$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa File: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (raw, json) Hash identifier: sALgAcrv6GTHzHXKVXP7PsSP+NYmqiEn9G9dF74k/j0= Subject key identifier: 57:C5:EE:56:A3:E9:87:7E:CD:0C:4D:36:66:7E:17:67:19:62:67:6F Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 05173A7A13274AA01C432366A0511D906506128B Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa Signing time: Mon 20 Jan 2025 09:00:07 +0000 ROA not before: Mon 20 Jan 2025 08:55:07 +0000 ROA not after: Mon 19 Jan 2026 09:00:07 +0000 asID: 150513 IP address blocks: 103.195.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 09:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:17:3a:7a:13:27:4a:a0:1c:43:23:66:a0:51:1d:90:65:06:12:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: Jan 20 08:55:07 2025 GMT Not After : Jan 19 09:00:07 2026 GMT Subject: CN=57C5EE56A3E9877ECD0C4D36667E17671962676F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:b1:bc:b0:12:f9:2c:e4:66:26:69:36:6b: fc:b2:21:bd:e6:f6:bd:8a:68:c4:3e:63:31:57:dc: 98:80:7a:1d:42:b1:f5:7d:76:d2:d4:d0:1f:a2:15: 27:3b:ba:fb:22:90:e7:e4:cd:54:7a:66:e7:38:8f: 08:d3:a6:75:15:45:56:40:58:a8:7c:fc:fc:fd:64: 61:6a:0d:86:e0:af:53:c8:9f:ec:f4:f0:df:00:b5: a4:01:85:03:d5:dd:9e:cf:b2:d6:21:e0:a9:05:34: 8c:f7:70:42:b4:8c:de:89:9d:f1:cb:b2:f3:44:a9: 1c:a1:0a:7a:ee:fb:ac:80:03:2f:dd:af:a4:75:02: a9:aa:08:17:90:68:b1:bb:f7:6f:03:33:c6:0c:dc: b3:37:b1:d5:fd:b2:f7:31:7f:d6:66:18:b2:6e:8f: b3:9f:7f:48:27:5a:44:a7:e4:e9:1a:e1:d0:1e:17: c1:af:42:c8:45:a2:52:2f:68:f3:47:76:20:dd:93: 11:dd:9d:4f:18:d7:ff:ad:96:c3:4a:4d:97:1d:a4: 40:4a:33:d3:1b:d3:36:f5:81:86:88:ec:8d:8d:01: 42:14:64:d7:86:c3:8a:4a:26:50:fb:bf:1c:ec:39: 0a:ae:ad:fc:27:73:1a:ea:41:74:53:98:fc:4c:4e: 47:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C5:EE:56:A3:E9:87:7E:CD:0C:4D:36:66:7E:17:67:19:62:67:6F X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.195.28.0/24 Signature Algorithm: sha256WithRSAEncryption 89:a0:07:a9:0f:bd:be:f6:0e:e5:62:67:7c:b2:f4:b2:e8:38: 5b:37:6c:dd:70:2a:31:0c:5e:52:51:0f:24:a5:07:3d:e5:8f: 04:8e:57:54:69:cc:b9:d7:fb:29:55:c2:08:3e:15:c0:d0:07: 23:00:b1:bf:0a:3e:5d:b5:e9:14:19:92:d6:24:64:bb:39:00: 6c:aa:a1:3d:cc:db:0c:e5:c7:32:63:56:80:90:42:8a:51:17: 03:d0:5f:21:45:fc:30:e4:a6:a7:d4:54:9b:84:b3:88:fd:00: c3:a1:f7:0f:af:7f:aa:e8:a6:14:f3:c7:c0:ef:11:c8:d1:fa: f9:56:84:f6:7b:67:0b:05:1e:c2:af:97:06:a0:9d:91:82:da: 4d:1f:c0:6a:b4:2d:0e:09:28:33:40:ea:dd:d3:e5:70:f2:d1: 74:2c:a0:85:aa:bc:09:c1:67:55:6b:39:38:4a:ed:2e:bf:29: 5a:e5:3d:30:b5:2b:a7:f1:36:98:8c:df:4b:c9:4a:7d:a0:8c: 27:6e:46:7a:ff:e9:45:ab:e6:6e:53:7a:d8:79:e8:6a:da:cc: 52:cc:de:98:d6:98:19:2d:06:4c:e5:97:f3:83:dc:8d:ce:80: 11:4a:7b:98:d6:d4:ca:31:d9:32:c8:4d:50:8f:af:21:88:38: f6:da:bf:07 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBRc6ehMnSqAcQyNmoFEdkGUGEoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNTAxMjAwODU1MDdaFw0yNjAxMTkwOTAwMDdaMDMxMTAvBgNV BAMTKDU3QzVFRTU2QTNFOTg3N0VDRDBDNEQzNjY2N0UxNzY3MTk2MjY3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsrG8sBL5LORmJmk2a/yyIb3m 9r2KaMQ+YzFX3JiAeh1CsfV9dtLU0B+iFSc7uvsikOfkzVR6Zuc4jwjTpnUVRVZA WKh8/Pz9ZGFqDYbgr1PIn+z08N8AtaQBhQPV3Z7PstYh4KkFNIz3cEK0jN6JnfHL svNEqRyhCnru+6yAAy/dr6R1AqmqCBeQaLG7928DM8YM3LM3sdX9svcxf9ZmGLJu j7Off0gnWkSn5Oka4dAeF8GvQshFolIvaPNHdiDdkxHdnU8Y1/+tlsNKTZcdpEBK M9Mb0zb1gYaI7I2NAUIUZNeGw4pKJlD7vxzsOQqurfwncxrqQXRTmPxMTkfHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUV8XuVqPph37NDE02Zn4XZxliZ28wHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0OTEyYzliLWRjZTQtNDBlNi05 NTg4LWQ3Y2E4YzM3ZWY0ZC8wLzMxMzAzMzJlMzEzOTM1MmUzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8McMA0GCSqG SIb3DQEBCwUAA4IBAQCJoAepD72+9g7lYmd8svSy6DhbN2zdcCoxDF5SUQ8kpQc9 5Y8EjldUacy51/spVcIIPhXA0AcjALG/Cj5dtekUGZLWJGS7OQBsqqE9zNsM5ccy Y1aAkEKKURcD0F8hRfww5Kan1FSbhLOI/QDDofcPr3+q6KYU88fA7xHI0fr5VoT2 e2cLBR7Cr5cGoJ2RgtpNH8BqtC0OCSgzQOrd0+Vw8tF0LKCFqrwJwWdVazk4Su0u vyla5T0wtSun8TaYjN9LyUp9oIwnbkZ6/+lFq+ZuU3rYeehq2sxSzN6Y1pgZLQZM 5Zfzg9yNzoARSnuY1tTKMdkyyE1Qj68hiDj22r8H -----END CERTIFICATE-----Generated at Sun Apr 6 10:35:20 2025 by rpki-client