$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa File: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (raw, json) Hash identifier: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo= Subject key identifier: 6A:FF:DD:5E:D4:C8:8A:15:82:E9:70:AF:B7:74:7A:48:C0:AC:B5:FB Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 64B78871B611E77BD7B5E1FF86662AB4E171AB06 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa Signing time: Tue 11 Mar 2025 10:23:03 +0000 ROA not before: Tue 11 Mar 2025 10:18:03 +0000 ROA not after: Tue 10 Mar 2026 10:23:03 +0000 asID: 151584 IP address blocks: 103.216.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b7:88:71:b6:11:e7:7b:d7:b5:e1:ff:86:66:2a:b4:e1:71:ab:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Mar 11 10:18:03 2025 GMT Not After : Mar 10 10:23:03 2026 GMT Subject: CN=6AFFDD5ED4C88A1582E970AFB7747A48C0ACB5FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d3:ef:42:b8:af:d1:49:23:2f:6e:2e:1a:f9: 43:4f:97:72:38:f2:b2:6a:1e:88:48:69:99:6d:f6: c6:02:e5:cb:09:52:0a:17:94:7a:a5:e4:6c:37:d5: ac:7d:11:e6:3d:e5:fb:32:1c:7a:0d:d6:d4:29:bc: c8:a4:b9:3e:51:9e:dd:dc:15:86:21:5a:a5:cd:75: 5a:43:a0:ad:c2:0f:b6:bc:a9:ea:90:78:c5:1a:9f: 47:2f:91:d4:37:c7:29:e9:91:c6:a3:95:0e:ab:3d: fc:4d:f9:ee:8b:eb:96:b1:e2:6d:1a:49:89:5f:07: b2:22:c6:be:f8:4e:80:11:ae:87:e0:b6:23:7a:54: ec:71:7e:58:55:50:ed:1e:ee:a6:b5:20:59:8f:75: 38:b1:cf:24:f7:2a:cc:81:f8:ed:b5:01:57:61:dd: 36:ab:7a:4b:34:54:92:d1:c5:47:1b:6b:30:d5:c7: 4f:b3:5e:03:cf:6b:8e:27:87:7c:7c:bc:62:e1:ac: 6f:44:4d:42:61:5c:19:c5:53:79:8b:e7:c9:65:a5: ea:16:0d:f9:31:27:8b:11:46:09:b2:f8:18:d7:bd: cb:af:b1:f8:f8:69:81:7e:5a:3c:d2:96:19:4a:d8: a3:2e:bd:17:86:aa:1c:01:c6:38:8a:dc:3e:4b:f2: 1f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FF:DD:5E:D4:C8:8A:15:82:E9:70:AF:B7:74:7A:48:C0:AC:B5:FB X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.107.0/24 Signature Algorithm: sha256WithRSAEncryption b5:d7:b7:45:7e:a8:56:3e:75:3c:ed:77:ce:07:ee:f3:99:ab: 06:34:9a:2b:42:d5:f8:8f:6a:1a:dc:f0:7a:b3:ba:3a:bd:60: a2:2f:70:79:1d:64:ba:4b:74:11:43:81:4d:c6:79:92:9a:b1: 7e:33:fd:77:71:70:12:5a:b3:1d:dd:95:1f:90:72:4d:d0:56: ff:14:21:ef:9f:75:c9:05:2d:eb:7c:09:d3:e8:7b:3e:66:ec: 63:38:c7:fa:4b:e6:a2:2a:5e:b4:f4:88:70:41:6a:61:83:22: 6c:43:ee:1e:a8:b3:56:dd:2f:f8:b9:4d:f9:ec:ab:9b:11:35: 69:59:2c:1b:12:f4:9d:45:f1:66:b6:df:0a:30:ba:09:bc:00: 5e:04:73:95:4e:1c:18:9e:a8:f8:f9:28:6e:37:f5:77:96:de: 5f:48:dd:a8:c5:f7:38:88:28:45:0d:00:f3:45:4b:a6:cc:52: b7:7a:af:83:94:ca:ca:1f:59:58:d3:1f:6c:de:89:55:58:a8: a8:a7:59:2e:e8:40:d5:b9:57:81:86:d9:a7:78:bb:f8:a7:69: db:86:ed:83:09:36:7f:5e:28:65:3c:99:b2:f0:b4:fb:ba:20: 5b:69:5f:9b:46:b0:d2:7b:3a:62:f7:25:81:1e:7b:73:63:d7: ae:56:1f:ac -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZLeIcbYR53vXteH/hmYqtOFxqwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTAzMTExMDE4MDNaFw0yNjAzMTAxMDIzMDNaMDMxMTAvBgNV BAMTKDZBRkZERDVFRDRDODhBMTU4MkU5NzBBRkI3NzQ3QTQ4QzBBQ0I1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs0+9CuK/RSSMvbi4a+UNPl3I4 8rJqHohIaZlt9sYC5csJUgoXlHql5Gw31ax9EeY95fsyHHoN1tQpvMikuT5Rnt3c FYYhWqXNdVpDoK3CD7a8qeqQeMUan0cvkdQ3xynpkcajlQ6rPfxN+e6L65ax4m0a SYlfB7Iixr74ToARrofgtiN6VOxxflhVUO0e7qa1IFmPdTixzyT3KsyB+O21AVdh 3Tareks0VJLRxUcbazDVx0+zXgPPa44nh3x8vGLhrG9ETUJhXBnFU3mL58llpeoW DfkxJ4sRRgmy+BjXvcuvsfj4aYF+WjzSlhlK2KMuvReGqhwBxjiK3D5L8h+jAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUav/dXtTIihWC6XCvt3R6SMCstfswHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmZWYzODkwLTQ0NWQtNGIyMy04 ZmIzLWIzMDE4YTc5OWVjZS8wLzMxMzAzMzJlMzIzMTM2MmUzMTMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn2GswDQYJ KoZIhvcNAQELBQADggEBALXXt0V+qFY+dTztd84H7vOZqwY0mitC1fiPahrc8Hqz ujq9YKIvcHkdZLpLdBFDgU3GeZKasX4z/XdxcBJasx3dlR+Qck3QVv8UIe+fdckF Let8CdPoez5m7GM4x/pL5qIqXrT0iHBBamGDImxD7h6os1bdL/i5Tfnsq5sRNWlZ LBsS9J1F8Wa23wowugm8AF4Ec5VOHBieqPj5KG439XeW3l9I3ajF9ziIKEUNAPNF S6bMUrd6r4OUysofWVjTH2zeiVVYqKinWS7oQNW5V4GG2ad4u/inaduG7YMJNn9e KGU8mbLwtPu6IFtpX5tGsNJ7OmL3JYEee3Nj165WH6w= -----END CERTIFICATE-----Generated at Sun Apr 6 14:59:55 2025 by rpki-client