$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32342d3234203d3e20313331363934.roa File: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (raw, json) Hash identifier: +tQvpx2/UfhCVwqRbAlnsxq9kgLuc7k03ayXgiNTges= Subject key identifier: CE:1C:73:65:63:A3:5E:47:E7:82:68:A6:17:17:85:6F:BE:F1:AC:34 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 1DF3C1E84C49CDCAF858339F72793A1D2C64B7B7 Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32342d3234203d3e20313331363934.roa Signing time: Tue 13 Aug 2024 10:00:05 +0000 ROA not before: Tue 13 Aug 2024 09:55:05 +0000 ROA not after: Tue 12 Aug 2025 10:00:05 +0000 asID: 131694 IP address blocks: 103.7.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 22:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f3:c1:e8:4c:49:cd:ca:f8:58:33:9f:72:79:3a:1d:2c:64:b7:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Aug 13 09:55:05 2024 GMT Not After : Aug 12 10:00:05 2025 GMT Subject: CN=CE1C736563A35E47E78268A61717856FBEF1AC34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:da:41:21:28:3b:9f:7f:88:ac:7d:8b:a8:39: e0:e1:b2:86:b7:d5:d4:54:e2:b6:b9:d7:13:11:50: 9d:73:84:8b:46:75:88:a5:59:05:db:fb:e2:0a:9f: f9:12:64:ef:83:77:5d:5b:06:e9:e3:b5:71:43:54: 05:11:a7:15:9c:d4:d4:8d:3c:b8:5c:64:48:f4:3d: 46:e6:98:58:f6:36:be:b3:ab:2b:5c:46:53:49:fa: 86:51:64:08:85:1f:67:31:b2:f6:8d:e4:2e:30:58: e1:e8:fe:37:dd:2a:18:8f:33:33:df:5a:0c:d9:9b: 37:46:20:9a:8f:9e:b8:35:9c:25:cc:55:1d:00:99: 05:2f:73:62:01:a3:f6:c3:c7:d3:20:38:24:30:13: f1:c7:1e:84:25:87:f8:70:a8:d8:98:7c:de:ea:9a: 7e:28:ba:ca:97:2c:ec:89:b3:e3:f4:7e:5d:80:10: d9:98:9a:d8:55:a2:4f:4f:2c:a6:8f:57:fa:bf:0c: 3e:6c:9b:14:e0:8d:6d:36:e4:39:52:ee:cf:f8:ad: a0:ff:66:ba:14:28:61:81:93:49:fb:11:e5:ad:1d: 43:89:27:50:7b:de:21:8a:fb:8e:3c:69:d6:85:b2: eb:12:5e:7b:77:9f:f7:2c:e7:df:8e:17:ca:3d:7f: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1C:73:65:63:A3:5E:47:E7:82:68:A6:17:17:85:6F:BE:F1:AC:34 X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32342d3234203d3e20313331363934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.86.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:20:a3:ce:2a:68:56:dc:08:49:75:18:92:b7:73:10:50:16: aa:25:c5:3c:61:05:85:38:97:ed:a6:e7:93:97:c5:21:7c:d4: 70:5b:24:b7:8b:21:28:e6:61:23:28:15:19:30:9f:08:53:a7: eb:ba:87:c1:9a:3f:d6:89:15:2b:48:17:98:80:12:45:d1:35: 31:76:cf:a7:55:e6:f1:f4:a7:5f:b3:3a:fb:ce:6f:39:5b:a5: fb:81:63:77:76:0e:0a:df:1f:31:43:8f:bb:8a:47:aa:4c:d0: 3d:e4:f8:b8:9a:96:c4:96:57:14:40:94:fa:89:74:cf:5b:27: 4d:67:5e:df:5e:87:35:ff:30:f9:81:ef:31:9f:c5:85:bf:81: 3f:a5:b6:7d:a8:b3:60:95:17:62:4b:25:62:37:e0:16:99:4a: f2:1a:cb:81:f2:78:5f:23:54:e9:2f:8c:90:0b:69:e3:98:02: 2c:c4:f0:0b:5a:50:4f:f5:f9:ac:70:91:13:e1:13:d0:1c:53: c6:9f:2c:d8:30:9c:d3:27:41:31:e4:fa:2a:6f:05:b2:b9:e2: 2c:59:56:41:19:18:06:d9:01:31:26:98:e0:51:09:83:e7:a8: 4b:d8:2b:27:58:5d:58:d1:b4:ed:c0:5d:0b:80:4d:6c:7f:c5: 03:90:af:2c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHfPB6ExJzcr4WDOfcnk6HSxkt7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNDA4MTMwOTU1MDVaFw0yNTA4MTIxMDAwMDVaMDMxMTAvBgNV BAMTKENFMUM3MzY1NjNBMzVFNDdFNzgyNjhBNjE3MTc4NTZGQkVGMUFDMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ2kEhKDuff4isfYuoOeDhsoa3 1dRU4ra51xMRUJ1zhItGdYilWQXb++IKn/kSZO+Dd11bBunjtXFDVAURpxWc1NSN PLhcZEj0PUbmmFj2Nr6zqytcRlNJ+oZRZAiFH2cxsvaN5C4wWOHo/jfdKhiPMzPf WgzZmzdGIJqPnrg1nCXMVR0AmQUvc2IBo/bDx9MgOCQwE/HHHoQlh/hwqNiYfN7q mn4ousqXLOyJs+P0fl2AENmYmthVok9PLKaPV/q/DD5smxTgjW025DlS7s/4raD/ ZroUKGGBk0n7EeWtHUOJJ1B73iGK+448adaFsusSXnt3n/cs59+OF8o9f+yvAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUzhxzZWOjXkfngmimFxeFb77xrDQwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwMjc4YjdkLTQ3ZWQtNDg2MC1h YjNhLTljMTE0Y2M1ZjA5Yi8wLzMxMzAzMzJlMzcyZTM4MzYyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTMzMzEzNjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnB1YwDQYJKoZIhvcN AQELBQADggEBABsgo84qaFbcCEl1GJK3cxBQFqolxTxhBYU4l+2m55OXxSF81HBb JLeLISjmYSMoFRkwnwhTp+u6h8GaP9aJFStIF5iAEkXRNTF2z6dV5vH0p1+zOvvO bzlbpfuBY3d2DgrfHzFDj7uKR6pM0D3k+LialsSWVxRAlPqJdM9bJ01nXt9ehzX/ MPmB7zGfxYW/gT+ltn2os2CVF2JLJWI34BaZSvIay4HyeF8jVOkvjJALaeOYAizE 8AtaUE/1+axwkRPhE9AcU8afLNgwnNMnQTHk+ipvBbK54ixZVkEZGAbZATEmmOBR CYPnqEvYKydYXVjRtO3AXQuATWx/xQOQryw= -----END CERTIFICATE-----Generated at Sat May 10 17:34:40 2025 by rpki-client