$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130362e302f32342d3234203d3e203436303233.roa File: 3130332e32342e3130362e302f32342d3234203d3e203436303233.roa (raw, json) Hash identifier: xjH5ebMIhFp58gDTScjFpkWH8yxHBJNmAoi1GZkoQMQ= Subject key identifier: A8:54:03:23:77:F8:B6:97:75:F9:A2:F4:49:2E:46:9F:66:22:FC:83 Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Certificate serial: 759BF5D0CBE34E16F6345F19D58F5AD7001370AF Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130362e302f32342d3234203d3e203436303233.roa Signing time: Mon 12 Aug 2024 15:23:34 +0000 ROA not before: Mon 12 Aug 2024 15:18:34 +0000 ROA not after: Mon 11 Aug 2025 15:23:34 +0000 asID: 46023 IP address blocks: 103.24.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9b:f5:d0:cb:e3:4e:16:f6:34:5f:19:d5:8f:5a:d7:00:13:70:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Validity Not Before: Aug 12 15:18:34 2024 GMT Not After : Aug 11 15:23:34 2025 GMT Subject: CN=A854032377F8B69775F9A2F4492E469F6622FC83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:2b:fb:e1:b5:74:5b:86:63:62:1a:5b:04: 80:70:d0:af:5a:b4:e6:47:4a:c5:e9:2a:ea:53:bc: 77:f1:0e:46:8a:31:49:4d:9a:47:48:34:e5:40:c4: 89:73:9c:71:6b:63:91:d5:d6:71:d7:59:8d:f1:af: 8d:2e:db:06:12:90:fa:02:e7:bc:45:c1:c5:0d:7e: 6f:3a:1f:40:b5:d5:ad:08:b9:e2:67:d6:7c:8e:2f: 7a:7e:b4:d3:59:99:2c:b6:f9:8f:82:d9:3c:2a:85: 3d:29:12:6d:b8:01:85:4c:6f:12:02:2c:10:d8:8e: 34:b1:48:11:8e:22:e3:c2:bb:ed:66:50:14:ed:b5: 98:6d:b4:0b:29:1e:77:a5:f8:7e:66:69:61:4b:17: c3:92:ef:ac:84:07:48:8c:ab:71:7a:09:d0:df:7c: a4:e5:43:9c:85:a4:8c:01:11:49:ec:a7:4c:e2:8b: 26:05:b8:64:ad:00:72:e4:4b:f2:88:b9:ad:d6:0a: 41:6e:73:95:e5:96:01:13:a0:91:e2:8b:44:5b:f6: 5f:6c:88:96:95:d8:e3:b4:6f:95:3e:16:eb:01:fb: 4a:3b:48:8b:cb:b9:5d:22:33:31:40:11:a1:ea:2b: 82:ff:40:b5:f3:5c:09:c6:13:cf:bc:24:28:e8:a2: f6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:54:03:23:77:F8:B6:97:75:F9:A2:F4:49:2E:46:9F:66:22:FC:83 X509v3 Authority Key Identifier: keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130362e302f32342d3234203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.106.0/24 Signature Algorithm: sha256WithRSAEncryption 22:78:0b:a4:d4:de:17:17:64:18:d0:0c:a7:0c:49:53:15:4a: e6:af:86:8e:33:5b:58:15:a0:8d:6f:56:03:4d:1b:31:11:04: 88:a3:85:0e:19:fb:60:75:86:0c:21:78:af:d4:92:f7:6c:64: 83:84:63:30:e6:e1:5f:66:0f:02:9f:47:73:c0:16:0a:79:e6: 56:12:ba:d4:ca:4d:15:82:b4:0b:99:77:6c:c3:3b:37:88:0b: 97:f1:a2:3d:54:3b:80:b4:62:e8:c3:a1:ce:ae:5f:c7:45:51: bd:61:f5:b4:42:4a:e3:01:e2:62:d8:66:36:8f:c1:d2:16:0c: 67:1b:e1:cc:97:cf:03:9f:60:75:d9:80:0b:9b:6b:4d:0e:c2: 31:fa:d2:a6:ea:9e:e0:9d:3d:0d:06:cc:1e:8a:fc:f5:f9:ba: d5:04:73:cb:f8:eb:b5:94:2d:df:4b:7c:1e:86:62:ee:a9:c9: dd:f3:4d:63:41:3a:50:aa:0f:25:84:d6:3e:5e:19:63:6f:b2: a4:68:fa:a7:cd:52:04:c7:ef:32:50:cf:01:fb:9e:f0:fb:6b: f1:89:a1:8c:74:dd:c2:2f:19:ce:e1:d4:b7:dc:63:60:d2:b4: 01:07:01:6e:e4:a1:39:cf:55:e6:73:da:80:02:6d:75:98:e2: 21:c3:96:4f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdZv10MvjThb2NF8Z1Y9a1wATcK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3 NjRBNDY5NTAeFw0yNDA4MTIxNTE4MzRaFw0yNTA4MTExNTIzMzRaMDMxMTAvBgNV BAMTKEE4NTQwMzIzNzdGOEI2OTc3NUY5QTJGNDQ5MkU0NjlGNjYyMkZDODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Uyv74bV0W4ZjYhpbBIBw0K9a tOZHSsXpKupTvHfxDkaKMUlNmkdINOVAxIlznHFrY5HV1nHXWY3xr40u2wYSkPoC 57xFwcUNfm86H0C11a0IueJn1nyOL3p+tNNZmSy2+Y+C2TwqhT0pEm24AYVMbxIC LBDYjjSxSBGOIuPCu+1mUBTttZhttAspHnel+H5maWFLF8OS76yEB0iMq3F6CdDf fKTlQ5yFpIwBEUnsp0ziiyYFuGStAHLkS/KIua3WCkFuc5XllgEToJHii0Rb9l9s iJaV2OO0b5U+FusB+0o7SIvLuV0iMzFAEaHqK4L/QLXzXAnGE8+8JCjoovYHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqFQDI3f4tpd1+aL0SS5Gn2Yi/IMwHwYDVR0j BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB NDY5NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTk4NWIwLWUxN2EtNDIxYi05 NjU1LTAzMjQ1YTAxYWVmOC8wLzMxMzAzMzJlMzIzNDJlMzEzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcYajANBgkqhkiG 9w0BAQsFAAOCAQEAIngLpNTeFxdkGNAMpwxJUxVK5q+GjjNbWBWgjW9WA00bMREE iKOFDhn7YHWGDCF4r9SS92xkg4RjMObhX2YPAp9Hc8AWCnnmVhK61MpNFYK0C5l3 bMM7N4gLl/GiPVQ7gLRi6MOhzq5fx0VRvWH1tEJK4wHiYthmNo/B0hYMZxvhzJfP A59gddmAC5trTQ7CMfrSpuqe4J09DQbMHor89fm61QRzy/jrtZQt30t8HoZi7qnJ 3fNNY0E6UKoPJYTWPl4ZY2+ypGj6p81SBMfvMlDPAfue8Ptr8YmhjHTdwi8ZzuHU t9xjYNK0AQcBbuShOc9V5nPagAJtdZjiIcOWTw== -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org