$ rpki-client -vvf repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa File: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (raw, json) Hash identifier: 0shHIoNgf0pQRXh0UI7r08hqky3s0DThmjqdBQikoVM= Subject key identifier: 00:D9:91:A2:4D:0F:B0:C4:D3:31:35:60:4B:69:C5:7A:A6:91:FE:B2 Certificate issuer: /CN=5B558AD01277C8212C974318B6352FB28BF683AD Certificate serial: 2F051EB881C577AD640D333DF832B30693291FD3 Authority key identifier: 5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa Signing time: Thu 31 Oct 2024 19:00:02 +0000 ROA not before: Thu 31 Oct 2024 18:55:02 +0000 ROA not after: Thu 30 Oct 2025 19:00:02 +0000 asID: 150200 IP address blocks: 103.196.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 01:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:05:1e:b8:81:c5:77:ad:64:0d:33:3d:f8:32:b3:06:93:29:1f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B558AD01277C8212C974318B6352FB28BF683AD Validity Not Before: Oct 31 18:55:02 2024 GMT Not After : Oct 30 19:00:02 2025 GMT Subject: CN=00D991A24D0FB0C4D33135604B69C57AA691FEB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:ef:a1:57:18:d0:96:35:64:78:0d:38:26: fa:73:64:e4:bd:17:06:a5:b3:61:c3:e8:57:cb:0d: 21:f6:21:7f:07:d6:4f:4a:9d:00:7d:59:78:8b:ad: b0:34:da:f1:ac:95:c7:fc:a2:fa:78:54:51:89:56: 44:41:25:ed:55:50:8d:39:f3:46:8d:98:7f:16:15: 9d:99:57:ff:8c:9a:57:6e:ca:27:1d:57:c1:32:ef: 7a:73:aa:53:a9:4f:09:34:58:b8:99:d6:cd:c8:9d: 93:86:88:fa:32:68:84:28:0a:5a:40:34:07:5d:df: 7a:64:24:84:bc:7c:9a:9f:8a:ae:f1:57:47:56:c1: ed:fa:0b:92:c5:db:11:7c:c3:89:5b:b2:dd:c8:ae: f5:71:6b:23:30:db:f6:cb:2b:aa:ee:50:75:43:5c: d7:36:70:a0:bc:66:66:75:43:a1:e4:3b:07:b3:33: 03:a8:2f:97:90:06:bc:3a:ab:9f:b0:e2:97:eb:33: e2:a1:d0:5e:b0:8f:b5:70:b6:4c:a2:57:9f:cb:1c: f1:c9:21:7a:bb:09:ca:4e:fe:b7:0a:9c:40:29:36: 52:4c:92:5b:cc:5b:3b:be:5f:b3:8a:28:e4:10:ec: 5c:3a:0f:70:c4:ff:96:9c:25:08:99:f9:06:da:2c: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D9:91:A2:4D:0F:B0:C4:D3:31:35:60:4B:69:C5:7A:A6:91:FE:B2 X509v3 Authority Key Identifier: keyid:5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.196.41.0/24 Signature Algorithm: sha256WithRSAEncryption 07:1a:98:c8:b2:c2:1b:db:3c:b1:7f:f3:61:11:8c:a5:24:01: e0:e1:38:81:a6:66:dc:a3:d2:13:75:aa:9a:25:96:76:d2:88: 25:cd:6b:fb:22:d7:60:d0:55:12:9c:45:44:9b:49:d9:77:b6: 2a:bc:1a:51:df:d4:60:a2:6d:6c:67:9a:31:f6:b2:7a:18:88: 54:ad:05:90:fd:9c:42:2f:bd:7e:7d:c2:ce:9c:ff:2b:0e:a8: 6e:8d:d8:07:37:0a:71:fa:d1:09:b7:2c:53:cc:b0:9b:a3:f3: d6:51:f6:16:66:60:ea:a5:b4:2b:e2:43:08:ce:ec:23:95:e0: 0a:fc:3a:e6:61:97:9a:2e:ff:31:4c:bb:3d:3b:71:1b:b2:fe: 77:35:20:c4:04:eb:81:a5:dc:8b:e8:3e:ae:35:44:13:bb:23: 80:c3:23:e1:ab:02:76:62:eb:53:03:f2:2a:2c:8e:22:96:bc: d7:b4:5b:56:cc:89:1c:30:3d:a0:22:ea:92:ea:0f:81:dc:8c: 04:70:4c:62:61:b8:9c:39:a5:62:37:0a:97:36:40:51:30:06: 90:b9:f4:0b:88:35:29:ed:42:8a:64:8c:de:fc:b4:54:9f:e8: 27:f9:85:ce:48:d3:4d:9b:c5:b2:cb:e2:fa:cd:a9:4b:04:2e: f3:08:09:40 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULwUeuIHFd61kDTM9+DKzBpMpH9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4 QkY2ODNBRDAeFw0yNDEwMzExODU1MDJaFw0yNTEwMzAxOTAwMDJaMDMxMTAvBgNV BAMTKDAwRDk5MUEyNEQwRkIwQzREMzMxMzU2MDRCNjlDNTdBQTY5MUZFQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOe+hVxjQljVkeA04JvpzZOS9 Fwals2HD6FfLDSH2IX8H1k9KnQB9WXiLrbA02vGslcf8ovp4VFGJVkRBJe1VUI05 80aNmH8WFZ2ZV/+MmlduyicdV8Ey73pzqlOpTwk0WLiZ1s3InZOGiPoyaIQoClpA NAdd33pkJIS8fJqfiq7xV0dWwe36C5LF2xF8w4lbst3IrvVxayMw2/bLK6ruUHVD XNc2cKC8ZmZ1Q6HkOwezMwOoL5eQBrw6q5+w4pfrM+Kh0F6wj7VwtkyiV5/LHPHJ IXq7CcpO/rcKnEApNlJMklvMWzu+X7OKKOQQ7Fw6D3DE/5acJQiZ+QbaLFDXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUANmRok0PsMTTMTVgS2nFeqaR/rIwHwYDVR0j BBgwFoAUW1WK0BJ3yCEsl0MYtjUvsov2g60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTViNGZhNC0zMjhjLTRjZjItYWRlMy1jODY4MTMxZDRlMGQvMC81QjU1OEFEMDEy NzdDODIxMkM5NzQzMThCNjM1MkZCMjhCRjY4M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4QkY2 ODNBRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhNWI0ZmE0LTMyOGMtNGNmMi1h ZGUzLWM4NjgxMzFkNGUwZC8wLzMxMzAzMzJlMzEzOTM2MmUzNDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8QpMA0GCSqG SIb3DQEBCwUAA4IBAQAHGpjIssIb2zyxf/NhEYylJAHg4TiBpmbco9ITdaqaJZZ2 0oglzWv7Itdg0FUSnEVEm0nZd7YqvBpR39Rgom1sZ5ox9rJ6GIhUrQWQ/ZxCL71+ fcLOnP8rDqhujdgHNwpx+tEJtyxTzLCbo/PWUfYWZmDqpbQr4kMIzuwjleAK/Drm YZeaLv8xTLs9O3Ebsv53NSDEBOuBpdyL6D6uNUQTuyOAwyPhqwJ2YutTA/IqLI4i lrzXtFtWzIkcMD2gIuqS6g+B3IwEcExiYbicOaViNwqXNkBRMAaQufQLiDUp7UKK ZIze/LRUn+gn+YXOSNNNm8Wyy+L6zalLBC7zCAlA -----END CERTIFICATE-----Generated at Tue Mar 11 05:04:12 2025 by rpki-client