$ rpki-client -vvf repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa File: 3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa (raw, json) Hash identifier: VyjiO45+sx8rVhpe+p1nyWOxHRDbuxx2WR1qZ8IEuUM= Subject key identifier: D4:6A:B6:48:DC:D1:3A:60:C1:47:C4:35:DE:1D:43:7F:88:09:BA:80 Certificate issuer: /CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5 Certificate serial: 1565F4FDA240435791479373AF7139286FFDE532 Authority key identifier: 63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa Signing time: Sat 14 Dec 2024 00:07:53 +0000 ROA not before: Sat 14 Dec 2024 00:02:53 +0000 ROA not after: Sat 13 Dec 2025 00:07:53 +0000 asID: 59276 IP address blocks: 103.226.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 09:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:65:f4:fd:a2:40:43:57:91:47:93:73:af:71:39:28:6f:fd:e5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6319B77FD8EB7EC968DD59FE94AE146A879A74E5 Validity Not Before: Dec 14 00:02:53 2024 GMT Not After : Dec 13 00:07:53 2025 GMT Subject: CN=D46AB648DCD13A60C147C435DE1D437F8809BA80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:be:d5:3c:d1:a6:67:8d:e9:37:67:88:cf: c2:40:ad:49:a5:57:b2:db:df:88:45:8c:12:ac:1b: a4:4e:f5:ec:b0:22:fd:cf:0c:e9:78:3d:a6:bc:69: 0e:30:a5:54:08:8a:bc:82:db:92:3e:dc:0e:7c:00: 3c:4f:6a:3b:3d:9c:db:a9:ff:c5:33:16:c1:e4:05: 28:fb:10:6c:0e:bc:9a:80:7b:af:95:bf:30:7c:ec: 06:4e:7b:ad:73:a0:91:92:c4:e2:01:38:58:e4:05: 46:6b:bf:85:46:b1:ef:48:21:39:7b:dc:bf:91:d8: 26:b8:e9:4b:40:e3:1e:86:f7:16:10:71:e1:24:da: 2d:0b:d1:58:46:03:08:c5:49:37:3e:72:58:f4:8b: 21:8c:68:aa:34:dc:17:c2:44:fb:9f:c8:f9:9a:c4: e0:c8:d6:d7:53:3a:01:63:a9:da:fb:ba:d6:f0:64: 81:53:4d:33:a1:97:64:78:1b:99:ec:5d:6e:9b:ae: 79:3b:85:83:c0:60:2d:e1:9b:21:bc:9f:e9:5c:20: 47:94:18:ae:21:3c:a0:f3:0a:d2:6c:92:26:29:66: 77:73:81:38:c2:3a:08:70:37:b6:cf:ee:66:7b:cf: e1:c8:0b:49:56:a3:a1:5d:40:34:84:3a:98:a6:1f: 7d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6A:B6:48:DC:D1:3A:60:C1:47:C4:35:DE:1D:43:7F:88:09:BA:80 X509v3 Authority Key Identifier: keyid:63:19:B7:7F:D8:EB:7E:C9:68:DD:59:FE:94:AE:14:6A:87:9A:74:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6319B77FD8EB7EC968DD59FE94AE146A879A74E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf542bc4-74dc-45dd-b659-745ca2aca333/0/3130332e3232362e3233332e302f32342d3234203d3e203539323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.226.233.0/24 Signature Algorithm: sha256WithRSAEncryption 04:81:23:30:a2:8f:81:e0:15:c0:d1:b5:3e:42:2e:fd:d4:73: 41:d7:66:d3:1d:78:7f:43:2e:dc:b6:2c:a1:36:ee:95:76:9f: ad:ab:bf:fd:f5:33:61:6c:e3:f6:25:cb:23:fb:2b:61:47:03: c5:d2:7e:b3:5e:a7:be:ac:d2:c2:f5:83:c2:64:da:d4:70:43: eb:e7:c4:a8:27:03:29:ab:e2:57:7b:e9:4e:96:40:5d:dc:27: 59:3c:e8:02:fc:09:fb:a1:7d:30:c6:f1:aa:4e:a8:81:16:26: ec:92:9e:98:8f:9a:9c:0e:71:a1:e5:7c:45:48:12:cc:d9:fc: 34:0b:fa:37:a9:88:b6:1d:ce:1c:92:60:1f:fb:54:3c:74:86: 48:0c:0c:3e:81:c4:82:56:7e:f6:35:91:73:53:1b:05:d5:71: 34:09:ee:61:3a:5f:4b:ed:ef:0f:7b:e4:b8:4c:50:7e:24:ed: 59:f1:6c:3d:24:6c:d1:52:52:4b:7d:a7:8b:8c:7b:96:a3:9b: 63:19:8e:ea:50:cb:ea:da:5f:73:e4:1a:0a:d8:92:de:76:07: 0a:72:9b:3d:04:30:7e:d4:d2:c4:d5:ec:8b:c8:fb:1f:fa:77: 8a:07:97:e3:92:a4:6b:b2:bf:ed:63:78:08:45:a8:3d:2f:6d: 1c:46:d5:4a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFWX0/aJAQ1eRR5Nzr3E5KG/95TIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4 NzlBNzRFNTAeFw0yNDEyMTQwMDAyNTNaFw0yNTEyMTMwMDA3NTNaMDMxMTAvBgNV BAMTKEQ0NkFCNjQ4RENEMTNBNjBDMTQ3QzQzNURFMUQ0MzdGODgwOUJBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuS77VPNGmZ43pN2eIz8JArUml V7Lb34hFjBKsG6RO9eywIv3PDOl4Paa8aQ4wpVQIiryC25I+3A58ADxPajs9nNup /8UzFsHkBSj7EGwOvJqAe6+VvzB87AZOe61zoJGSxOIBOFjkBUZrv4VGse9IITl7 3L+R2Ca46UtA4x6G9xYQceEk2i0L0VhGAwjFSTc+clj0iyGMaKo03BfCRPufyPma xODI1tdTOgFjqdr7utbwZIFTTTOhl2R4G5nsXW6brnk7hYPAYC3hmyG8n+lcIEeU GK4hPKDzCtJskiYpZndzgTjCOghwN7bP7mZ7z+HIC0lWo6FdQDSEOpimH32HAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1Gq2SNzROmDBR8Q13h1Df4gJuoAwHwYDVR0j BBgwFoAUYxm3f9jrfslo3Vn+lK4UaoeadOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjU0MmJjNC03NGRjLTQ1ZGQtYjY1OS03NDVjYTJhY2EzMzMvMC82MzE5Qjc3RkQ4 RUI3RUM5NjhERDU5RkU5NEFFMTQ2QTg3OUE3NEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMxOUI3N0ZEOEVCN0VDOTY4REQ1OUZFOTRBRTE0NkE4NzlB NzRFNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JmNTQyYmM0LTc0ZGMtNDVkZC1i NjU5LTc0NWNhMmFjYTMzMy8wLzMxMzAzMzJlMzIzMjM2MmUzMjMzMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+LpMA0GCSqG SIb3DQEBCwUAA4IBAQAEgSMwoo+B4BXA0bU+Qi791HNB12bTHXh/Qy7ctiyhNu6V dp+tq7/99TNhbOP2Jcsj+ythRwPF0n6zXqe+rNLC9YPCZNrUcEPr58SoJwMpq+JX e+lOlkBd3CdZPOgC/An7oX0wxvGqTqiBFibskp6Yj5qcDnGh5XxFSBLM2fw0C/o3 qYi2Hc4ckmAf+1Q8dIZIDAw+gcSCVn72NZFzUxsF1XE0Ce5hOl9L7e8Pe+S4TFB+ JO1Z8Ww9JGzRUlJLfaeLjHuWo5tjGY7qUMvq2l9z5BoK2JLedgcKcps9BDB+1NLE 1eyLyPsf+neKB5fjkqRrsr/tY3gIRag9L20cRtVK -----END CERTIFICATE-----Generated at Sun Apr 6 15:58:05 2025 by rpki-client