$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa File: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (raw, json) Hash identifier: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0= Subject key identifier: 5D:85:87:B3:75:28:2B:F3:44:38:A9:F4:EE:55:F5:C7:50:06:C9:51 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 565432F4C55F46AB0CEEC280EF2D6B179B7E17F1 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa Signing time: Wed 19 Feb 2025 11:01:49 +0000 ROA not before: Wed 19 Feb 2025 10:56:49 +0000 ROA not after: Wed 18 Feb 2026 11:01:49 +0000 asID: 132641 IP address blocks: 103.83.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 04:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:54:32:f4:c5:5f:46:ab:0c:ee:c2:80:ef:2d:6b:17:9b:7e:17:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Feb 19 10:56:49 2025 GMT Not After : Feb 18 11:01:49 2026 GMT Subject: CN=5D8587B375282BF34438A9F4EE55F5C75006C951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:16:72:4f:bb:9c:32:a1:1e:f3:47:5d:00:a5: 1b:8f:e5:f4:8b:37:06:69:c7:54:e6:c0:0b:a3:7d: ed:f8:a9:32:90:55:d7:28:cf:fc:3b:df:24:92:6c: 83:ff:a3:6a:5f:57:6f:63:69:ea:8b:97:4a:4f:24: 24:94:c0:6c:a2:af:d5:09:09:1b:dd:6f:cf:1f:79: f5:ff:59:dc:75:9e:e3:53:9a:d2:50:98:a1:34:1d: 55:69:49:a0:80:eb:b5:6c:87:3a:9f:9e:eb:e2:b3: 99:f1:de:c9:85:df:c0:20:ce:db:18:0d:f7:db:db: 25:f6:3b:be:4b:11:2c:c4:38:a5:95:f7:5c:a2:a7: fc:5e:06:ef:ce:13:8d:df:2d:24:49:5a:53:e3:93: 46:be:3c:6b:1f:d6:85:46:18:eb:06:7e:30:3a:1c: ff:3d:d9:bf:92:a6:ef:d8:fc:e6:de:d4:b8:78:f5: 33:c6:02:d4:5c:2f:12:c8:2a:7e:bb:f3:a4:02:33: 05:25:ee:a2:b0:21:5d:fb:4e:ab:95:46:de:99:ed: 56:2d:58:db:f9:23:6d:34:c3:e8:ca:bb:d4:5f:3d: 19:9c:7a:c0:7b:42:0b:f4:61:5f:81:aa:72:e4:e1: 84:2a:d0:6c:f1:11:c6:27:b5:c3:96:15:3b:58:5a: 7e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:85:87:B3:75:28:2B:F3:44:38:A9:F4:EE:55:F5:C7:50:06:C9:51 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.172.0/22 Signature Algorithm: sha256WithRSAEncryption 73:c8:4e:b1:10:b0:42:2a:4f:18:09:e0:38:8a:0e:30:3c:83: d5:74:bd:d3:2b:82:0d:c4:5b:86:e0:b5:02:8c:7c:50:82:e2: 11:d0:26:c7:57:2a:96:c0:7a:b4:91:e3:86:23:5a:69:d9:a9: 48:78:59:4e:57:7d:f4:1f:8c:41:4b:84:44:b2:cf:7a:5b:1d: 22:79:9c:e9:b2:83:44:ac:79:4b:1f:1c:72:c8:0c:20:d9:de: ae:c0:df:cc:89:22:f2:c2:6f:8b:3c:51:50:d1:31:13:11:bf: d2:3b:9a:77:c5:ef:90:47:95:d5:76:5d:b6:9c:c6:bb:5a:46: e0:44:5c:98:67:39:41:32:3d:20:eb:4c:f4:3b:9f:34:42:dd: 1b:da:80:05:89:47:5d:ec:68:9e:97:10:0e:45:04:79:da:77: 92:c3:6f:fa:9b:70:95:ac:88:2d:39:60:60:48:bc:f1:03:2d: 8e:a9:fb:73:b8:bd:56:a4:9a:51:dc:54:bc:94:64:41:4e:fd: 1f:ff:8a:8c:e9:50:3f:8b:92:06:1c:3a:89:f2:62:35:79:41: 30:33:e2:80:0a:4b:4f:8d:f2:84:bf:38:5f:98:ad:e4:78:17: ac:14:2c:a3:85:56:1a:c1:46:d4:b3:f8:a0:7e:9d:d0:0b:c9: 14:7a:20:c9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVlQy9MVfRqsM7sKA7y1rF5t+F/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNTAyMTkxMDU2NDlaFw0yNjAyMTgxMTAxNDlaMDMxMTAvBgNV BAMTKDVEODU4N0IzNzUyODJCRjM0NDM4QTlGNEVFNTVGNUM3NTAwNkM5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfFnJPu5wyoR7zR10ApRuP5fSL NwZpx1TmwAujfe34qTKQVdcoz/w73ySSbIP/o2pfV29jaeqLl0pPJCSUwGyir9UJ CRvdb88fefX/Wdx1nuNTmtJQmKE0HVVpSaCA67Vshzqfnuvis5nx3smF38AgztsY Dffb2yX2O75LESzEOKWV91yip/xeBu/OE43fLSRJWlPjk0a+PGsf1oVGGOsGfjA6 HP892b+Spu/Y/Obe1Lh49TPGAtRcLxLIKn6786QCMwUl7qKwIV37TquVRt6Z7VYt WNv5I200w+jKu9RfPRmcesB7Qgv0YV+BqnLk4YQq0GzxEcYntcOWFTtYWn5nAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUXYWHs3UoK/NEOKn07lX1x1AGyVEwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y2ZjY1ZGMzLTRhMmItNDIwNy1i Y2NiLWIwZDE0ZGQ5MzQwMy8wLzMxMzAzMzJlMzgzMzJlMzEzNzMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ1OsMA0GCSqG SIb3DQEBCwUAA4IBAQBzyE6xELBCKk8YCeA4ig4wPIPVdL3TK4INxFuG4LUCjHxQ guIR0CbHVyqWwHq0keOGI1pp2alIeFlOV330H4xBS4REss96Wx0ieZzpsoNErHlL HxxyyAwg2d6uwN/MiSLywm+LPFFQ0TETEb/SO5p3xe+QR5XVdl22nMa7WkbgRFyY ZzlBMj0g60z0O580Qt0b2oAFiUdd7GielxAORQR52neSw2/6m3CVrIgtOWBgSLzx Ay2OqftzuL1WpJpR3FS8lGRBTv0f/4qM6VA/i5IGHDqJ8mI1eUEwM+KACktPjfKE vzhfmK3keBesFCyjhVYawUbUs/igfp3QC8kUeiDJ -----END CERTIFICATE-----Generated at Sun Apr 27 14:15:03 2025 by rpki-client