$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa File: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (raw, json) Hash identifier: RhGN57E/ZSjGvHHK5MWz3epa97gXAk4w6YjAbvPV0fg= Subject key identifier: BF:C5:2D:7A:F4:51:2D:F2:B9:BA:3C:97:E9:C2:14:3C:B3:77:EE:18 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 47F0110145272898DD178D1753EAACFA99B1DC51 Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa Signing time: Thu 23 Jan 2025 03:00:00 +0000 ROA not before: Thu 23 Jan 2025 02:55:00 +0000 ROA not after: Thu 22 Jan 2026 03:00:00 +0000 asID: 150942 IP address blocks: 103.105.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f0:11:01:45:27:28:98:dd:17:8d:17:53:ea:ac:fa:99:b1:dc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Jan 23 02:55:00 2025 GMT Not After : Jan 22 03:00:00 2026 GMT Subject: CN=BFC52D7AF4512DF2B9BA3C97E9C2143CB377EE18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:2c:56:e8:de:83:f3:30:cb:a9:a9:8a:be: e2:16:d7:f8:b3:ba:0c:02:68:86:70:05:4b:b5:a2: 0c:9b:bf:30:85:ea:21:8a:96:e5:16:53:e8:25:2b: db:35:ea:47:91:2b:d5:58:28:0c:32:89:e3:41:e8: 76:5d:9b:a2:27:c6:b8:f2:e6:a0:5c:f1:4e:10:5b: 9d:b8:0d:51:37:bf:87:3c:a9:92:b9:68:c2:34:2b: fc:bb:27:36:66:53:a2:7b:d4:07:d7:88:4b:90:fc: b0:43:47:47:5f:4a:2c:f2:d5:cb:97:d4:5e:2a:26: 83:cf:b7:9c:9e:21:aa:1b:4a:ef:83:38:05:91:1c: 73:fd:b9:2b:33:1f:84:25:f8:cc:f6:64:94:6f:16: 92:9f:b3:c1:a5:9b:2c:41:7c:1f:52:5e:7d:8d:3d: fd:56:9d:49:c4:92:51:9a:63:86:95:ff:c0:1f:c2: 01:f5:75:93:f3:0d:d9:ba:03:1a:ce:6e:0c:d4:12: 92:63:3f:8b:89:8f:c8:8a:da:83:a1:5f:79:87:c8: dc:77:bb:6c:f1:0e:5c:de:7d:0f:80:6e:84:04:b7: d9:b5:2e:68:e6:a1:ee:33:a4:54:55:b7:7a:6a:2c: fd:fe:37:8f:c8:0e:13:05:e0:5b:60:a8:85:f8:42: eb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C5:2D:7A:F4:51:2D:F2:B9:BA:3C:97:E9:C2:14:3C:B3:77:EE:18 X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.56.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:a2:c0:9a:e5:00:90:73:f4:a3:00:0c:0e:48:81:d1:c0:db: 41:16:ee:56:4e:70:d5:6d:0a:9d:44:55:14:94:f4:7f:c7:64: 76:4e:b8:bb:54:fa:dc:39:06:b8:46:58:12:9c:41:2b:75:20: 96:46:cd:58:29:77:b1:98:16:5d:f4:8a:d7:18:00:e5:72:5e: 15:20:ac:84:1c:54:2e:7a:be:7c:da:65:30:76:43:2d:1f:6b: e9:7c:47:cf:41:48:1a:70:89:d1:46:b6:6d:a2:fa:04:cd:74: b5:b9:d2:c5:06:a1:fe:b6:f4:c8:8d:ef:dc:46:6c:fb:28:0a: 16:c6:7e:7d:51:6d:19:77:dc:73:4a:7f:0d:ed:c4:62:d5:87: 8e:d4:ff:71:05:42:79:6d:25:5c:1c:b2:2f:6c:51:ea:f4:bc: 13:1b:9c:27:d6:36:c4:bc:7a:b6:b7:4e:b5:5e:84:a4:aa:b1: c5:b2:12:84:6e:a1:55:b3:45:44:d5:15:9d:82:c8:a6:32:7d: 11:41:a2:7f:e5:a2:58:5e:bd:04:b0:5b:15:08:2c:4e:22:ff: 2e:7a:08:24:1e:b6:00:71:eb:24:e1:c7:8c:79:50:9d:ae:b7: 24:76:25:a2:6e:5d:3e:c9:aa:6a:39:1e:1a:1a:e9:f3:3a:8e: e2:76:43:89 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUR/ARAUUnKJjdF40XU+qs+pmx3FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNTAxMjMwMjU1MDBaFw0yNjAxMjIwMzAwMDBaMDMxMTAvBgNV BAMTKEJGQzUyRDdBRjQ1MTJERjJCOUJBM0M5N0U5QzIxNDNDQjM3N0VFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2ixW6N6D8zDLqamKvuIW1/iz ugwCaIZwBUu1ogybvzCF6iGKluUWU+glK9s16keRK9VYKAwyieNB6HZdm6Inxrjy 5qBc8U4QW524DVE3v4c8qZK5aMI0K/y7JzZmU6J71AfXiEuQ/LBDR0dfSizy1cuX 1F4qJoPPt5yeIaobSu+DOAWRHHP9uSszH4Ql+Mz2ZJRvFpKfs8GlmyxBfB9SXn2N Pf1WnUnEklGaY4aV/8AfwgH1dZPzDdm6AxrObgzUEpJjP4uJj8iK2oOhX3mHyNx3 u2zxDlzefQ+AboQEt9m1Lmjmoe4zpFRVt3pqLP3+N4/IDhMF4FtgqIX4QuvHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUv8UtevRRLfK5ujyX6cIUPLN37hgwHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I5N2NmOWEwLWU5MjctNDgxNC04 NDQ3LThiM2EwMDI3NjBhOC8wLzMxMzAzMzJlMzEzMDM1MmUzNTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2k4MA0GCSqG SIb3DQEBCwUAA4IBAQBsosCa5QCQc/SjAAwOSIHRwNtBFu5WTnDVbQqdRFUUlPR/ x2R2Tri7VPrcOQa4RlgSnEErdSCWRs1YKXexmBZd9IrXGADlcl4VIKyEHFQuer58 2mUwdkMtH2vpfEfPQUgacInRRrZtovoEzXS1udLFBqH+tvTIje/cRmz7KAoWxn59 UW0Zd9xzSn8N7cRi1YeO1P9xBUJ5bSVcHLIvbFHq9LwTG5wn1jbEvHq2t061XoSk qrHFshKEbqFVs0VE1RWdgsimMn0RQaJ/5aJYXr0EsFsVCCxOIv8ueggkHrYAcesk 4ceMeVCdrrckdiWibl0+yapqOR4aGunzOo7idkOJ -----END CERTIFICATE-----Generated at Sun Apr 6 13:39:04 2025 by rpki-client