$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa File: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (raw, json) Hash identifier: 0UTf1+BQXj8Ras4zkWL/wgGnY3awXAg7yXF2OUkmNfo= Subject key identifier: B0:37:5C:05:DB:99:C8:F9:A0:0E:05:5C:A6:76:AC:BB:59:88:E1:13 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 2BCFF9A6DB23CC538E8781CDF125C778124928B5 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa Signing time: Mon 20 Jan 2025 06:00:01 +0000 ROA not before: Mon 20 Jan 2025 05:55:01 +0000 ROA not after: Mon 19 Jan 2026 06:00:01 +0000 asID: 150951 IP address blocks: 103.196.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:cf:f9:a6:db:23:cc:53:8e:87:81:cd:f1:25:c7:78:12:49:28:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Jan 20 05:55:01 2025 GMT Not After : Jan 19 06:00:01 2026 GMT Subject: CN=B0375C05DB99C8F9A00E055CA676ACBB5988E113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:c2:fd:12:1e:74:96:e6:ad:89:7b:06:1e: 0f:8c:0d:79:b2:aa:f2:58:63:28:db:61:9b:8e:dd: fa:1b:85:65:ba:c4:4c:6f:94:1e:53:bc:7d:b4:a5: 12:31:67:09:86:e8:ca:56:41:60:78:ef:e7:20:d8: 7d:bf:ac:fb:14:55:ab:9c:ff:a7:45:46:47:3b:d3: 72:4b:36:84:de:95:c1:44:18:bf:89:dc:cd:5a:96: b3:be:fd:7f:bf:0e:8b:cd:26:2a:d2:53:37:5b:f4: 02:14:76:c3:51:79:93:f3:e7:5f:d4:14:78:d7:75: ee:78:33:49:d2:68:da:17:c5:c8:b5:c8:38:cf:35: df:5f:c5:e7:ca:23:bd:92:be:56:13:89:2a:35:73: cb:3a:73:a4:e1:ee:15:79:f2:8e:ea:ac:3f:81:3e: 40:0c:75:a4:13:7e:4e:67:2c:e4:2d:92:71:61:0a: fa:a7:bf:cd:ca:58:11:21:ed:06:62:dd:1b:58:41: f3:32:9a:da:71:56:14:d9:58:fc:09:36:9c:db:c8: 60:e9:53:a2:48:fd:3c:7e:5a:b8:ef:81:02:b9:d3: 85:84:59:71:df:59:63:f6:b1:17:80:64:56:92:9d: f8:85:29:8a:ed:89:6d:53:8f:0f:8c:5c:37:7c:92: 54:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:37:5C:05:DB:99:C8:F9:A0:0E:05:5C:A6:76:AC:BB:59:88:E1:13 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.196.156.0/24 Signature Algorithm: sha256WithRSAEncryption b2:22:dc:e3:18:1e:59:5a:d0:8c:20:ef:fe:71:63:6d:c5:f8: 97:c9:8a:a0:05:d3:c0:e8:0c:2d:29:25:cd:b2:11:31:4c:b4: 98:4f:74:ea:64:6a:e2:43:52:db:80:ff:33:d3:de:e9:b2:e8: 8f:26:27:7d:4c:35:7b:e2:3e:ce:e2:ee:70:d0:6c:fa:d7:b3: 23:b6:a4:ac:d3:85:b6:4d:13:fd:82:86:8f:21:e4:1e:f1:d1: 1b:8b:8a:8a:d5:40:dd:50:dc:a5:8c:2d:ac:8d:58:8d:63:3f: 77:7b:26:92:f4:b3:18:00:44:29:69:03:73:18:b2:f2:dc:73: ee:08:13:ce:2e:4d:4d:b7:32:d3:55:74:ba:9a:ae:94:dc:4c: 11:14:1a:68:e9:ea:10:58:75:98:52:3e:75:b0:53:65:9c:7c: 09:e7:19:c0:4c:8d:85:0a:6f:a6:47:f9:3a:bb:b8:e1:7e:45: 10:73:45:78:02:58:08:3c:a0:0c:55:6c:b4:31:5c:62:04:eb: 3b:85:ed:3a:2b:e8:9c:e4:01:68:ad:46:cd:b6:04:2e:d2:fc: 6e:0c:ba:5b:31:7c:62:e1:ba:be:d9:1d:3b:39:77:07:f1:11: 14:27:e3:20:41:f3:f0:37:2a:2e:00:62:41:1c:49:c0:ca:24: 7f:78:73:1c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUK8/5ptsjzFOOh4HN8SXHeBJJKLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNTAxMjAwNTU1MDFaFw0yNjAxMTkwNjAwMDFaMDMxMTAvBgNV BAMTKEIwMzc1QzA1REI5OUM4RjlBMDBFMDU1Q0E2NzZBQ0JCNTk4OEUxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSsL9Eh50luatiXsGHg+MDXmy qvJYYyjbYZuO3fobhWW6xExvlB5TvH20pRIxZwmG6MpWQWB47+cg2H2/rPsUVauc /6dFRkc703JLNoTelcFEGL+J3M1alrO+/X+/DovNJirSUzdb9AIUdsNReZPz51/U FHjXde54M0nSaNoXxci1yDjPNd9fxefKI72SvlYTiSo1c8s6c6Th7hV58o7qrD+B PkAMdaQTfk5nLOQtknFhCvqnv83KWBEh7QZi3RtYQfMymtpxVhTZWPwJNpzbyGDp U6JI/Tx+WrjvgQK504WEWXHfWWP2sReAZFaSnfiFKYrtiW1Tjw+MXDd8klSxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUsDdcBduZyPmgDgVcpnasu1mI4RMwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxZTBkMTdjLWVkZDEtNDIwMi1i NzM2LTNiNTI3ZWZhNmJhMi8wLzMxMzAzMzJlMzEzOTM2MmUzMTM1MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM1MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnxJwwDQYJ KoZIhvcNAQELBQADggEBALIi3OMYHlla0Iwg7/5xY23F+JfJiqAF08DoDC0pJc2y ETFMtJhPdOpkauJDUtuA/zPT3umy6I8mJ31MNXviPs7i7nDQbPrXsyO2pKzThbZN E/2Cho8h5B7x0RuLiorVQN1Q3KWMLayNWI1jP3d7JpL0sxgARClpA3MYsvLcc+4I E84uTU23MtNVdLqarpTcTBEUGmjp6hBYdZhSPnWwU2WcfAnnGcBMjYUKb6ZH+Tq7 uOF+RRBzRXgCWAg8oAxVbLQxXGIE6zuF7Tor6JzkAWitRs22BC7S/G4MulsxfGLh ur7ZHTs5dwfxERQn4yBB8/A3Ki4AYkEcScDKJH94cxw= -----END CERTIFICATE-----Generated at Sat May 10 11:38:22 2025 by rpki-client