$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa File: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (raw, json) Hash identifier: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs= Subject key identifier: B3:F8:31:AA:89:34:E5:AD:7B:E9:2B:9B:A4:7A:D0:87:B3:E0:54:13 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 0F76809E0489F9CC47C656A43151F0887E31E75C Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa Signing time: Thu 27 Feb 2025 08:38:31 +0000 ROA not before: Thu 27 Feb 2025 08:33:31 +0000 ROA not after: Thu 26 Feb 2026 08:38:31 +0000 asID: 138050 IP address blocks: 103.122.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 16:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:76:80:9e:04:89:f9:cc:47:c6:56:a4:31:51:f0:88:7e:31:e7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Feb 27 08:33:31 2025 GMT Not After : Feb 26 08:38:31 2026 GMT Subject: CN=B3F831AA8934E5AD7BE92B9BA47AD087B3E05413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:30:98:1c:5c:5e:53:b1:23:a8:4a:7f:00: 77:b7:2d:d6:dd:ab:f3:24:67:26:ef:5d:a4:f2:4f: 27:10:b6:a1:06:5b:34:1b:b5:8e:c6:7d:af:72:63: 34:42:45:14:de:df:6c:20:65:9b:35:3b:9d:a8:5b: 64:25:9f:cc:6a:a3:54:18:c7:5d:1f:31:3a:57:57: 80:f5:47:cd:7b:2a:1c:b4:65:6a:aa:a6:7f:d7:3b: 21:92:2a:a2:f3:15:6e:6a:2b:48:f9:8e:54:14:d6: 2d:77:f9:cb:cf:49:31:03:65:9b:20:2a:da:36:13: 63:ac:14:c4:33:65:5d:e3:32:87:91:8f:99:38:f4: f1:d9:7c:e5:bd:1a:72:72:81:67:15:1d:07:c1:c6: 8a:de:69:4c:ac:38:49:c1:3e:3d:05:7f:5f:c8:48: b5:7d:3f:66:31:02:95:22:1e:99:b3:f1:06:cf:88: 63:40:1c:9f:ea:63:43:4c:c1:4a:7a:ac:72:68:01: 8f:2e:c7:3d:77:6d:47:76:6c:2e:14:00:66:e9:83: c6:33:ad:58:ad:a1:3c:f3:94:fe:c8:1d:48:2c:7c: cf:04:8c:bf:6e:6d:e1:4b:6b:d2:3d:ec:f2:f4:8f: ac:5f:ab:c9:c7:66:f6:30:2b:53:dc:7f:93:25:72: 09:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F8:31:AA:89:34:E5:AD:7B:E9:2B:9B:A4:7A:D0:87:B3:E0:54:13 X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/3130332e3132322e352e302f32342d3234203d3e20313338303530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.5.0/24 Signature Algorithm: sha256WithRSAEncryption 22:42:60:42:06:2b:d4:23:46:66:9c:a7:20:72:51:9d:51:92: 5f:f2:70:fa:d5:c9:c8:5a:47:1a:5f:6c:b1:8c:76:8b:e2:fa: 3c:3d:70:26:65:f5:78:2f:9a:a8:6f:70:0b:1c:13:3d:6f:fa: 9b:66:ae:71:96:76:70:6b:02:80:44:ea:55:03:8d:d8:21:62: e5:61:b0:3c:2c:c7:d4:91:e5:af:67:b3:59:74:fe:00:9e:91: c4:08:ed:92:ea:3b:3b:89:c6:19:2d:27:e7:0e:55:d0:05:c4: 2c:c1:1b:4f:55:e4:fa:db:e0:d4:0c:b2:45:6d:73:0d:80:59: 43:dc:2a:f1:2f:59:57:2e:2a:f6:3f:97:29:87:90:86:0b:9a: 43:a6:b0:14:6b:22:83:48:95:f9:57:4c:4c:e3:39:bf:25:99: df:6c:e1:f9:06:20:c2:80:69:99:a5:a4:77:26:d9:96:d9:9d: 5d:04:16:4b:d3:1c:b2:86:e9:5f:42:22:94:2f:51:6e:eb:a0: 85:2a:b9:3d:dd:c2:8a:81:b2:7b:f6:56:c5:cd:f6:cd:5a:c8: f3:b7:4c:12:b9:5d:7d:62:67:a6:f2:d1:20:22:3a:8c:69:b8: e1:a1:9e:af:4b:71:30:7c:38:cc:fb:de:53:40:62:f2:bf:d3: 4d:c1:97:34 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUD3aAngSJ+cxHxlakMVHwiH4x51wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTAyMjcwODMzMzFaFw0yNjAyMjYwODM4MzFaMDMxMTAvBgNV BAMTKEIzRjgzMUFBODkzNEU1QUQ3QkU5MkI5QkE0N0FEMDg3QjNFMDU0MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPjCYHFxeU7EjqEp/AHe3Ldbd q/MkZybvXaTyTycQtqEGWzQbtY7Gfa9yYzRCRRTe32wgZZs1O52oW2Qln8xqo1QY x10fMTpXV4D1R817Khy0ZWqqpn/XOyGSKqLzFW5qK0j5jlQU1i13+cvPSTEDZZsg Kto2E2OsFMQzZV3jMoeRj5k49PHZfOW9GnJygWcVHQfBxoreaUysOEnBPj0Ff1/I SLV9P2YxApUiHpmz8QbPiGNAHJ/qY0NMwUp6rHJoAY8uxz13bUd2bC4UAGbpg8Yz rVitoTzzlP7IHUgsfM8EjL9ubeFLa9I97PL0j6xfq8nHZvYwK1Pcf5Mlcgl1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUs/gxqok05a176SubpHrQh7PgVBMwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZkNGZiZmIwLTkzZWUtNGVhNi1i NGNmLTA3ZDc2OWI4OGEyMi8wLzMxMzAzMzJlMzEzMjMyMmUzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzODMwMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGd6BTANBgkqhkiG 9w0BAQsFAAOCAQEAIkJgQgYr1CNGZpynIHJRnVGSX/Jw+tXJyFpHGl9ssYx2i+L6 PD1wJmX1eC+aqG9wCxwTPW/6m2aucZZ2cGsCgETqVQON2CFi5WGwPCzH1JHlr2ez WXT+AJ6RxAjtkuo7O4nGGS0n5w5V0AXELMEbT1Xk+tvg1AyyRW1zDYBZQ9wq8S9Z Vy4q9j+XKYeQhguaQ6awFGsig0iV+VdMTOM5vyWZ32zh+QYgwoBpmaWkdybZltmd XQQWS9McsobpX0IilC9RbuughSq5Pd3CioGye/ZWxc32zVrI87dMErldfWJnpvLR ICI6jGm44aGer0txMHw4zPveU0Bi8r/TTcGXNA== -----END CERTIFICATE-----Generated at Tue Apr 29 12:52:15 2025 by rpki-client