$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa File: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (raw, json) Hash identifier: YzMeBHl/gp0hPsD74Syrnw/fYYcZ9K46SBc/IU62Y+g= Subject key identifier: E9:7B:5F:BA:5B:B6:30:21:DA:02:10:CB:DE:D6:A8:63:32:BA:35:8E Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 082F8A361D125F2F5B81663F1A2C29BD3054754B Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa Signing time: Thu 08 Aug 2024 09:10:18 +0000 ROA not before: Thu 08 Aug 2024 09:05:18 +0000 ROA not after: Thu 07 Aug 2025 09:10:18 +0000 asID: 136095 IP address blocks: 103.84.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2f:8a:36:1d:12:5f:2f:5b:81:66:3f:1a:2c:29:bd:30:54:75:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Aug 8 09:05:18 2024 GMT Not After : Aug 7 09:10:18 2025 GMT Subject: CN=E97B5FBA5BB63021DA0210CBDED6A86332BA358E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:84:f8:06:14:95:ca:fd:c0:87:b2:e7:7b:bb: 89:3f:fc:e9:7d:47:f4:18:8b:25:db:69:0f:b4:8b: 3b:be:7f:c4:2a:d6:0b:f6:a0:8e:86:08:f5:83:dd: f0:bc:e1:1e:51:2e:3d:33:33:78:2a:be:a2:78:79: 45:3d:fd:bc:87:88:ce:7e:3c:bd:1c:2b:0f:a6:bb: 98:9d:cb:d7:3e:82:25:f1:51:c3:08:74:d7:e5:48: c9:4e:f1:a2:f4:db:e1:a1:07:a1:6b:5a:7d:fc:8f: 25:cb:0c:45:6a:89:5a:fe:8d:68:73:9d:5c:bb:ca: 3b:93:f3:29:63:58:8e:95:c7:32:0f:2f:9c:d5:51: e8:81:8d:ce:09:25:b5:4e:5c:18:06:10:da:0d:20: dc:af:bd:7c:64:6f:c4:fe:e4:f9:04:8c:62:00:8f: ab:fc:4c:60:00:7f:84:27:fc:54:50:aa:8b:01:42: ce:3e:0a:c6:b2:b0:21:10:b7:2f:68:1f:05:1f:ba: ca:75:17:b0:00:99:7c:62:35:c8:53:b9:9a:0c:c9: f3:f1:be:2d:16:55:7d:09:25:36:28:a0:ef:72:69: 8d:b0:ee:01:fb:bf:58:a3:c2:ed:f4:fb:ff:e0:3a: e3:f1:8b:a6:d8:9b:81:ca:bd:70:45:fc:07:2b:86: 4f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7B:5F:BA:5B:B6:30:21:DA:02:10:CB:DE:D6:A8:63:32:BA:35:8E X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.200.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:49:de:c5:8b:2a:ce:07:9e:4e:1c:62:99:d3:b4:11:7c:48: bb:57:85:d7:32:63:52:4c:d2:5f:ff:9c:1d:a4:0e:c9:ab:7e: f9:56:f4:1c:be:0a:9e:5c:e2:7b:5a:a4:90:c8:e9:2d:dc:1c: 35:ca:e8:98:45:8a:80:5a:3c:54:08:85:21:dd:e1:1c:bf:c0: e6:a5:4d:02:4b:1f:de:30:13:c4:fc:2e:37:29:90:68:8d:55: e8:a2:70:3d:f5:c3:25:a1:be:8f:e7:80:9b:07:7e:15:c8:52: 06:59:59:05:8b:58:d7:a2:79:c3:06:fc:d3:f4:8e:6e:1d:5a: ee:84:07:e6:42:45:2c:c4:1d:30:62:0d:db:b7:10:5c:06:ad: 9c:12:ef:f9:4f:f3:fe:05:0b:04:98:4d:ac:cc:5d:6d:f9:10: e7:2a:9c:13:0d:03:d7:84:59:9c:a4:d9:34:01:af:02:29:c2: b0:a2:8e:68:42:d3:80:1e:17:20:0a:32:3c:82:20:77:fe:75: 29:90:0b:d6:48:33:6a:cc:06:b1:f6:58:58:2d:51:93:f4:82: 17:47:68:b9:60:d0:39:ee:8a:6e:7e:7d:dc:13:b4:58:ad:ae: 47:ec:8c:9e:56:de:42:07:c5:2d:5b:eb:d4:ff:bb:9b:98:b5: 6a:61:42:5b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCC+KNh0SXy9bgWY/GiwpvTBUdUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNDA4MDgwOTA1MThaFw0yNTA4MDcwOTEwMThaMDMxMTAvBgNV BAMTKEU5N0I1RkJBNUJCNjMwMjFEQTAyMTBDQkRFRDZBODYzMzJCQTM1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkhPgGFJXK/cCHsud7u4k//Ol9 R/QYiyXbaQ+0izu+f8Qq1gv2oI6GCPWD3fC84R5RLj0zM3gqvqJ4eUU9/byHiM5+ PL0cKw+mu5idy9c+giXxUcMIdNflSMlO8aL02+GhB6FrWn38jyXLDEVqiVr+jWhz nVy7yjuT8yljWI6VxzIPL5zVUeiBjc4JJbVOXBgGENoNINyvvXxkb8T+5PkEjGIA j6v8TGAAf4Qn/FRQqosBQs4+CsaysCEQty9oHwUfusp1F7AAmXxiNchTuZoMyfPx vi0WVX0JJTYooO9yaY2w7gH7v1ijwu30+//gOuPxi6bYm4HKvXBF/Acrhk/zAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU6Xtfulu2MCHaAhDL3taoYzK6NY4wHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI1ZTI0MTVjLTdkNGYtNDQyNy04 MzJkLTU5YjRjNzlhYWU1YS8wLzMxMzAzMzJlMzgzNDJlMzIzMDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1TIMA0GCSqG SIb3DQEBCwUAA4IBAQAqSd7FiyrOB55OHGKZ07QRfEi7V4XXMmNSTNJf/5wdpA7J q375VvQcvgqeXOJ7WqSQyOkt3Bw1yuiYRYqAWjxUCIUh3eEcv8DmpU0CSx/eMBPE /C43KZBojVXoonA99cMlob6P54CbB34VyFIGWVkFi1jXonnDBvzT9I5uHVruhAfm QkUsxB0wYg3btxBcBq2cEu/5T/P+BQsEmE2szF1t+RDnKpwTDQPXhFmcpNk0Aa8C KcKwoo5oQtOAHhcgCjI8giB3/nUpkAvWSDNqzAax9lhYLVGT9IIXR2i5YNA57opu fn3cE7RYra5H7IyeVt5CB8UtW+vU/7ubmLVqYUJb -----END CERTIFICATE-----Generated at Mon Nov 25 23:52:54 2024 by rpki-client on console-ams.rpki-client.org