$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa File: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: gLStYnptht5TyqoGXBL5Rk0CVBS4ZoGmnO4HsnZPkL0= Subject key identifier: 01:5F:51:CF:2C:A8:62:A0:28:67:3E:32:00:77:3F:E1:42:96:E9:FB Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 18BEEC6C37B5E25DB7B7225C24062125E0789831 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa Signing time: Sun 12 Jan 2025 09:00:03 +0000 ROA not before: Sun 12 Jan 2025 08:55:03 +0000 ROA not after: Sun 11 Jan 2026 09:00:03 +0000 asID: 9341 IP address blocks: 103.179.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 04:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:be:ec:6c:37:b5:e2:5d:b7:b7:22:5c:24:06:21:25:e0:78:98:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Jan 12 08:55:03 2025 GMT Not After : Jan 11 09:00:03 2026 GMT Subject: CN=015F51CF2CA862A028673E3200773FE14296E9FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:0c:14:ef:28:8a:66:67:96:d0:fb:93:c9: 54:53:49:e6:f3:29:f8:f8:03:d8:7d:25:8d:61:e9: 5b:3a:8b:ed:86:9a:3a:d4:26:e1:0a:23:6f:57:63: ae:22:bb:09:c2:df:e6:fa:33:5e:0e:c1:48:45:17: 92:49:87:53:53:e3:31:d4:25:35:c8:f3:30:f2:0e: 2b:38:aa:7a:06:2d:19:89:01:0b:ef:79:5c:53:e8: 7d:95:9c:2e:9c:10:69:df:14:ee:5e:3a:0d:f7:0f: 3c:2f:2b:49:ca:15:a5:dd:22:13:56:d9:58:69:99: 2c:44:b4:8d:c6:be:58:7b:8b:de:65:9c:75:23:f3: 93:cf:eb:e9:a2:67:14:27:e0:79:de:d6:33:fc:26: 99:cb:0b:25:5a:5f:55:e4:9f:c7:a7:c4:6a:3e:6f: f3:e4:5b:22:aa:ae:0c:6a:ba:4d:d1:66:89:68:14: 81:22:9a:41:a3:cb:de:76:5e:89:e3:79:a9:cf:5c: c1:3c:a2:29:1f:e6:b0:83:f9:74:c3:a3:39:c1:d9: a7:42:ab:96:97:20:cb:23:07:e7:2f:05:ea:b6:b2: 19:1a:81:74:bf:ef:53:67:f0:77:53:bc:a5:b3:2c: 77:00:2c:b1:e5:7a:f0:80:02:6b:57:b0:9c:41:73: 58:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5F:51:CF:2C:A8:62:A0:28:67:3E:32:00:77:3F:E1:42:96:E9:FB X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.248.0/24 Signature Algorithm: sha256WithRSAEncryption 03:d7:c4:ed:be:c9:eb:be:4d:1d:3a:4f:2d:c8:2f:de:2e:4f: 80:73:4c:01:5f:3b:5a:e4:ad:d2:74:0a:9e:bf:82:4b:2a:80: db:54:1b:b8:e7:85:54:bb:0a:db:2b:5f:d8:d3:72:db:94:2e: ba:f7:77:36:85:97:f2:e0:e6:1f:e2:23:5e:d0:e2:68:5c:92: 5a:e7:5c:16:41:a6:10:65:a5:7c:d8:d2:aa:d5:e6:35:a9:56: 19:9c:eb:7f:8f:38:97:d6:4e:19:0a:ed:9b:6a:19:d7:23:8e: 11:8d:9f:da:bf:97:30:17:35:f8:0e:66:72:ba:87:34:1a:6f: 48:a8:12:bc:d5:cb:ba:46:a2:ac:9d:48:ea:ac:a1:dd:d2:fe: 9b:c9:ed:bb:3c:dc:4e:84:1f:c3:55:d9:aa:b1:64:e7:e3:10: 3d:34:82:8e:c4:e8:d3:c4:b4:cf:0c:75:26:04:1c:51:52:47: c1:24:e2:fd:cf:1a:5e:81:e0:b8:ba:cc:d7:71:53:a8:d3:8f: 81:e6:21:ad:25:b2:17:dc:51:32:c2:6b:a0:7f:80:47:2c:99: 6f:ca:87:55:6e:d4:22:45:27:cc:46:43:24:00:94:67:90:c4: ff:17:90:17:75:cb:35:07:69:02:a0:e3:38:71:1f:82:d8:fb: 11:49:0b:37 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGL7sbDe14l23tyJcJAYhJeB4mDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTAxMTIwODU1MDNaFw0yNjAxMTEwOTAwMDNaMDMxMTAvBgNV BAMTKDAxNUY1MUNGMkNBODYyQTAyODY3M0UzMjAwNzczRkUxNDI5NkU5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlwwU7yiKZmeW0PuTyVRTSebz Kfj4A9h9JY1h6Vs6i+2GmjrUJuEKI29XY64iuwnC3+b6M14OwUhFF5JJh1NT4zHU JTXI8zDyDis4qnoGLRmJAQvveVxT6H2VnC6cEGnfFO5eOg33DzwvK0nKFaXdIhNW 2VhpmSxEtI3Gvlh7i95lnHUj85PP6+miZxQn4Hne1jP8JpnLCyVaX1Xkn8enxGo+ b/PkWyKqrgxquk3RZoloFIEimkGjy952XonjeanPXME8oikf5rCD+XTDoznB2adC q5aXIMsjB+cvBeq2shkagXS/71Nn8HdTvKWzLHcALLHlevCAAmtXsJxBc1g7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUAV9RzyyoYqAoZz4yAHc/4UKW6fswHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NTkwMWNjLTFiOGUtNGYzZi1h M2QwLTMyNjlmMGUxNmM0MS8wLzMxMzAzMzJlMzEzNzM5MmUzMjM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGez+DANBgkqhkiG 9w0BAQsFAAOCAQEAA9fE7b7J675NHTpPLcgv3i5PgHNMAV87WuSt0nQKnr+CSyqA 21QbuOeFVLsK2ytf2NNy25Quuvd3NoWX8uDmH+IjXtDiaFySWudcFkGmEGWlfNjS qtXmNalWGZzrf484l9ZOGQrtm2oZ1yOOEY2f2r+XMBc1+A5mcrqHNBpvSKgSvNXL ukairJ1I6qyh3dL+m8ntuzzcToQfw1XZqrFk5+MQPTSCjsTo08S0zwx1JgQcUVJH wSTi/c8aXoHguLrM13FTqNOPgeYhrSWyF9xRMsJroH+ARyyZb8qHVW7UIkUnzEZD JACUZ5DE/xeQF3XLNQdpAqDjOHEfgtj7EUkLNw== -----END CERTIFICATE-----Generated at Sat Apr 26 17:41:35 2025 by rpki-client