$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa File: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (raw, json) Hash identifier: ihMnpcM8C+9KA0tMwmz+wN2Pjt87gWD8o1eHc6RRFFs= Subject key identifier: 60:11:C4:A3:32:8B:77:FF:13:C1:84:B1:FD:90:A9:BB:CC:7D:F8:0B Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 07420C661A1797E46EFE830DF7D63A4BF515C0A3 Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa Signing time: Thu 08 Aug 2024 09:11:04 +0000 ROA not before: Thu 08 Aug 2024 09:06:04 +0000 ROA not after: Thu 07 Aug 2025 09:11:04 +0000 asID: 136095 IP address blocks: 103.84.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:42:0c:66:1a:17:97:e4:6e:fe:83:0d:f7:d6:3a:4b:f5:15:c0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Aug 8 09:06:04 2024 GMT Not After : Aug 7 09:11:04 2025 GMT Subject: CN=6011C4A3328B77FF13C184B1FD90A9BBCC7DF80B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:f8:b6:18:9a:dc:cc:a8:23:1e:f8:16:ad: 7b:17:84:bd:bd:bf:7f:2b:28:d5:73:80:26:fd:9b: b4:9b:2a:fb:f8:7d:fa:5a:bd:dd:c4:28:30:96:37: 6b:34:b4:da:8a:dd:32:8d:f9:ba:43:ad:89:be:62: fb:d1:59:d1:41:6b:8b:71:f8:62:73:4c:8f:17:fe: 81:ca:db:c7:11:65:d0:3b:c1:bc:97:07:c7:8f:fc: 9c:b2:b0:49:ef:78:67:21:58:df:19:34:9a:4b:94: 3e:23:f9:a5:0b:ee:7e:e2:03:83:6a:af:1b:27:56: f5:23:0d:15:8a:61:c4:11:37:04:1e:03:7d:c9:75: 63:1a:f0:67:15:a5:e6:e6:08:48:a8:36:0c:fc:f1: 35:0e:87:ac:4c:17:ae:0e:91:70:20:a4:94:f0:c1: 09:9a:63:4a:ef:6f:a5:03:7f:0b:97:da:4d:6c:59: 4c:b6:09:58:bf:52:2e:f3:e5:d9:be:13:9d:ff:c2: 06:81:a7:6b:ff:8b:46:5f:4b:37:80:47:de:a4:0a: 72:4c:5a:0e:fc:c0:6a:ee:6b:31:51:d0:e5:0d:27: 8c:40:77:b7:ca:66:96:ba:fe:84:e2:04:cc:b9:d3: 94:80:11:4e:6c:b3:2b:cc:a3:05:02:fc:81:25:c8: 0d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:11:C4:A3:32:8B:77:FF:13:C1:84:B1:FD:90:A9:BB:CC:7D:F8:0B X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.201.0/24 Signature Algorithm: sha256WithRSAEncryption e8:6f:f9:69:b1:7b:14:81:ac:5d:02:d1:3f:cf:e1:3a:4e:8a: e9:cc:c3:41:b6:85:d2:52:d8:f3:12:f6:8b:5b:db:ff:72:82: 59:41:20:05:d9:71:dc:3a:1e:64:8a:27:0c:f8:6d:68:3e:e5: 7f:5e:dc:65:b9:b6:fe:b6:6c:40:69:13:b8:3f:34:e9:59:fd: 9d:10:5f:58:c5:b2:35:3d:46:cb:cd:83:80:93:54:5b:c4:77: 60:2d:7c:a6:0f:1b:0b:b6:1f:4f:c8:4e:1f:4e:79:dd:70:3b: 81:73:e3:38:1d:8d:dc:d1:ae:8b:61:0d:77:9f:ae:d3:be:79: 5f:1b:04:15:9c:32:73:b8:1b:25:9f:e1:a3:f5:e8:99:46:73: 16:22:41:7b:eb:f4:38:f2:7d:43:41:7a:17:22:4f:70:2e:b5: 93:87:24:62:15:20:c6:bb:38:cc:cc:bd:1e:4c:13:6c:96:fd: 13:e0:0b:a1:22:b7:45:2a:45:ed:e9:97:d9:93:a0:d7:ef:60: 1b:1b:bf:da:a1:46:71:30:95:27:e4:a8:33:e7:f8:62:82:05: b8:86:40:40:1e:20:f4:18:2b:34:b8:f0:8a:be:a7:2e:47:18: 8b:5f:32:f6:5b:3c:6d:a7:14:f7:4b:0f:f0:78:e1:d9:8c:14: 84:fa:6c:0a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUB0IMZhoXl+Ru/oMN99Y6S/UVwKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNDA4MDgwOTA2MDRaFw0yNTA4MDcwOTExMDRaMDMxMTAvBgNV BAMTKDYwMTFDNEEzMzI4Qjc3RkYxM0MxODRCMUZEOTBBOUJCQ0M3REY4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9vi2GJrczKgjHvgWrXsXhL29 v38rKNVzgCb9m7SbKvv4ffpavd3EKDCWN2s0tNqK3TKN+bpDrYm+YvvRWdFBa4tx +GJzTI8X/oHK28cRZdA7wbyXB8eP/JyysEnveGchWN8ZNJpLlD4j+aUL7n7iA4Nq rxsnVvUjDRWKYcQRNwQeA33JdWMa8GcVpebmCEioNgz88TUOh6xMF64OkXAgpJTw wQmaY0rvb6UDfwuX2k1sWUy2CVi/Ui7z5dm+E53/wgaBp2v/i0ZfSzeAR96kCnJM Wg78wGruazFR0OUNJ4xAd7fKZpa6/oTiBMy505SAEU5ssyvMowUC/IElyA0FAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYBHEozKLd/8TwYSx/ZCpu8x9+AswHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI1ZTI0MTVjLTdkNGYtNDQyNy04 MzJkLTU5YjRjNzlhYWU1YS8wLzMxMzAzMzJlMzgzNDJlMzIzMDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1TJMA0GCSqG SIb3DQEBCwUAA4IBAQDob/lpsXsUgaxdAtE/z+E6TorpzMNBtoXSUtjzEvaLW9v/ coJZQSAF2XHcOh5kiicM+G1oPuV/Xtxlubb+tmxAaRO4PzTpWf2dEF9YxbI1PUbL zYOAk1RbxHdgLXymDxsLth9PyE4fTnndcDuBc+M4HY3c0a6LYQ13n67TvnlfGwQV nDJzuBsln+Gj9eiZRnMWIkF76/Q48n1DQXoXIk9wLrWThyRiFSDGuzjMzL0eTBNs lv0T4AuhIrdFKkXt6ZfZk6DX72AbG7/aoUZxMJUn5Kgz5/higgW4hkBAHiD0GCs0 uPCKvqcuRxiLXzL2WzxtpxT3Sw/weOHZjBSE+mwK -----END CERTIFICATE-----Generated at Mon Nov 25 23:52:54 2024 by rpki-client on console-ams.rpki-client.org