$ rpki-client -vvf repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa File: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (raw, json) Hash identifier: 4q/gs/czBNAuO23mv17/FKccDK6uDnn2+DC2kwXpKAc= Subject key identifier: 19:27:63:75:4C:DA:CC:35:11:E3:3B:B0:5E:4A:FD:93:18:D2:69:A5 Certificate issuer: /CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66 Certificate serial: 3B7E1CE0E16C8D87B2E56BD78C68E23A1F36980C Authority key identifier: EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa Signing time: Thu 01 May 2025 03:00:01 +0000 ROA not before: Thu 01 May 2025 02:55:01 +0000 ROA not after: Thu 30 Apr 2026 03:00:01 +0000 asID: 56256 IP address blocks: 103.41.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7e:1c:e0:e1:6c:8d:87:b2:e5:6b:d7:8c:68:e2:3a:1f:36:98:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66 Validity Not Before: May 1 02:55:01 2025 GMT Not After : Apr 30 03:00:01 2026 GMT Subject: CN=192763754CDACC3511E33BB05E4AFD9318D269A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:10:0b:c6:c1:d0:51:e5:0b:3b:5d:2c:c1: 3c:6a:23:06:85:4d:46:8b:89:91:5e:1b:32:95:d8: 44:cb:8b:87:1e:9a:9a:45:a5:3d:bd:67:0a:c9:4a: 34:d1:41:9d:8b:d3:e4:f4:44:75:31:8a:5b:52:05: 78:09:73:c1:b4:e1:d9:3b:d7:4b:99:b9:39:4a:7f: 36:57:1e:b4:be:16:35:b5:da:4a:75:6e:a6:0f:f1: e7:9e:f9:e5:54:25:47:d7:c0:33:f7:bb:8a:62:bc: e1:1a:37:f8:d8:7c:71:21:54:81:e0:9c:4c:37:87: e9:98:49:0d:d1:30:08:fa:f1:b5:d0:f5:95:c3:79: 80:e6:d4:b7:d6:67:ce:aa:1c:ce:48:74:bd:99:e9: d5:56:6e:ca:63:9d:b0:58:38:dd:bb:5d:b5:86:57: 33:25:6c:09:fb:60:bc:23:0e:15:a5:d1:49:c4:80: 85:60:ca:1b:aa:f2:34:a4:1f:28:5e:80:4a:11:ec: f8:90:2d:ee:39:74:0a:f3:41:5e:99:2d:ba:71:36: 9c:1a:70:c7:ce:4d:1e:ea:15:3c:c2:4b:96:5f:ca: 6b:11:b6:1f:a0:d3:04:a1:47:6f:8a:bb:fc:40:41: 84:1d:70:c4:1b:b1:98:3c:b9:90:53:fd:54:d2:7d: 87:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:27:63:75:4C:DA:CC:35:11:E3:3B:B0:5E:4A:FD:93:18:D2:69:A5 X509v3 Authority Key Identifier: keyid:EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.109.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:8b:bb:2b:b8:eb:b9:79:0f:f3:28:bb:04:db:49:6c:0c:00: 8a:7a:95:ef:7a:96:70:9b:80:fa:73:f7:65:05:91:3e:71:0b: de:6c:1a:77:2d:40:d2:2f:aa:bf:f9:54:ed:b5:7d:72:66:b8: 1b:8d:e1:49:2f:09:43:60:a6:67:08:05:36:29:3b:f5:ed:6f: 4b:d4:0b:14:75:ff:e6:54:35:37:4a:61:1f:94:d1:01:fd:7a: c2:a7:60:7c:6f:f4:5e:d0:8f:ef:36:51:3d:44:82:bc:37:cc: bc:cf:70:cf:6d:54:31:e8:a9:b2:83:60:5c:bb:4a:1b:dc:ab: 67:fb:e7:c4:f1:03:e1:2f:05:82:bc:3d:b8:9c:7e:8d:3d:75: c6:f8:8e:60:dd:9a:f2:f6:7f:c6:aa:5c:a2:3e:12:15:31:d2: 3e:9b:ea:fd:eb:4c:29:f9:ee:4b:cb:ba:38:1f:0a:92:2b:19: 2d:51:8b:55:db:c9:84:c9:04:da:e5:9b:de:1b:ba:f1:25:59: 6b:54:55:45:68:5e:61:6c:ff:f0:33:c5:8c:13:5c:66:f5:59: 1e:d7:94:c5:9e:c0:4e:8a:2a:d9:27:87:38:84:87:c5:fa:6c: 31:0f:52:f8:f2:c0:85:8f:23:14:47:f7:8e:09:7b:f3:72:eb: ca:45:0e:4a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUO34c4OFsjYey5WvXjGjiOh82mAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY5NzkwNzJGQkY2REFCRDJBOEVBQzA4QTMwNDUwOUU4 REMwNEM2NjAeFw0yNTA1MDEwMjU1MDFaFw0yNjA0MzAwMzAwMDFaMDMxMTAvBgNV BAMTKDE5Mjc2Mzc1NENEQUNDMzUxMUUzM0JCMDVFNEFGRDkzMThEMjY5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDhALxsHQUeULO10swTxqIwaF TUaLiZFeGzKV2ETLi4cemppFpT29ZwrJSjTRQZ2L0+T0RHUxiltSBXgJc8G04dk7 10uZuTlKfzZXHrS+FjW12kp1bqYP8eee+eVUJUfXwDP3u4pivOEaN/jYfHEhVIHg nEw3h+mYSQ3RMAj68bXQ9ZXDeYDm1LfWZ86qHM5IdL2Z6dVWbspjnbBYON27XbWG VzMlbAn7YLwjDhWl0UnEgIVgyhuq8jSkHyhegEoR7PiQLe45dArzQV6ZLbpxNpwa cMfOTR7qFTzCS5ZfymsRth+g0wShR2+Ku/xAQYQdcMQbsZg8uZBT/VTSfYcbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUGSdjdUzazDUR4zuwXkr9kxjSaaUwHwYDVR0j BBgwFoAU75eQcvv22r0qjqwIowRQno3ATGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmMwMDM3Ni0zMzUxLTRmYTMtOTdlZS01MjM4NWJhNGQ5MDMvMC9FRjk3OTA3MkZC RjZEQUJEMkE4RUFDMDhBMzA0NTA5RThEQzA0QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUY5NzkwNzJGQkY2REFCRDJBOEVBQzA4QTMwNDUwOUU4REMw NEM2Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2YzAwMzc2LTMzNTEtNGZhMy05 N2VlLTUyMzg1YmE0ZDkwMy8wLzMxMzAzMzJlMzQzMTJlMzEzMDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcpbTANBgkqhkiG 9w0BAQsFAAOCAQEAHYu7K7jruXkP8yi7BNtJbAwAinqV73qWcJuA+nP3ZQWRPnEL 3mwady1A0i+qv/lU7bV9cma4G43hSS8JQ2CmZwgFNik79e1vS9QLFHX/5lQ1N0ph H5TRAf16wqdgfG/0XtCP7zZRPUSCvDfMvM9wz21UMeipsoNgXLtKG9yrZ/vnxPED 4S8Fgrw9uJx+jT11xviOYN2a8vZ/xqpcoj4SFTHSPpvq/etMKfnuS8u6OB8KkisZ LVGLVdvJhMkE2uWb3hu68SVZa1RVRWheYWz/8DPFjBNcZvVZHteUxZ7ATooq2SeH OISHxfpsMQ9S+PLAhY8jFEf3jgl783LrykUOSg== -----END CERTIFICATE-----Generated at Sun May 11 22:14:56 2025 by rpki-client