$ rpki-client -vvf repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa File: 3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa (raw, json) Hash identifier: kgvp3y6Jmn2bZU9mxlah7paSqid7hchh1PwEnCGF054= Subject key identifier: B5:83:63:04:21:67:5C:12:20:1D:82:F2:BA:E5:A3:27:AB:CF:04:80 Certificate issuer: /CN=7CDEC0195C0619A2844735B38B762AB1C145318A Certificate serial: 2B6AB2CF96576DF7643122204CCF873408F18F1E Authority key identifier: 7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa Signing time: Thu 05 Sep 2024 07:00:02 +0000 ROA not before: Thu 05 Sep 2024 06:55:02 +0000 ROA not after: Thu 04 Sep 2025 07:00:02 +0000 asID: 138886 IP address blocks: 103.163.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6a:b2:cf:96:57:6d:f7:64:31:22:20:4c:cf:87:34:08:f1:8f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CDEC0195C0619A2844735B38B762AB1C145318A Validity Not Before: Sep 5 06:55:02 2024 GMT Not After : Sep 4 07:00:02 2025 GMT Subject: CN=B583630421675C12201D82F2BAE5A327ABCF0480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7c:11:2c:36:b3:49:fc:e2:7a:d0:17:fd:6d: 15:b8:b5:d0:89:4b:f9:c4:98:fd:b3:9d:bd:15:65: a3:59:56:c4:bf:eb:13:fe:6a:6a:a0:33:e6:6d:dd: 30:01:cb:05:ae:ed:29:34:12:91:19:37:0a:64:77: 1c:3f:83:45:50:ce:a9:21:b0:37:9a:72:fb:8b:d6: d2:23:74:6c:04:6b:76:66:df:c3:e4:08:64:b0:c0: b3:b4:2f:ea:8e:51:b9:c6:38:7e:46:10:bf:2d:4c: 07:63:e1:77:fa:24:eb:65:37:33:3b:fa:12:95:f8: 34:f3:e2:b9:08:5e:f5:ca:0f:5f:04:18:e4:39:4a: e9:2b:bd:6b:32:2c:73:16:45:1d:e2:27:7b:e5:4e: 0d:a9:3b:13:94:94:51:31:fc:62:e7:05:69:a5:ad: 8d:7e:da:b0:ae:b9:34:65:0e:0e:ba:49:c9:46:51: 24:7b:f4:a9:f9:19:62:60:86:cb:2f:1d:49:e8:c4: ea:db:e0:6a:9b:47:4a:b0:cd:bc:3e:a5:4f:52:60: 0d:ad:87:3c:04:4e:3c:8a:a2:3f:3f:45:fe:01:f7: 74:13:48:ea:a6:44:a5:31:68:ba:2f:9d:c4:d5:bc: c7:2b:f7:84:82:c7:19:7d:a2:8d:37:88:d1:a6:a8: ca:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:83:63:04:21:67:5C:12:20:1D:82:F2:BA:E5:A3:27:AB:CF:04:80 X509v3 Authority Key Identifier: keyid:7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.36.0/23 Signature Algorithm: sha256WithRSAEncryption 10:a9:72:ce:4d:61:73:9d:f2:5d:c9:fa:65:7a:82:a3:73:73: dd:f3:3f:c5:32:14:3f:0a:ff:f0:b0:b6:67:bc:96:af:d0:8a: c0:bc:11:fb:cb:f8:45:0d:f4:95:69:97:32:56:73:02:3a:69: 6a:06:f6:48:ea:9c:cc:63:8a:ff:63:13:e1:9f:07:fa:e8:64: 4a:dc:76:36:ed:ea:56:3a:28:ba:6f:a8:ba:52:df:7b:d0:68: 51:0f:1d:70:78:dd:30:79:4f:d3:67:3e:86:e0:1a:b5:05:ec: 72:d1:b9:7b:0a:d6:16:26:bc:ea:fd:d4:42:7b:d7:7b:13:52: 89:6e:02:02:10:c0:30:3a:aa:22:b0:7d:22:94:c4:b3:df:0d: f7:99:b3:94:a8:ec:09:3d:c5:dd:22:7f:b7:37:27:45:75:41: 2c:17:03:14:d8:83:a9:c2:27:17:02:5a:0a:cc:72:dd:d6:f9: 0f:be:cf:c0:f9:96:a2:14:e5:c7:5d:e3:7a:6e:be:7d:dd:72: ea:04:c2:03:8f:79:1c:3d:7f:8b:12:07:48:ef:ef:30:42:44: 69:6f:32:8a:3b:d4:06:fd:70:b8:69:5f:7e:1c:2a:2f:f6:00: 43:94:a5:d1:8f:d2:9d:2e:bd:a9:4b:a6:a0:8c:d9:ba:bf:22: 00:1d:6d:ce -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUK2qyz5ZXbfdkMSIgTM+HNAjxjx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFD MTQ1MzE4QTAeFw0yNDA5MDUwNjU1MDJaFw0yNTA5MDQwNzAwMDJaMDMxMTAvBgNV BAMTKEI1ODM2MzA0MjE2NzVDMTIyMDFEODJGMkJBRTVBMzI3QUJDRjA0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgfBEsNrNJ/OJ60Bf9bRW4tdCJ S/nEmP2znb0VZaNZVsS/6xP+amqgM+Zt3TABywWu7Sk0EpEZNwpkdxw/g0VQzqkh sDeacvuL1tIjdGwEa3Zm38PkCGSwwLO0L+qOUbnGOH5GEL8tTAdj4Xf6JOtlNzM7 +hKV+DTz4rkIXvXKD18EGOQ5SukrvWsyLHMWRR3iJ3vlTg2pOxOUlFEx/GLnBWml rY1+2rCuuTRlDg66SclGUSR79Kn5GWJghssvHUnoxOrb4GqbR0qwzbw+pU9SYA2t hzwETjyKoj8/Rf4B93QTSOqmRKUxaLovncTVvMcr94SCxxl9oo03iNGmqMohAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtYNjBCFnXBIgHYLyuuWjJ6vPBIAwHwYDVR0j BBgwFoAUfN7AGVwGGaKERzWzi3YqscFFMYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjkwYWRhNi1iNzIxLTRiNWYtOTBjYS1lOGY0Yjk3N2Q1NjEvMC83Q0RFQzAxOTVD MDYxOUEyODQ0NzM1QjM4Qjc2MkFCMUMxNDUzMThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFDMTQ1 MzE4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiOTBhZGE2LWI3MjEtNGI1Zi05 MGNhLWU4ZjRiOTc3ZDU2MS8wLzMxMzAzMzJlMzEzNjMzMmUzMzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6MkMA0GCSqG SIb3DQEBCwUAA4IBAQAQqXLOTWFznfJdyfpleoKjc3Pd8z/FMhQ/Cv/wsLZnvJav 0IrAvBH7y/hFDfSVaZcyVnMCOmlqBvZI6pzMY4r/YxPhnwf66GRK3HY27epWOii6 b6i6Ut970GhRDx1weN0weU/TZz6G4Bq1Bexy0bl7CtYWJrzq/dRCe9d7E1KJbgIC EMAwOqoisH0ilMSz3w33mbOUqOwJPcXdIn+3NydFdUEsFwMU2IOpwicXAloKzHLd 1vkPvs/A+ZaiFOXHXeN6br593XLqBMIDj3kcPX+LEgdI7+8wQkRpbzKKO9QG/XC4 aV9+HCov9gBDlKXRj9KdLr2pS6agjNm6vyIAHW3O -----END CERTIFICATE-----Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org