$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa File: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (raw, json) Hash identifier: 1xo0DjDSXvXZUNtwZdd+vDQQvBq4jlF/Yl9f8y0lmbA= Subject key identifier: 47:28:FA:EF:E2:FE:D6:4B:CD:B1:41:00:6B:4D:EE:34:BC:E5:B6:C2 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: 668C4F9AA3CE451B37EC41CD1C8D2B63FEE310D7 Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa Signing time: Fri 06 Sep 2024 02:42:13 +0000 ROA not before: Fri 06 Sep 2024 02:37:13 +0000 ROA not after: Fri 05 Sep 2025 02:42:13 +0000 asID: 153317 IP address blocks: 103.125.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8c:4f:9a:a3:ce:45:1b:37:ec:41:cd:1c:8d:2b:63:fe:e3:10:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: Sep 6 02:37:13 2024 GMT Not After : Sep 5 02:42:13 2025 GMT Subject: CN=4728FAEFE2FED64BCDB141006B4DEE34BCE5B6C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:d0:3e:80:e2:ed:fc:b9:d0:51:0a:40:ba: 2a:f0:f1:4e:25:81:47:0a:8a:36:6a:83:07:32:9e: ea:22:81:88:68:fb:32:66:af:ad:81:e3:bc:04:62: d3:c2:4e:2a:fd:9c:5f:d2:46:ee:a0:1b:2f:f9:e7: 4f:ef:e1:8b:b5:73:07:f7:e7:e2:c3:7e:ba:bc:cd: e1:e1:53:20:ac:46:5a:be:87:48:5a:9d:01:aa:b9: 2b:d6:9e:13:2e:b6:a3:9e:55:b5:77:c0:56:09:79: 8c:3d:ee:dc:78:5f:4e:86:1c:e4:ee:d4:7f:67:08: 7c:35:09:b4:ef:c2:4d:6f:33:d3:88:d4:6c:0b:a6: c5:96:b1:9a:15:98:ed:e7:65:7a:11:03:2f:e6:c9: 79:b4:38:6d:f5:f1:87:c0:d4:72:44:ff:35:26:44: 07:20:55:2c:7b:0a:8e:92:c8:a6:ab:23:73:ed:21: 26:75:bd:88:8e:ec:37:ff:d3:02:de:1e:a6:52:e4: b7:7b:f1:6f:b2:f6:2a:14:5d:d7:c8:b4:9f:b9:fb: d2:92:6a:30:09:a5:ed:b0:7a:19:09:5c:e9:d9:6c: 30:36:33:29:82:6b:a0:fb:cc:1b:46:3c:27:ce:a6: c5:a7:9b:31:d4:dc:ce:b6:b9:c5:f2:02:20:65:ca: 6f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:28:FA:EF:E2:FE:D6:4B:CD:B1:41:00:6B:4D:EE:34:BC:E5:B6:C2 X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.12.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:46:8c:49:ff:46:a0:2b:18:9d:f5:1f:ae:32:20:6e:50:a7: ee:85:3d:af:4b:ab:4e:c9:fd:e5:81:25:98:14:38:3b:d6:01: 40:c5:b3:63:2e:98:90:6c:5b:58:41:7b:10:95:d7:9a:89:e3: 12:01:78:6c:70:d2:43:b2:3b:40:1a:2e:01:8c:91:46:94:bd: 1f:41:58:87:a3:2d:1e:dd:47:84:61:d4:94:a9:2c:00:70:88: d2:38:63:c4:4e:a7:58:57:de:39:2b:4a:80:f3:75:c4:42:85: c8:87:f7:77:81:72:03:a5:70:6c:96:fd:4d:68:f8:fa:40:eb: 9c:b8:f4:cc:e5:35:fb:5a:49:09:0b:9e:44:cf:93:0e:3b:23: 3a:5c:d6:cc:b9:77:ae:26:ad:f3:fa:b1:d7:ff:5c:80:5b:51: d2:02:16:ac:0d:94:42:83:45:f1:90:03:3f:5c:67:c6:ad:de: 9b:44:ff:02:cc:01:55:3e:d0:58:c1:50:be:fa:b1:f7:de:cc: 18:e6:3b:88:ec:45:d2:13:17:69:89:b9:ad:1f:f8:02:77:68: 76:55:6c:ce:e8:b9:20:0b:48:be:a7:79:f4:6b:b6:4e:2b:55: 82:cf:b2:c2:6e:b7:12:c8:36:74:a3:34:d8:09:ed:aa:00:c9: 39:46:5a:a5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZoxPmqPORRs37EHNHI0rY/7jENcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNDA5MDYwMjM3MTNaFw0yNTA5MDUwMjQyMTNaMDMxMTAvBgNV BAMTKDQ3MjhGQUVGRTJGRUQ2NEJDREIxNDEwMDZCNERFRTM0QkNFNUI2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9dA+gOLt/LnQUQpAuirw8U4l gUcKijZqgwcynuoigYho+zJmr62B47wEYtPCTir9nF/SRu6gGy/550/v4Yu1cwf3 5+LDfrq8zeHhUyCsRlq+h0hanQGquSvWnhMutqOeVbV3wFYJeYw97tx4X06GHOTu 1H9nCHw1CbTvwk1vM9OI1GwLpsWWsZoVmO3nZXoRAy/myXm0OG318YfA1HJE/zUm RAcgVSx7Co6SyKarI3PtISZ1vYiO7Df/0wLeHqZS5Ld78W+y9ioUXdfItJ+5+9KS ajAJpe2wehkJXOnZbDA2MymCa6D7zBtGPCfOpsWnmzHU3M62ucXyAiBlym8/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURyj67+L+1kvNsUEAa03uNLzltsIwHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjNTRiZTlhLTliNWQtNGM2NC1i NGU4LTYxYzc0ZTllY2VkYy8wLzMxMzAzMzJlMzEzMjM1MmUzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ30MMA0GCSqG SIb3DQEBCwUAA4IBAQCcRoxJ/0agKxid9R+uMiBuUKfuhT2vS6tOyf3lgSWYFDg7 1gFAxbNjLpiQbFtYQXsQldeaieMSAXhscNJDsjtAGi4BjJFGlL0fQViHoy0e3UeE YdSUqSwAcIjSOGPETqdYV945K0qA83XEQoXIh/d3gXIDpXBslv1NaPj6QOucuPTM 5TX7WkkJC55Ez5MOOyM6XNbMuXeuJq3z+rHX/1yAW1HSAhasDZRCg0XxkAM/XGfG rd6bRP8CzAFVPtBYwVC++rH33swY5juI7EXSExdpibmtH/gCd2h2VWzO6LkgC0i+ p3n0a7ZOK1WCz7LCbrcSyDZ0ozTYCe2qAMk5Rlql -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org