$ rpki-client -vvf repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/3130332e33352e3134302e302f32332d3234203d3e203633383834.roa File: 3130332e33352e3134302e302f32332d3234203d3e203633383834.roa (raw, json) Hash identifier: TLnr55UmCTmCmpivMgUQXeQw23NDlTTK1YxxGF6jYjY= Subject key identifier: EB:BB:B6:1D:2A:93:D2:20:FC:0B:35:94:63:CF:9C:D6:5B:9B:A3:37 Certificate issuer: /CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Certificate serial: 562FE808499047A15BCB9359BBAFF83190263026 Authority key identifier: 9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/3130332e33352e3134302e302f32332d3234203d3e203633383834.roa Signing time: Tue 03 Dec 2024 02:00:01 +0000 ROA not before: Tue 03 Dec 2024 01:55:01 +0000 ROA not after: Tue 02 Dec 2025 02:00:01 +0000 asID: 63884 IP address blocks: 103.35.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 11:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2f:e8:08:49:90:47:a1:5b:cb:93:59:bb:af:f8:31:90:26:30:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Validity Not Before: Dec 3 01:55:01 2024 GMT Not After : Dec 2 02:00:01 2025 GMT Subject: CN=EBBBB61D2A93D220FC0B359463CF9CD65B9BA337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:0a:e7:b6:34:34:a1:07:16:17:62:a3:30: ab:84:7d:d6:dd:d3:95:a8:77:6f:6a:6e:eb:e4:34: b3:4c:68:2d:98:ee:d6:65:7a:0e:84:75:07:bf:3d: 54:4a:0d:7f:ec:03:6e:db:c2:00:16:49:fa:d4:d8: 3d:4b:ed:c8:02:03:35:67:f9:42:a2:b3:1b:63:f7: f4:7a:84:1d:53:6b:33:8f:a5:c9:ac:77:fe:2b:d5: e8:43:b6:2d:d5:41:d0:d6:47:9c:77:0a:aa:53:f2: 8c:aa:95:6f:3f:9f:d0:56:a5:53:a2:ee:9f:a1:1d: a0:1d:67:11:d1:53:8b:cf:a0:a1:aa:6e:1d:dc:5a: e7:1c:b0:71:1d:67:43:f7:8b:b9:7b:4f:9d:4d:2a: 65:e7:ae:10:5e:4d:15:cf:b1:45:5e:c3:3a:d6:88: eb:a8:a4:de:04:fb:b7:eb:9c:13:fe:6b:99:a9:3f: eb:f4:c9:d8:f5:4b:33:36:92:22:20:12:29:0f:84: d6:b4:be:05:1d:ee:39:fb:cb:be:2b:6a:72:0e:af: 6e:b9:e4:91:71:4d:02:3e:a5:77:2c:15:49:8f:99: 7e:df:81:a1:36:6f:ea:e6:58:ee:dc:e8:48:7b:03: 87:98:8c:84:ba:bf:e5:93:6e:4a:ff:dd:0f:7c:78: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BB:B6:1D:2A:93:D2:20:FC:0B:35:94:63:CF:9C:D6:5B:9B:A3:37 X509v3 Authority Key Identifier: keyid:9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/3130332e33352e3134302e302f32332d3234203d3e203633383834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.35.140.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:41:34:92:19:f3:b7:72:14:00:5b:3f:fb:e5:86:52:6c:e1: 90:09:bd:0c:fa:b7:40:25:42:ff:4f:70:a1:e7:bf:ef:67:12: d1:3c:a9:5a:9b:b5:ed:00:d6:f9:06:1b:ad:b4:76:bb:25:4b: 65:dd:c9:ef:a8:3b:fb:fe:d2:4c:57:50:a2:fc:8d:f3:54:4b: 12:d9:6e:e1:d5:f6:02:c0:7c:95:4f:b7:c2:13:55:ea:ae:6c: 45:ed:aa:a8:67:9a:89:19:23:19:f4:44:04:80:fa:0d:4f:20: d3:b9:b2:4e:00:e1:c1:81:b8:bd:ab:9e:ea:10:58:83:e8:0c: 75:ea:9f:02:a1:ce:a8:f2:f1:0c:8d:5e:11:05:17:f8:e6:0d: 7e:aa:6b:02:82:53:2c:ca:9c:db:c5:00:31:21:e0:71:7a:43: 45:68:b5:22:38:37:59:92:56:14:00:fb:c3:0a:82:c2:04:49: 1a:c5:f5:87:71:67:56:58:1b:05:13:72:bc:79:ef:86:71:b8: 28:22:04:93:c0:80:90:b8:95:ed:c6:2d:de:23:a1:32:7d:af: 2b:c1:e2:34:12:48:a6:81:55:b2:e1:a1:87:d3:af:c6:bd:d7: c0:13:cb:84:0a:db:59:74:e1:7d:38:ba:03:d0:dc:00:0e:d6: 7f:20:6d:d7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVi/oCEmQR6Fby5NZu6/4MZAmMCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlD MjczMzUzNTAeFw0yNDEyMDMwMTU1MDFaFw0yNTEyMDIwMjAwMDFaMDMxMTAvBgNV BAMTKEVCQkJCNjFEMkE5M0QyMjBGQzBCMzU5NDYzQ0Y5Q0Q2NUI5QkEzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dgrntjQ0oQcWF2KjMKuEfdbd 05Wod29qbuvkNLNMaC2Y7tZleg6EdQe/PVRKDX/sA27bwgAWSfrU2D1L7cgCAzVn +UKisxtj9/R6hB1TazOPpcmsd/4r1ehDti3VQdDWR5x3CqpT8oyqlW8/n9BWpVOi 7p+hHaAdZxHRU4vPoKGqbh3cWuccsHEdZ0P3i7l7T51NKmXnrhBeTRXPsUVewzrW iOuopN4E+7frnBP+a5mpP+v0ydj1SzM2kiIgEikPhNa0vgUd7jn7y74ranIOr265 5JFxTQI+pXcsFUmPmX7fgaE2b+rmWO7c6Eh7A4eYjIS6v+WTbkr/3Q98eOa7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU67u2HSqT0iD8CzWUY8+c1lubozcwHwYDVR0j BBgwFoAUm+PHmbo3CIDOrUyKjRwIicJzNTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGJmZDY1ZS0yZDY4LTQzYTAtYmIxMS1kYjU2NjhkYWU4MTIvMC85QkUzQzc5OUJB MzcwODgwQ0VBRDRDOEE4RDFDMDg4OUMyNzMzNTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlDMjcz MzUzNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwYmZkNjVlLTJkNjgtNDNhMC1i YjExLWRiNTY2OGRhZTgxMi8wLzMxMzAzMzJlMzMzNTJlMzEzNDMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzYzMzM4MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcjjDANBgkqhkiG 9w0BAQsFAAOCAQEAT0E0khnzt3IUAFs/++WGUmzhkAm9DPq3QCVC/09woee/72cS 0TypWpu17QDW+QYbrbR2uyVLZd3J76g7+/7STFdQovyN81RLEtlu4dX2AsB8lU+3 whNV6q5sRe2qqGeaiRkjGfREBID6DU8g07myTgDhwYG4vaue6hBYg+gMdeqfAqHO qPLxDI1eEQUX+OYNfqprAoJTLMqc28UAMSHgcXpDRWi1Ijg3WZJWFAD7wwqCwgRJ GsX1h3FnVlgbBRNyvHnvhnG4KCIEk8CAkLiV7cYt3iOhMn2vK8HiNBJIpoFVsuGh h9Ovxr3XwBPLhArbWXThfTi6A9DcAA7WfyBt1w== -----END CERTIFICATE-----Generated at Sat Apr 19 00:33:20 2025 by rpki-client