$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa File: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (raw, json) Hash identifier: cA/IXkQfExxLqkZklRIGA4Iq/8wfMruGPEzuyZnNgNM= Subject key identifier: 34:8F:1D:78:AF:0A:58:BF:EA:E2:78:CE:5F:9C:25:CC:77:AD:F3:39 Certificate issuer: /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Certificate serial: 5AA7D7BD64DAECF2F646A1F102C362564ADD075B Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa Signing time: Fri 21 Feb 2025 09:01:02 +0000 ROA not before: Fri 21 Feb 2025 08:56:02 +0000 ROA not after: Fri 20 Feb 2026 09:01:02 +0000 asID: 149315 IP address blocks: 103.186.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 17:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a7:d7:bd:64:da:ec:f2:f6:46:a1:f1:02:c3:62:56:4a:dd:07:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Validity Not Before: Feb 21 08:56:02 2025 GMT Not After : Feb 20 09:01:02 2026 GMT Subject: CN=348F1D78AF0A58BFEAE278CE5F9C25CC77ADF339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:ab:f3:20:41:e5:f7:db:0d:69:25:6d:10: 56:82:ac:1f:5b:f0:54:8f:00:22:51:80:b3:fa:56: 13:17:37:56:24:e5:2a:db:10:d0:03:05:e0:b1:e2: 55:c1:7f:19:ac:a7:df:26:27:de:4a:53:86:64:31: 6b:4c:f5:41:92:57:a4:25:fd:03:f3:b0:51:b1:80: fe:06:1f:c1:7e:55:3f:42:ed:9d:d7:82:74:d2:66: be:7d:80:33:22:6c:5b:c3:c9:cc:b0:ce:49:6a:fd: 8d:30:07:6a:52:a2:d4:3c:e2:85:6c:42:ab:df:40: 14:86:b1:21:5d:a5:ae:78:96:70:5d:50:8a:7e:dc: 92:14:88:8f:c2:be:6e:6a:c8:37:91:57:a8:50:e9: 86:50:3d:d3:cc:f7:d5:6d:3a:f3:f8:25:89:3b:3c: b7:a4:46:ee:d8:a4:a3:db:8e:08:c9:ef:f6:5a:6b: 4a:01:85:78:41:d9:c6:20:4d:65:05:06:a4:0e:8d: fe:b6:2f:17:27:ed:fe:31:fc:f2:6d:a4:f1:1d:7c: b0:7c:2c:0d:90:14:84:d0:bd:b5:6f:86:f9:ae:b0: c4:67:54:0d:30:3d:7b:98:eb:ff:b9:d0:c9:09:d6: 73:a7:1c:a5:6f:43:cb:bf:b7:16:97:6c:f6:52:37: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8F:1D:78:AF:0A:58:BF:EA:E2:78:CE:5F:9C:25:CC:77:AD:F3:39 X509v3 Authority Key Identifier: keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.168.0/24 Signature Algorithm: sha256WithRSAEncryption 86:68:a2:94:56:15:96:06:32:e7:36:53:6b:cf:14:76:d3:a5: 69:de:dd:32:4b:c4:54:61:ae:d6:7f:e0:a5:f0:18:6d:b0:4e: 5e:e8:e3:40:19:df:36:c0:6d:ca:73:9d:ec:11:0b:a1:6f:3b: 11:b6:fb:4e:3a:bc:18:89:35:d4:fb:0a:6e:e7:59:e3:7f:f5: 50:d6:d9:85:9f:d8:1f:86:e2:d3:1b:c2:b0:88:d3:52:26:2c: 83:ed:a3:ad:c8:6f:ac:66:82:ff:12:4a:3d:1a:58:9f:04:b9: 3f:bb:30:40:fd:59:ae:04:74:52:78:c1:44:00:85:52:c7:5f: 86:23:08:17:f8:d2:46:cb:0e:25:05:86:02:9f:96:79:18:24: 70:1f:fe:86:92:35:24:52:26:28:75:d3:bd:aa:96:e7:74:06: e5:5f:13:b7:66:97:03:89:06:f7:dd:f9:02:70:76:ef:e0:aa: 95:4d:15:30:ed:2c:31:08:27:66:c7:72:3b:5e:7c:a1:bf:59: be:c6:1d:46:77:42:a0:15:47:b5:7b:dd:b1:8e:80:eb:3e:eb: db:a9:a5:a5:61:3b:ef:a0:5c:b0:a6:db:92:ec:82:7f:18:d6: 06:84:9f:30:03:0a:88:16:ab:f4:19:c8:78:e7:7f:19:00:3c: 7e:fa:ee:b4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWqfXvWTa7PL2RqHxAsNiVkrdB1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4 RkE4MkI0NTAeFw0yNTAyMjEwODU2MDJaFw0yNjAyMjAwOTAxMDJaMDMxMTAvBgNV BAMTKDM0OEYxRDc4QUYwQTU4QkZFQUUyNzhDRTVGOUMyNUNDNzdBREYzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9avzIEHl99sNaSVtEFaCrB9b 8FSPACJRgLP6VhMXN1Yk5SrbENADBeCx4lXBfxmsp98mJ95KU4ZkMWtM9UGSV6Ql /QPzsFGxgP4GH8F+VT9C7Z3XgnTSZr59gDMibFvDycywzklq/Y0wB2pSotQ84oVs QqvfQBSGsSFdpa54lnBdUIp+3JIUiI/Cvm5qyDeRV6hQ6YZQPdPM99VtOvP4JYk7 PLekRu7YpKPbjgjJ7/Zaa0oBhXhB2cYgTWUFBqQOjf62Lxcn7f4x/PJtpPEdfLB8 LA2QFITQvbVvhvmusMRnVA0wPXuY6/+50MkJ1nOnHKVvQ8u/txaXbPZSN0ZdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNI8deK8KWL/q4njOX5wlzHet8zkwHwYDVR0j BBgwFoAUsPpsPtR4DgMrCj8WHgGKfI+oK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjcxM2EzMi1mYWRhLTQ4NGUtYTY4ZC0wY2FjMGZmZmEzM2MvMC9CMEZBNkMzRUQ0 NzgwRTAzMkIwQTNGMTYxRTAxOEE3QzhGQTgyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4RkE4 MkI0NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyNzEzYTMyLWZhZGEtNDg0ZS1h NjhkLTBjYWMwZmZmYTMzYy8wLzMxMzAzMzJlMzEzODM2MmUzMTM2MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzMxMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnuqgwDQYJ KoZIhvcNAQELBQADggEBAIZoopRWFZYGMuc2U2vPFHbTpWne3TJLxFRhrtZ/4KXw GG2wTl7o40AZ3zbAbcpznewRC6FvOxG2+046vBiJNdT7Cm7nWeN/9VDW2YWf2B+G 4tMbwrCI01ImLIPto63Ib6xmgv8SSj0aWJ8EuT+7MED9Wa4EdFJ4wUQAhVLHX4Yj CBf40kbLDiUFhgKflnkYJHAf/oaSNSRSJih1072qlud0BuVfE7dmlwOJBvfd+QJw du/gqpVNFTDtLDEIJ2bHcjtefKG/Wb7GHUZ3QqAVR7V73bGOgOs+69uppaVhO++g XLCm25Lsgn8Y1gaEnzADCogWq/QZyHjnfxkAPH767rQ= -----END CERTIFICATE-----Generated at Thu May 8 15:17:49 2025 by rpki-client