$ rpki-client -vvf repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa File: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (raw, json) Hash identifier: 3V+KbbdMSsyWcppKJdE78z6t2xUFj1baxa/Y1TQkRqM= Subject key identifier: 35:D1:0F:FC:47:58:C6:39:6D:BC:0D:EB:4C:B8:B8:F0:BB:3B:F1:FB Certificate issuer: /CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9 Certificate serial: 4DA0EB6723AA5D4DDC3D93D2996D7A70799395D5 Authority key identifier: EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa Signing time: Wed 11 Dec 2024 05:00:00 +0000 ROA not before: Wed 11 Dec 2024 04:55:00 +0000 ROA not after: Wed 10 Dec 2025 05:00:00 +0000 asID: 136081 IP address blocks: 103.147.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a0:eb:67:23:aa:5d:4d:dc:3d:93:d2:99:6d:7a:70:79:93:95:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9 Validity Not Before: Dec 11 04:55:00 2024 GMT Not After : Dec 10 05:00:00 2025 GMT Subject: CN=35D10FFC4758C6396DBC0DEB4CB8B8F0BB3BF1FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:71:cc:9f:b7:84:69:0e:3e:d2:09:89:93: 98:8a:cd:ad:dd:06:b4:5b:b0:29:32:e8:97:d8:59: 4d:80:2e:76:57:18:ce:3e:8d:0d:13:7e:89:ca:89: 8a:5e:cf:cc:3a:e5:80:27:42:ba:d6:12:22:0c:93: bb:15:e9:da:4a:41:07:e0:03:e5:91:03:89:3a:ff: a4:7d:fd:ff:50:73:58:cc:41:e2:b0:96:19:77:b2: 17:8d:e0:7b:38:91:a6:f1:81:20:d5:ab:41:c6:4f: 3e:2a:16:89:bb:ae:f7:d5:f7:c7:33:50:e0:79:01: 59:62:a3:08:93:2c:2d:97:60:e8:57:61:3d:78:57: a3:3f:4d:5c:32:98:49:32:cc:4b:cc:f2:ce:1b:21: c3:5d:f2:85:fc:31:2c:28:4c:6c:26:db:e0:07:cb: 43:16:29:5e:65:5b:f9:09:e0:d7:6f:32:ac:d5:e7: a0:81:fc:f5:29:cf:00:f1:1d:54:ab:36:c4:60:d1: 94:fa:c1:af:cc:76:81:83:43:bf:ef:8a:5a:11:27: fc:03:f5:1a:9b:b2:2e:79:43:31:db:19:bf:20:a4: 30:5c:6d:95:a6:6c:a6:93:2e:26:3d:f5:e1:26:2b: 47:67:ae:af:7c:04:5e:04:7d:92:4d:df:bc:87:be: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D1:0F:FC:47:58:C6:39:6D:BC:0D:EB:4C:B8:B8:F0:BB:3B:F1:FB X509v3 Authority Key Identifier: keyid:EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.218.0/24 Signature Algorithm: sha256WithRSAEncryption 39:c1:31:cb:3a:68:b4:47:c5:05:f6:44:84:c1:f8:1d:06:c5: 7a:e9:ae:cb:b6:5f:21:5f:22:a8:9c:2c:6e:20:c6:2b:99:df: f1:58:7f:42:67:37:0c:c9:69:e1:be:13:66:a8:89:33:c1:a4: 5e:00:f8:66:bb:ec:89:cb:11:64:7b:b1:cc:db:c4:d9:02:68: 7a:34:11:27:7b:64:38:2d:0b:c8:91:07:3f:a8:12:c5:ad:e0: cb:65:da:10:b9:48:62:12:38:11:89:86:b9:71:06:53:00:50: 5d:36:4c:27:c2:d2:86:2e:be:3f:14:23:7a:ab:06:89:c4:2b: fa:a8:4c:d8:e9:87:bc:77:9e:65:4a:6b:07:8b:8b:64:c9:3a: 61:9a:c9:24:fc:11:2e:08:1c:f4:6f:6e:27:08:af:97:09:c5: 70:71:7d:97:d0:0f:ab:cd:80:a2:45:89:d0:68:d6:ef:d3:89: 09:3d:a8:04:3e:50:38:a3:36:79:be:ec:d3:97:8f:08:a3:5c: f3:7c:e2:a3:0a:72:03:d8:4e:bc:a8:5e:2e:65:f8:88:40:38: 1b:3f:6e:a0:58:31:27:de:62:59:5f:f1:b0:e6:73:ba:0b:14: bb:e3:2d:ce:e5:b6:7d:37:5f:9f:92:d6:b4:54:af:4b:5f:fc: 62:e6:d3:df -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTaDrZyOqXU3cPZPSmW16cHmTldUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgxN0ZD QzYwOTJGOTAeFw0yNDEyMTEwNDU1MDBaFw0yNTEyMTAwNTAwMDBaMDMxMTAvBgNV BAMTKDM1RDEwRkZDNDc1OEM2Mzk2REJDMERFQjRDQjhCOEYwQkIzQkYxRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ0XHMn7eEaQ4+0gmJk5iKza3d BrRbsCky6JfYWU2ALnZXGM4+jQ0TfonKiYpez8w65YAnQrrWEiIMk7sV6dpKQQfg A+WRA4k6/6R9/f9Qc1jMQeKwlhl3sheN4Hs4kabxgSDVq0HGTz4qFom7rvfV98cz UOB5AVliowiTLC2XYOhXYT14V6M/TVwymEkyzEvM8s4bIcNd8oX8MSwoTGwm2+AH y0MWKV5lW/kJ4NdvMqzV56CB/PUpzwDxHVSrNsRg0ZT6wa/MdoGDQ7/viloRJ/wD 9Rqbsi55QzHbGb8gpDBcbZWmbKaTLiY99eEmK0dnrq98BF4EfZJN37yHvuiJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNdEP/EdYxjltvA3rTLi48Ls78fswHwYDVR0j BBgwFoAU6xfkary3ilHkxbmhS9eBf8xgkvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjYwNTg2ZC1iMDI3LTQ2NTYtYjYzMS0wNTg5NmI1NDM3ODIvMC9FQjE3RTQ2QUJD Qjc4QTUxRTRDNUI5QTE0QkQ3ODE3RkNDNjA5MkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgxN0ZDQzYw OTJGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNjA1ODZkLWIwMjctNDY1Ni1i NjMxLTA1ODk2YjU0Mzc4Mi8wLzMxMzAzMzJlMzEzNDM3MmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzMDM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk9owDQYJ KoZIhvcNAQELBQADggEBADnBMcs6aLRHxQX2RITB+B0GxXrprsu2XyFfIqicLG4g xiuZ3/FYf0JnNwzJaeG+E2aoiTPBpF4A+Ga77InLEWR7sczbxNkCaHo0ESd7ZDgt C8iRBz+oEsWt4Mtl2hC5SGISOBGJhrlxBlMAUF02TCfC0oYuvj8UI3qrBonEK/qo TNjph7x3nmVKaweLi2TJOmGayST8ES4IHPRvbicIr5cJxXBxfZfQD6vNgKJFidBo 1u/TiQk9qAQ+UDijNnm+7NOXjwijXPN84qMKcgPYTryoXi5l+IhAOBs/bqBYMSfe Yllf8bDmc7oLFLvjLc7ltn03X5+S1rRUr0tf/GLm098= -----END CERTIFICATE-----Generated at Sun Apr 6 21:03:41 2025 by rpki-client