$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa File: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (raw, json) Hash identifier: s7QOuxoUDXpiJb6tRGci1SxU/QQoW+kyAaIfnlMIP40= Subject key identifier: AD:9E:62:BD:19:44:C5:70:FA:C7:07:F6:F0:48:97:C9:F0:EA:E3:76 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 5A17CA9B1067E47527E7F95F387ACAEC7B348E9F Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa Signing time: Sun 22 Sep 2024 02:00:01 +0000 ROA not before: Sun 22 Sep 2024 01:55:01 +0000 ROA not after: Sun 21 Sep 2025 02:00:01 +0000 asID: 141461 IP address blocks: 103.111.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:17:ca:9b:10:67:e4:75:27:e7:f9:5f:38:7a:ca:ec:7b:34:8e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Sep 22 01:55:01 2024 GMT Not After : Sep 21 02:00:01 2025 GMT Subject: CN=AD9E62BD1944C570FAC707F6F04897C9F0EAE376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:0f:c7:9e:63:3e:57:8a:83:2d:4e:51:0a: 8f:ab:09:f1:d8:a6:51:86:00:0c:41:ea:08:48:b4: c9:15:60:b2:c3:b2:de:1a:53:8d:6a:93:7c:b8:73: d9:2d:96:c3:55:21:35:34:d5:fb:02:cf:e5:2f:47: 5e:35:b0:9f:33:6d:d3:38:2a:3b:bb:f9:48:e4:35: bd:1f:83:63:07:1c:dd:10:47:e2:8b:de:75:fa:51: a8:ac:11:51:b4:0a:4d:78:0d:56:fe:2d:6e:e8:b2: 30:2a:d7:6c:6e:9a:9f:48:40:d6:03:2f:ab:ce:32: 83:37:dc:f6:50:26:50:be:96:76:f5:f2:8d:dc:9f: a5:80:29:26:2d:70:42:66:1b:e2:a8:6d:05:78:ff: 40:a0:f4:15:ed:76:a9:c1:b9:39:6f:8b:18:31:ae: e7:90:da:e2:0c:dc:49:24:95:29:d9:d7:fd:d3:63: cc:d6:a5:40:aa:3b:06:57:29:5a:be:c9:7b:e3:f3: 57:cf:0f:21:5b:d4:0d:78:a7:4c:eb:0b:d3:21:40: 71:72:15:83:7f:01:98:61:d6:32:67:26:02:ab:21: 11:96:09:8e:36:59:30:ee:50:66:46:ae:60:e1:10: 98:57:63:a1:4f:34:d4:85:fa:a0:bd:fc:66:18:e2: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9E:62:BD:19:44:C5:70:FA:C7:07:F6:F0:48:97:C9:F0:EA:E3:76 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.141.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:7a:f1:70:34:a5:d3:4a:b9:14:ec:66:04:51:d1:86:40:a5: dd:7f:99:53:cb:1f:f1:1f:3f:e9:73:0a:be:4c:ed:ba:66:5e: da:9a:b0:13:09:cf:0a:28:9f:e7:c0:41:31:e3:6a:35:c0:15: 3f:ba:95:c6:ab:b6:1d:39:50:1b:f3:f4:c0:03:b9:b4:ff:68: 23:fe:70:e7:7e:b2:d7:91:ca:bb:63:dc:ad:2a:fa:92:f6:2d: 1b:97:70:a1:bb:15:92:9f:5f:5d:ac:33:a1:35:64:8e:d1:bc: 27:b8:63:49:07:b9:f0:80:e1:80:d2:97:01:d4:6a:b3:6e:94: 3c:9f:e9:30:cc:53:41:07:93:c1:d4:88:a3:80:bd:7c:8d:8c: 3e:12:71:51:4b:0f:e9:be:91:be:81:7c:7a:f3:12:aa:b4:a3: 5d:ec:57:09:95:be:c5:a8:75:72:62:14:f4:40:e3:19:76:b1: c3:ed:98:ed:79:7c:9b:d1:12:c4:b9:68:2a:cb:c7:84:75:3e: 4a:de:4d:aa:7d:40:ef:14:e8:fa:ec:fb:72:b3:2f:81:86:5c: 6e:68:d2:37:fc:90:56:5b:cc:3f:3e:fc:45:94:23:6c:68:06: 05:cf:a5:de:f1:f7:da:7f:94:e5:0b:73:a5:7b:e4:64:24:03: e8:9c:f2:99 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWhfKmxBn5HUn5/lfOHrK7Hs0jp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNDA5MjIwMTU1MDFaFw0yNTA5MjEwMjAwMDFaMDMxMTAvBgNV BAMTKEFEOUU2MkJEMTk0NEM1NzBGQUM3MDdGNkYwNDg5N0M5RjBFQUUzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpMw/HnmM+V4qDLU5RCo+rCfHY plGGAAxB6ghItMkVYLLDst4aU41qk3y4c9ktlsNVITU01fsCz+UvR141sJ8zbdM4 Kju7+UjkNb0fg2MHHN0QR+KL3nX6UaisEVG0Ck14DVb+LW7osjAq12xump9IQNYD L6vOMoM33PZQJlC+lnb18o3cn6WAKSYtcEJmG+KobQV4/0Cg9BXtdqnBuTlvixgx rueQ2uIM3EkklSnZ1/3TY8zWpUCqOwZXKVq+yXvj81fPDyFb1A14p0zrC9MhQHFy FYN/AZhh1jJnJgKrIRGWCY42WTDuUGZGrmDhEJhXY6FPNNSF+qC9/GYY4llvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUrZ5ivRlExXD6xwf28EiXyfDq43YwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExMjdlYWZkLWE2NzQtNDQzNy1h YmYxLWU1NTBkZWMxMzdmYS8wLzMxMzAzMzJlMzEzMTMxMmUzMTM0MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNDM2MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnb40wDQYJ KoZIhvcNAQELBQADggEBAC568XA0pdNKuRTsZgRR0YZApd1/mVPLH/EfP+lzCr5M 7bpmXtqasBMJzwoon+fAQTHjajXAFT+6lcarth05UBvz9MADubT/aCP+cOd+steR yrtj3K0q+pL2LRuXcKG7FZKfX12sM6E1ZI7RvCe4Y0kHufCA4YDSlwHUarNulDyf 6TDMU0EHk8HUiKOAvXyNjD4ScVFLD+m+kb6BfHrzEqq0o13sVwmVvsWodXJiFPRA 4xl2scPtmO15fJvREsS5aCrLx4R1PkreTap9QO8U6Prs+3KzL4GGXG5o0jf8kFZb zD8+/EWUI2xoBgXPpd7x99p/lOULc6V75GQkA+ic8pk= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org