$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32342d3234203d3e20313431313236.roa File: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (raw, json) Hash identifier: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw= Subject key identifier: FC:2D:72:57:90:F4:75:0F:F5:1A:BC:2E:47:EF:B3:40:64:7B:CB:04 Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 42368F9325874945D24C955D4606ACF4F014FD3F Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32342d3234203d3e20313431313236.roa Signing time: Thu 08 May 2025 05:02:22 +0000 ROA not before: Thu 08 May 2025 04:57:22 +0000 ROA not after: Thu 07 May 2026 05:02:22 +0000 asID: 141126 IP address blocks: 103.172.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:36:8f:93:25:87:49:45:d2:4c:95:5d:46:06:ac:f4:f0:14:fd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: May 8 04:57:22 2025 GMT Not After : May 7 05:02:22 2026 GMT Subject: CN=FC2D725790F4750FF51ABC2E47EFB340647BCB04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:10:95:9d:8e:cf:c7:25:8a:ef:e7:a6:ce: 56:80:f7:f2:07:61:69:58:36:70:55:fd:6f:0f:c7: c0:d9:bb:17:4d:3f:c9:60:33:11:fe:8f:b7:23:89: 82:e0:01:95:9a:99:e5:4e:8a:51:1b:b8:e0:61:ca: ba:8c:b9:12:b7:b3:3b:b0:c3:bf:f7:c9:fa:4a:24: bb:bf:ef:b7:80:1c:e7:e7:4b:0e:7d:c0:1d:4b:d9: f6:51:77:19:ae:d9:f5:59:0e:c3:d8:55:86:cc:12: 89:13:ff:8c:16:bd:04:3a:79:34:6e:7c:f0:11:f5: 1d:5c:bd:84:34:65:cb:a2:24:69:2e:86:4c:98:bc: e9:67:aa:10:dd:8d:36:67:7d:54:98:76:73:8d:ba: 7c:0b:89:c3:0f:0b:13:53:66:ee:ad:34:97:8a:fe: 40:01:2c:12:30:d0:5d:6c:62:11:74:b5:55:36:ad: 65:b8:e0:1c:70:90:91:6b:64:37:6e:df:c5:1f:7f: 16:59:bb:bf:b9:fc:18:83:28:d4:8d:33:32:ca:fa: 20:8e:12:de:06:f3:37:c7:c8:39:3d:29:b4:6a:13: a9:60:86:01:5d:e9:b6:c5:84:b9:a0:1d:e7:dc:4a: 5b:72:4b:cc:9e:0a:cb:69:d6:3a:e7:8c:06:e5:57: 92:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2D:72:57:90:F4:75:0F:F5:1A:BC:2E:47:EF:B3:40:64:7B:CB:04 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32342d3234203d3e20313431313236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.0.0/24 Signature Algorithm: sha256WithRSAEncryption 37:70:26:f2:d0:5a:ef:58:ca:a7:d5:ed:38:90:5a:08:1d:18: d2:79:fe:45:27:01:36:eb:37:5e:04:09:ee:aa:84:11:58:cb: e5:02:c3:34:a6:e1:61:8f:19:7e:a5:32:4a:0f:f7:d1:ab:87: 5f:38:89:1e:4d:94:13:15:92:94:25:19:f6:9f:e4:d8:1f:2f: 64:8e:39:23:f7:50:e1:1e:de:9a:2f:10:d8:94:3b:3f:d9:73: 9a:ce:9f:49:5b:70:f0:b8:96:66:70:d6:63:fa:5d:bf:e1:af: 70:f7:16:84:9c:b8:0b:50:af:93:17:28:d0:a5:f0:56:35:6e: 26:18:1a:f0:4a:3f:2f:73:03:5c:d6:99:16:ea:c4:00:1b:88: 5c:f4:5c:78:d4:46:73:93:16:b8:fe:fa:b5:b5:57:d7:86:46: 5e:5a:2a:82:9d:9b:b2:11:79:36:8c:b0:d1:85:54:0e:ec:1e: e3:d3:c1:94:b3:af:dc:40:3a:3e:d7:d1:3b:0c:68:08:3b:3c: da:a8:6b:05:85:9a:d2:54:ea:f2:43:20:d9:d4:c8:db:70:61: 80:79:f3:da:0d:c0:f1:4d:47:d4:bb:25:af:b9:04:26:31:3d: 4b:1e:ca:29:f2:38:33:34:93:34:dc:51:7e:94:5f:c1:41:e8: a9:82:c7:58 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQjaPkyWHSUXSTJVdRgas9PAU/T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTA1MDgwNDU3MjJaFw0yNjA1MDcwNTAyMjJaMDMxMTAvBgNV BAMTKEZDMkQ3MjU3OTBGNDc1MEZGNTFBQkMyRTQ3RUZCMzQwNjQ3QkNCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CBCVnY7PxyWK7+emzlaA9/IH YWlYNnBV/W8Px8DZuxdNP8lgMxH+j7cjiYLgAZWameVOilEbuOBhyrqMuRK3szuw w7/3yfpKJLu/77eAHOfnSw59wB1L2fZRdxmu2fVZDsPYVYbMEokT/4wWvQQ6eTRu fPAR9R1cvYQ0ZcuiJGkuhkyYvOlnqhDdjTZnfVSYdnONunwLicMPCxNTZu6tNJeK /kABLBIw0F1sYhF0tVU2rWW44BxwkJFrZDdu38UffxZZu7+5/BiDKNSNMzLK+iCO Et4G8zfHyDk9KbRqE6lghgFd6bbFhLmgHefcSltyS8yeCstp1jrnjAblV5IRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU/C1yV5D0dQ/1GrwuR++zQGR7ywQwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNTIyNGM2LTMzNGQtNGYzZC05 ODM3LTFiYWNjYTVhMDIyYi8wLzMxMzAzMzJlMzEzNzMyMmUzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMTMxMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGesADANBgkqhkiG 9w0BAQsFAAOCAQEAN3Am8tBa71jKp9XtOJBaCB0Y0nn+RScBNus3XgQJ7qqEEVjL 5QLDNKbhYY8ZfqUySg/30auHXziJHk2UExWSlCUZ9p/k2B8vZI45I/dQ4R7emi8Q 2JQ7P9lzms6fSVtw8LiWZnDWY/pdv+GvcPcWhJy4C1Cvkxco0KXwVjVuJhga8Eo/ L3MDXNaZFurEABuIXPRceNRGc5MWuP76tbVX14ZGXloqgp2bshF5Noyw0YVUDuwe 49PBlLOv3EA6PtfROwxoCDs82qhrBYWa0lTq8kMg2dTI23BhgHnz2g3A8U1H1Lsl r7kEJjE9Sx7KKfI4MzSTNNxRfpRfwUHoqYLHWA== -----END CERTIFICATE-----Generated at Sun May 11 10:37:20 2025 by rpki-client