$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130342e302f32342d3234203d3e203436303233.roa File: 3130332e32342e3130342e302f32342d3234203d3e203436303233.roa (raw, json) Hash identifier: 3up6P1Ah6osNoXaUZd1BrU0Is9YXE+7AWyzhpO/RAUE= Subject key identifier: B8:EA:52:B9:45:95:B2:1C:93:16:33:E9:ED:B4:EC:95:8A:B9:D6:87 Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Certificate serial: 7EB594C8FEFD1F25EEAD365599E823C746BFB10C Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130342e302f32342d3234203d3e203436303233.roa Signing time: Mon 12 Aug 2024 15:20:09 +0000 ROA not before: Mon 12 Aug 2024 15:15:09 +0000 ROA not after: Mon 11 Aug 2025 15:20:09 +0000 asID: 46023 IP address blocks: 103.24.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b5:94:c8:fe:fd:1f:25:ee:ad:36:55:99:e8:23:c7:46:bf:b1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Validity Not Before: Aug 12 15:15:09 2024 GMT Not After : Aug 11 15:20:09 2025 GMT Subject: CN=B8EA52B94595B21C931633E9EDB4EC958AB9D687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:85:b4:4a:bd:8a:48:20:9d:54:e3:af:59:28: 71:a6:83:bf:bb:a4:e1:f8:98:05:6c:5d:92:a7:bf: 4a:8b:83:f4:2e:27:7b:82:33:5c:36:db:38:41:63: 2c:9f:5e:59:30:51:96:29:c6:04:d8:93:49:7f:ea: 06:3c:49:58:18:1f:34:64:df:8a:5d:74:11:c7:17: c7:61:94:dc:aa:a4:de:5b:39:63:c5:0e:d5:2b:fe: 50:62:1d:96:ef:c9:bc:f7:75:53:82:48:ee:0a:0a: ab:3a:66:2a:51:80:ea:ed:07:b1:7a:87:f1:62:f3: 88:e4:91:2b:c4:2c:0c:ce:04:19:ba:a6:b7:2f:22: 1c:d7:3c:07:fa:40:2c:22:bf:6c:f6:ec:1a:2b:72: 05:ba:a1:92:62:69:69:15:54:43:21:3d:74:d0:d9: 4a:b3:a4:67:5c:bd:e9:1e:27:c5:c1:3d:98:07:12: 46:d2:cd:6a:52:58:af:e9:7b:19:46:ac:db:e5:19: 6b:69:90:7f:8b:bf:9f:00:0d:b9:b7:f4:04:43:bc: 8e:bb:26:79:c7:4b:e1:0e:87:db:e1:a3:59:44:a5: 10:01:8a:34:1f:3e:25:c1:fa:ce:2f:42:be:88:b8: 9e:b4:1a:2d:eb:99:22:44:ce:ea:e0:0d:88:8b:b7: 60:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EA:52:B9:45:95:B2:1C:93:16:33:E9:ED:B4:EC:95:8A:B9:D6:87 X509v3 Authority Key Identifier: keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130342e302f32342d3234203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.104.0/24 Signature Algorithm: sha256WithRSAEncryption 09:f6:4e:1a:d6:ce:32:c0:be:e1:06:0b:cc:87:4d:c4:f7:bc: 22:da:46:b5:12:db:d3:48:9a:b6:73:37:8b:be:c5:82:67:9d: 27:6d:49:e7:40:4a:ec:37:1b:2c:55:0c:d9:d6:81:ef:52:9c: a5:21:fa:13:b7:b1:cf:9c:51:99:06:ce:da:a2:84:b9:f9:a7: 67:0f:6d:ee:b7:87:fc:f8:f0:ef:f0:15:bc:44:ee:e3:a2:6f: 62:0e:e3:75:1d:96:ea:6d:9f:74:58:2d:39:9c:b0:75:38:7f: 20:93:c8:37:31:11:cc:8b:e8:8f:24:23:52:ba:14:a4:3a:c3: 8b:01:ca:83:95:4c:ac:94:7d:33:f0:4a:87:d1:95:39:1e:da: 6e:1b:25:a8:8f:39:28:d8:f8:a5:ee:a8:51:75:73:86:9f:e5: 05:5c:38:a6:d1:f3:55:50:1b:3c:15:18:87:8b:80:2e:b5:8e: b2:53:8d:20:4e:01:04:37:52:ee:ec:7c:b3:c6:7b:0c:4a:12: dc:14:51:98:cd:bc:b1:44:cb:21:de:53:65:02:ca:27:32:ca: 02:bd:5a:ec:4a:e9:e3:b1:31:5c:aa:01:78:f7:24:f4:cf:8b: 7f:34:d0:6a:16:e2:32:99:c0:6d:15:31:6d:07:e1:3f:90:78: d4:18:74:8f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfrWUyP79HyXurTZVmegjx0a/sQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3 NjRBNDY5NTAeFw0yNDA4MTIxNTE1MDlaFw0yNTA4MTExNTIwMDlaMDMxMTAvBgNV BAMTKEI4RUE1MkI5NDU5NUIyMUM5MzE2MzNFOUVEQjRFQzk1OEFCOUQ2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2hbRKvYpIIJ1U469ZKHGmg7+7 pOH4mAVsXZKnv0qLg/QuJ3uCM1w22zhBYyyfXlkwUZYpxgTYk0l/6gY8SVgYHzRk 34pddBHHF8dhlNyqpN5bOWPFDtUr/lBiHZbvybz3dVOCSO4KCqs6ZipRgOrtB7F6 h/Fi84jkkSvELAzOBBm6prcvIhzXPAf6QCwiv2z27BorcgW6oZJiaWkVVEMhPXTQ 2UqzpGdcvekeJ8XBPZgHEkbSzWpSWK/pexlGrNvlGWtpkH+Lv58ADbm39ARDvI67 JnnHS+EOh9vho1lEpRABijQfPiXB+s4vQr6IuJ60Gi3rmSJEzurgDYiLt2DrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUuOpSuUWVshyTFjPp7bTslYq51ocwHwYDVR0j BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB NDY5NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTk4NWIwLWUxN2EtNDIxYi05 NjU1LTAzMjQ1YTAxYWVmOC8wLzMxMzAzMzJlMzIzNDJlMzEzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcYaDANBgkqhkiG 9w0BAQsFAAOCAQEACfZOGtbOMsC+4QYLzIdNxPe8ItpGtRLb00iatnM3i77Fgmed J21J50BK7DcbLFUM2daB71KcpSH6E7exz5xRmQbO2qKEufmnZw9t7reH/Pjw7/AV vETu46JvYg7jdR2W6m2fdFgtOZywdTh/IJPINzERzIvojyQjUroUpDrDiwHKg5VM rJR9M/BKh9GVOR7abhslqI85KNj4pe6oUXVzhp/lBVw4ptHzVVAbPBUYh4uALrWO slONIE4BBDdS7ux8s8Z7DEoS3BRRmM28sUTLId5TZQLKJzLKAr1a7Erp47ExXKoB ePck9M+LfzTQahbiMpnAbRUxbQfhP5B41Bh0jw== -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org