$ rpki-client -vvf repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa File: 3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa (raw, json) Hash identifier: kHUTkKTqjKM8kC103t17XvXkdzEWz+DojH6qVF3q9bc= Subject key identifier: 46:DD:F3:16:36:95:D6:30:1E:EA:30:4E:8C:94:07:EC:AA:2C:4C:2A Certificate issuer: /CN=9B123580240DE1580D07828D18D711FDE8163C25 Certificate serial: 335809F481EE24927C58C4A98D8D0184A5932E77 Authority key identifier: 9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa Signing time: Wed 07 Feb 2024 03:00:13 +0000 ROA not before: Wed 07 Feb 2024 02:55:13 +0000 ROA not after: Wed 05 Feb 2025 03:00:13 +0000 asID: 138051 IP address blocks: 103.134.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:58:09:f4:81:ee:24:92:7c:58:c4:a9:8d:8d:01:84:a5:93:2e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B123580240DE1580D07828D18D711FDE8163C25 Validity Not Before: Feb 7 02:55:13 2024 GMT Not After : Feb 5 03:00:13 2025 GMT Subject: CN=46DDF3163695D6301EEA304E8C9407ECAA2C4C2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:f7:30:fb:19:2c:6d:33:d9:33:34:54:20: b8:f6:61:38:5a:50:d0:f9:b4:c8:0a:4c:80:2c:2b: 51:4e:e5:2f:a6:eb:9c:96:37:4c:c5:1f:1e:aa:4b: 6b:db:f6:7e:d0:ee:6e:03:d8:2e:9f:fd:4e:34:5c: 43:97:76:f6:0a:4a:a7:4e:9a:5b:e4:63:38:d1:5c: 95:88:2a:0e:f8:d2:8a:ab:2b:33:d7:61:72:1d:99: b0:dd:33:87:02:b5:95:ec:24:29:4c:8d:ba:66:3e: 49:93:ab:6d:b7:0d:86:47:84:12:3a:72:d1:c3:c8: 99:84:56:a2:d5:a6:cf:7a:23:16:64:cc:0e:4e:ef: 54:1b:78:16:a2:de:2e:f9:20:9c:93:b0:4b:26:2e: 6a:15:98:53:45:e8:6a:48:1c:23:0c:80:2a:7b:f3: 85:76:36:fe:22:6d:90:9d:1f:e2:70:4c:8a:51:db: a1:eb:1b:d9:c0:e2:97:37:a1:e0:77:07:8b:7a:4f: e1:b6:3c:c7:11:60:45:91:9e:a4:23:1e:9f:c4:63: 1a:d7:d9:1f:64:47:9d:d4:3f:a4:0d:f2:97:87:7f: 8c:97:47:e9:2c:85:17:70:d0:0b:ac:a4:35:d9:f1: c2:83:2c:30:b7:9a:b2:fd:9d:df:ee:71:42:84:02: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DD:F3:16:36:95:D6:30:1E:EA:30:4E:8C:94:07:EC:AA:2C:4C:2A X509v3 Authority Key Identifier: keyid:9B:12:35:80:24:0D:E1:58:0D:07:82:8D:18:D7:11:FD:E8:16:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/9B123580240DE1580D07828D18D711FDE8163C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B123580240DE1580D07828D18D711FDE8163C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018e2e74-f6c7-49f4-ad58-f00cde3eda60/0/3130332e3133342e35352e302f32342d3234203d3e20313338303531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.55.0/24 Signature Algorithm: sha256WithRSAEncryption 23:92:a3:56:b0:d3:d2:0c:80:d9:8b:1e:e6:0c:89:da:90:2b: 72:6a:bb:a7:b9:10:cc:62:0e:3a:3f:ce:d8:3a:0b:71:50:54: 67:52:4d:55:8b:a8:d5:9e:b5:f1:c4:1c:0d:b7:25:51:53:f7: 81:6e:80:a8:a6:69:45:a3:87:40:cb:ad:f2:f6:f8:f1:20:54: fd:24:53:a3:4c:68:43:9c:f8:1b:b4:b2:14:ba:02:43:76:80: 5f:f3:29:2a:9a:82:06:2c:3a:35:90:d1:e4:48:52:60:ff:37: 46:4f:f7:64:ed:2c:4c:5e:04:8e:cd:dc:63:f8:76:ce:f9:20: a6:06:03:ad:2a:34:a3:83:01:39:61:38:90:3f:75:ff:6b:ea: 02:76:e8:07:2b:d0:1f:02:8c:f4:9b:7a:8b:06:dd:4d:fd:64: ae:2b:47:33:74:23:5a:0c:d2:d2:01:ce:00:e6:56:8d:60:56: b8:36:c1:8c:e0:79:9b:b5:09:95:72:89:ec:f9:2c:60:33:47: e5:fd:cf:2b:3e:db:db:e1:68:8e:63:43:48:7d:90:1b:cf:e7: f7:f3:99:e2:7f:c8:5c:f2:80:45:76:3c:0d:7b:a3:ce:2b:de: 4d:e7:ad:cc:ae:84:31:3d:ca:da:f0:43:f5:bd:e4:ab:8a:49: 36:c7:bb:91 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUM1gJ9IHuJJJ8WMSpjY0BhKWTLncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRF ODE2M0MyNTAeFw0yNDAyMDcwMjU1MTNaFw0yNTAyMDUwMzAwMTNaMDMxMTAvBgNV BAMTKDQ2RERGMzE2MzY5NUQ2MzAxRUVBMzA0RThDOTQwN0VDQUEyQzRDMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJfcw+xksbTPZMzRUILj2YTha UND5tMgKTIAsK1FO5S+m65yWN0zFHx6qS2vb9n7Q7m4D2C6f/U40XEOXdvYKSqdO mlvkYzjRXJWIKg740oqrKzPXYXIdmbDdM4cCtZXsJClMjbpmPkmTq223DYZHhBI6 ctHDyJmEVqLVps96IxZkzA5O71QbeBai3i75IJyTsEsmLmoVmFNF6GpIHCMMgCp7 84V2Nv4ibZCdH+JwTIpR26HrG9nA4pc3oeB3B4t6T+G2PMcRYEWRnqQjHp/EYxrX 2R9kR53UP6QN8peHf4yXR+kshRdw0AuspDXZ8cKDLDC3mrL9nd/ucUKEAq1LAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURt3zFjaV1jAe6jBOjJQH7KosTCowHwYDVR0j BBgwFoAUmxI1gCQN4VgNB4KNGNcR/egWPCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThlMmU3NC1mNmM3LTQ5ZjQtYWQ1OC1mMDBjZGUzZWRhNjAvMC85QjEyMzU4MDI0 MERFMTU4MEQwNzgyOEQxOEQ3MTFGREU4MTYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIxMjM1ODAyNDBERTE1ODBEMDc4MjhEMThENzExRkRFODE2 M0MyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAxOGUyZTc0LWY2YzctNDlmNC1h ZDU4LWYwMGNkZTNlZGE2MC8wLzMxMzAzMzJlMzEzMzM0MmUzNTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4Y3MA0GCSqG SIb3DQEBCwUAA4IBAQAjkqNWsNPSDIDZix7mDInakCtyarunuRDMYg46P87YOgtx UFRnUk1Vi6jVnrXxxBwNtyVRU/eBboCopmlFo4dAy63y9vjxIFT9JFOjTGhDnPgb tLIUugJDdoBf8ykqmoIGLDo1kNHkSFJg/zdGT/dk7SxMXgSOzdxj+HbO+SCmBgOt KjSjgwE5YTiQP3X/a+oCdugHK9AfAoz0m3qLBt1N/WSuK0czdCNaDNLSAc4A5laN YFa4NsGM4HmbtQmVcons+SxgM0fl/c8rPtvb4WiOY0NIfZAbz+f385nif8hc8oBF djwNe6POK95N563MroQxPcra8EP1veSrikk2x7uR -----END CERTIFICATE-----Generated at Sun Nov 24 18:33:16 2024 by rpki-client on console-fra.rpki-client.org