$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa File: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (raw, json) Hash identifier: dddpXAXd6NN4T55cPDxa5oEHzFYeojSlOpK24ou6O1o= Subject key identifier: 8C:84:6B:94:E0:CB:C9:93:C1:D8:85:A7:46:22:B0:C6:51:50:31:80 Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 1F90451685DEF13D597724F432A995F01C1190E5 Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa Signing time: Mon 10 Feb 2025 08:00:01 +0000 ROA not before: Mon 10 Feb 2025 07:55:01 +0000 ROA not after: Mon 09 Feb 2026 08:00:01 +0000 asID: 147164 IP address blocks: 103.177.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:90:45:16:85:de:f1:3d:59:77:24:f4:32:a9:95:f0:1c:11:90:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Feb 10 07:55:01 2025 GMT Not After : Feb 9 08:00:01 2026 GMT Subject: CN=8C846B94E0CBC993C1D885A74622B0C651503180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:4b:bd:44:11:9b:40:5e:41:dd:ac:9d:96: ed:bf:04:d3:5a:b3:47:9a:8b:e8:11:9e:24:32:67: 24:d7:d6:4f:96:b3:82:0b:56:60:49:bc:9c:2c:5c: a0:c4:19:b2:8e:68:07:4c:29:32:8e:34:1c:c7:96: 1a:1d:83:af:25:b5:32:9d:93:a4:af:58:7e:3c:c2: 97:5e:c6:67:72:be:af:a8:02:c3:f5:a8:4a:9a:b9: ee:be:d8:05:36:e9:72:96:f4:07:99:55:cf:cf:9f: d0:c9:ae:33:7b:83:5e:2c:e8:e3:7f:e4:80:ee:81: 0f:2d:2b:ee:07:29:91:92:76:76:1e:98:e0:97:35: b6:ab:57:c2:29:f4:4e:5c:35:7e:2e:3a:bb:d2:ca: 63:ac:b3:05:02:60:c6:3b:01:69:24:c3:53:7d:2a: e2:10:2a:4e:57:29:94:1c:aa:e8:c5:2f:8a:6f:0d: 34:a2:65:42:97:a2:77:f4:33:d2:4c:b6:87:b8:09: 61:94:2c:c4:c1:7d:bb:55:e2:b6:bb:6b:e7:13:1d: bd:c0:87:30:05:5c:59:34:a1:38:5d:a4:3a:4b:5c: 9d:06:72:17:55:ec:5e:d4:79:09:d1:3f:0f:fe:f9: 51:6f:1e:76:07:7d:e7:0f:15:8d:ce:43:bb:13:59: fa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:84:6B:94:E0:CB:C9:93:C1:D8:85:A7:46:22:B0:C6:51:50:31:80 X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.11.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:cf:31:d4:dc:fb:4a:3b:36:b5:0c:96:f6:81:84:36:c2:92: 33:4e:f4:8b:e3:92:6c:cf:fe:ca:23:c5:a2:ed:72:40:72:fd: 35:75:1d:ad:6f:9e:82:97:a1:00:ba:6e:75:dd:3a:d0:9b:8e: 0d:b9:bf:2d:71:d0:ac:71:b7:24:dd:5b:6b:ef:ae:d7:d4:66: c4:f3:8f:a7:f4:18:e2:7f:f0:d2:a8:c5:c4:ae:2c:2d:9f:50: 42:c1:6c:94:5e:dc:3e:99:33:c4:ad:ba:d1:c8:19:7c:60:f3: a2:99:d1:fa:ec:e8:23:4c:c4:5c:d0:1b:05:de:1d:b3:14:60: 24:80:b0:b6:5d:ba:fe:e2:c1:70:57:d6:40:42:fd:76:b8:55: 71:6d:1a:96:84:6f:ec:ed:67:8c:49:27:51:e1:2f:64:aa:bf: 9a:20:0e:c2:27:19:2b:fb:ed:dc:3e:44:73:12:1c:ac:11:8f: 56:04:d2:27:4d:03:2b:df:63:6d:e2:63:d2:49:48:9a:e4:b9: 77:af:5c:66:ab:8b:c7:be:0b:89:b2:14:a5:a1:8b:9e:24:6b: 05:ee:a0:77:31:eb:7f:95:da:ce:0e:61:f3:0c:eb:4c:73:f7: 2a:8b:0e:15:b3:ce:82:9e:6d:4b:74:31:a6:d9:a6:33:ac:34: ec:d9:d9:49 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUH5BFFoXe8T1ZdyT0MqmV8BwRkOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNTAyMTAwNzU1MDFaFw0yNjAyMDkwODAwMDFaMDMxMTAvBgNV BAMTKDhDODQ2Qjk0RTBDQkM5OTNDMUQ4ODVBNzQ2MjJCMEM2NTE1MDMxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7E0u9RBGbQF5B3aydlu2/BNNa s0eai+gRniQyZyTX1k+Ws4ILVmBJvJwsXKDEGbKOaAdMKTKONBzHlhodg68ltTKd k6SvWH48wpdexmdyvq+oAsP1qEqaue6+2AU26XKW9AeZVc/Pn9DJrjN7g14s6ON/ 5IDugQ8tK+4HKZGSdnYemOCXNbarV8Ip9E5cNX4uOrvSymOsswUCYMY7AWkkw1N9 KuIQKk5XKZQcqujFL4pvDTSiZUKXonf0M9JMtoe4CWGULMTBfbtV4ra7a+cTHb3A hzAFXFk0oThdpDpLXJ0GchdV7F7UeQnRPw/++VFvHnYHfecPFY3OQ7sTWfpbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUjIRrlODLyZPB2IWnRiKwxlFQMYAwHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkMTk2ZDY1LTIxYTgtNGIwNC1h OWRlLTcyODNmYmUzYzFjYi8wLzMxMzAzMzJlMzEzNzM3MmUzMTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7ELMA0GCSqG SIb3DQEBCwUAA4IBAQBKzzHU3PtKOza1DJb2gYQ2wpIzTvSL45Jsz/7KI8Wi7XJA cv01dR2tb56Cl6EAum513TrQm44Nub8tcdCscbck3Vtr767X1GbE84+n9Bjif/DS qMXEriwtn1BCwWyUXtw+mTPErbrRyBl8YPOimdH67OgjTMRc0BsF3h2zFGAkgLC2 Xbr+4sFwV9ZAQv12uFVxbRqWhG/s7WeMSSdR4S9kqr+aIA7CJxkr++3cPkRzEhys EY9WBNInTQMr32Nt4mPSSUia5Ll3r1xmq4vHvguJshSloYueJGsF7qB3Met/ldrO DmHzDOtMc/cqiw4Vs86Cnm1LdDGm2aYzrDTs2dlJ -----END CERTIFICATE-----Generated at Wed May 7 11:03:41 2025 by rpki-client