$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa File: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (raw, json) Hash identifier: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg= Subject key identifier: 0C:58:9A:B2:1B:7F:7F:A1:59:B3:C4:A7:2D:E6:85:D7:F0:23:A8:3E Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 2F792BC4974046844939CA26D7C7F987EFBB695B Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa Signing time: Tue 28 Jan 2025 10:01:28 +0000 ROA not before: Tue 28 Jan 2025 09:56:28 +0000 ROA not after: Tue 27 Jan 2026 10:01:28 +0000 asID: 56255 IP address blocks: 103.10.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:79:2b:c4:97:40:46:84:49:39:ca:26:d7:c7:f9:87:ef:bb:69:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Jan 28 09:56:28 2025 GMT Not After : Jan 27 10:01:28 2026 GMT Subject: CN=0C589AB21B7F7FA159B3C4A72DE685D7F023A83E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:89:22:c9:3c:c8:70:3e:c2:7a:c3:25:9a: 88:71:54:65:d7:25:85:b0:8d:d7:34:b2:b9:bc:26: 37:6d:64:0b:f0:39:02:1e:8e:c4:38:a9:dd:4e:2c: a5:39:ed:66:9b:f7:6c:85:f0:93:d7:e3:76:b9:63: 6d:85:11:8d:eb:0c:fb:15:f9:91:88:25:cd:28:dc: 78:cc:66:fd:18:f1:20:2a:f6:f1:2f:d1:2d:6c:60: 5a:31:8d:0e:52:23:71:e1:c2:86:8d:7a:fc:38:2c: 54:f7:97:31:c1:9e:b9:a8:c6:9d:e8:38:7b:73:41: 28:02:db:88:87:e5:10:58:75:e1:15:97:22:f9:c5: 73:43:77:d2:c7:ec:89:cc:0c:09:ca:ce:98:a0:ac: f1:7b:f2:f8:40:4e:b6:3a:7b:dc:e4:62:44:2b:6b: de:90:cb:ab:e7:e4:1c:49:d2:4e:ad:a5:d5:37:9c: 65:db:60:65:c5:8e:5c:30:b4:24:43:ee:bf:25:a2: 15:bf:5e:3f:43:63:4a:6e:eb:20:47:9a:62:e1:0b: 57:87:cd:91:dd:93:98:36:c7:bb:7e:a7:d4:1f:a7: 5e:4a:90:14:a1:cd:1f:fa:b9:71:2e:03:5f:e5:10: 96:c4:24:35:27:4f:dd:95:7d:12:87:3b:6d:f6:75: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:58:9A:B2:1B:7F:7F:A1:59:B3:C4:A7:2D:E6:85:D7:F0:23:A8:3E X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.171.0/24 Signature Algorithm: sha256WithRSAEncryption c2:d2:12:22:f2:0a:b7:f8:b8:31:4e:1c:c8:66:a2:ee:64:2e: 23:15:a4:98:73:b5:70:06:d2:cf:8a:be:88:ce:7d:bb:2d:cc: ae:9d:76:49:ea:77:7e:de:30:45:b4:2b:39:88:08:ac:bd:2e: 06:41:6e:b5:6c:ec:5d:fc:3a:10:0c:8e:39:69:f3:6b:d9:f9: 98:2b:08:01:5a:98:e2:82:c1:74:81:6c:33:33:6b:74:2a:50: db:57:fd:bd:4d:a1:0e:65:3d:1e:bc:75:fc:ac:01:c6:d7:70: 06:05:c2:97:e7:e5:22:37:34:a4:69:a5:81:f2:b5:62:26:92: fd:d6:62:7f:e2:dd:68:97:5f:ce:1a:49:fc:76:a1:7b:3f:26: 7a:92:ca:36:ee:9b:94:64:74:b8:40:49:95:3c:b6:c9:c2:29: e5:58:3f:13:d5:64:5c:f7:d1:2e:91:60:a4:f3:b2:80:c1:22: ec:55:cf:b2:09:6c:e4:83:30:65:47:20:85:9a:12:76:92:fc: 51:0f:c9:79:3f:ca:16:47:62:0f:a0:e1:1a:39:63:13:d3:87: c8:92:e9:6f:95:6d:04:4f:fb:fe:c7:86:a5:26:4e:dc:43:b0: 32:8c:31:c1:bc:29:d8:8b:d2:14:70:bf:42:7a:77:9b:88:b8: bf:3e:81:10 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUL3krxJdARoRJOcom18f5h++7aVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNTAxMjgwOTU2MjhaFw0yNjAxMjcxMDAxMjhaMDMxMTAvBgNV BAMTKDBDNTg5QUIyMUI3RjdGQTE1OUIzQzRBNzJERTY4NUQ3RjAyM0E4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwiIkiyTzIcD7CesMlmohxVGXX JYWwjdc0srm8JjdtZAvwOQIejsQ4qd1OLKU57Wab92yF8JPX43a5Y22FEY3rDPsV +ZGIJc0o3HjMZv0Y8SAq9vEv0S1sYFoxjQ5SI3HhwoaNevw4LFT3lzHBnrmoxp3o OHtzQSgC24iH5RBYdeEVlyL5xXNDd9LH7InMDAnKzpigrPF78vhATrY6e9zkYkQr a96Qy6vn5BxJ0k6tpdU3nGXbYGXFjlwwtCRD7r8lohW/Xj9DY0pu6yBHmmLhC1eH zZHdk5g2x7t+p9Qfp15KkBShzR/6uXEuA1/lEJbEJDUnT92VfRKHO232daZZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUDFiasht/f6FZs8SnLeaF1/AjqD4wHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhNjMxZDc3LWY4MDUtNDM5Yy05 OGY0LWIwZGE2MGZlOGRkMS8wLzMxMzAzMzJlMzEzMDJlMzEzNzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKqzANBgkqhkiG 9w0BAQsFAAOCAQEAwtISIvIKt/i4MU4cyGai7mQuIxWkmHO1cAbSz4q+iM59uy3M rp12Sep3ft4wRbQrOYgIrL0uBkFutWzsXfw6EAyOOWnza9n5mCsIAVqY4oLBdIFs MzNrdCpQ21f9vU2hDmU9Hrx1/KwBxtdwBgXCl+flIjc0pGmlgfK1YiaS/dZif+Ld aJdfzhpJ/Hahez8mepLKNu6blGR0uEBJlTy2ycIp5Vg/E9VkXPfRLpFgpPOygMEi 7FXPsgls5IMwZUcghZoSdpL8UQ/JeT/KFkdiD6DhGjljE9OHyJLpb5VtBE/7/seG pSZO3EOwMowxwbwp2IvSFHC/Qnp3m4i4vz6BEA== -----END CERTIFICATE-----Generated at Sun Apr 6 19:07:59 2025 by rpki-client