$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa File: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (raw, json) Hash identifier: z7JSBWPGJlOn/ZqqGa8az/lIZkw26RQslHPZ9GMpJ4M= Subject key identifier: 8A:A0:B6:76:F1:2A:17:05:9B:10:35:80:E0:B1:B3:53:C2:D4:AD:68 Certificate issuer: /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Certificate serial: 507AC2E33A3541C208DEF6C021A14FF491E2F68E Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa Signing time: Fri 30 Aug 2024 00:45:08 +0000 ROA not before: Fri 30 Aug 2024 00:40:08 +0000 ROA not after: Fri 29 Aug 2025 00:45:08 +0000 asID: 136847 IP address blocks: 103.103.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7a:c2:e3:3a:35:41:c2:08:de:f6:c0:21:a1:4f:f4:91:e2:f6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Validity Not Before: Aug 30 00:40:08 2024 GMT Not After : Aug 29 00:45:08 2025 GMT Subject: CN=8AA0B676F12A17059B103580E0B1B353C2D4AD68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:3a:19:be:da:5d:26:a1:2d:a1:6c:2a:6a: d3:bd:8e:d3:a4:bb:b1:21:5f:ed:75:eb:e6:b0:2b: ec:9b:9c:3d:ca:ab:42:d0:8b:57:2d:7a:11:02:fa: a7:8c:46:f9:ad:ec:52:10:df:e5:5c:95:aa:d0:38: 77:81:65:ac:43:02:60:5d:c5:5b:3c:2d:e5:e4:e8: eb:c2:ba:0a:b7:c9:23:53:52:3c:c4:3f:8a:b1:38: 57:d1:42:2b:a5:f9:7f:14:55:ec:68:a4:57:b7:dc: 1a:29:51:5b:22:a8:e0:b1:58:6f:7a:03:58:74:7b: 54:59:f5:6a:8a:0e:ba:55:d5:4e:43:09:c4:0d:db: bf:bb:e2:af:4b:8b:39:c7:38:bd:d3:83:11:3c:63: e7:95:90:f3:3d:6f:07:5c:de:89:3b:b9:ad:a5:2a: b3:a5:89:f5:98:70:a3:79:cb:9c:ab:f1:d6:fa:41: 37:34:aa:68:b7:a2:f5:6d:8f:dc:0f:77:fe:10:1b: bf:e1:4c:b0:56:1c:1e:8f:47:f1:b3:1f:38:75:ad: 6f:aa:09:85:3d:20:d9:cc:36:de:fa:c9:5a:8c:e3: 46:a4:9a:1d:a6:c8:0c:ce:6a:06:92:3f:a2:c7:99: a2:84:f1:fa:0f:52:b2:df:b9:ec:c4:e2:50:04:82: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A0:B6:76:F1:2A:17:05:9B:10:35:80:E0:B1:B3:53:C2:D4:AD:68 X509v3 Authority Key Identifier: keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.103.180.0/23 Signature Algorithm: sha256WithRSAEncryption 10:ce:b4:88:04:a8:f2:c0:c6:07:6a:7d:22:43:70:cb:d8:a5: 4a:6b:0e:cc:38:06:1d:ae:ba:32:85:1a:5a:de:e6:bd:0a:0c: ae:86:39:b7:96:7f:ae:68:38:00:ff:6a:f1:b7:b0:42:cd:fb: ee:59:79:75:4f:80:c1:0d:01:08:ae:0e:ea:2b:22:67:13:96: b2:08:7a:15:cd:d5:3d:7e:9f:5f:72:36:38:2b:57:e1:e1:79: 62:20:32:29:13:82:b4:95:63:a4:88:f7:b0:0e:65:0c:09:58: 61:2c:47:72:ee:5d:81:6f:63:11:be:f8:f3:03:3d:3f:ec:99: 45:0b:c1:7a:52:91:05:17:70:a1:52:51:c0:83:35:04:1a:89: 1f:53:42:2c:3c:15:5c:ca:61:ee:4c:ad:ec:7a:20:c4:cf:fe: fd:50:5b:3e:c5:5d:f5:dd:d1:b8:26:fa:03:00:71:1f:64:f8: d9:3a:37:9f:9b:f6:96:7c:0e:a6:63:b7:65:c4:87:71:ac:a7: 6e:83:b6:d0:11:2c:17:22:6e:a3:75:b5:97:f0:cc:57:53:fa: 17:0a:e6:c3:be:f9:de:2c:7a:34:c7:19:c8:64:ff:7e:12:d7: 54:10:c8:48:27:ef:6c:3b:d3:4f:6f:a7:95:c8:db:34:b9:58: 9b:94:25:99 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUHrC4zo1QcII3vbAIaFP9JHi9o4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcw RERDQkM5MjAeFw0yNDA4MzAwMDQwMDhaFw0yNTA4MjkwMDQ1MDhaMDMxMTAvBgNV BAMTKDhBQTBCNjc2RjEyQTE3MDU5QjEwMzU4MEUwQjFCMzUzQzJENEFENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrhDoZvtpdJqEtoWwqatO9jtOk u7EhX+116+awK+ybnD3Kq0LQi1ctehEC+qeMRvmt7FIQ3+VclarQOHeBZaxDAmBd xVs8LeXk6OvCugq3ySNTUjzEP4qxOFfRQiul+X8UVexopFe33BopUVsiqOCxWG96 A1h0e1RZ9WqKDrpV1U5DCcQN27+74q9LiznHOL3TgxE8Y+eVkPM9bwdc3ok7ua2l KrOlifWYcKN5y5yr8db6QTc0qmi3ovVtj9wPd/4QG7/hTLBWHB6PR/GzHzh1rW+q CYU9INnMNt76yVqM40akmh2myAzOagaSP6LHmaKE8foPUrLfuezE4lAEghm9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUiqC2dvEqFwWbEDWA4LGzU8LUrWgwHwYDVR0j BBgwFoAUaiANb8VDTa1hBs7lQ5yhJw3cvJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC82QTIwMEQ2RkM1 NDM0REFENjEwNkNFRTU0MzlDQTEyNzBERENCQzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEyMDBENkZDNTQzNERBRDYxMDZDRUU1NDM5Q0ExMjcwRERD QkM5Mi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4ZDBmY2E4LTVjMmQtNGUzNS1i ZDdkLWI0NDhhYTc1ZjJiZS8wLzMxMzAzMzJlMzEzMDMzMmUzMTM4MzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzODM0Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnZ7QwDQYJ KoZIhvcNAQELBQADggEBABDOtIgEqPLAxgdqfSJDcMvYpUprDsw4Bh2uujKFGlre 5r0KDK6GObeWf65oOAD/avG3sELN++5ZeXVPgMENAQiuDuorImcTlrIIehXN1T1+ n19yNjgrV+HheWIgMikTgrSVY6SI97AOZQwJWGEsR3LuXYFvYxG++PMDPT/smUUL wXpSkQUXcKFSUcCDNQQaiR9TQiw8FVzKYe5Mrex6IMTP/v1QWz7FXfXd0bgm+gMA cR9k+Nk6N5+b9pZ8DqZjt2XEh3Gsp26DttARLBcibqN1tZfwzFdT+hcK5sO++d4s ejTHGchk/34S11QQyEgn72w7009vp5XI2zS5WJuUJZk= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:21 2024 by rpki-client on console-fra.rpki-client.org