$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa File: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (raw, json) Hash identifier: ai95DI56uArXfxg9+eT9Y26F1pCqk3cq236XCu7N39Y= Subject key identifier: F9:DD:65:79:7F:44:6B:9B:27:A1:8C:80:E0:70:AB:40:BB:CD:1D:6E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 5752F6251637F5B7C55FE9000CBCDDB532F7F470 Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa Signing time: Mon 31 Jul 2023 00:03:08 +0000 ROA not before: Sun 30 Jul 2023 23:58:08 +0000 ROA not after: Mon 29 Jul 2024 00:03:08 +0000 asID: 132649 IP address blocks: 103.24.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:52:f6:25:16:37:f5:b7:c5:5f:e9:00:0c:bc:dd:b5:32:f7:f4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Jul 30 23:58:08 2023 GMT Not After : Jul 29 00:03:08 2024 GMT Subject: CN=F9DD65797F446B9B27A18C80E070AB40BBCD1D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:8d:5e:79:74:0c:ea:30:45:49:42:b5:c4: 42:2c:93:2b:2e:c7:9b:4e:e5:90:2f:29:20:65:0d: 14:85:78:a3:9b:e9:aa:77:cb:9d:92:35:ab:53:d1: 63:3b:cc:f1:b7:52:5f:ce:6b:af:48:01:ac:5f:72: dd:f9:19:2d:ae:91:79:ec:df:7c:28:6b:f0:59:98: 66:b0:73:1e:ef:70:4b:95:57:9a:dc:2b:76:bc:7f: 75:7e:91:16:22:03:9f:ee:71:6e:34:c1:0e:17:c1: 42:45:26:98:59:c6:9d:f6:a2:07:70:f4:ea:9e:a9: 59:bc:56:59:e7:c1:5b:86:60:cc:83:a3:e6:95:2b: 27:43:c9:e8:e4:7b:cc:43:6b:a8:94:7c:2e:84:a6: 60:32:71:6a:8c:9e:ac:0c:8c:25:83:39:71:47:3c: 39:53:58:f3:cf:84:e2:55:03:a6:07:49:1f:bf:b5: df:9a:70:12:73:dd:cc:be:2a:3b:23:3f:66:2a:fd: c9:cd:ac:ca:68:7a:69:c6:fc:e2:ab:3f:0f:c8:a5: 2b:41:23:de:92:93:8e:d4:eb:84:4d:7a:01:fc:fa: 06:22:71:b2:d4:79:5a:1c:5c:ad:ff:99:18:06:5d: 43:5a:10:66:6e:9a:7d:f8:cd:7a:06:58:40:9c:33: 9a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DD:65:79:7F:44:6B:9B:27:A1:8C:80:E0:70:AB:40:BB:CD:1D:6E X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.212.0/24 Signature Algorithm: sha256WithRSAEncryption ab:87:a2:90:84:b8:b6:95:95:ac:45:95:aa:ea:b0:86:76:7e: 6c:b0:b7:be:75:17:f1:c6:a0:57:1b:38:0c:02:f0:1a:0e:4a: 09:b4:a0:8e:f6:6e:81:dc:6d:ea:72:5c:ff:65:27:9e:91:37: c7:22:e0:57:99:67:45:9a:86:fb:7e:1c:33:da:60:03:48:b5: 23:bb:dd:17:53:2a:6e:5e:cc:a6:fc:53:9c:10:79:5d:58:fd: 32:87:9d:39:10:ae:44:d7:a7:52:5a:2a:06:a7:77:84:9e:0f: 0a:e7:58:6d:d8:d4:1f:2c:f8:74:1b:93:7a:1e:6e:be:fa:ad: 72:8a:4e:09:f2:c2:c1:b4:15:5b:6e:f0:b2:eb:11:83:63:4a: b5:ad:d0:3b:7a:54:e7:68:81:e1:5c:7b:9b:16:bf:fa:c4:df: 6a:5c:fd:18:1b:8d:88:40:9c:f8:a7:64:70:82:4a:00:f2:d2: 0f:8d:f8:ed:6f:a8:68:08:59:73:1a:26:21:14:59:1c:a1:b1: a6:ba:b3:b3:85:60:1c:cf:44:de:1c:b6:8e:6c:f2:ff:77:0b: cc:8e:23:4a:7a:5d:80:53:4b:72:da:2e:3a:56:68:69:d7:8e: cf:85:81:ed:67:49:c9:f0:5d:e4:73:be:7f:7d:c4:79:e5:79: d4:11:3c:0e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUV1L2JRY39bfFX+kADLzdtTL39HAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yMzA3MzAyMzU4MDhaFw0yNDA3MjkwMDAzMDhaMDMxMTAvBgNV BAMTKEY5REQ2NTc5N0Y0NDZCOUIyN0ExOEM4MEUwNzBBQjQwQkJDRDFENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx341eeXQM6jBFSUK1xEIskysu x5tO5ZAvKSBlDRSFeKOb6ap3y52SNatT0WM7zPG3Ul/Oa69IAaxfct35GS2ukXns 33woa/BZmGawcx7vcEuVV5rcK3a8f3V+kRYiA5/ucW40wQ4XwUJFJphZxp32ogdw 9OqeqVm8VlnnwVuGYMyDo+aVKydDyejke8xDa6iUfC6EpmAycWqMnqwMjCWDOXFH PDlTWPPPhOJVA6YHSR+/td+acBJz3cy+KjsjP2Yq/cnNrMpoemnG/OKrPw/IpStB I96Sk47U64RNegH8+gYicbLUeVocXK3/mRgGXUNaEGZumn34zXoGWECcM5rjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+d1leX9Ea5snoYyA4HCrQLvNHW4wHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlNDZhMzA1LWRmNzctNDU4Ny04 NzAzLWE5MDVjNTM3NzlhYy8wLzMxMzAzMzJlMzIzNDJlMzIzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxjUMA0GCSqG SIb3DQEBCwUAA4IBAQCrh6KQhLi2lZWsRZWq6rCGdn5ssLe+dRfxxqBXGzgMAvAa DkoJtKCO9m6B3G3qclz/ZSeekTfHIuBXmWdFmob7fhwz2mADSLUju90XUypuXsym /FOcEHldWP0yh505EK5E16dSWioGp3eEng8K51ht2NQfLPh0G5N6Hm6++q1yik4J 8sLBtBVbbvCy6xGDY0q1rdA7elTnaIHhXHubFr/6xN9qXP0YG42IQJz4p2RwgkoA 8tIPjfjtb6hoCFlzGiYhFFkcobGmurOzhWAcz0TeHLaObPL/dwvMjiNKel2AU0ty 2i46Vmhp147PhYHtZ0nJ8F3kc75/fcR55XnUETwO -----END CERTIFICATE-----Generated at Wed Apr 24 14:24:32 2024 by rpki-client on console-fra.rpki-client.org