$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa File: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: IarCEKLylnrJ7AZkdxFWJNi+xmNEExkQb+M5jNKDEHk= Subject key identifier: 41:10:17:DE:FE:59:C5:5E:C0:FD:A6:ED:93:56:CC:A6:A0:E0:EB:2D Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 5DB89885A901B4553EF08B11308C30E16958351E Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa Signing time: Tue 22 Apr 2025 08:03:18 +0000 ROA not before: Tue 22 Apr 2025 07:58:18 +0000 ROA not after: Tue 21 Apr 2026 08:03:18 +0000 asID: 9341 IP address blocks: 103.189.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b8:98:85:a9:01:b4:55:3e:f0:8b:11:30:8c:30:e1:69:58:35:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Apr 22 07:58:18 2025 GMT Not After : Apr 21 08:03:18 2026 GMT Subject: CN=411017DEFE59C55EC0FDA6ED9356CCA6A0E0EB2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:a9:e3:8b:5e:4b:f9:3d:5a:e6:1a:e0:fb: 7c:bf:fe:a2:c4:7e:2c:a3:dd:a9:03:33:74:cd:5d: 93:5b:84:97:f3:f7:ee:f1:08:8a:d4:60:c6:00:1c: c9:32:35:b8:09:02:ec:13:6a:44:4f:ef:db:cb:5a: d7:07:a9:e3:1c:9c:50:24:ac:a1:54:92:cb:55:01: 27:11:ba:e0:d7:5d:2e:43:cf:a4:50:8f:9e:34:ad: bc:ac:01:46:fd:bc:8a:f6:5d:8b:6d:d9:ce:6a:70: cd:c8:a8:a7:72:8b:82:cb:e3:fc:51:45:8c:b7:96: d2:6d:d0:b3:19:a6:9f:11:a1:6a:c6:92:65:81:b8: 9c:c1:4b:5b:57:6e:53:8c:55:52:79:77:cc:ae:7a: c3:93:f3:0d:e8:1f:ba:f9:30:af:bf:42:82:1c:0b: 70:85:18:92:17:c8:eb:71:c5:82:17:2d:ba:96:78: 67:6e:7d:81:1d:ed:eb:aa:cd:4a:80:31:34:54:28: 68:86:bd:8c:71:8a:e3:aa:d8:c0:be:e7:b0:b4:13: f4:b6:23:03:b4:28:81:3c:b4:c1:30:a4:ff:7a:d1: 97:9f:23:38:60:3a:73:78:65:45:a0:a5:be:9c:93: 05:08:09:81:5e:f4:0f:b3:4e:a8:31:9b:c1:55:45: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:10:17:DE:FE:59:C5:5E:C0:FD:A6:ED:93:56:CC:A6:A0:E0:EB:2D X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.200.0/24 Signature Algorithm: sha256WithRSAEncryption 34:02:ab:e6:62:0f:f4:42:31:fe:56:72:32:d2:cc:44:0e:2a: 84:a8:dd:05:ac:40:8f:22:30:d0:ba:2f:62:66:13:33:e8:a2: d4:5b:da:75:af:4f:81:4e:86:08:41:2d:1d:ba:e3:e0:4f:73: fe:65:9e:e3:18:a9:c6:fc:b8:fe:8f:44:9e:6a:c4:73:48:f5: 48:63:03:78:53:a2:95:8d:74:d9:e5:27:37:54:ec:58:d1:05: 9b:0a:ab:89:3c:dc:ec:a8:52:89:c4:c9:f3:6d:02:78:6c:8d: 2a:b1:96:50:0b:8f:f9:18:04:8f:e2:fe:d3:7f:d7:e1:c3:4f: 8b:ba:bb:75:c9:53:24:6c:2b:6a:7f:32:b6:12:c4:78:b8:6a: 5a:1a:6e:75:b4:1c:8a:47:57:c4:0e:00:0a:d1:54:01:b9:28: 9e:58:0c:5a:ed:0b:79:cf:46:85:01:89:72:91:7c:27:67:05: 9b:26:4e:36:e7:f2:ff:35:60:b3:d5:e0:c7:3c:e8:8d:5e:ba: 4d:21:d8:c5:7d:6b:11:8e:83:e8:4b:78:34:f5:98:25:55:ca: 72:41:47:12:aa:b6:60:85:86:3b:c1:92:e6:3c:d1:88:66:19: cd:14:cd:d9:fb:cc:48:3a:70:9d:98:4f:73:77:8a:39:3b:23: 33:a4:d4:de -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXbiYhakBtFU+8IsRMIww4WlYNR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNTA0MjIwNzU4MThaFw0yNjA0MjEwODAzMThaMDMxMTAvBgNV BAMTKDQxMTAxN0RFRkU1OUM1NUVDMEZEQTZFRDkzNTZDQ0E2QTBFMEVCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJanji15L+T1a5hrg+3y//qLE fiyj3akDM3TNXZNbhJfz9+7xCIrUYMYAHMkyNbgJAuwTakRP79vLWtcHqeMcnFAk rKFUkstVAScRuuDXXS5Dz6RQj540rbysAUb9vIr2XYtt2c5qcM3IqKdyi4LL4/xR RYy3ltJt0LMZpp8RoWrGkmWBuJzBS1tXblOMVVJ5d8yuesOT8w3oH7r5MK+/QoIc C3CFGJIXyOtxxYIXLbqWeGdufYEd7euqzUqAMTRUKGiGvYxxiuOq2MC+57C0E/S2 IwO0KIE8tMEwpP960ZefIzhgOnN4ZUWgpb6ckwUICYFe9A+zTqgxm8FVRSyxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUQRAX3v5ZxV7A/abtk1bMpqDg6y0wHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMmU1ZjAzLWJmOTYtNGI0MC1i ZDRhLTZlMzg4OGM0MDIwNS8wLzMxMzAzMzJlMzEzODM5MmUzMjMwMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe9yDANBgkqhkiG 9w0BAQsFAAOCAQEANAKr5mIP9EIx/lZyMtLMRA4qhKjdBaxAjyIw0LovYmYTM+ii 1Fvada9PgU6GCEEtHbrj4E9z/mWe4xipxvy4/o9EnmrEc0j1SGMDeFOilY102eUn N1TsWNEFmwqriTzc7KhSicTJ820CeGyNKrGWUAuP+RgEj+L+03/X4cNPi7q7dclT JGwran8ythLEeLhqWhpudbQcikdXxA4ACtFUAbkonlgMWu0Lec9GhQGJcpF8J2cF myZONufy/zVgs9XgxzzojV66TSHYxX1rEY6D6Et4NPWYJVXKckFHEqq2YIWGO8GS 5jzRiGYZzRTN2fvMSDpwnZhPc3eKOTsjM6TU3g== -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:34 2025 by rpki-client