$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa File: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (raw, json) Hash identifier: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8= Subject key identifier: 6E:18:EC:19:2A:C3:B4:F4:5B:D7:55:3E:28:2B:63:6A:95:75:4F:C7 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 2254F550F6665B5AF8D092802D61C0C1DEA7C97D Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa Signing time: Tue 31 Dec 2024 16:00:00 +0000 ROA not before: Tue 31 Dec 2024 15:55:00 +0000 ROA not after: Tue 30 Dec 2025 16:00:00 +0000 asID: 150501 IP address blocks: 103.120.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 16:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:54:f5:50:f6:66:5b:5a:f8:d0:92:80:2d:61:c0:c1:de:a7:c9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Dec 31 15:55:00 2024 GMT Not After : Dec 30 16:00:00 2025 GMT Subject: CN=6E18EC192AC3B4F45BD7553E282B636A95754FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:61:0c:ad:53:bc:fa:f4:24:19:3c:80:fa: 36:83:30:a6:5d:75:72:cc:d3:c6:b7:7d:c4:c2:33: a6:19:9f:ff:d5:28:fe:0c:83:08:84:7c:9b:b5:76: 8b:b5:e8:5f:8c:84:6d:6f:a9:c3:fe:64:eb:1c:4d: da:91:e4:11:5d:fe:78:46:97:ac:71:03:54:53:b2: 5e:f1:d8:c4:03:42:1e:ce:b9:89:9e:2f:d5:b2:e6: bb:6b:66:3c:33:49:26:be:ce:ff:63:8e:be:13:cb: 8a:47:68:5a:80:27:ad:fb:04:81:dc:bf:df:ff:30: 56:f1:38:30:41:78:6f:cd:91:78:fe:b1:a8:41:5e: b2:42:f9:ea:f0:40:cf:aa:41:88:6d:f7:5d:00:d1: b0:93:f9:c5:46:da:dd:17:90:05:c5:a9:04:95:ae: 91:f9:89:8b:f9:70:aa:25:01:14:1f:8f:45:70:00: 51:c4:38:67:4c:19:2e:54:36:70:d6:91:68:26:b5: 44:3d:ca:25:2a:5a:02:e6:39:48:6a:1e:b8:b5:e6: a1:ea:9f:95:52:2f:fb:eb:23:e2:96:9c:62:2a:a3: fc:21:ee:74:b3:0c:b7:d7:c7:a5:72:fb:b2:46:86: 2e:51:ce:44:50:b2:77:a2:15:d4:00:eb:3d:ad:d6: 85:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:18:EC:19:2A:C3:B4:F4:5B:D7:55:3E:28:2B:63:6A:95:75:4F:C7 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.76.0/24 Signature Algorithm: sha256WithRSAEncryption 46:8e:9b:e9:79:75:bb:cf:b4:7d:8c:6b:ba:86:78:7e:e8:c5: 47:16:31:58:42:fa:73:be:c1:2d:f5:14:cb:3c:f9:44:74:81: e7:36:ea:59:83:b0:5e:4c:8d:9c:c4:3c:9f:22:12:81:cb:55: 79:76:8d:d1:80:cc:6b:35:f9:65:e8:0d:05:0b:69:0f:d4:7d: e3:4f:62:dc:c8:52:3d:47:95:f8:46:56:6e:de:71:5f:f0:da: 80:45:a7:61:24:58:15:23:f5:fe:2f:5d:65:52:93:0d:10:44: d5:66:c6:a3:23:a6:f4:ff:37:f6:58:29:d1:d2:b3:5c:8d:63: 90:58:a7:24:6b:5f:66:77:c3:47:c9:bb:91:79:e4:73:61:b8: 66:36:e4:49:47:5a:2d:36:cd:8e:d2:fa:68:9b:91:0f:4a:43: 8d:4f:11:b4:bd:fb:8a:e1:dd:2e:2e:2d:f5:03:9a:cf:70:e9: 60:be:98:91:b2:38:31:24:d1:f3:d0:5b:ce:b3:d0:57:22:4c: 27:41:54:57:5c:1d:dc:04:3d:e9:cf:8a:56:40:50:75:77:f5: ed:f5:2e:83:d4:bc:82:73:44:b2:41:33:04:ad:8f:df:e6:a1: fe:70:20:ea:17:02:97:93:22:7b:a4:06:6c:1f:d3:04:89:7e: 64:cf:b9:3c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIlT1UPZmW1r40JKALWHAwd6nyX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNDEyMzExNTU1MDBaFw0yNTEyMzAxNjAwMDBaMDMxMTAvBgNV BAMTKDZFMThFQzE5MkFDM0I0RjQ1QkQ3NTUzRTI4MkI2MzZBOTU3NTRGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQmEMrVO8+vQkGTyA+jaDMKZd dXLM08a3fcTCM6YZn//VKP4MgwiEfJu1dou16F+MhG1vqcP+ZOscTdqR5BFd/nhG l6xxA1RTsl7x2MQDQh7OuYmeL9Wy5rtrZjwzSSa+zv9jjr4Ty4pHaFqAJ637BIHc v9//MFbxODBBeG/NkXj+sahBXrJC+erwQM+qQYht910A0bCT+cVG2t0XkAXFqQSV rpH5iYv5cKolARQfj0VwAFHEOGdMGS5UNnDWkWgmtUQ9yiUqWgLmOUhqHri15qHq n5VSL/vrI+KWnGIqo/wh7nSzDLfXx6Vy+7JGhi5RzkRQsneiFdQA6z2t1oXlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbhjsGSrDtPRb11U+KCtjapV1T8cwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhZGM3NjVhLWZmOGQtNGIxZi1h NTlhLTI1ZmY3YmQ0ZjU4YS8wLzMxMzAzMzJlMzEzMjMwMmUzNzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3hMMA0GCSqG SIb3DQEBCwUAA4IBAQBGjpvpeXW7z7R9jGu6hnh+6MVHFjFYQvpzvsEt9RTLPPlE dIHnNupZg7BeTI2cxDyfIhKBy1V5do3RgMxrNfll6A0FC2kP1H3jT2LcyFI9R5X4 RlZu3nFf8NqARadhJFgVI/X+L11lUpMNEETVZsajI6b0/zf2WCnR0rNcjWOQWKck a19md8NHybuReeRzYbhmNuRJR1otNs2O0vpom5EPSkONTxG0vfuK4d0uLi31A5rP cOlgvpiRsjgxJNHz0FvOs9BXIkwnQVRXXB3cBD3pz4pWQFB1d/Xt9S6D1LyCc0Sy QTMErY/f5qH+cCDqFwKXkyJ7pAZsH9MEiX5kz7k8 -----END CERTIFICATE-----Generated at Wed May 7 15:20:51 2025 by rpki-client