$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32342d3234203d3e20313331363934.roa File: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (raw, json) Hash identifier: AvWWLXaSLRfHAYW8/XLzdTVorRYOUce/I22PI6+ShLM= Subject key identifier: 16:93:CE:B7:24:8A:E2:EA:61:80:EE:4A:8B:F3:64:5F:EA:18:78:2E Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 4782653598574893ECEA5AC1AA4988BD1688FDC7 Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32342d3234203d3e20313331363934.roa Signing time: Tue 13 Aug 2024 10:00:05 +0000 ROA not before: Tue 13 Aug 2024 09:55:05 +0000 ROA not after: Tue 12 Aug 2025 10:00:05 +0000 asID: 131694 IP address blocks: 103.7.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 06:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:82:65:35:98:57:48:93:ec:ea:5a:c1:aa:49:88:bd:16:88:fd:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Aug 13 09:55:05 2024 GMT Not After : Aug 12 10:00:05 2025 GMT Subject: CN=1693CEB7248AE2EA6180EE4A8BF3645FEA18782E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a1:10:ab:a3:dc:52:0e:82:10:f4:9a:f1:b4: 4d:b6:b2:4b:fe:6d:72:31:9c:fa:2f:48:57:5b:ba: 07:11:a4:ae:ed:05:cf:d5:51:22:2c:40:cb:b1:49: ff:56:48:6e:f7:b3:e8:83:de:15:75:e8:a7:1c:d2: 29:92:df:5d:0e:08:10:a8:ad:f1:d1:17:af:1a:ef: 30:fd:ea:e5:0d:23:33:13:cf:e9:83:fd:ad:cd:57: 0b:4a:f4:b7:40:31:9f:e3:84:e2:80:79:1c:c2:c8: 26:de:94:21:09:5a:c5:11:58:ce:bd:c9:66:32:a2: 76:16:9a:71:34:85:e4:97:35:21:74:7f:5e:89:2c: 6d:02:5f:b3:f2:85:70:99:74:14:9f:ca:de:fa:f2: 06:cb:24:f6:10:4b:3f:7f:d6:3c:2b:83:75:13:ae: e1:2f:16:45:09:dc:77:f9:2f:d8:af:63:f2:a3:33: 51:2e:59:26:51:46:a1:a5:6e:6f:b3:48:59:db:d5: e8:07:a5:90:93:0b:de:fb:b1:d8:1f:cb:86:1f:36: 2a:70:7f:34:0e:e7:32:de:70:d9:e9:06:fb:1d:66: df:b2:d1:b1:d5:89:9b:f8:3e:dd:77:e1:97:34:d9: dd:1d:d6:40:47:fe:a8:2e:de:e3:c0:c7:1e:6c:d1: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:93:CE:B7:24:8A:E2:EA:61:80:EE:4A:8B:F3:64:5F:EA:18:78:2E X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32342d3234203d3e20313331363934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.84.0/24 Signature Algorithm: sha256WithRSAEncryption 55:d0:5b:92:53:ae:88:a7:88:85:73:95:0f:60:a5:78:52:b5: d7:c7:21:c2:bf:22:2b:15:d6:ce:e0:da:7f:ae:a4:75:1c:f6: d8:bf:7b:6f:20:67:8c:4f:69:a6:11:d9:5b:1e:a3:2f:75:8f: b8:6f:dc:02:82:44:18:c0:ca:0d:c3:dd:26:bc:46:73:16:52: 55:04:6c:53:1f:99:bc:6b:5e:7b:53:be:b0:05:00:38:60:07: 9c:c9:ee:c5:63:ad:8c:77:b3:b2:e3:19:79:a1:b8:33:72:61: b3:7a:dd:8e:ec:a8:55:d9:4c:24:99:59:e3:c0:5e:74:b9:fe: 0a:99:4c:a2:af:67:0a:7c:8f:73:78:a6:28:ba:07:ee:8c:94: e3:d9:6e:08:6e:54:cf:2f:d0:f7:67:4f:57:2f:aa:55:43:96: 88:26:17:53:9a:19:50:3f:b1:14:b8:7a:68:aa:78:9e:e9:fa: 3e:64:32:d0:d5:76:9e:a0:7b:a6:8b:f8:20:eb:c3:be:64:27: e5:50:e3:6a:93:54:ee:a9:03:51:fa:13:0c:14:66:0e:9c:ad: 6f:3a:74:a9:af:e6:ba:9c:4e:a4:26:b3:54:0c:23:4c:b2:c2: 5e:62:5f:62:60:49:b8:7e:88:15:b2:d1:99:22:d0:97:e6:40: 68:34:88:89 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUR4JlNZhXSJPs6lrBqkmIvRaI/ccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNDA4MTMwOTU1MDVaFw0yNTA4MTIxMDAwMDVaMDMxMTAvBgNV BAMTKDE2OTNDRUI3MjQ4QUUyRUE2MTgwRUU0QThCRjM2NDVGRUExODc4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqoRCro9xSDoIQ9JrxtE22skv+ bXIxnPovSFdbugcRpK7tBc/VUSIsQMuxSf9WSG73s+iD3hV16Kcc0imS310OCBCo rfHRF68a7zD96uUNIzMTz+mD/a3NVwtK9LdAMZ/jhOKAeRzCyCbelCEJWsURWM69 yWYyonYWmnE0heSXNSF0f16JLG0CX7PyhXCZdBSfyt768gbLJPYQSz9/1jwrg3UT ruEvFkUJ3Hf5L9ivY/KjM1EuWSZRRqGlbm+zSFnb1egHpZCTC977sdgfy4YfNipw fzQO5zLecNnpBvsdZt+y0bHViZv4Pt134Zc02d0d1kBH/qgu3uPAxx5s0V+TAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUFpPOtySK4uphgO5Ki/NkX+oYeC4wHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwMjc4YjdkLTQ3ZWQtNDg2MC1h YjNhLTljMTE0Y2M1ZjA5Yi8wLzMxMzAzMzJlMzcyZTM4MzQyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTMzMzEzNjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnB1QwDQYJKoZIhvcN AQELBQADggEBAFXQW5JTroiniIVzlQ9gpXhStdfHIcK/IisV1s7g2n+upHUc9ti/ e28gZ4xPaaYR2Vseoy91j7hv3AKCRBjAyg3D3Sa8RnMWUlUEbFMfmbxrXntTvrAF ADhgB5zJ7sVjrYx3s7LjGXmhuDNyYbN63Y7sqFXZTCSZWePAXnS5/gqZTKKvZwp8 j3N4pii6B+6MlOPZbghuVM8v0PdnT1cvqlVDlogmF1OaGVA/sRS4emiqeJ7p+j5k MtDVdp6ge6aL+CDrw75kJ+VQ42qTVO6pA1H6EwwUZg6crW86dKmv5rqcTqQms1QM I0yywl5iX2JgSbh+iBWy0Zki0JfmQGg0iIk= -----END CERTIFICATE-----Generated at Sat Apr 19 01:15:02 2025 by rpki-client