$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233352e302f32342d3234203d3e203535373031.roa File: 3130332e33312e3233352e302f32342d3234203d3e203535373031.roa (raw, json) Hash identifier: Pl0k84M+uRUK3d2s5+JiFSNduQ79jcJskl6fGOuHObU= Subject key identifier: 12:04:6D:CA:4B:7E:E5:12:64:B4:E2:40:6B:0C:F0:5E:87:76:22:A3 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 042B10BC8C8E8C04F70456524F7B27475489BA01 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233352e302f32342d3234203d3e203535373031.roa Signing time: Wed 11 Sep 2024 03:00:02 +0000 ROA not before: Wed 11 Sep 2024 02:55:02 +0000 ROA not after: Wed 10 Sep 2025 03:00:02 +0000 asID: 55701 IP address blocks: 103.31.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2b:10:bc:8c:8e:8c:04:f7:04:56:52:4f:7b:27:47:54:89:ba:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Sep 11 02:55:02 2024 GMT Not After : Sep 10 03:00:02 2025 GMT Subject: CN=12046DCA4B7EE51264B4E2406B0CF05E877622A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:59:79:9e:e7:33:f8:7a:00:71:59:f4:b2: 6e:07:17:ac:69:c8:32:e6:fd:cf:7d:e7:84:f2:5f: aa:c3:1d:7f:aa:b5:cd:c9:15:1e:43:0d:8a:75:77: af:10:76:fb:f4:7d:31:55:08:6f:2f:e5:cc:39:11: 5e:de:61:0d:78:a6:6e:b7:8b:ed:59:e5:76:c5:6c: 46:88:2e:10:80:2f:7f:a2:e6:6e:74:fb:62:65:07: 3d:5f:cb:d5:cf:06:8a:cc:93:3c:82:4a:cc:71:9b: 5c:27:32:68:d0:c1:a8:44:c3:fc:65:01:1d:5f:05: d4:b3:e6:24:c5:f7:f1:d2:39:71:fe:b5:d0:01:be: be:14:99:e3:32:10:e7:6c:97:32:7b:45:d8:77:5d: f3:32:23:12:59:47:e6:21:fc:ca:72:99:b0:60:aa: 5d:3b:5d:02:b6:5a:a3:7b:7b:26:8c:32:76:04:ef: 04:8f:52:91:28:69:b6:e6:28:79:16:03:1e:d5:9c: 53:6f:24:6c:a8:77:62:92:62:08:ae:a3:80:8e:e4: 24:c0:3d:0f:c9:81:d0:6a:f6:6f:a1:4a:c3:99:00: 82:4c:22:7f:37:1b:15:20:a1:04:0f:f0:06:d9:5b: c9:04:45:57:a0:38:ac:a8:a9:18:a7:48:a6:31:f5: f5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:04:6D:CA:4B:7E:E5:12:64:B4:E2:40:6B:0C:F0:5E:87:76:22:A3 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233352e302f32342d3234203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.235.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c0:82:c6:de:03:e6:cb:c8:fb:5d:a7:e7:36:89:4f:06:f2: 4a:57:69:c6:00:ba:e4:07:eb:36:f1:13:4c:c6:f6:31:13:d6: ba:56:fb:b5:b8:f8:d5:37:54:96:2d:b1:4f:5e:60:70:8d:5d: a4:05:95:87:74:73:1c:50:61:70:26:cc:6c:69:f6:00:5c:56: 9b:e8:a2:59:e7:49:14:64:9b:a3:af:e5:c0:b0:85:b2:15:3f: 99:43:3b:30:5f:0c:76:c9:bb:11:46:3f:7d:b4:c8:d3:6a:22: b6:5f:8c:91:f2:cb:90:96:ff:07:90:f7:8c:c9:e3:83:eb:64: bd:58:30:ce:0c:34:f0:51:f7:1b:b0:99:5d:0c:4f:52:ae:01: a3:fb:38:b7:4d:d2:d3:f9:1b:f5:66:d1:d8:5e:34:e1:4a:ad: 32:52:79:47:42:73:f4:d2:1a:85:cb:12:e4:a3:78:b9:c6:15: ca:da:1b:6e:d6:3e:d5:bd:12:96:df:85:9a:e0:0b:55:36:ce: 55:32:8a:3c:18:69:23:2c:cd:72:c3:1d:01:c5:56:c7:db:ab: 30:6f:44:07:62:7c:c3:ae:ad:28:d2:bb:9d:f5:d7:24:2e:ef: 2b:43:24:f6:1d:b6:6b:1e:47:63:0c:8e:54:5b:ca:f9:5d:b0: 06:3f:b0:12 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBCsQvIyOjAT3BFZST3snR1SJugEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNDA5MTEwMjU1MDJaFw0yNTA5MTAwMzAwMDJaMDMxMTAvBgNV BAMTKDEyMDQ2RENBNEI3RUU1MTI2NEI0RTI0MDZCMENGMDVFODc3NjIyQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKVl5nucz+HoAcVn0sm4HF6xp yDLm/c9954TyX6rDHX+qtc3JFR5DDYp1d68Qdvv0fTFVCG8v5cw5EV7eYQ14pm63 i+1Z5XbFbEaILhCAL3+i5m50+2JlBz1fy9XPBorMkzyCSsxxm1wnMmjQwahEw/xl AR1fBdSz5iTF9/HSOXH+tdABvr4UmeMyEOdslzJ7Rdh3XfMyIxJZR+Yh/MpymbBg ql07XQK2WqN7eyaMMnYE7wSPUpEoabbmKHkWAx7VnFNvJGyod2KSYgiuo4CO5CTA PQ/JgdBq9m+hSsOZAIJMIn83GxUgoQQP8AbZW8kERVegOKyoqRinSKYx9fVjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUEgRtykt+5RJktOJAawzwXod2IqMwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMxMzAzMzJlMzMzMTJlMzIzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcf6zANBgkqhkiG 9w0BAQsFAAOCAQEABcCCxt4D5svI+12n5zaJTwbySldpxgC65AfrNvETTMb2MRPW ulb7tbj41TdUli2xT15gcI1dpAWVh3RzHFBhcCbMbGn2AFxWm+iiWedJFGSbo6/l wLCFshU/mUM7MF8Mdsm7EUY/fbTI02oitl+MkfLLkJb/B5D3jMnjg+tkvVgwzgw0 8FH3G7CZXQxPUq4Bo/s4t03S0/kb9WbR2F404UqtMlJ5R0Jz9NIahcsS5KN4ucYV ytobbtY+1b0Slt+FmuALVTbOVTKKPBhpIyzNcsMdAcVWx9urMG9EB2J8w66tKNK7 nfXXJC7vK0Mk9h22ax5HYwyOVFvK+V2wBj+wEg== -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org