$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa File: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (raw, json) Hash identifier: 0olFR77pZ1O0z24Mfc37kkrspgW3foc9wOjSMcrRPz0= Subject key identifier: 59:D8:F8:A1:26:78:FF:A9:79:7F:6A:A1:6E:3C:B8:97:95:2E:0E:C5 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 2AF77F51E086D8CE9B0F7CF8C85B8BE0A88AF38A Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa Signing time: Tue 26 Dec 2023 06:00:00 +0000 ROA not before: Tue 26 Dec 2023 05:55:00 +0000 ROA not after: Tue 24 Dec 2024 06:00:00 +0000 asID: 138082 IP address blocks: 103.120.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f7:7f:51:e0:86:d8:ce:9b:0f:7c:f8:c8:5b:8b:e0:a8:8a:f3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Dec 26 05:55:00 2023 GMT Not After : Dec 24 06:00:00 2024 GMT Subject: CN=59D8F8A12678FFA9797F6AA16E3CB897952E0EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:31:37:a0:2e:1a:87:48:16:b8:c5:99:1b: b0:4d:f5:aa:da:f4:61:dc:3a:70:d5:71:76:92:f9: 35:37:30:86:75:71:73:44:18:5d:36:31:fb:33:b4: 99:11:ef:3f:b7:55:ae:ac:11:6c:28:34:a6:3c:e8: c4:6f:a8:01:b9:93:e9:02:84:ff:93:b8:b0:6c:33: cb:10:8b:d3:f0:1f:89:31:86:60:0f:81:7b:1c:54: 9e:77:70:cf:3d:f9:f1:bc:e0:4b:8b:d4:8c:23:dc: 19:25:4c:27:7a:8f:07:e5:4d:55:c4:d4:11:f5:31: 07:1a:3a:33:61:9d:bb:48:e7:46:44:f9:d3:ca:fb: db:f5:3d:7e:c1:41:fb:49:7f:7c:31:b9:3e:d5:6c: 59:c9:63:c4:40:e0:8a:f4:cd:55:0a:34:8c:da:cd: d4:27:22:ad:aa:d5:7a:f1:99:39:11:dd:53:66:08: 83:0e:24:bf:cf:22:d7:e6:c0:37:c1:fa:0a:a9:ba: fe:25:7b:f6:dc:d6:60:f4:a0:00:69:29:56:b0:98: 4d:7a:3b:c0:03:e3:c7:10:53:4b:ba:81:38:1a:34: ac:25:ec:fd:86:40:06:93:8f:41:43:bb:84:63:1e: f8:fc:3f:89:5f:ec:85:e7:dc:2a:fb:84:de:26:8b: 87:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D8:F8:A1:26:78:FF:A9:79:7F:6A:A1:6E:3C:B8:97:95:2E:0E:C5 X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.218.0/24 Signature Algorithm: sha256WithRSAEncryption 31:44:20:9f:e6:a6:e5:df:df:a0:18:18:72:93:d1:f4:34:50: bc:3c:ea:ab:10:0c:e5:23:6f:1a:6d:ce:4d:23:0a:30:c4:13: 65:f2:2f:f5:31:1a:0a:98:63:0a:1f:e8:03:d5:31:32:13:75: 36:bf:bc:2f:a6:74:c5:3c:9e:7e:3f:14:ec:87:50:8c:45:bf: 14:24:03:23:26:5b:b4:a8:49:a7:11:fe:ef:09:17:c1:9a:7d: 3f:1f:dc:1c:de:f8:32:17:72:9f:5e:32:52:b1:d4:7d:5a:eb: 81:e9:0f:20:c7:ac:5d:e4:aa:e9:ca:8b:a4:1c:90:78:95:a5: d9:a1:01:0a:5c:fe:01:4b:31:f8:72:46:be:3e:ef:29:f8:b7: ff:d1:dc:e5:2e:20:3c:aa:ca:d2:3e:c5:56:35:b3:96:50:80: 83:19:c8:82:7d:c1:66:a6:35:1f:7a:c8:70:45:b2:92:68:0d: 76:7b:ac:1a:30:e7:6e:cf:ac:ad:f1:12:23:a6:d5:ce:d7:95: 72:23:1d:7d:92:75:8c:3d:7f:cd:f3:5f:8f:a9:72:76:73:b5: cb:3a:9c:21:e8:18:be:e6:d4:2f:a5:fa:dc:32:2a:2e:ba:69: 98:8a:af:a6:f2:03:ba:e1:e6:d6:04:84:54:4b:7a:b3:e1:cc: 80:7f:bd:60 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKvd/UeCG2M6bD3z4yFuL4KiK84owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yMzEyMjYwNTU1MDBaFw0yNDEyMjQwNjAwMDBaMDMxMTAvBgNV BAMTKDU5RDhGOEExMjY3OEZGQTk3OTdGNkFBMTZFM0NCODk3OTUyRTBFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWaTE3oC4ah0gWuMWZG7BN9ara 9GHcOnDVcXaS+TU3MIZ1cXNEGF02MfsztJkR7z+3Va6sEWwoNKY86MRvqAG5k+kC hP+TuLBsM8sQi9PwH4kxhmAPgXscVJ53cM89+fG84EuL1Iwj3BklTCd6jwflTVXE 1BH1MQcaOjNhnbtI50ZE+dPK+9v1PX7BQftJf3wxuT7VbFnJY8RA4Ir0zVUKNIza zdQnIq2q1XrxmTkR3VNmCIMOJL/PItfmwDfB+gqpuv4le/bc1mD0oABpKVawmE16 O8AD48cQU0u6gTgaNKwl7P2GQAaTj0FDu4RjHvj8P4lf7IXn3Cr7hN4mi4fTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUWdj4oSZ4/6l5f2qhbjy4l5UuDsUwHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjZDI0ZTgyLWYzMDYtNDQwMC1i MDBhLWQ1OWI0MWUyODZiYi8wLzMxMzAzMzJlMzEzMjMwMmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneNowDQYJ KoZIhvcNAQELBQADggEBADFEIJ/mpuXf36AYGHKT0fQ0ULw86qsQDOUjbxptzk0j CjDEE2XyL/UxGgqYYwof6APVMTITdTa/vC+mdMU8nn4/FOyHUIxFvxQkAyMmW7So SacR/u8JF8GafT8f3Bze+DIXcp9eMlKx1H1a64HpDyDHrF3kqunKi6QckHiVpdmh AQpc/gFLMfhyRr4+7yn4t//R3OUuIDyqytI+xVY1s5ZQgIMZyIJ9wWamNR96yHBF spJoDXZ7rBow527PrK3xEiOm1c7XlXIjHX2SdYw9f83zX4+pcnZztcs6nCHoGL7m 1C+l+twyKi66aZiKr6byA7rh5tYEhFRLerPhzIB/vWA= -----END CERTIFICATE-----Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org