$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233322e302f32332d3234203d3e203535373031.roa File: 3130332e33312e3233322e302f32332d3234203d3e203535373031.roa (raw, json) Hash identifier: w9xVqecaV1H6M2ZMzl9TWsMl79F0EJqt0H9scwobEIE= Subject key identifier: 5E:2F:58:38:13:31:83:23:4F:E9:EC:A3:D3:B7:52:61:EB:6D:3E:6A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 6EB9343DD903E4226E6008AA562CCE9D9A1F7DA6 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233322e302f32332d3234203d3e203535373031.roa Signing time: Mon 01 Jul 2024 01:05:58 +0000 ROA not before: Mon 01 Jul 2024 01:00:58 +0000 ROA not after: Mon 30 Jun 2025 01:05:58 +0000 asID: 55701 IP address blocks: 103.31.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b9:34:3d:d9:03:e4:22:6e:60:08:aa:56:2c:ce:9d:9a:1f:7d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jul 1 01:00:58 2024 GMT Not After : Jun 30 01:05:58 2025 GMT Subject: CN=5E2F5838133183234FE9ECA3D3B75261EB6D3E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:d7:6e:9d:4f:8b:e4:1e:58:69:3c:fd:8a: b6:04:81:d5:90:a1:f8:85:fb:fc:41:bb:c0:4e:77: f7:e9:ad:7f:65:9b:70:11:f7:9a:21:b4:39:c8:79: 94:56:cc:79:a9:a5:9f:3d:08:b8:2e:95:7e:9d:78: e2:bb:95:81:46:41:5c:df:be:b4:34:09:a2:6c:ca: c9:9f:e5:5c:a2:8d:ad:57:0b:7f:d2:87:60:d1:34: 84:5d:40:c9:88:1e:f4:de:9a:ca:82:d8:f6:40:0f: 0a:9a:68:28:91:3a:f7:f4:80:10:69:2a:57:88:3e: 30:27:60:4e:34:18:55:2e:6d:8d:4b:e9:2b:90:b3: d1:f3:09:62:e0:93:93:0b:b2:23:d6:67:8f:42:80: bf:e3:cf:00:1e:de:4c:35:72:f4:70:a6:6f:4b:f9: c3:9b:49:41:c2:a7:d1:27:d7:fc:69:35:14:eb:b2: 44:14:b9:ba:7a:01:93:09:51:91:54:7c:c7:17:89: 96:6d:c7:a2:d4:f5:b1:08:f3:b6:d1:de:9f:d7:9a: c4:57:90:8d:cd:c7:a8:bc:c2:fa:c1:32:f7:8d:59: c6:02:aa:86:7f:2f:12:28:38:35:f9:84:ba:ac:a6: 41:04:77:d2:0a:04:3b:d9:31:0c:d5:6d:2b:29:9a: c6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2F:58:38:13:31:83:23:4F:E9:EC:A3:D3:B7:52:61:EB:6D:3E:6A X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233322e302f32332d3234203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.232.0/23 Signature Algorithm: sha256WithRSAEncryption 42:fc:e3:fd:f7:61:14:e1:7e:f1:3f:42:73:51:94:18:ec:e1: 41:86:45:e2:2b:1d:55:21:b3:d1:f1:f4:ce:d8:d1:79:3e:19: e8:88:0f:c7:3b:76:27:d2:c6:93:1d:8b:98:ad:f2:0d:72:38: 49:8c:76:53:ff:f8:c3:62:b5:8c:83:b1:b5:27:a1:8b:3b:8c: fc:c4:42:ba:d4:8d:34:f9:4e:9b:39:32:35:98:f9:9d:f5:e4: 9d:bc:34:e9:ab:4e:ab:18:18:46:4c:1a:d2:ae:b9:ce:9b:f5: 64:0f:af:2d:f9:4d:89:5b:1f:bf:ff:11:a5:60:bc:be:a8:84: 15:60:b9:2f:39:e9:34:ac:70:ad:67:eb:33:75:0d:fb:9a:a1: 7f:7f:d1:c7:00:39:a8:f1:c6:b0:ca:cd:e4:6f:d0:27:d7:15: 5f:29:ab:be:1a:a5:8f:c5:c8:bc:f2:ae:fb:c4:1e:c7:6b:77: dd:0c:5b:1d:16:6f:59:61:7c:4b:06:92:09:3d:35:b1:35:6c: fd:da:87:32:f3:32:8f:a5:c1:48:03:ef:f6:bc:aa:e8:57:6b: 09:8f:c9:5c:1d:08:53:84:b4:21:a1:ec:80:8f:e6:a4:f7:48: 66:81:b6:02:b8:83:8c:98:8d:02:e1:ca:68:0f:a2:ff:4c:c9: 79:9a:cd:be -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbrk0PdkD5CJuYAiqVizOnZoffaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA3MDEwMTAwNThaFw0yNTA2MzAwMTA1NThaMDMxMTAvBgNV BAMTKDVFMkY1ODM4MTMzMTgzMjM0RkU5RUNBM0QzQjc1MjYxRUI2RDNFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Z9dunU+L5B5YaTz9irYEgdWQ ofiF+/xBu8BOd/fprX9lm3AR95ohtDnIeZRWzHmppZ89CLgulX6deOK7lYFGQVzf vrQ0CaJsysmf5Vyija1XC3/Sh2DRNIRdQMmIHvTemsqC2PZADwqaaCiROvf0gBBp KleIPjAnYE40GFUubY1L6SuQs9HzCWLgk5MLsiPWZ49CgL/jzwAe3kw1cvRwpm9L +cObSUHCp9En1/xpNRTrskQUubp6AZMJUZFUfMcXiZZtx6LU9bEI87bR3p/XmsRX kI3Nx6i8wvrBMveNWcYCqoZ/LxIoODX5hLqspkEEd9IKBDvZMQzVbSspmsarAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXi9YOBMxgyNP6eyj07dSYettPmowHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMxMzAzMzJlMzMzMTJlMzIzMzMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzUzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcf6DANBgkqhkiG 9w0BAQsFAAOCAQEAQvzj/fdhFOF+8T9Cc1GUGOzhQYZF4isdVSGz0fH0ztjReT4Z 6IgPxzt2J9LGkx2LmK3yDXI4SYx2U//4w2K1jIOxtSehizuM/MRCutSNNPlOmzky NZj5nfXknbw06atOqxgYRkwa0q65zpv1ZA+vLflNiVsfv/8RpWC8vqiEFWC5Lznp NKxwrWfrM3UN+5qhf3/RxwA5qPHGsMrN5G/QJ9cVXymrvhqlj8XIvPKu+8Qex2t3 3QxbHRZvWWF8SwaSCT01sTVs/dqHMvMyj6XBSAPv9ryq6FdrCY/JXB0IU4S0IaHs gI/mpPdIZoG2AriDjJiNAuHKaA+i/0zJeZrNvg== -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org