54:19:13:bc:1d:58: 51:fb:70:68:a9:4b:db:f5:82:56:96:cf:09:95:e2:62:c8:e1: a8:bf:c9:63:8a:6d:69:26:40:93:fd:d5:0a:12:7a:45:e9:e1: 61:0c:8e:a9:5f:09:9f:1a:6e:25:7c:24:b2:4c:6e:c4:ae:b8: 53:5f:a6:17:5f:76:2c:cd:f4:35:89:e1:35:b7:89:99:03:b4: 13:5c:5d:18:47:48:83:0d:86:bb:06:71:4a:14:ae:88:33:2d: f4:66:11:40:42:f0:c5:19:3f:31:9f:e5:83:4b:53:30:23:1a: 6e:c8:3b:a3:fc:f8:6d:1f:fd:12:b2:5d:3a:33:99:3a:7a:30: 41:71:90:bf:95:2a:03:9f:e9:b1:de:38:43:ba:27:bd:53:37: 49:8e:73:5e:81:f2:3f:3b:37:25:1a:5b:a1:6f:ba:57:41:97: 68:22:a7:17:78:28:a2:99:98:aa:cd:d1:a9:f5:cc:e3:3b:cb: 2a:cc:f2:a1:0d:66:1f:6b:42:f1:8e:d8:fe:39:d3:4e:b3:a1: bd:29:fe:ee -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXLlFE3CsicQ2cpO2tfOsE5rktbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4 NkNGNTgyRjAeFw0yNTAxMzAwMjU1MDBaFw0yNjAxMjkwMzAwMDBaMDMxMTAvBgNV BAMTKDQ1MzgzRTM1QTdCRkRERTVCMDhBQkVCNjc3NjBFNDYyQzFEMEJCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY/V4yENS0BtjO7pI3wkIA3qul SrSn5ogu1A7uWawFVOauaaJJqht9SmikaZ+0mwaxLMVj9WVA1smSD19NbEL9g5GY ObbAAOSpP2kLEQHvy6uBLe3cs75zHhD5GyH+rKotaK24LTTQEEbxYdNE1gJVfFXF AtszjbaR9qE03KYhPfkgQ5R9vncDdz7Bz4qbMBjXd/O9HIjUGFwjLuaijYnegxeH jRUoPp9nNbeSknc8sewC77/z9ec8gVDyLjQodUv858RL+OdX2v2V8t3uAwv4mJhB i/NFBsPx4jKja+0qGI7+UC8Vv3WerCwQYANv0S4L/5NTWn+Xlo/cAkPnmti3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURTg+Nae/3eWwir62d2DkYsHQu98wHwYDVR0j BBgwFoAU2c1AR0vdDAcHdmztuvC2oYbPWC8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC9EOUNENDA0NzRC REQwQzA3MDc3NjZDRURCQUYwQjZBMTg2Q0Y1ODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4NkNG NTgyRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxYTc3YWRkLWE0OWEtNGM4Zi1h NzM1LWVmOTZjMzNhYjI5Zi8wLzMxMzAzMzJlMzIzMzM1MmUzNzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+tLMA0GCSqG SIb3DQEBCwUAA4IBAQCyp84cdTZFC4SsYrfkTGvXkPiC7aqHmOW5E75VFHLjGy93 KkJxY8kGnrsB+bgMdG1UGRO8HVhR+3BoqUvb9YJWls8JleJiyOGov8ljim1pJkCT /dUKEnpF6eFhDI6pXwmfGm4lfCSyTG7ErrhTX6YXX3YszfQ1ieE1t4mZA7QTXF0Y R0iDDYa7BnFKFK6IMy30ZhFAQvDFGT8xn+WDS1MwIxpuyDuj/PhtH/0Ssl06M5k6 ejBBcZC/lSoDn+mx3jhDuie9UzdJjnNegfI/OzclGluhb7pXQZdoIqcXeCiimZiq zdGp9czjO8sqzPKhDWYfa0Lxjtj+OdNOs6G9Kf7u -----END CERTIFICATE-----Generated at Tue Mar 11 05:04:43 2025 by rpki-client