$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa File: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (raw, json) Hash identifier: tQ4vZuhFeMHPG6Q4JsAfSDt09xj/628G92eqdEQqJxg= Subject key identifier: 33:22:61:12:A9:D2:AC:DF:96:BC:C6:5D:52:48:84:21:4A:EB:50:B3 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 17E627F4A2878EE2A14F550DE8E54201C040AD80 Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa Signing time: Mon 02 Sep 2024 19:00:00 +0000 ROA not before: Mon 02 Sep 2024 18:55:00 +0000 ROA not after: Mon 01 Sep 2025 19:00:00 +0000 asID: 142400 IP address blocks: 103.172.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e6:27:f4:a2:87:8e:e2:a1:4f:55:0d:e8:e5:42:01:c0:40:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Sep 2 18:55:00 2024 GMT Not After : Sep 1 19:00:00 2025 GMT Subject: CN=33226112A9D2ACDF96BCC65D524884214AEB50B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:65:a5:76:3f:f0:b5:5c:41:d8:20:03:de: be:0c:8e:0e:1a:83:7f:39:0a:5a:a3:92:ab:75:46: 54:1c:13:d1:b5:84:b3:ca:e7:39:52:16:ba:94:10: d5:2b:db:d1:44:de:10:0b:76:a2:9f:ff:19:d5:e2: 82:38:d4:12:26:3a:b3:92:61:3b:49:10:f9:65:51: e3:0a:03:55:6d:96:79:b2:2f:8e:b1:f0:d4:6a:5f: 96:10:0a:7e:cb:6c:a7:86:73:12:8f:23:a0:09:a6: dd:3f:2f:94:28:69:f1:9d:9b:bd:81:9d:0f:6d:ef: 04:7a:cc:f3:eb:b0:ef:8b:11:ed:18:1a:d0:af:f8: ac:fa:39:ea:1b:08:39:78:e8:ce:9c:71:9d:ac:6b: 1e:bf:0b:c6:e3:ce:e9:7d:ae:e3:3f:02:22:22:2e: 4c:df:65:ac:05:b1:e3:c5:19:2a:f4:47:61:1a:5c: b2:49:74:16:22:89:7e:9f:d5:93:6b:7a:2e:c3:cb: 62:f1:48:53:47:be:51:7a:86:45:0d:35:b3:42:7e: 9d:5e:74:27:f8:c1:41:c1:80:88:fa:8d:47:a8:b1: bf:5d:ee:91:7c:6b:f6:40:75:9e:24:53:f0:23:1f: 8b:ec:f2:ca:21:05:07:0a:6b:28:ce:b4:9a:8e:70: 2a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:22:61:12:A9:D2:AC:DF:96:BC:C6:5D:52:48:84:21:4A:EB:50:B3 X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.187.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:56:e9:63:95:09:1a:6f:ee:2b:54:9e:fa:54:8d:42:1b:96: ed:8c:b6:a7:f6:d3:a4:d3:92:3a:32:f9:c5:bd:69:d0:a6:bc: 84:a1:2c:c7:12:91:91:f4:7a:6d:9d:e3:46:e9:c4:34:9e:3c: ee:06:10:e0:5d:8e:32:88:c2:e2:1b:94:d3:f7:72:b4:64:73: 38:ff:a3:4b:6c:9e:b3:6a:0b:d2:8e:21:a2:be:3f:20:65:02: 7a:8c:5f:16:1f:19:a2:28:1e:5f:a1:73:a8:bc:76:36:bb:82: d7:fe:63:1c:af:b2:7b:bc:52:44:91:95:82:ff:03:b5:e3:0f: a4:fd:48:12:24:40:f9:64:9e:3d:a1:1f:3b:5b:2a:88:c4:64: f7:72:56:18:30:7b:f6:e6:09:da:b9:f8:7c:9d:79:46:e4:36: 23:3f:4e:6f:7e:4c:b5:5c:1d:f2:7b:31:5c:da:7f:77:fb:f4: f2:80:a3:12:53:4c:7e:af:09:5d:85:5e:f0:89:55:14:ce:f2: d5:10:5b:19:4c:1e:21:13:b5:71:54:1c:60:0c:96:9f:a1:8c: 4c:a0:e2:95:1b:70:b7:02:ed:5a:88:d5:f8:45:be:2d:a3:ec: 39:7b:b7:d2:57:59:0c:bc:3e:00:5b:53:b9:0d:d2:cb:7a:9d: 8b:ea:05:36 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUF+Yn9KKHjuKhT1UN6OVCAcBArYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNDA5MDIxODU1MDBaFw0yNTA5MDExOTAwMDBaMDMxMTAvBgNV BAMTKDMzMjI2MTEyQTlEMkFDREY5NkJDQzY1RDUyNDg4NDIxNEFFQjUwQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhmWldj/wtVxB2CAD3r4Mjg4a g385Clqjkqt1RlQcE9G1hLPK5zlSFrqUENUr29FE3hALdqKf/xnV4oI41BImOrOS YTtJEPllUeMKA1VtlnmyL46x8NRqX5YQCn7LbKeGcxKPI6AJpt0/L5QoafGdm72B nQ9t7wR6zPPrsO+LEe0YGtCv+Kz6OeobCDl46M6ccZ2sax6/C8bjzul9ruM/AiIi LkzfZawFsePFGSr0R2EaXLJJdBYiiX6f1ZNrei7Dy2LxSFNHvlF6hkUNNbNCfp1e dCf4wUHBgIj6jUeosb9d7pF8a/ZAdZ4kU/AjH4vs8sohBQcKayjOtJqOcCqtAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUMyJhEqnSrN+WvMZdUkiEIUrrULMwHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyZjVmMDdjLWYwN2ItNGFhYS1h MGMyLWRmMTdjOTEwYzU4Ni8wLzMxMzAzMzJlMzEzNzMyMmUzMTM4MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzNDMwMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrLswDQYJ KoZIhvcNAQELBQADggEBAH5W6WOVCRpv7itUnvpUjUIblu2Mtqf206TTkjoy+cW9 adCmvIShLMcSkZH0em2d40bpxDSePO4GEOBdjjKIwuIblNP3crRkczj/o0tsnrNq C9KOIaK+PyBlAnqMXxYfGaIoHl+hc6i8dja7gtf+Yxyvsnu8UkSRlYL/A7XjD6T9 SBIkQPlknj2hHztbKojEZPdyVhgwe/bmCdq5+HydeUbkNiM/Tm9+TLVcHfJ7MVza f3f79PKAoxJTTH6vCV2FXvCJVRTO8tUQWxlMHiETtXFUHGAMlp+hjEyg4pUbcLcC 7VqI1fhFvi2j7Dl7t9JXWQy8PgBbU7kN0st6nYvqBTY= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org