$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa File: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (raw, json) Hash identifier: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo= Subject key identifier: E2:D3:2D:0C:FD:01:A9:C7:B0:C8:FC:A7:F6:E3:68:DA:19:60:B4:99 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 27A304735DB739E84EFF89543B7176EDCA0AC0A3 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa Signing time: Tue 11 Mar 2025 10:22:11 +0000 ROA not before: Tue 11 Mar 2025 10:17:11 +0000 ROA not after: Tue 10 Mar 2026 10:22:11 +0000 asID: 151584 IP address blocks: 103.216.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 16:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a3:04:73:5d:b7:39:e8:4e:ff:89:54:3b:71:76:ed:ca:0a:c0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Mar 11 10:17:11 2025 GMT Not After : Mar 10 10:22:11 2026 GMT Subject: CN=E2D32D0CFD01A9C7B0C8FCA7F6E368DA1960B499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:c5:78:8c:f9:42:0c:25:4d:c8:b1:79:92: 0f:c5:6f:fa:8b:94:38:c3:44:9e:f9:0e:e3:e9:97: 12:b8:c3:42:fb:5e:30:a1:80:70:23:5f:2b:f0:50: 86:82:5a:da:99:b5:78:d2:04:7b:e0:c3:be:cd:bf: d3:7b:98:3c:68:5b:de:9e:65:f5:82:4d:8c:5a:7a: 0f:6e:1e:7c:3a:ee:f5:62:2f:38:9b:2f:e0:e2:f8: e6:83:9e:47:b6:25:21:62:12:c7:89:b2:45:6b:ab: c3:41:ce:23:89:f3:11:9a:6f:3a:ad:81:a0:72:40: 18:ca:a5:ea:6d:0c:6f:22:f5:bc:5d:8f:2a:aa:37: b2:33:44:53:a0:f4:a8:d6:c6:f7:54:eb:a7:60:b9: 84:71:1a:62:4a:8a:7a:7f:b9:71:a5:41:f0:b2:82: e8:b7:60:4e:3e:6d:6e:9a:1e:b0:cf:4d:c9:4b:44: 38:81:e4:d5:7b:bf:49:0e:72:70:6b:f9:8c:8f:9a: d1:38:65:45:a3:5b:e8:b6:82:fb:86:fd:24:1f:36: 6a:7d:0f:b6:a9:cd:3e:22:47:ee:b7:b6:4f:f8:ed: a4:64:1e:46:7b:21:64:9f:73:52:e1:f0:5f:1b:cf: a5:6b:17:0e:07:83:5b:e6:c9:5c:dc:10:b6:7c:b2: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D3:2D:0C:FD:01:A9:C7:B0:C8:FC:A7:F6:E3:68:DA:19:60:B4:99 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.106.0/24 Signature Algorithm: sha256WithRSAEncryption c1:61:26:d8:4f:78:90:8a:85:7c:47:db:c8:f5:b6:fd:60:6f: 44:42:cb:48:58:39:21:ef:fa:e5:ce:6f:e1:38:55:22:69:07: 2a:fb:04:d9:87:c3:a1:92:d2:14:33:da:23:38:d4:79:ca:1c: 33:d7:43:ee:68:e8:b7:34:69:dc:59:03:0c:69:98:95:03:f1: 4e:39:f6:4e:fb:f9:ea:dc:37:57:88:21:5e:c1:4d:ec:a0:a0: 2c:e1:26:1d:ac:3b:64:39:ff:5c:a8:58:ab:ca:fe:5a:e0:03: 62:52:7e:a7:cb:30:c2:dc:db:1a:18:5f:57:c6:2d:e7:25:ab: 47:88:9a:9d:f3:96:6b:94:24:14:0f:ad:57:74:6c:ef:e5:48: 19:7f:7f:5b:7f:4b:12:ea:50:95:c1:6f:fb:a4:49:97:c9:d9: 61:ec:d8:e9:61:4b:da:34:62:9a:2f:03:b7:68:e4:5f:99:e8: a0:7d:1d:1c:9c:fe:18:86:7b:ce:c6:f5:91:a8:a6:0b:58:01: 1d:ff:f4:0f:5e:5a:9d:ee:2f:10:3f:c4:4e:6a:8f:c2:16:d2: 75:e3:73:08:00:00:11:03:fe:83:6f:5a:96:8b:93:40:f1:1b: 71:1f:94:2b:c3:cb:09:fb:3d:5a:98:ea:a6:77:88:55:6e:20: d1:d2:2c:52 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJ6MEc123OehO/4lUO3F27coKwKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNTAzMTExMDE3MTFaFw0yNjAzMTAxMDIyMTFaMDMxMTAvBgNV BAMTKEUyRDMyRDBDRkQwMUE5QzdCMEM4RkNBN0Y2RTM2OERBMTk2MEI0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+usV4jPlCDCVNyLF5kg/Fb/qL lDjDRJ75DuPplxK4w0L7XjChgHAjXyvwUIaCWtqZtXjSBHvgw77Nv9N7mDxoW96e ZfWCTYxaeg9uHnw67vViLzibL+Di+OaDnke2JSFiEseJskVrq8NBziOJ8xGabzqt gaByQBjKpeptDG8i9bxdjyqqN7IzRFOg9KjWxvdU66dguYRxGmJKinp/uXGlQfCy gui3YE4+bW6aHrDPTclLRDiB5NV7v0kOcnBr+YyPmtE4ZUWjW+i2gvuG/SQfNmp9 D7apzT4iR+63tk/47aRkHkZ7IWSfc1Lh8F8bz6VrFw4Hg1vmyVzcELZ8spTdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU4tMtDP0BqcewyPyn9uNo2hlgtJkwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmZWYzODkwLTQ0NWQtNGIyMy04 ZmIzLWIzMDE4YTc5OWVjZS8wLzMxMzAzMzJlMzIzMTM2MmUzMTMwMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn2GowDQYJ KoZIhvcNAQELBQADggEBAMFhJthPeJCKhXxH28j1tv1gb0RCy0hYOSHv+uXOb+E4 VSJpByr7BNmHw6GS0hQz2iM41HnKHDPXQ+5o6Lc0adxZAwxpmJUD8U459k77+erc N1eIIV7BTeygoCzhJh2sO2Q5/1yoWKvK/lrgA2JSfqfLMMLc2xoYX1fGLeclq0eI mp3zlmuUJBQPrVd0bO/lSBl/f1t/SxLqUJXBb/ukSZfJ2WHs2OlhS9o0YpovA7do 5F+Z6KB9HRyc/hiGe87G9ZGopgtYAR3/9A9eWp3uLxA/xE5qj8IW0nXjcwgAABED /oNvWpaLk0DxG3EflCvDywn7PVqY6qZ3iFVuINHSLFI= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:38 2025 by rpki-client on console.sobornost.net