$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa File: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: VpIKxGpnGG5kY+TxgaFm5MAMJ5OPwOweNd+seLyS58Q= Subject key identifier: 06:D6:77:67:37:E3:59:0E:AD:13:68:80:BE:5D:EB:CD:52:E5:0C:EE Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 6A1524D64F736ECC042118AF47FEAC2450FD1E18 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa Signing time: Sun 12 Jan 2025 09:00:02 +0000 ROA not before: Sun 12 Jan 2025 08:55:02 +0000 ROA not after: Sun 11 Jan 2026 09:00:02 +0000 asID: 9341 IP address blocks: 103.179.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 04:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:15:24:d6:4f:73:6e:cc:04:21:18:af:47:fe:ac:24:50:fd:1e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Jan 12 08:55:02 2025 GMT Not After : Jan 11 09:00:02 2026 GMT Subject: CN=06D6776737E3590EAD136880BE5DEBCD52E50CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:c5:e7:39:6e:54:e2:95:4e:52:60:ab:8a: 4b:1a:aa:99:0e:a7:5e:dd:00:2e:a9:aa:76:2e:c8: 4e:90:cb:ee:e6:f7:1e:4b:79:16:0c:4f:fe:09:44: 83:9d:ce:5a:74:ed:35:95:e9:d8:ef:d3:f7:49:e4: 0a:59:1b:a8:45:97:de:af:9a:28:d0:df:9d:6a:2c: 5b:be:15:ea:5b:04:0b:98:c9:4d:5a:4a:76:fd:fe: 32:d7:93:e0:8c:89:ea:65:f4:f6:4a:68:13:e4:83: 4d:75:d5:57:15:0e:6b:ce:8b:6e:cc:1e:0f:30:39: ea:65:41:a1:14:19:95:2d:43:7e:3c:43:26:c1:0b: e1:41:79:46:36:33:b2:23:b6:bb:d9:15:08:43:bb: 79:6f:43:fc:a1:83:59:6c:d4:29:91:da:18:88:f5: 1b:72:b0:a3:7b:bf:c6:8d:aa:38:41:9c:73:a3:70: 6d:92:99:8f:0e:07:5e:bb:29:57:fc:8c:16:78:90: 1e:4c:77:2f:98:14:38:0f:90:b3:60:96:d4:cf:6f: a6:54:78:a8:77:ef:08:af:cc:29:ca:de:49:73:39: 9f:32:ea:36:c6:0d:87:19:98:46:96:a9:cb:a4:07: 28:1b:09:cb:12:e8:a7:14:9b:88:b6:b5:7d:76:5a: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D6:77:67:37:E3:59:0E:AD:13:68:80:BE:5D:EB:CD:52:E5:0C:EE X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.249.0/24 Signature Algorithm: sha256WithRSAEncryption 66:f0:d2:c4:2f:b5:28:bc:66:13:7d:77:2d:d8:a7:c6:ad:ca: 15:63:93:0d:a7:97:08:e9:c4:a2:a5:cc:fc:a3:2b:e0:df:67: cb:80:36:b9:91:37:d8:7f:ba:06:36:2f:e7:13:f4:51:76:be: de:fb:0d:4d:da:58:39:bb:c5:98:f9:dc:d4:39:ca:e2:0e:e5: 8d:34:db:8a:f1:72:7f:f9:48:ae:e4:d4:92:15:01:93:11:08: 50:9f:a8:97:05:b4:06:d1:ec:c4:d7:49:98:cf:04:e4:cf:de: a8:11:4d:53:a6:94:ea:61:b6:5b:aa:32:6e:75:1f:33:ad:28: 65:87:12:9a:7f:b8:45:9e:3d:6f:05:72:2d:5b:05:a2:56:1b: c2:b2:74:17:39:12:3e:11:d6:ff:1e:d8:cd:f6:1f:67:67:2a: 4a:0c:47:a6:1a:0e:aa:1f:bf:bf:41:c4:04:9c:53:f2:7b:09: 96:b6:4f:9d:4a:5a:bb:01:cd:f2:cf:84:67:13:c3:e1:b5:a7: 56:db:02:a5:45:f7:ae:08:ca:04:d0:24:62:5d:a1:66:c9:4b: b2:7e:ac:97:71:de:1d:ae:af:4c:e6:ec:ae:8c:57:fd:96:dc: 15:39:4b:10:4e:1d:98:3e:b5:83:4c:b2:2a:48:0a:26:68:eb: a2:48:3f:69 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUahUk1k9zbswEIRivR/6sJFD9HhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTAxMTIwODU1MDJaFw0yNjAxMTEwOTAwMDJaMDMxMTAvBgNV BAMTKDA2RDY3NzY3MzdFMzU5MEVBRDEzNjg4MEJFNURFQkNENTJFNTBDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEcXnOW5U4pVOUmCriksaqpkO p17dAC6pqnYuyE6Qy+7m9x5LeRYMT/4JRIOdzlp07TWV6djv0/dJ5ApZG6hFl96v mijQ351qLFu+FepbBAuYyU1aSnb9/jLXk+CMiepl9PZKaBPkg0111VcVDmvOi27M Hg8wOeplQaEUGZUtQ348QybBC+FBeUY2M7IjtrvZFQhDu3lvQ/yhg1ls1CmR2hiI 9RtysKN7v8aNqjhBnHOjcG2SmY8OB167KVf8jBZ4kB5Mdy+YFDgPkLNgltTPb6ZU eKh37wivzCnK3klzOZ8y6jbGDYcZmEaWqcukBygbCcsS6KcUm4i2tX12WlTTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUBtZ3ZzfjWQ6tE2iAvl3rzVLlDO4wHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NTkwMWNjLTFiOGUtNGYzZi1h M2QwLTMyNjlmMGUxNmM0MS8wLzMxMzAzMzJlMzEzNzM5MmUzMjM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGez+TANBgkqhkiG 9w0BAQsFAAOCAQEAZvDSxC+1KLxmE313Ldinxq3KFWOTDaeXCOnEoqXM/KMr4N9n y4A2uZE32H+6BjYv5xP0UXa+3vsNTdpYObvFmPnc1DnK4g7ljTTbivFyf/lIruTU khUBkxEIUJ+olwW0BtHsxNdJmM8E5M/eqBFNU6aU6mG2W6oybnUfM60oZYcSmn+4 RZ49bwVyLVsFolYbwrJ0FzkSPhHW/x7YzfYfZ2cqSgxHphoOqh+/v0HEBJxT8nsJ lrZPnUpauwHN8s+EZxPD4bWnVtsCpUX3rgjKBNAkYl2hZslLsn6sl3HeHa6vTObs roxX/ZbcFTlLEE4dmD61g0yyKkgKJmjrokg/aQ== -----END CERTIFICATE-----Generated at Sat Apr 26 20:50:32 2025 by rpki-client