$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32332d3233203d3e20313337333239.roa File: 3130332e3130362e3231362e302f32332d3233203d3e20313337333239.roa (raw, json) Hash identifier: 3gHEt4SgUyCRLvBrIUXiqbUEfr9NVOcJ1U03rFXbgWE= Subject key identifier: 47:AB:5E:55:46:9B:5A:23:43:4C:F8:E0:47:5E:79:9A:7F:60:64:75 Certificate issuer: /CN=19093F7761A9E337D03405604750BFD4ADC2121E Certificate serial: 63C7AB6D83FAE2AC6399B8FC68DEC955B47019D1 Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32332d3233203d3e20313337333239.roa Signing time: Sun 12 Jan 2025 07:00:02 +0000 ROA not before: Sun 12 Jan 2025 06:55:02 +0000 ROA not after: Sun 11 Jan 2026 07:00:02 +0000 asID: 137329 IP address blocks: 103.106.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 07:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c7:ab:6d:83:fa:e2:ac:63:99:b8:fc:68:de:c9:55:b4:70:19:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E Validity Not Before: Jan 12 06:55:02 2025 GMT Not After : Jan 11 07:00:02 2026 GMT Subject: CN=47AB5E55469B5A23434CF8E0475E799A7F606475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:66:b1:ee:8b:1c:66:59:40:3c:9d:e5:7b:2f: ea:17:15:ff:18:27:5f:97:e0:4f:21:7e:92:b2:cf: b7:51:fc:8a:ad:a7:ad:43:e1:7b:32:89:b1:c9:8b: 8d:8a:6d:40:ee:53:71:f2:43:b1:9e:97:18:77:91: d2:1b:68:57:09:e2:11:5a:29:c2:24:fd:f9:6a:5f: 4a:59:45:88:c4:15:9a:d9:ab:9f:5a:00:f0:9d:0b: 7b:c8:66:66:43:e1:98:db:cf:3f:b8:97:94:c2:6c: d6:1a:41:65:2c:83:cd:1a:c2:5e:0d:b0:e3:3b:a3: e9:47:92:62:76:cf:1d:00:60:17:f3:0b:40:98:2d: 7a:3d:ba:df:5f:ed:d1:4d:20:5d:29:f7:30:d1:fb: 75:93:fc:ec:23:2f:ba:44:c6:a6:7d:12:9b:a3:0a: 01:b0:27:d4:df:3c:2a:e1:b9:56:72:0d:3b:10:6d: bb:e0:41:72:6b:15:6a:e8:df:42:aa:4f:16:a0:fa: bb:d1:fe:46:f0:45:e3:6e:2a:9a:9b:a3:e6:67:c1: bf:98:64:53:6d:39:b9:9d:da:7c:cd:5b:5d:72:bd: 02:a6:b5:03:7c:af:d5:b9:02:b3:15:e2:64:c2:8e: e3:cf:f6:0f:99:38:5a:e2:bc:44:9e:c0:1f:71:12: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AB:5E:55:46:9B:5A:23:43:4C:F8:E0:47:5E:79:9A:7F:60:64:75 X509v3 Authority Key Identifier: keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32332d3233203d3e20313337333239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.216.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:dc:b9:40:dc:15:55:18:a4:0f:8b:28:dc:fa:e1:19:48:86: f7:60:fd:5f:ec:fe:39:2a:5d:e3:3c:cb:b4:83:46:e7:8f:61: 70:8f:71:6c:df:83:f0:5e:ce:b5:eb:98:9d:7a:c5:d5:3e:a2: bd:20:1e:a6:0f:a4:6e:24:69:de:68:0c:0b:5d:41:cb:f0:71: e2:7b:a3:de:58:fe:d8:1c:2a:07:9a:1e:5d:8a:2a:fb:16:6b: 9d:0a:3f:6b:02:dc:80:f8:37:46:5a:32:db:2b:e6:79:42:cd: 2c:28:d1:da:e4:77:ce:a4:3d:ef:95:01:54:4c:42:72:ed:0e: 15:a6:e7:13:9d:6b:bc:c5:8a:02:53:3b:5e:65:2a:47:a5:e3: b9:08:0d:0e:f9:82:b4:42:2f:23:74:c8:4a:5d:de:3a:9a:c8: 27:a0:d1:0a:bc:66:4d:52:10:87:53:8c:ed:11:a1:d9:98:8c: fd:f7:25:69:74:c6:b8:01:b9:84:8e:4a:2a:00:54:6d:d4:2d: a4:8b:5b:cd:e7:0f:ad:8c:0e:cd:89:af:b8:7a:ea:70:32:3b: 4e:60:c4:f0:2f:3c:a7:57:cb:d7:7e:2e:eb:26:55:a9:b7:ca: 15:f4:21:66:90:75:49:59:45:a3:29:2c:1d:96:34:b6:19:3c: fa:98:8c:11 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUY8erbYP64qxjmbj8aN7JVbRwGdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB REMyMTIxRTAeFw0yNTAxMTIwNjU1MDJaFw0yNjAxMTEwNzAwMDJaMDMxMTAvBgNV BAMTKDQ3QUI1RTU1NDY5QjVBMjM0MzRDRjhFMDQ3NUU3OTlBN0Y2MDY0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbZrHuixxmWUA8neV7L+oXFf8Y J1+X4E8hfpKyz7dR/Iqtp61D4XsyibHJi42KbUDuU3HyQ7Gelxh3kdIbaFcJ4hFa KcIk/flqX0pZRYjEFZrZq59aAPCdC3vIZmZD4Zjbzz+4l5TCbNYaQWUsg80awl4N sOM7o+lHkmJ2zx0AYBfzC0CYLXo9ut9f7dFNIF0p9zDR+3WT/OwjL7pExqZ9Epuj CgGwJ9TfPCrhuVZyDTsQbbvgQXJrFWro30KqTxag+rvR/kbwReNuKpqbo+Znwb+Y ZFNtObmd2nzNW11yvQKmtQN8r9W5ArMV4mTCjuPP9g+ZOFrivESewB9xEquxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUR6teVUabWiNDTPjgR155mn9gZHUwHwYDVR0j BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy MTIxRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h MmFkLWQxNzU0MzY1YTQ1ZC8wLzMxMzAzMzJlMzEzMDM2MmUzMjMxMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzczMzMyMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnatgwDQYJ KoZIhvcNAQELBQADggEBAFrcuUDcFVUYpA+LKNz64RlIhvdg/V/s/jkqXeM8y7SD RuePYXCPcWzfg/BezrXrmJ16xdU+or0gHqYPpG4kad5oDAtdQcvwceJ7o95Y/tgc KgeaHl2KKvsWa50KP2sC3ID4N0ZaMtsr5nlCzSwo0drkd86kPe+VAVRMQnLtDhWm 5xOda7zFigJTO15lKkel47kIDQ75grRCLyN0yEpd3jqayCeg0Qq8Zk1SEIdTjO0R odmYjP33JWl0xrgBuYSOSioAVG3ULaSLW83nD62MDs2Jr7h66nAyO05gxPAvPKdX y9d+LusmVam3yhX0IWaQdUlZRaMpLB2WNLYZPPqYjBE= -----END CERTIFICATE-----Generated at Mon Apr 21 02:53:40 2025 by rpki-client