$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa File: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (raw, json) Hash identifier: cD5gEx0dEwrvz2WzKOdtUwoUqNknlxD9hmW2YZ3iQCE= Subject key identifier: 73:EA:9E:ED:C8:2E:2D:23:59:6E:1E:0E:A9:03:D4:04:AA:95:7D:6F Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 0367AFA817F2C46DEDEA153527A1A0D2DCACF6BD Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa Signing time: Fri 20 Dec 2024 08:29:22 +0000 ROA not before: Fri 20 Dec 2024 08:24:22 +0000 ROA not after: Fri 19 Dec 2025 08:29:22 +0000 asID: 136839 IP address blocks: 103.98.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:67:af:a8:17:f2:c4:6d:ed:ea:15:35:27:a1:a0:d2:dc:ac:f6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Dec 20 08:24:22 2024 GMT Not After : Dec 19 08:29:22 2025 GMT Subject: CN=73EA9EEDC82E2D23596E1E0EA903D404AA957D6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d3:49:b7:a2:26:9d:52:93:f8:7c:9f:ed:42: 38:35:de:57:35:c0:94:c7:b7:2d:e7:00:2b:0f:cc: 51:0d:13:86:2f:06:93:64:ae:ad:b7:e3:28:6b:17: e6:d5:6a:ca:a9:3a:8a:da:a3:1f:3a:5b:dc:95:f9: 74:e4:2f:2d:77:cf:b3:5b:33:e3:ab:5e:b1:47:58: 76:ac:e7:8d:cf:bd:55:2a:34:93:92:c1:56:df:f0: 77:fd:be:46:57:c3:01:0e:d9:aa:bb:75:4b:2d:d4: 94:a3:30:2f:9a:a6:bf:db:b2:66:15:1a:4d:66:04: e8:d5:45:bb:80:66:bd:2f:12:ba:0d:3b:73:75:cf: 1a:63:f7:80:e7:b0:cd:25:53:c4:9d:36:e3:9b:cf: d0:16:e3:27:f0:7b:47:87:3f:ee:61:f6:3d:3e:92: 7a:57:01:fd:0e:04:65:4a:6e:e8:d7:9b:8e:b1:66: b8:a0:f9:45:1f:12:69:11:9f:04:f6:f9:ce:1e:eb: 6b:8f:24:29:ab:34:04:e7:17:af:bf:bb:06:10:19: 1c:2a:59:12:56:4d:97:c8:12:f4:73:3b:9e:3c:a9: 13:e9:93:53:48:e7:b6:69:ec:04:ab:3d:a1:9d:61: 17:df:76:24:bc:a7:33:88:73:12:8e:03:aa:81:fc: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EA:9E:ED:C8:2E:2D:23:59:6E:1E:0E:A9:03:D4:04:AA:95:7D:6F X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.239.0/24 Signature Algorithm: sha256WithRSAEncryption ad:8c:d4:95:77:de:21:3f:3f:c5:99:97:7f:5b:9c:6a:96:23: c6:ea:91:c6:c3:68:8c:82:7b:6d:23:35:05:a4:5a:4a:26:64: 5a:52:0b:a0:22:81:27:10:69:1b:58:ba:21:35:5f:80:ce:c3: b1:02:b3:37:c4:ca:85:05:3f:ca:d5:23:9d:96:a9:25:8f:46: 87:ec:c3:7f:6d:6c:64:ed:ee:e0:10:fc:97:e6:ac:33:9b:08: 47:a7:c2:23:dc:3c:7d:17:a3:8c:52:2e:40:c8:a0:f2:db:60: 6e:cc:9f:1e:dd:ba:a0:d6:c8:dd:73:61:e1:00:3c:f3:91:63: 6b:46:a4:17:45:53:30:ec:1e:24:81:a1:30:b6:33:9e:6a:f9: 88:64:c4:58:ff:66:30:ef:8a:46:8c:6e:29:5b:18:dd:33:0f: c6:01:8c:de:30:95:e3:bd:f5:e9:98:5f:5a:14:93:60:19:cc: c5:e4:c9:bb:34:06:74:49:85:6a:c7:d9:3e:9e:93:67:8e:a1: cb:79:ae:3b:c5:0a:48:f6:86:70:d0:b1:1c:ec:52:5c:83:9d: cf:74:bc:b9:a3:7c:a9:57:3a:42:58:36:30:0f:96:20:39:68: 48:11:3a:22:af:12:16:99:9f:1c:87:5a:7b:9b:f4:8b:5c:44: a9:ff:e5:fe -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUA2evqBfyxG3t6hU1J6Gg0tys9r0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNDEyMjAwODI0MjJaFw0yNTEyMTkwODI5MjJaMDMxMTAvBgNV BAMTKDczRUE5RUVEQzgyRTJEMjM1OTZFMUUwRUE5MDNENDA0QUE5NTdENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS00m3oiadUpP4fJ/tQjg13lc1 wJTHty3nACsPzFENE4YvBpNkrq234yhrF+bVasqpOoraox86W9yV+XTkLy13z7Nb M+OrXrFHWHas543PvVUqNJOSwVbf8Hf9vkZXwwEO2aq7dUst1JSjMC+apr/bsmYV Gk1mBOjVRbuAZr0vEroNO3N1zxpj94DnsM0lU8SdNuObz9AW4yfwe0eHP+5h9j0+ knpXAf0OBGVKbujXm46xZrig+UUfEmkRnwT2+c4e62uPJCmrNATnF6+/uwYQGRwq WRJWTZfIEvRzO548qRPpk1NI57Zp7ASrPaGdYRffdiS8pzOIcxKOA6qB/OhLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUc+qe7cguLSNZbh4OqQPUBKqVfW8wHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmOWMwMjlhLWRiNTEtNGEwZS05 MjAzLTZlZTIzMzJkZjgzZi8wLzMxMzAzMzJlMzkzODJlMzIzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2LvMA0GCSqG SIb3DQEBCwUAA4IBAQCtjNSVd94hPz/FmZd/W5xqliPG6pHGw2iMgnttIzUFpFpK JmRaUgugIoEnEGkbWLohNV+AzsOxArM3xMqFBT/K1SOdlqklj0aH7MN/bWxk7e7g EPyX5qwzmwhHp8Ij3Dx9F6OMUi5AyKDy22BuzJ8e3bqg1sjdc2HhADzzkWNrRqQX RVMw7B4kgaEwtjOeavmIZMRY/2Yw74pGjG4pWxjdMw/GAYzeMJXjvfXpmF9aFJNg GczF5Mm7NAZ0SYVqx9k+npNnjqHLea47xQpI9oZw0LEc7FJcg53PdLy5o3ypVzpC WDYwD5YgOWhIEToirxIWmZ8ch1p7m/SLXESp/+X+ -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net