$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa File: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (raw, json) Hash identifier: 9twnyIhBB5/nG5JidLHITBuzB/j3WQpuRt6+R8EPn7s= Subject key identifier: 9D:C4:16:B9:80:F9:B9:75:C6:5E:F3:44:17:0A:6A:6C:78:8B:D0:F6 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 47C754B574E5DF5FD0C39CD486760436F4E3F8C5 Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa Signing time: Tue 18 Feb 2025 08:00:36 +0000 ROA not before: Tue 18 Feb 2025 07:55:36 +0000 ROA not after: Tue 17 Feb 2026 08:00:36 +0000 asID: 150996 IP address blocks: 103.210.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 09:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c7:54:b5:74:e5:df:5f:d0:c3:9c:d4:86:76:04:36:f4:e3:f8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Feb 18 07:55:36 2025 GMT Not After : Feb 17 08:00:36 2026 GMT Subject: CN=9DC416B980F9B975C65EF344170A6A6C788BD0F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:a9:e8:c3:42:c0:16:af:dd:01:37:12:5a: 4e:d8:03:53:e3:a8:4d:47:31:35:64:d9:8c:7a:13: ec:b8:2a:ea:08:0d:89:d2:97:62:a8:05:13:45:33: ea:cc:e2:7c:71:51:7f:89:b3:85:7b:92:dd:8e:3f: d3:4d:4e:bf:43:06:f3:27:a8:db:4a:0b:6a:5f:71: 5b:0c:95:92:51:72:aa:2e:81:2d:ea:0d:fb:57:46: 5d:68:d1:2f:91:95:27:d8:a4:b3:45:82:b2:a1:b3: cf:9c:1e:d3:db:ae:46:23:1b:f3:54:fc:ac:f4:d9: eb:9c:f7:93:5f:36:99:80:71:00:a5:d6:64:1f:33: 2b:6a:17:8c:f3:c5:22:63:d5:42:1c:43:84:46:a5: fb:6f:4b:fa:ee:97:77:80:b5:46:e4:be:de:bd:fa: 50:01:89:87:36:19:68:51:bb:d1:e4:22:ec:29:d3: 9e:96:1c:a4:33:a3:ea:7a:11:cb:b1:c1:9b:0a:ac: 8d:ab:93:fb:1c:2f:df:e8:27:06:6a:82:f2:bf:b1: f2:02:cb:2e:f0:18:fb:63:3c:3a:6a:c0:ff:97:15: db:3d:9a:63:89:e5:0a:1c:42:e1:fd:ca:98:3a:55: 1d:10:9e:04:88:db:7d:36:bf:cb:e8:1b:79:d9:35: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C4:16:B9:80:F9:B9:75:C6:5E:F3:44:17:0A:6A:6C:78:8B:D0:F6 X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.70.0/23 Signature Algorithm: sha256WithRSAEncryption af:aa:69:d5:f0:47:2a:b0:8b:88:d5:74:32:d7:6d:71:95:1c: 45:e1:37:6a:97:d1:8c:b2:a7:69:a5:ee:9e:4f:6b:84:54:72: 64:c0:db:04:5e:71:b0:d1:f6:b1:c5:82:3b:44:07:fb:bc:4f: d2:1e:88:d7:60:89:6c:3b:26:01:8e:0d:f1:0c:ea:4a:1c:16: a0:5a:0a:91:e1:5b:8c:c3:57:40:22:03:80:49:da:a4:73:7a: af:7f:28:fe:53:83:e6:29:71:d0:c8:3c:16:e9:36:7d:87:86: ce:c1:4a:6f:51:4b:b5:39:04:39:88:6a:cf:d9:8f:c6:8f:3c: d1:e9:2c:72:cd:94:81:9e:6f:6d:a4:a2:cc:25:51:4a:77:bd: e2:36:33:99:bc:e9:f9:5a:67:b5:53:2f:d8:92:dd:59:c2:b3: d4:15:44:0b:1e:2f:3e:56:9e:a4:55:7d:5f:4c:2a:7d:6b:8b: 2d:66:15:8b:8c:0e:e8:96:aa:f0:1d:72:52:de:f1:b9:bf:b1: 20:f4:94:05:9b:65:e3:3c:cb:0c:8b:6e:9a:d4:31:59:16:c0: ee:2f:6c:07:89:b5:3e:0d:c3:87:19:4f:08:2d:cc:b0:29:dd: 8d:93:ac:1f:77:07:25:bc:c1:93:7b:bc:2f:dd:c8:5c:30:81: 9e:1a:d3:e9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUR8dUtXTl31/Qw5zUhnYENvTj+MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNTAyMTgwNzU1MzZaFw0yNjAyMTcwODAwMzZaMDMxMTAvBgNV BAMTKDlEQzQxNkI5ODBGOUI5NzVDNjVFRjM0NDE3MEE2QTZDNzg4QkQwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38Know0LAFq/dATcSWk7YA1Pj qE1HMTVk2Yx6E+y4KuoIDYnSl2KoBRNFM+rM4nxxUX+Js4V7kt2OP9NNTr9DBvMn qNtKC2pfcVsMlZJRcqougS3qDftXRl1o0S+RlSfYpLNFgrKhs8+cHtPbrkYjG/NU /Kz02euc95NfNpmAcQCl1mQfMytqF4zzxSJj1UIcQ4RGpftvS/rul3eAtUbkvt69 +lABiYc2GWhRu9HkIuwp056WHKQzo+p6EcuxwZsKrI2rk/scL9/oJwZqgvK/sfIC yy7wGPtjPDpqwP+XFds9mmOJ5QocQuH9ypg6VR0QngSI2302v8voG3nZNYgzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUncQWuYD5uXXGXvNEFwpqbHiL0PYwHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjNmYwNzAwLTkxMTYtNGEwNS04 ZjZiLWQ4ZWRhZmRiNzJlYy8wLzMxMzAzMzJlMzIzMTMwMmUzNzMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ9JGMA0GCSqG SIb3DQEBCwUAA4IBAQCvqmnV8EcqsIuI1XQy121xlRxF4Tdql9GMsqdppe6eT2uE VHJkwNsEXnGw0faxxYI7RAf7vE/SHojXYIlsOyYBjg3xDOpKHBagWgqR4VuMw1dA IgOASdqkc3qvfyj+U4PmKXHQyDwW6TZ9h4bOwUpvUUu1OQQ5iGrP2Y/GjzzR6Sxy zZSBnm9tpKLMJVFKd73iNjOZvOn5Wme1Uy/Ykt1ZwrPUFUQLHi8+Vp6kVX1fTCp9 a4stZhWLjA7olqrwHXJS3vG5v7Eg9JQFm2XjPMsMi26a1DFZFsDuL2wHibU+DcOH GU8ILcywKd2Nk6wfdwclvMGTe7wv3chcMIGeGtPp -----END CERTIFICATE-----Generated at Sun Apr 6 07:29:18 2025 by rpki-client