$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa File: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (raw, json) Hash identifier: MWqeWjmTixAOn+Gc9tFKycHUfhr7BF4hgDw5O4FK2PY= Subject key identifier: F2:C7:51:D4:78:2D:5C:50:09:CB:59:2E:7E:8E:EC:80:E8:18:0C:49 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 3FB926EF464CD15A2472015D5937F4C2763D76A9 Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa Signing time: Sat 14 Sep 2024 10:00:01 +0000 ROA not before: Sat 14 Sep 2024 09:55:01 +0000 ROA not after: Sat 13 Sep 2025 10:00:01 +0000 asID: 147096 IP address blocks: 103.174.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b9:26:ef:46:4c:d1:5a:24:72:01:5d:59:37:f4:c2:76:3d:76:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Sep 14 09:55:01 2024 GMT Not After : Sep 13 10:00:01 2025 GMT Subject: CN=F2C751D4782D5C5009CB592E7E8EEC80E8180C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:d7:a2:35:91:2b:3c:c4:d5:ee:36:f4:89: 3b:e1:b6:fa:a1:ae:5d:77:1d:b0:0e:d6:85:30:a2: 01:04:73:eb:91:9e:f7:9b:90:6b:ed:dc:bd:38:f5: 81:ea:36:32:27:0a:4c:8e:31:1d:bb:7b:63:67:6d: 3a:97:5a:e3:79:6a:fd:40:0b:6a:0b:c2:53:e0:b0: c1:b2:b5:4b:ed:89:ba:9c:d5:7e:48:27:00:01:38: 3c:e0:2e:2a:ce:70:fe:ed:e9:4e:39:79:58:d2:43: 31:ac:8c:69:5b:b1:a7:09:b8:f3:e9:ec:1c:ab:ff: 7f:b0:31:05:9b:a0:da:5b:30:6d:a8:f7:d7:cb:99: 10:97:f3:61:ba:7f:e9:6c:3c:31:89:28:99:a7:37: 52:dd:e1:d9:cf:cd:79:76:4f:ae:7f:fa:a9:0a:b4: 51:9e:ef:e4:26:29:1f:43:f9:42:59:22:19:4c:fc: 7f:40:ec:98:91:59:6e:14:07:d5:b7:33:fe:b0:11: b4:3b:2c:c7:22:eb:1e:00:ab:d5:11:78:6d:c8:f5: 34:e8:08:3a:82:fc:a8:b6:de:1f:6e:27:f5:93:b4: 5e:96:e5:8c:19:85:8a:e6:ca:28:91:b9:c5:69:79: 63:3d:0a:28:17:88:02:7e:1d:86:08:88:55:89:4e: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:51:D4:78:2D:5C:50:09:CB:59:2E:7E:8E:EC:80:E8:18:0C:49 X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.122.0/24 Signature Algorithm: sha256WithRSAEncryption 16:65:08:e3:4d:18:cb:de:80:d4:39:fa:83:92:8c:01:e8:5b: 51:03:9d:b3:a1:f0:59:08:26:5a:bd:8b:6a:9c:66:4b:46:c5: 58:81:db:3a:a2:71:fb:90:5b:46:6e:75:87:1a:76:88:20:c0: 57:f2:28:38:02:6c:54:dd:60:9c:b6:63:8d:45:7e:1c:4c:41: a3:dd:00:4d:1b:c2:49:12:a3:e6:61:02:59:fa:26:b1:e8:2d: 50:b8:0d:84:35:7b:52:c8:d0:84:aa:48:4d:42:99:64:4c:f9: a0:91:3c:77:84:24:78:3d:7d:29:ce:bf:53:b7:a3:d1:5c:3c: 51:c4:3c:eb:a7:b8:c1:49:69:f1:b4:99:a6:07:58:9c:0a:e8: 1f:6b:30:90:1f:7e:1e:6d:ea:8a:79:85:69:8f:19:0d:53:1b: 2b:da:f6:04:cb:57:64:78:b9:68:14:78:fa:5a:b7:aa:27:74: 93:1d:f7:0a:53:da:da:1e:1f:38:38:43:23:ce:70:b1:d5:85: dd:33:9d:66:e4:ce:f7:49:a7:31:27:7a:c5:84:63:5d:25:ed: 98:b0:00:8f:67:f5:0b:a5:c4:95:99:ad:0d:dc:61:e8:1b:00: 7f:be:1a:5c:23:be:4c:db:44:b5:6e:00:cc:73:2f:bd:4f:d4: a2:2a:44:23 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUP7km70ZM0VokcgFdWTf0wnY9dqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNDA5MTQwOTU1MDFaFw0yNTA5MTMxMDAwMDFaMDMxMTAvBgNV BAMTKEYyQzc1MUQ0NzgyRDVDNTAwOUNCNTkyRTdFOEVFQzgwRTgxODBDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFNeiNZErPMTV7jb0iTvhtvqh rl13HbAO1oUwogEEc+uRnvebkGvt3L049YHqNjInCkyOMR27e2NnbTqXWuN5av1A C2oLwlPgsMGytUvtibqc1X5IJwABODzgLirOcP7t6U45eVjSQzGsjGlbsacJuPPp 7Byr/3+wMQWboNpbMG2o99fLmRCX82G6f+lsPDGJKJmnN1Ld4dnPzXl2T65/+qkK tFGe7+QmKR9D+UJZIhlM/H9A7JiRWW4UB9W3M/6wEbQ7LMci6x4Aq9UReG3I9TTo CDqC/Ki23h9uJ/WTtF6W5YwZhYrmyiiRucVpeWM9CigXiAJ+HYYIiFWJTqM5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU8sdR1HgtXFAJy1kufo7sgOgYDEkwHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyNzMwMjdhLTA5NmItNGU5NS1h NjU2LWRhYmU5OGFjNmY2ZC8wLzMxMzAzMzJlMzEzNzM0MmUzMTMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM5MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrnowDQYJ KoZIhvcNAQELBQADggEBABZlCONNGMvegNQ5+oOSjAHoW1EDnbOh8FkIJlq9i2qc ZktGxViB2zqicfuQW0ZudYcadoggwFfyKDgCbFTdYJy2Y41FfhxMQaPdAE0bwkkS o+ZhAln6JrHoLVC4DYQ1e1LI0ISqSE1CmWRM+aCRPHeEJHg9fSnOv1O3o9FcPFHE POunuMFJafG0maYHWJwK6B9rMJAffh5t6op5hWmPGQ1TGyva9gTLV2R4uWgUePpa t6ondJMd9wpT2toeHzg4QyPOcLHVhd0znWbkzvdJpzEnesWEY10l7ZiwAI9n9Qul xJWZrQ3cYegbAH++GlwjvkzbRLVuAMxzL71P1KIqRCM= -----END CERTIFICATE-----Generated at Mon Nov 25 06:02:38 2024 by rpki-client on console-ams.rpki-client.org