$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa File: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (raw, json) Hash identifier: 5sv2BLrXUR7pP0OPvmvfvyofoGM5DTSkOAndTrP63eU= Subject key identifier: EC:E2:71:FE:6F:8C:09:4D:46:1D:AF:B6:B4:07:02:54:24:16:1A:FE Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 6B881B842E620C7E379FFCB2A85418B1815B571A Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa Signing time: Mon 06 May 2024 11:44:08 +0000 ROA not before: Mon 06 May 2024 11:39:08 +0000 ROA not after: Mon 05 May 2025 11:44:08 +0000 asID: 138070 IP address blocks: 103.123.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Mar 2025 21:34:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:88:1b:84:2e:62:0c:7e:37:9f:fc:b2:a8:54:18:b1:81:5b:57:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: May 6 11:39:08 2024 GMT Not After : May 5 11:44:08 2025 GMT Subject: CN=ECE271FE6F8C094D461DAFB6B407025424161AFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:87:92:77:83:b6:04:e0:1d:0f:46:9c:a5: 1e:ec:78:9e:2c:bf:98:8c:78:98:de:2a:ab:30:12: 9c:dc:be:f4:7c:33:60:f2:8b:52:4c:85:8c:33:43: 09:45:e0:d2:cc:c8:9c:bb:be:d9:d2:dc:af:aa:4c: 35:4c:31:09:ed:6f:6e:cd:14:d7:4b:31:19:90:3c: fa:60:e4:75:6a:33:96:41:96:a4:9c:b0:63:dd:44: 83:6b:4c:8b:dd:74:76:bc:d8:eb:73:1c:fa:ac:92: f7:aa:30:87:8d:23:00:72:cf:e0:50:9c:44:40:89: ca:c6:c8:3f:b0:10:53:b4:a5:72:99:b9:94:34:ff: 93:e1:ee:8c:af:c4:58:79:cd:49:44:be:7f:fc:8d: 13:df:37:fa:0e:45:46:d5:76:a4:61:92:8c:86:ff: 8d:26:a6:cc:aa:e9:6c:16:b1:c0:ca:92:af:9d:f5: 4d:d0:c6:71:63:18:32:41:44:05:fd:f9:8d:68:7a: 54:dd:d7:c9:d0:fb:fe:b0:e0:22:3f:bf:dd:ad:8a: 03:50:c6:5b:69:90:ff:16:0e:f9:78:2d:70:b2:16: fb:29:c5:83:91:33:fe:83:2f:a8:50:1d:83:ce:a6: 04:85:c9:57:5b:e0:7d:be:0a:7a:aa:14:4e:f0:67: 4a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E2:71:FE:6F:8C:09:4D:46:1D:AF:B6:B4:07:02:54:24:16:1A:FE X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.107.0/24 Signature Algorithm: sha256WithRSAEncryption 21:3e:ba:a4:c2:dc:00:2a:83:cc:dd:ff:14:99:f4:c8:71:58: 11:23:82:73:6a:7c:6c:5a:67:67:99:96:02:50:ee:11:7b:9e: f3:71:04:8d:5e:be:23:61:2e:51:a4:cb:76:c3:c9:0c:52:cf: 66:44:bb:83:2a:90:f7:44:a0:82:52:d1:f7:94:83:a9:39:cf: f7:7b:e7:f8:6a:00:f4:12:ae:57:a7:c8:c7:5a:55:2c:4c:d1: 4a:18:12:c4:5f:16:c3:0e:f9:55:e4:67:0d:ce:50:3d:43:1e: f4:52:48:6e:86:74:21:60:6f:2f:dc:d7:a7:f9:6f:c4:2e:d7: 84:66:b3:98:d8:74:11:26:60:ae:6c:7f:1c:33:90:e3:e5:bf: 36:65:5f:f6:68:05:1c:f2:e6:95:b9:4d:09:bc:4c:6c:ac:fd: 12:19:9a:77:e8:33:49:f8:b6:79:a6:e1:9d:2e:82:36:d7:47: 7b:8a:ae:fa:55:6e:c3:52:79:da:71:d3:d2:77:ac:ee:2e:cb: 4d:03:6e:f3:e7:51:0e:27:20:66:6d:41:f4:b8:0b:72:f8:ec: 59:14:47:2d:47:7b:11:a0:2a:d5:e7:48:0d:dc:5c:ef:e7:d4: c3:62:b6:70:fb:19:7f:f5:0b:91:c9:e7:c7:2e:a6:a2:5f:78: f8:9d:ed:e6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUa4gbhC5iDH43n/yyqFQYsYFbVxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNDA1MDYxMTM5MDhaFw0yNTA1MDUxMTQ0MDhaMDMxMTAvBgNV BAMTKEVDRTI3MUZFNkY4QzA5NEQ0NjFEQUZCNkI0MDcwMjU0MjQxNjFBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/IeSd4O2BOAdD0acpR7seJ4s v5iMeJjeKqswEpzcvvR8M2Dyi1JMhYwzQwlF4NLMyJy7vtnS3K+qTDVMMQntb27N FNdLMRmQPPpg5HVqM5ZBlqScsGPdRINrTIvddHa82OtzHPqskveqMIeNIwByz+BQ nERAicrGyD+wEFO0pXKZuZQ0/5Ph7oyvxFh5zUlEvn/8jRPfN/oORUbVdqRhkoyG /40mpsyq6WwWscDKkq+d9U3QxnFjGDJBRAX9+Y1oelTd18nQ+/6w4CI/v92tigNQ xltpkP8WDvl4LXCyFvspxYORM/6DL6hQHYPOpgSFyVdb4H2+CnqqFE7wZ0rdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7OJx/m+MCU1GHa+2tAcCVCQWGv4wHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhZDY3ZDVmLTU3MTMtNDE1My04 NzFiLTFiMDA4ZjdmZmRkMi8wLzMxMzAzMzJlMzEzMjMzMmUzMTMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM3MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABne2swDQYJ KoZIhvcNAQELBQADggEBACE+uqTC3AAqg8zd/xSZ9MhxWBEjgnNqfGxaZ2eZlgJQ 7hF7nvNxBI1eviNhLlGky3bDyQxSz2ZEu4MqkPdEoIJS0feUg6k5z/d75/hqAPQS rlenyMdaVSxM0UoYEsRfFsMO+VXkZw3OUD1DHvRSSG6GdCFgby/c16f5b8Qu14Rm s5jYdBEmYK5sfxwzkOPlvzZlX/ZoBRzy5pW5TQm8TGys/RIZmnfoM0n4tnmm4Z0u gjbXR3uKrvpVbsNSedpx09J3rO4uy00DbvPnUQ4nIGZtQfS4C3L47FkURy1HexGg KtXnSA3cXO/n1MNitnD7GX/1C5HJ58cupqJfePid7eY= -----END CERTIFICATE-----Generated at Tue Mar 11 05:05:34 2025 by rpki-client