$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa File: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (raw, json) Hash identifier: VUXxXSjdw/tewePYso0nLi7PuBiFv1hIb0UmgFSc+fg= Subject key identifier: B1:49:89:F1:ED:F3:2A:D9:DC:00:82:BE:07:FE:3E:A0:83:BE:E3:E2 Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Certificate serial: 5D07C399E4C798AB488DE39D32E103F70BF44ACB Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa Signing time: Tue 10 Dec 2024 08:00:01 +0000 ROA not before: Tue 10 Dec 2024 07:55:01 +0000 ROA not after: Tue 09 Dec 2025 08:00:01 +0000 asID: 152001 IP address blocks: 103.67.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:07:c3:99:e4:c7:98:ab:48:8d:e3:9d:32:e1:03:f7:0b:f4:4a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Validity Not Before: Dec 10 07:55:01 2024 GMT Not After : Dec 9 08:00:01 2025 GMT Subject: CN=B14989F1EDF32AD9DC0082BE07FE3EA083BEE3E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f2:04:89:e7:e3:a4:66:4f:7d:65:6d:86:79: a9:47:0b:69:af:14:dc:b0:a8:88:bc:3a:b9:5e:74: 97:89:b2:e5:85:23:23:33:9e:3a:86:d2:f1:c3:1a: 31:fb:d8:f1:9e:85:d9:95:2c:7d:de:95:de:db:b0: 70:52:19:a4:06:05:9e:9e:80:b7:a3:6a:ba:2e:d0: 13:a4:71:2d:b0:a8:7b:a6:45:d6:f8:45:ac:8b:f2: 22:f4:c7:cb:c3:d4:d8:46:56:58:46:5a:29:71:67: 5d:83:28:7b:42:f5:71:95:fa:b9:ce:18:b6:9f:eb: e1:fe:17:60:89:4a:bb:5e:b5:73:d5:b1:b9:bd:42: 99:5e:71:bf:ed:a5:c7:49:a5:ea:72:ef:0d:ce:bc: 7e:f3:a5:8f:74:37:e5:fb:43:3a:d8:8b:77:ec:fe: 21:8a:2c:a4:44:ea:81:03:48:d2:61:f9:bb:cb:48: c1:85:c5:de:fb:b0:6d:1f:a4:e3:33:82:08:19:53: 1c:2b:2f:d2:33:0f:c5:26:d3:4c:16:1e:9c:cc:79: 35:45:ca:d9:cc:1a:47:8e:b3:b5:e5:44:42:20:24: 74:a9:1a:1a:7d:ed:74:68:10:2e:6a:28:e0:4e:55: a6:cb:1a:8e:f1:2a:64:55:f0:b8:4c:be:15:92:46: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:49:89:F1:ED:F3:2A:D9:DC:00:82:BE:07:FE:3E:A0:83:BE:E3:E2 X509v3 Authority Key Identifier: keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38312e302f32342d3234203d3e20313532303031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.81.0/24 Signature Algorithm: sha256WithRSAEncryption 81:da:69:b8:b5:26:9e:cd:49:90:ef:c2:6b:45:3e:cc:b4:11: d8:cf:33:dc:e6:6d:55:c6:e8:23:27:1b:7c:59:e1:2a:cb:8d: 65:87:61:bc:02:ca:8d:c6:93:ef:1e:05:ce:18:d5:de:e4:25: e5:50:37:b4:a3:66:f4:f9:6d:31:70:10:5b:58:2c:19:60:9e: 0d:2b:c8:18:ec:34:bc:d2:d9:4d:f4:03:b8:0c:b5:e2:45:4f: c6:89:75:4a:62:ee:39:e9:ac:3d:b5:7e:ac:74:74:9a:ef:a6: 49:cd:ca:77:47:e4:01:91:ff:c2:26:06:47:a7:cc:c4:bf:df: 7a:22:f1:67:73:e4:76:3c:ab:33:49:20:6f:cc:e8:e3:ec:e6: d6:87:e5:87:7c:89:3a:42:e4:6d:ac:a6:5a:6e:b1:4d:60:c8: 5f:7c:c3:4d:1d:ed:ac:e5:d9:ff:59:33:51:30:61:0d:da:ae: 50:ff:b7:1c:23:14:4d:03:0f:18:a4:27:bb:4f:27:24:d5:41: 61:e8:3f:fd:23:8d:f5:1a:f4:16:8c:01:53:ab:1b:4f:ea:46: 90:90:8d:81:ae:7d:0d:1b:43:0b:ef:02:ef:9a:07:53:d2:51: d4:5a:0f:e1:3d:61:97:1c:80:08:41:1e:ac:d1:9c:27:66:04: 22:3e:9f:ff -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXQfDmeTHmKtIjeOdMuED9wv0SsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVD NjE4Rjk3RTAeFw0yNDEyMTAwNzU1MDFaFw0yNTEyMDkwODAwMDFaMDMxMTAvBgNV BAMTKEIxNDk4OUYxRURGMzJBRDlEQzAwODJCRTA3RkUzRUEwODNCRUUzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd8gSJ5+OkZk99ZW2GealHC2mv FNywqIi8OrledJeJsuWFIyMznjqG0vHDGjH72PGehdmVLH3eld7bsHBSGaQGBZ6e gLejarou0BOkcS2wqHumRdb4RayL8iL0x8vD1NhGVlhGWilxZ12DKHtC9XGV+rnO GLaf6+H+F2CJSrtetXPVsbm9Qplecb/tpcdJpepy7w3OvH7zpY90N+X7QzrYi3fs /iGKLKRE6oEDSNJh+bvLSMGFxd77sG0fpOMzgggZUxwrL9IzD8Um00wWHpzMeTVF ytnMGkeOs7XlREIgJHSpGhp97XRoEC5qKOBOVabLGo7xKmRV8LhMvhWSRvjzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsUmJ8e3zKtncAIK+B/4+oIO+4+IwHwYDVR0j BBgwFoAUFoiakFOufrFpz4IunuZwpcYY+X4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTNmMmU5Yi0xMDY4LTRmYTktYmExZC01OWQwNzFhNDEyYTIvMC8xNjg4OUE5MDUz QUU3RUIxNjlDRjgyMkU5RUU2NzBBNUM2MThGOTdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVDNjE4 Rjk3RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlM2YyZTliLTEwNjgtNGZhOS1i YTFkLTU5ZDA3MWE0MTJhMi8wLzMxMzAzMzJlMzYzNzJlMzgzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdDUTANBgkqhkiG 9w0BAQsFAAOCAQEAgdppuLUmns1JkO/Ca0U+zLQR2M8z3OZtVcboIycbfFnhKsuN ZYdhvALKjcaT7x4FzhjV3uQl5VA3tKNm9PltMXAQW1gsGWCeDSvIGOw0vNLZTfQD uAy14kVPxol1SmLuOemsPbV+rHR0mu+mSc3Kd0fkAZH/wiYGR6fMxL/feiLxZ3Pk djyrM0kgb8zo4+zm1oflh3yJOkLkbaymWm6xTWDIX3zDTR3trOXZ/1kzUTBhDdqu UP+3HCMUTQMPGKQnu08nJNVBYeg//SON9Rr0FowBU6sbT+pGkJCNga59DRtDC+8C 75oHU9JR1FoP4T1hlxyACEEerNGcJ2YEIj6f/w== -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:04 2025 by rpki-client on console.sobornost.net