$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa File: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (raw, json) Hash identifier: VNXiSw/mkVU/eaep8UiaH3pF3+R/bpIMEPNGotq1Wno= Subject key identifier: F6:B3:8A:CD:B0:05:7D:3E:FE:F8:7C:67:01:53:4B:5C:41:1F:DF:6F Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 1E52E35339019B6257FB1FF1C7A7DEC4B12F057F Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa Signing time: Wed 04 Sep 2024 10:02:21 +0000 ROA not before: Wed 04 Sep 2024 09:57:21 +0000 ROA not after: Wed 03 Sep 2025 10:02:21 +0000 asID: 139381 IP address blocks: 103.142.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:52:e3:53:39:01:9b:62:57:fb:1f:f1:c7:a7:de:c4:b1:2f:05:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Sep 4 09:57:21 2024 GMT Not After : Sep 3 10:02:21 2025 GMT Subject: CN=F6B38ACDB0057D3EFEF87C6701534B5C411FDF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:59:57:d7:6c:29:eb:3d:a2:0b:f3:45:23: d1:35:53:4e:b5:b7:be:ad:0d:c4:10:20:71:70:bf: 7e:a1:ac:13:91:74:8c:25:e7:90:1c:5d:50:0b:77: 04:94:2a:47:ad:6c:03:b5:ad:1b:2c:c3:8f:11:dd: 01:84:9d:15:1d:cd:48:e0:25:39:0b:c6:ef:ee:93: dc:34:c7:2f:f1:22:df:f2:fb:58:46:61:cd:67:39: bf:51:61:29:2a:0a:86:e2:d4:0a:76:c3:85:c7:36: c5:e0:72:e6:8a:73:d8:9c:b2:0b:25:39:84:f8:f7: e8:4d:8f:78:47:6a:98:98:26:b1:14:6b:d3:bd:07: 7d:e1:f8:5d:03:e5:83:4b:63:e8:27:86:c8:b9:84: 90:dc:12:0c:03:40:23:fc:9c:7c:e1:d3:e2:46:50: cb:77:ae:03:cb:c8:a9:a8:91:c5:12:bb:1b:f7:88: a6:07:e4:b4:67:19:36:4d:a7:1c:7d:37:62:8a:01: e9:21:11:50:56:2f:07:04:61:b3:1c:1e:d7:50:2c: 7c:78:91:1a:14:65:71:60:00:ca:84:67:c9:bb:c8: 08:91:2e:07:2c:f8:ae:35:2e:49:39:31:7c:12:6d: 90:9d:53:7c:36:2b:b0:ad:7e:32:4a:fb:81:c8:40: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B3:8A:CD:B0:05:7D:3E:FE:F8:7C:67:01:53:4B:5C:41:1F:DF:6F X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.255.0/24 Signature Algorithm: sha256WithRSAEncryption 11:6f:2e:7d:43:5d:76:65:90:94:15:5a:b7:50:a4:01:94:a6: 29:46:a7:5d:1a:ac:5f:6f:22:ab:96:66:cc:47:28:1e:a2:f0: 36:a9:a3:7b:e4:df:c2:7c:d3:8c:c4:70:a4:99:d4:71:1d:f0: 71:6d:e8:11:50:68:34:d7:4f:a6:f8:a9:10:4e:d6:6c:1a:a5: e3:6b:03:4b:ee:6a:8a:15:f5:7b:42:8b:ac:3e:59:e6:af:44: 4e:60:9a:f3:e9:93:0b:49:78:ec:00:b0:33:24:df:02:dd:91: 9f:49:ed:79:8e:7c:f5:b4:3b:37:59:68:3e:40:5d:e6:a0:75: a8:bf:f1:eb:b2:cd:c6:db:63:3f:78:52:0c:39:c0:97:9b:c0: 33:fd:b6:35:b3:8b:59:81:55:27:08:e8:3d:1e:ae:27:22:a9: a8:91:55:22:f3:8b:a6:ab:4f:8b:84:40:a5:11:49:06:d7:ad: 07:56:e6:7a:04:18:f3:67:f2:47:e3:91:51:6d:4b:7b:62:bd: 73:54:b8:44:28:22:94:69:2b:1b:b4:05:fc:58:aa:39:d1:26: 49:ff:8d:45:aa:89:fd:fc:21:1c:7f:48:af:8a:4b:35:a1:bd: 0c:f9:ae:c0:9a:60:1e:b1:28:40:6c:75:fd:0d:95:da:11:50: fc:79:fd:fb -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHlLjUzkBm2JX+x/xx6fexLEvBX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNDA5MDQwOTU3MjFaFw0yNTA5MDMxMDAyMjFaMDMxMTAvBgNV BAMTKEY2QjM4QUNEQjAwNTdEM0VGRUY4N0M2NzAxNTM0QjVDNDExRkRGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmx1lX12wp6z2iC/NFI9E1U061 t76tDcQQIHFwv36hrBORdIwl55AcXVALdwSUKketbAO1rRssw48R3QGEnRUdzUjg JTkLxu/uk9w0xy/xIt/y+1hGYc1nOb9RYSkqCobi1Ap2w4XHNsXgcuaKc9icsgsl OYT49+hNj3hHapiYJrEUa9O9B33h+F0D5YNLY+gnhsi5hJDcEgwDQCP8nHzh0+JG UMt3rgPLyKmokcUSuxv3iKYH5LRnGTZNpxx9N2KKAekhEVBWLwcEYbMcHtdQLHx4 kRoUZXFgAMqEZ8m7yAiRLgcs+K41Lkk5MXwSbZCdU3w2K7CtfjJK+4HIQDRDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU9rOKzbAFfT7++HxnAVNLXEEf328wHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZGMxZGQ4LTZkMjUtNDdjNy1h YWE0LWJkZGYxYjlkNjc3ZS8wLzMxMzAzMzJlMzEzNDMyMmUzMjM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjv8wDQYJ KoZIhvcNAQELBQADggEBABFvLn1DXXZlkJQVWrdQpAGUpilGp10arF9vIquWZsxH KB6i8Dapo3vk38J804zEcKSZ1HEd8HFt6BFQaDTXT6b4qRBO1mwapeNrA0vuaooV 9XtCi6w+WeavRE5gmvPpkwtJeOwAsDMk3wLdkZ9J7XmOfPW0OzdZaD5AXeagdai/ 8euyzcbbYz94Ugw5wJebwDP9tjWzi1mBVScI6D0ericiqaiRVSLzi6arT4uEQKUR SQbXrQdW5noEGPNn8kfjkVFtS3tivXNUuEQoIpRpKxu0BfxYqjnRJkn/jUWqif38 IRx/SK+KSzWhvQz5rsCaYB6xKEBsdf0NldoRUPx5/fs= -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org