$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa File: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (raw, json) Hash identifier: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k= Subject key identifier: F7:35:B3:8B:FF:EB:D3:9F:19:B5:C1:91:AA:F1:B4:94:86:C4:BC:75 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 41E1CE650795442D10DB3958BE265262D1A91B00 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa Signing time: Tue 11 Mar 2025 10:00:01 +0000 ROA not before: Tue 11 Mar 2025 09:55:01 +0000 ROA not after: Tue 10 Mar 2026 10:00:01 +0000 asID: 150935 IP address blocks: 103.109.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 15:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e1:ce:65:07:95:44:2d:10:db:39:58:be:26:52:62:d1:a9:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Mar 11 09:55:01 2025 GMT Not After : Mar 10 10:00:01 2026 GMT Subject: CN=F735B38BFFEBD39F19B5C191AAF1B49486C4BC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9b:24:f3:73:38:c5:d4:e2:d5:f8:1e:e2:25: 8b:fa:4e:9f:b2:69:46:3c:10:29:33:dd:a4:f3:4c: 49:3a:03:bd:30:eb:99:a6:14:72:37:18:84:f1:d6: aa:e3:42:d2:c5:63:d7:ab:c2:82:39:ec:ea:d3:46: d7:35:3f:03:dc:9f:11:e3:ac:33:4f:c5:14:f6:8a: ab:22:2c:72:bf:96:c0:12:35:86:20:6b:bc:f6:53: 6d:32:43:f7:7f:41:71:a3:7a:67:48:83:9e:46:ae: 89:30:4d:e9:88:78:76:cf:e2:92:83:b5:49:e8:a6: 37:7a:42:e2:31:28:94:bb:0c:19:9e:d4:ce:f4:2b: 5d:fe:5b:7a:0b:40:40:70:ad:9a:f8:76:33:39:28: fc:50:62:9c:f1:a0:58:e6:91:80:29:c0:e1:5b:45: c5:22:b8:c7:b6:b0:61:fd:29:3c:08:ae:aa:6c:05: af:02:31:44:32:0f:eb:ee:f4:01:94:a6:3e:6a:c7: 20:49:a6:72:42:6a:88:07:ba:f6:96:c5:04:ed:63: 7f:bb:29:55:3c:4b:ce:50:a9:66:89:5f:5d:a9:f8: 7d:10:b5:b0:e1:91:ab:cb:32:52:8a:3a:82:da:91: 1b:01:1d:29:60:71:9b:27:76:34:d7:f9:60:1d:8e: 6e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:35:B3:8B:FF:EB:D3:9F:19:B5:C1:91:AA:F1:B4:94:86:C4:BC:75 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.207.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:7b:ee:14:1b:d2:8f:f7:b6:ed:b9:13:7f:e9:ff:fb:c4:d1: be:3a:11:47:17:08:0f:c3:6f:99:26:1d:e3:ac:1b:52:c7:71: fa:8e:be:bd:08:b1:46:ea:c9:22:36:51:84:58:ec:d6:98:c7: d5:3c:29:94:71:13:a4:4a:13:e5:e9:b9:e3:fc:5c:6b:87:c7: 83:6c:87:f1:14:fc:ad:6a:9f:79:2d:79:cf:c0:3b:01:e1:69: 9d:74:d2:d6:e4:d6:37:36:15:5c:4d:3f:28:03:86:2c:ba:59: 2c:07:95:2a:f8:cf:3b:8b:3c:d0:a6:dc:bc:4b:21:80:ea:76: 8e:ac:7f:d7:81:27:ea:c1:cd:47:6c:de:28:75:12:8b:68:f6: 35:7f:1e:f2:91:b5:99:e4:ae:74:fb:af:cb:1e:91:17:ed:39: 61:49:06:38:a7:b0:16:71:28:ad:8d:a7:12:74:39:7d:cf:f7: 69:a9:ff:f2:29:b9:f7:74:44:51:33:06:ce:79:ca:a9:c3:46: dc:50:04:50:ce:23:c8:3a:59:78:b2:2a:a9:54:98:dc:ac:07: cd:56:5d:c6:8a:ea:f3:5c:8c:4a:08:c3:ed:ce:ac:05:43:3b: 63:60:cf:11:e7:6e:96:f3:90:62:0f:2a:14:e3:80:c5:42:63: 59:46:f8:0e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQeHOZQeVRC0Q2zlYviZSYtGpGwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTAzMTEwOTU1MDFaFw0yNjAzMTAxMDAwMDFaMDMxMTAvBgNV BAMTKEY3MzVCMzhCRkZFQkQzOUYxOUI1QzE5MUFBRjFCNDk0ODZDNEJDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDymyTzczjF1OLV+B7iJYv6Tp+y aUY8ECkz3aTzTEk6A70w65mmFHI3GITx1qrjQtLFY9erwoI57OrTRtc1PwPcnxHj rDNPxRT2iqsiLHK/lsASNYYga7z2U20yQ/d/QXGjemdIg55GrokwTemIeHbP4pKD tUnopjd6QuIxKJS7DBme1M70K13+W3oLQEBwrZr4djM5KPxQYpzxoFjmkYApwOFb RcUiuMe2sGH9KTwIrqpsBa8CMUQyD+vu9AGUpj5qxyBJpnJCaogHuvaWxQTtY3+7 KVU8S85QqWaJX12p+H0QtbDhkavLMlKKOoLakRsBHSlgcZsndjTX+WAdjm4VAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU9zWzi//r058ZtcGRqvG0lIbEvHUwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjODg5MmViLWRkYzAtNGNiNi05 NTdjLWI2NTNmMjhiYmYzOS8wLzMxMzAzMzJlMzEzMDM5MmUzMjMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTMzMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbc8wDQYJ KoZIhvcNAQELBQADggEBAG977hQb0o/3tu25E3/p//vE0b46EUcXCA/Db5kmHeOs G1LHcfqOvr0IsUbqySI2UYRY7NaYx9U8KZRxE6RKE+XpueP8XGuHx4Nsh/EU/K1q n3ktec/AOwHhaZ100tbk1jc2FVxNPygDhiy6WSwHlSr4zzuLPNCm3LxLIYDqdo6s f9eBJ+rBzUds3ih1Eoto9jV/HvKRtZnkrnT7r8sekRftOWFJBjinsBZxKK2NpxJ0 OX3P92mp//Ipufd0RFEzBs55yqnDRtxQBFDOI8g6WXiyKqlUmNysB81WXcaK6vNc jEoIw+3OrAVDO2NgzxHnbpbzkGIPKhTjgMVCY1lG+A4= -----END CERTIFICATE-----Generated at Mon Apr 7 16:46:41 2025 by rpki-client