$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa File: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (raw, json) Hash identifier: OPox0ShPnVCTmOMCpg2HQPSGXyxH1qQvVZVC36ciYIU= Subject key identifier: EA:7A:C4:EF:E7:BA:2C:5F:4D:34:74:58:64:8C:FE:E9:E0:E8:9B:A7 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: 6BA21471079A3C4C1B7A1459DDE091C8EC39C5D0 Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa Signing time: Thu 28 Mar 2024 03:09:08 +0000 ROA not before: Thu 28 Mar 2024 03:04:08 +0000 ROA not after: Thu 27 Mar 2025 03:09:08 +0000 asID: 135636 IP address blocks: 103.125.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a2:14:71:07:9a:3c:4c:1b:7a:14:59:dd:e0:91:c8:ec:39:c5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: Mar 28 03:04:08 2024 GMT Not After : Mar 27 03:09:08 2025 GMT Subject: CN=EA7AC4EFE7BA2C5F4D347458648CFEE9E0E89BA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:5b:a5:9d:a9:0c:88:f0:0f:75:24:95:15: cd:6d:d0:39:dd:3f:32:86:9e:cb:2c:01:40:12:c0: 1b:4e:fd:51:66:12:59:98:ca:39:ad:90:f4:b5:1c: a5:da:8e:ea:c5:47:fa:e2:b9:01:da:52:9e:88:cc: 71:88:40:ba:18:ae:70:ff:27:cd:f1:11:33:fc:54: 8a:b5:04:74:1e:71:fc:c7:0b:f0:c8:63:14:b4:6f: b1:fd:b7:2a:e0:91:3b:5a:e7:27:e6:89:8a:2b:c7: 8e:53:c5:c7:ce:1a:65:68:0b:dd:e3:40:68:4e:63: 63:6b:b0:0f:f9:3e:11:8b:fd:c1:a4:ae:04:0e:ba: 9d:38:b6:d6:af:d6:7d:25:e4:82:f8:a0:8d:67:f6: 33:ca:fc:6c:93:55:5f:df:91:46:a2:16:7b:41:0b: 30:05:47:b8:7e:7a:c8:0d:d8:43:13:3e:86:cb:f1: 19:db:f5:b3:00:53:96:68:bf:40:3f:a7:be:ce:2a: 4e:61:97:d6:57:9c:c0:41:15:86:53:14:1e:0d:79: 33:50:c1:39:17:9b:ab:a1:f2:c2:ea:f0:a5:08:8d: 86:ab:5a:c7:38:de:51:79:8f:fd:fb:16:c3:7c:e3: 2f:81:cb:c3:c9:0b:84:61:65:a5:1a:64:cf:db:91: 05:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7A:C4:EF:E7:BA:2C:5F:4D:34:74:58:64:8C:FE:E9:E0:E8:9B:A7 X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.15.0/24 Signature Algorithm: sha256WithRSAEncryption 22:46:04:54:27:30:53:b4:94:08:ba:aa:87:23:e6:77:5f:e4: 74:79:f8:14:5d:1c:d4:3a:15:8b:a1:f1:82:b7:8d:23:e5:80: 68:f7:e6:05:a2:6c:72:85:b8:e9:e1:83:b5:43:0a:14:d5:a2: 91:a0:4b:6b:ba:29:2d:f7:2a:f1:5b:a2:75:e2:2b:3f:6b:de: 21:7b:d6:75:ef:b1:5f:75:07:bd:95:71:31:a8:93:ff:78:7d: 7d:53:03:ac:85:a8:d4:b2:52:4e:59:15:48:e7:47:71:98:d0: 5b:39:e1:ef:22:76:0d:44:31:a6:73:d9:67:ba:37:bc:6b:0c: c4:f3:f0:03:0d:72:e1:7f:bb:dd:61:7c:9e:da:1e:a6:49:cc: e7:b0:a0:9e:ef:de:9c:57:dd:08:48:26:e6:3a:a3:ab:36:74: aa:0a:f3:7d:d3:09:9e:24:a0:ce:79:15:d5:44:cb:c4:94:0b: 50:28:ba:d4:c7:d7:b1:ed:a5:f7:19:53:9b:4c:a3:5b:af:61: 5a:24:0f:13:26:fd:f6:33:b0:c1:af:64:e7:c9:4d:06:ce:f8: 20:1d:e3:16:31:5e:f9:e1:ef:1a:7f:3c:04:47:f5:82:fb:81: 2f:0b:04:9f:26:3d:6f:19:e6:ce:1c:29:e7:74:e9:c8:2f:6a: 5a:14:68:b1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUa6IUcQeaPEwbehRZ3eCRyOw5xdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNDAzMjgwMzA0MDhaFw0yNTAzMjcwMzA5MDhaMDMxMTAvBgNV BAMTKEVBN0FDNEVGRTdCQTJDNUY0RDM0NzQ1ODY0OENGRUU5RTBFODlCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADFulnakMiPAPdSSVFc1t0Dnd PzKGnsssAUASwBtO/VFmElmYyjmtkPS1HKXajurFR/riuQHaUp6IzHGIQLoYrnD/ J83xETP8VIq1BHQecfzHC/DIYxS0b7H9tyrgkTta5yfmiYorx45TxcfOGmVoC93j QGhOY2NrsA/5PhGL/cGkrgQOup04ttav1n0l5IL4oI1n9jPK/GyTVV/fkUaiFntB CzAFR7h+esgN2EMTPobL8Rnb9bMAU5Zov0A/p77OKk5hl9ZXnMBBFYZTFB4NeTNQ wTkXm6uh8sLq8KUIjYarWsc43lF5j/37FsN84y+By8PJC4RhZaUaZM/bkQWrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU6nrE7+e6LF9NNHRYZIz+6eDom6cwHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjNTRiZTlhLTliNWQtNGM2NC1i NGU4LTYxYzc0ZTllY2VkYy8wLzMxMzAzMzJlMzEzMjM1MmUzMTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzYzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ30PMA0GCSqG SIb3DQEBCwUAA4IBAQAiRgRUJzBTtJQIuqqHI+Z3X+R0efgUXRzUOhWLofGCt40j 5YBo9+YFomxyhbjp4YO1QwoU1aKRoEtruikt9yrxW6J14is/a94he9Z177FfdQe9 lXExqJP/eH19UwOshajUslJOWRVI50dxmNBbOeHvInYNRDGmc9lnuje8awzE8/AD DXLhf7vdYXye2h6mScznsKCe796cV90ISCbmOqOrNnSqCvN90wmeJKDOeRXVRMvE lAtQKLrUx9ex7aX3GVObTKNbr2FaJA8TJv32M7DBr2TnyU0GzvggHeMWMV754e8a fzwER/WC+4EvCwSfJj1vGebOHCnndOnIL2paFGix -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org