$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa File: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: 5099uAR6KmDcIfNiZmfT8BCVcKIiSE/bkHtUTKJ/KOQ= Subject key identifier: D2:F2:BA:97:75:88:9A:EC:AF:8E:6E:74:BA:E1:DE:98:63:05:93:8A Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 60A32F345622AADE18038EBF04F4B09CB8A3C8B3 Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa Signing time: Mon 03 Jun 2024 09:00:50 +0000 ROA not before: Mon 03 Jun 2024 08:55:50 +0000 ROA not after: Mon 02 Jun 2025 09:00:50 +0000 asID: 45305 IP address blocks: 103.142.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a3:2f:34:56:22:aa:de:18:03:8e:bf:04:f4:b0:9c:b8:a3:c8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Jun 3 08:55:50 2024 GMT Not After : Jun 2 09:00:50 2025 GMT Subject: CN=D2F2BA9775889AECAF8E6E74BAE1DE986305938A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:00:50:bc:75:51:5d:e2:6b:a8:7b:9a:38: 72:04:9d:7b:4e:49:31:5d:bc:61:74:35:af:81:bf: 35:d8:9b:e0:26:d8:b9:37:85:00:cd:ed:1f:5b:c7: 55:b5:18:3b:04:e7:0b:75:e7:14:12:0c:9e:1b:41: 42:93:ef:d0:90:c9:c0:3a:df:c9:84:ce:ef:ae:cb: 8f:a2:70:fc:e8:b9:7f:b0:30:8a:f4:96:c8:a5:88: 43:a9:fd:05:26:0b:d9:e4:8c:56:bd:b8:8b:94:e5: 93:7a:73:e0:54:a2:c4:ee:6d:14:52:fd:00:5b:68: 28:a6:d1:56:fe:e6:5d:96:dc:eb:3b:39:31:46:0c: 0d:ab:2a:fe:09:c3:3b:70:7a:c0:fa:a5:cd:15:84: 24:b3:28:f8:f2:fa:e3:c5:48:9f:37:e4:56:68:56: df:13:ea:a5:7f:68:70:a0:fa:70:cc:8f:1f:70:e5: 72:79:e9:16:03:6e:41:75:55:d9:90:3e:4c:53:42: ab:dd:cf:2e:b1:71:6a:26:f6:7a:d3:a0:ab:d0:04: d0:7c:32:6b:f9:1b:6d:70:79:35:b9:3c:00:87:a9: 55:0f:76:9b:a8:26:c6:fb:6d:3d:24:b4:a5:40:13: 41:ec:b7:61:93:7b:c2:c0:64:2e:5b:df:16:c2:a6: 6f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F2:BA:97:75:88:9A:EC:AF:8E:6E:74:BA:E1:DE:98:63:05:93:8A X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.254.0/24 Signature Algorithm: sha256WithRSAEncryption 18:f6:a3:be:6c:53:bd:a0:42:f3:b4:ce:fc:64:6a:f7:80:4d: 97:5d:f8:f4:09:bb:c9:50:ab:d2:40:45:75:6d:18:55:05:b5: ee:37:98:a0:77:85:80:37:a6:ba:7b:db:24:18:87:6e:ca:e3: bf:00:67:62:e5:d7:1e:76:df:42:0c:22:fa:21:b9:f4:f1:90: b4:50:9d:e0:69:41:0a:80:7d:38:8c:6e:65:d2:77:7e:76:00: 5c:31:a5:ba:f5:f9:9f:93:78:46:6d:64:97:c7:e7:ee:40:c5: e6:75:d7:8e:37:57:1a:6f:48:91:48:00:ef:95:41:66:2d:a1: cd:41:4c:8f:10:bd:2d:cf:07:d1:b1:27:43:e3:44:9c:62:1e: 5d:a7:f0:b8:46:53:64:e1:c3:7b:94:f6:06:be:df:1f:62:82: 1f:5b:ee:3c:e6:bc:86:e2:b0:19:21:d6:fa:21:3c:d0:8f:bd: 4c:fc:94:97:48:5d:f0:dd:89:67:3f:cc:0e:d4:3e:c3:08:63: 91:5b:27:ec:0c:72:78:4c:78:81:7d:50:69:d6:4a:05:69:98: 00:22:c8:ed:94:3d:73:c5:d9:87:36:b9:b8:74:ee:b5:98:b0: 0b:c9:91:94:36:c3:20:00:eb:16:3e:77:27:d4:a4:6e:89:6d: 97:ab:55:7c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYKMvNFYiqt4YA46/BPSwnLijyLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNDA2MDMwODU1NTBaFw0yNTA2MDIwOTAwNTBaMDMxMTAvBgNV BAMTKEQyRjJCQTk3NzU4ODlBRUNBRjhFNkU3NEJBRTFERTk4NjMwNTkzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HwBQvHVRXeJrqHuaOHIEnXtO STFdvGF0Na+BvzXYm+Am2Lk3hQDN7R9bx1W1GDsE5wt15xQSDJ4bQUKT79CQycA6 38mEzu+uy4+icPzouX+wMIr0lsiliEOp/QUmC9nkjFa9uIuU5ZN6c+BUosTubRRS /QBbaCim0Vb+5l2W3Os7OTFGDA2rKv4JwztwesD6pc0VhCSzKPjy+uPFSJ835FZo Vt8T6qV/aHCg+nDMjx9w5XJ56RYDbkF1VdmQPkxTQqvdzy6xcWom9nrToKvQBNB8 Mmv5G21weTW5PACHqVUPdpuoJsb7bT0ktKVAE0Hst2GTe8LAZC5b3xbCpm8hAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0vK6l3WImuyvjm50uuHemGMFk4owHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZGMxZGQ4LTZkMjUtNDdjNy1h YWE0LWJkZGYxYjlkNjc3ZS8wLzMxMzAzMzJlMzEzNDMyMmUzMjM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ47+MA0GCSqG SIb3DQEBCwUAA4IBAQAY9qO+bFO9oELztM78ZGr3gE2XXfj0CbvJUKvSQEV1bRhV BbXuN5igd4WAN6a6e9skGIduyuO/AGdi5dcedt9CDCL6Ibn08ZC0UJ3gaUEKgH04 jG5l0nd+dgBcMaW69fmfk3hGbWSXx+fuQMXmddeON1cab0iRSADvlUFmLaHNQUyP EL0tzwfRsSdD40ScYh5dp/C4RlNk4cN7lPYGvt8fYoIfW+485ryG4rAZIdb6ITzQ j71M/JSXSF3w3YlnP8wO1D7DCGORWyfsDHJ4THiBfVBp1koFaZgAIsjtlD1zxdmH Nrm4dO61mLALyZGUNsMgAOsWPncn1KRuiW2Xq1V8 -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org