$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa File: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: GQLjyzqSeaPMpwbmMG+hHOVIX1kxT3fObGtrds/C+9M= Subject key identifier: 9E:1A:61:BE:90:65:BB:AA:B0:75:0A:1E:2F:FA:29:B5:73:C2:9C:BE Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 5E9A262BD156B29FDBFA4D3BF072E320A3E0EC9E Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa Signing time: Wed 18 Dec 2024 07:16:07 +0000 ROA not before: Wed 18 Dec 2024 07:11:07 +0000 ROA not after: Wed 17 Dec 2025 07:16:07 +0000 asID: 58477 IP address blocks: 103.56.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:9a:26:2b:d1:56:b2:9f:db:fa:4d:3b:f0:72:e3:20:a3:e0:ec:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Dec 18 07:11:07 2024 GMT Not After : Dec 17 07:16:07 2025 GMT Subject: CN=9E1A61BE9065BBAAB0750A1E2FFA29B573C29CBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:21:f8:c3:3c:6a:98:9a:b5:58:0c:f5:b7: d6:8a:8e:21:5e:72:db:54:54:74:11:6f:11:d8:28: 01:1e:72:41:a6:c2:2b:c8:a2:c3:f6:91:1e:bf:7d: d9:cc:da:8c:fc:08:2c:b5:8c:b8:ed:f3:a1:48:05: 55:66:95:9a:8d:36:e1:7d:57:d8:0d:a3:f0:67:a3: f7:4a:fe:02:65:78:93:ac:bc:4d:98:d6:12:03:0b: d0:93:ed:09:5f:b5:05:f1:2c:5c:60:42:27:15:0b: 6a:ce:cf:43:ce:e2:68:72:67:86:e4:67:33:aa:ea: 66:35:4d:2b:f4:86:21:c7:bd:67:d0:42:c8:58:f4: 4e:ad:27:82:ec:16:28:ce:27:9e:6c:7a:87:1d:59: 87:6c:2d:90:b8:e5:32:d2:1d:c6:18:f8:f0:e4:54: fd:e9:68:4b:55:fd:48:cd:f5:83:3e:89:95:3c:46: 3c:e2:a0:28:e5:f5:3f:54:49:54:b9:ec:41:99:37: ad:2e:e8:64:04:e8:1f:89:3e:36:8b:45:f3:da:76: 67:a8:9b:5f:2b:98:cf:4f:d2:30:52:93:92:06:38: 18:07:04:92:a6:74:9e:75:6d:f8:e3:1a:0e:fc:a5: 00:ed:ec:67:aa:14:5b:4c:bd:5e:b8:9e:53:6e:35: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1A:61:BE:90:65:BB:AA:B0:75:0A:1E:2F:FA:29:B5:73:C2:9C:BE X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.204.0/24 Signature Algorithm: sha256WithRSAEncryption 74:5b:e9:b8:96:cc:f0:e3:ae:d7:dc:fd:77:0e:76:44:b2:01: 33:e1:5c:b5:02:97:d4:5e:5d:b3:51:70:9f:b3:5d:8d:ad:e6: 81:06:a6:4c:4a:6e:cd:c6:9f:b0:8b:6e:f6:a6:74:76:e2:10: ed:93:bf:03:9d:7f:29:43:c5:8f:35:60:ca:08:73:9c:35:85: c6:8a:59:4c:0f:4d:18:72:66:e1:ef:d1:43:20:39:f4:ee:e9: c5:ac:57:59:ae:59:e8:f1:e7:55:99:79:03:d7:2e:73:a6:64: 49:db:01:1d:d9:ed:25:10:2e:da:39:2f:ac:5d:01:5e:61:d9: e1:cd:c6:2e:aa:bc:ae:cf:c1:c6:11:c4:26:33:25:e9:d8:b7: 88:12:3a:75:b9:eb:cc:0c:9a:b8:93:1c:c5:3b:4b:e4:81:b0: 52:92:ae:08:73:90:08:02:b0:54:36:8a:98:cc:c7:44:ca:f8: 92:c5:fa:e6:4a:d0:b2:2b:13:83:aa:c0:00:c5:d3:d7:d7:02: 00:1e:3f:52:bf:28:92:6e:4f:22:d6:12:f8:a6:19:e4:4e:8b: 74:90:09:b8:1a:9b:73:0c:25:00:dc:5b:1e:23:59:0d:84:3f: e7:ac:91:8d:ea:7d:3f:af:20:2b:95:64:15:6a:25:64:9f:8c: 2d:09:8d:bd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXpomK9FWsp/b+k078HLjIKPg7J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNDEyMTgwNzExMDdaFw0yNTEyMTcwNzE2MDdaMDMxMTAvBgNV BAMTKDlFMUE2MUJFOTA2NUJCQUFCMDc1MEExRTJGRkEyOUI1NzNDMjlDQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYSH4wzxqmJq1WAz1t9aKjiFe cttUVHQRbxHYKAEeckGmwivIosP2kR6/fdnM2oz8CCy1jLjt86FIBVVmlZqNNuF9 V9gNo/Bno/dK/gJleJOsvE2Y1hIDC9CT7QlftQXxLFxgQicVC2rOz0PO4mhyZ4bk ZzOq6mY1TSv0hiHHvWfQQshY9E6tJ4LsFijOJ55seocdWYdsLZC45TLSHcYY+PDk VP3paEtV/UjN9YM+iZU8RjzioCjl9T9USVS57EGZN60u6GQE6B+JPjaLRfPadmeo m18rmM9P0jBSk5IGOBgHBJKmdJ51bfjjGg78pQDt7GeqFFtMvV64nlNuNT4vAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUnhphvpBlu6qwdQoeL/optXPCnL4wHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4zDANBgkqhkiG 9w0BAQsFAAOCAQEAdFvpuJbM8OOu19z9dw52RLIBM+FctQKX1F5ds1Fwn7Ndja3m gQamTEpuzcafsItu9qZ0duIQ7ZO/A51/KUPFjzVgyghznDWFxopZTA9NGHJm4e/R QyA59O7pxaxXWa5Z6PHnVZl5A9cuc6ZkSdsBHdntJRAu2jkvrF0BXmHZ4c3GLqq8 rs/BxhHEJjMl6di3iBI6dbnrzAyauJMcxTtL5IGwUpKuCHOQCAKwVDaKmMzHRMr4 ksX65krQsisTg6rAAMXT19cCAB4/Ur8okm5PItYS+KYZ5E6LdJAJuBqbcwwlANxb HiNZDYQ/56yRjep9P68gK5VkFWolZJ+MLQmNvQ== -----END CERTIFICATE-----Generated at Mon Apr 28 23:34:18 2025 by rpki-client