$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa File: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (raw, json) Hash identifier: 62scFARqasRlnKzxSKfFrSosY9MvQMyErok3KwJRLjQ= Subject key identifier: B1:8A:E1:3B:77:10:72:23:10:EC:65:FD:6B:8C:A8:25:86:49:C5:1D Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 6891BDB5F2B22091EE9C4403D0DADC4A4505568C Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa Signing time: Tue 13 Aug 2024 10:00:05 +0000 ROA not before: Tue 13 Aug 2024 09:55:05 +0000 ROA not after: Tue 12 Aug 2025 10:00:05 +0000 asID: 131694 IP address blocks: 103.7.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 19:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:91:bd:b5:f2:b2:20:91:ee:9c:44:03:d0:da:dc:4a:45:05:56:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Aug 13 09:55:05 2024 GMT Not After : Aug 12 10:00:05 2025 GMT Subject: CN=B18AE13B7710722310EC65FD6B8CA8258649C51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:73:15:da:e6:39:cb:ec:57:7e:97:e1:42: 18:b1:44:a9:c7:91:d7:cc:9b:d1:e9:82:7b:ab:f4: 6a:9a:e8:d8:49:94:cd:a6:bc:8d:5d:04:b1:c3:b7: 58:22:85:3c:8f:16:be:94:29:db:f5:9c:f9:00:ba: db:cb:49:05:5d:f8:f5:4b:14:85:cf:1f:2b:ce:8d: 0c:28:c6:9a:9b:f1:1a:7e:eb:dc:e5:d1:62:e9:8f: 2b:2b:65:e9:06:93:ef:a6:bf:19:4a:24:15:b7:2a: a3:a0:e1:ce:f6:15:b6:76:04:27:5a:08:1d:7a:d8: 60:96:a6:17:39:07:a7:dd:ef:41:00:c4:14:4c:b8: ac:81:c4:fb:cf:90:2a:30:74:4c:42:c7:2a:ba:cb: 93:e0:2e:c3:82:cc:bd:24:c6:ad:41:c3:81:60:0d: 58:cf:d9:11:19:66:d0:79:51:e6:ed:5d:95:8f:fa: 35:a9:bb:b0:4e:f2:03:2e:c4:2a:32:f5:be:53:9f: 48:ac:b2:24:db:3a:05:dc:c6:a5:3e:7b:2c:f3:13: 8d:62:8d:59:a6:8b:a3:fb:9f:90:ac:91:fa:de:cb: 16:22:d2:31:2f:5b:bf:3a:a1:6f:b8:7d:04:65:eb: b1:da:26:82:a6:1b:61:b6:f9:b1:ff:b9:00:0c:bf: a2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8A:E1:3B:77:10:72:23:10:EC:65:FD:6B:8C:A8:25:86:49:C5:1D X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.86.0/23 Signature Algorithm: sha256WithRSAEncryption b0:65:59:73:fb:e8:31:cd:ba:e7:1c:1f:78:08:bd:ac:98:e0: 2d:7d:07:e9:19:e1:ac:79:54:f6:2e:80:55:23:3b:51:2b:32: 93:87:97:c4:3b:65:a6:fb:2c:3a:a0:9d:3a:a5:07:bb:2b:2e: 5e:80:1b:42:24:ec:53:ad:85:37:52:2f:ce:80:f3:1d:3e:d5: 4e:a8:47:67:dd:d6:fa:b1:f2:24:38:2f:c9:e9:3c:0a:d2:10: 6f:07:d1:9e:5b:6d:4b:c1:b5:8b:78:9d:49:44:6c:a0:0b:cf: 26:e5:74:e4:c7:aa:20:c9:81:90:ca:14:60:5b:ce:6a:f4:0e: 8e:1f:57:ce:07:ca:6b:ca:a3:c9:0c:5e:a1:db:ca:eb:72:31: 4b:45:0a:d5:25:db:55:4d:b8:eb:1e:1f:7b:a0:bb:0a:c6:9c: 45:3c:18:5e:e2:f7:64:d2:3d:63:c6:b6:9c:41:b0:70:06:8c: 86:ab:b1:64:27:14:ea:98:c5:4b:e5:56:99:75:54:ac:d7:8e: 9c:98:91:37:eb:2f:04:2d:48:dd:4b:c1:19:fa:87:62:7d:62: ba:16:9a:eb:9d:9d:cd:56:d0:19:58:53:c8:bd:4a:57:79:b2: d2:ca:37:3a:aa:a9:d4:f1:2b:be:15:68:cc:cd:a2:c8:19:a0: 3c:de:f0:99 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUaJG9tfKyIJHunEQD0NrcSkUFVowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNDA4MTMwOTU1MDVaFw0yNTA4MTIxMDAwMDVaMDMxMTAvBgNV BAMTKEIxOEFFMTNCNzcxMDcyMjMxMEVDNjVGRDZCOENBODI1ODY0OUM1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpX3MV2uY5y+xXfpfhQhixRKnH kdfMm9Hpgnur9Gqa6NhJlM2mvI1dBLHDt1gihTyPFr6UKdv1nPkAutvLSQVd+PVL FIXPHyvOjQwoxpqb8Rp+69zl0WLpjysrZekGk++mvxlKJBW3KqOg4c72FbZ2BCda CB162GCWphc5B6fd70EAxBRMuKyBxPvPkCowdExCxyq6y5PgLsOCzL0kxq1Bw4Fg DVjP2REZZtB5UebtXZWP+jWpu7BO8gMuxCoy9b5Tn0issiTbOgXcxqU+eyzzE41i jVmmi6P7n5CskfreyxYi0jEvW786oW+4fQRl67HaJoKmG2G2+bH/uQAMv6LJAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUsYrhO3cQciMQ7GX9a4yoJYZJxR0wHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwMjc4YjdkLTQ3ZWQtNDg2MC1h YjNhLTljMTE0Y2M1ZjA5Yi8wLzMxMzAzMzJlMzcyZTM4MzYyZTMwMmYzMjMzMmQz MjM0MjAzZDNlMjAzMTMzMzEzNjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnB1YwDQYJKoZIhvcN AQELBQADggEBALBlWXP76DHNuuccH3gIvayY4C19B+kZ4ax5VPYugFUjO1ErMpOH l8Q7Zab7LDqgnTqlB7srLl6AG0Ik7FOthTdSL86A8x0+1U6oR2fd1vqx8iQ4L8np PArSEG8H0Z5bbUvBtYt4nUlEbKALzybldOTHqiDJgZDKFGBbzmr0Do4fV84HymvK o8kMXqHbyutyMUtFCtUl21VNuOseH3uguwrGnEU8GF7i92TSPWPGtpxBsHAGjIar sWQnFOqYxUvlVpl1VKzXjpyYkTfrLwQtSN1LwRn6h2J9YroWmuudnc1W0BlYU8i9 Sld5stLKNzqqqdTxK74VaMzNosgZoDze8Jk= -----END CERTIFICATE-----Generated at Fri Feb 21 11:13:58 2025 by rpki-client