$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa File: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (raw, json) Hash identifier: jacU4c2UenPX8vzT/l1Osf9mSgEop22wfa5VW6r4QpQ= Subject key identifier: DF:61:E8:0C:43:DF:78:2A:22:FE:4D:4F:AC:F0:18:4F:B1:2A:2B:7A Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 2321F8B606465139913FE93FF677688A58FEBEDF Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa Signing time: Tue 14 May 2024 08:02:08 +0000 ROA not before: Tue 14 May 2024 07:57:08 +0000 ROA not after: Tue 13 May 2025 08:02:08 +0000 asID: 55662 IP address blocks: 103.71.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:21:f8:b6:06:46:51:39:91:3f:e9:3f:f6:77:68:8a:58:fe:be:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: May 14 07:57:08 2024 GMT Not After : May 13 08:02:08 2025 GMT Subject: CN=DF61E80C43DF782A22FE4D4FACF0184FB12A2B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1a:de:ae:b4:dc:30:15:0e:ce:88:bd:3a:47: cd:b4:34:56:dd:0c:47:4e:d4:1d:ee:68:e5:6e:fa: 0d:6a:8d:e5:94:33:b0:8b:06:b7:47:b8:9b:9e:97: de:50:a3:ad:06:d1:e9:bd:c7:bd:cf:a6:4e:ce:21: 14:33:fa:af:68:a4:6e:6a:ad:2a:2d:ea:a0:6a:aa: d0:8b:ac:3e:df:44:3c:89:a1:12:00:67:f7:6d:c0: 4a:49:5c:1f:be:93:32:d0:83:41:c2:89:d3:5c:71: 31:bd:4b:8a:1a:e0:6d:b5:ca:03:40:ab:a3:d4:e4: 75:f2:d7:33:ba:43:49:f9:8d:ab:a0:b6:4e:bd:cc: 41:a7:85:99:0a:51:7b:46:13:29:5f:5d:a3:6c:35: 9d:79:32:5d:b1:d4:3a:cb:d7:d1:0b:43:0c:e3:ad: 30:9a:9c:5b:a6:33:70:56:d6:24:f8:e7:a2:58:66: 0d:95:13:e4:48:46:d3:7e:63:3b:42:59:63:e6:42: 96:53:02:75:db:2d:fe:b4:03:01:05:26:c7:c2:0d: 40:e6:63:1a:da:b1:1d:7e:3c:02:24:51:3e:93:8d: d6:5b:b1:a6:24:78:14:46:e3:c0:64:7c:fd:3d:fc: 90:34:1b:37:21:45:4d:ee:b3:bf:34:64:e1:33:ef: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:61:E8:0C:43:DF:78:2A:22:FE:4D:4F:AC:F0:18:4F:B1:2A:2B:7A X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.8.0/23 Signature Algorithm: sha256WithRSAEncryption 07:1d:d7:42:b4:6c:92:c7:83:a3:3b:2e:79:19:9c:1c:12:ee: 2b:9f:59:4d:3e:31:4e:0c:76:0b:47:1c:8f:4b:cb:34:48:4c: ce:51:85:1d:d6:d3:75:c3:d7:c6:f2:0b:41:bd:11:a6:4f:b1: 9f:a3:4e:fb:74:ef:54:13:7c:41:ea:8a:a7:8a:0b:0c:81:db: c8:ba:da:a7:a1:13:97:ea:98:b7:41:cc:47:90:68:b8:50:9d: 53:44:b4:01:e6:9c:81:db:c6:b3:77:12:74:ca:e3:ee:66:51: ce:0a:09:cb:cd:cd:d2:b6:2f:06:b6:37:1d:1c:40:d5:55:c7: 7e:85:19:f8:9a:81:e4:b0:79:e6:08:88:1f:18:06:cf:cf:e3: 3f:ed:9f:44:78:f2:65:64:70:1a:57:eb:a7:3d:9e:83:7f:33: 63:b9:6d:5f:17:82:f3:c2:6a:c2:5c:36:82:32:83:10:6e:d6: 56:9c:3c:3f:ed:a5:23:05:9e:62:24:15:58:4e:4c:44:09:5d: d3:b4:11:88:95:44:14:20:ea:10:32:7b:19:5f:64:29:ad:34: 4c:a7:da:d4:88:31:ff:44:72:63:6c:16:36:d6:8c:4b:64:85: e6:29:28:57:4c:91:60:eb:6e:a0:38:96:99:f1:49:db:4a:c5: fd:49:6e:1e -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUIyH4tgZGUTmRP+k/9ndoilj+vt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNDA1MTQwNzU3MDhaFw0yNTA1MTMwODAyMDhaMDMxMTAvBgNV BAMTKERGNjFFODBDNDNERjc4MkEyMkZFNEQ0RkFDRjAxODRGQjEyQTJCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXGt6utNwwFQ7OiL06R820NFbd DEdO1B3uaOVu+g1qjeWUM7CLBrdHuJuel95Qo60G0em9x73Ppk7OIRQz+q9opG5q rSot6qBqqtCLrD7fRDyJoRIAZ/dtwEpJXB++kzLQg0HCidNccTG9S4oa4G21ygNA q6PU5HXy1zO6Q0n5jaugtk69zEGnhZkKUXtGEylfXaNsNZ15Ml2x1DrL19ELQwzj rTCanFumM3BW1iT456JYZg2VE+RIRtN+YztCWWPmQpZTAnXbLf60AwEFJsfCDUDm YxrasR1+PAIkUT6TjdZbsaYkeBRG48BkfP09/JA0GzchRU3us780ZOEz749NAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU32HoDEPfeCoi/k1PrPAYT7EqK3owHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvMzEzMDMzMmUzNzMxMmUzODJlMzAyZjMyMzMyZDMy MzQyMDNkM2UyMDM1MzUzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnRwgwDQYJKoZIhvcNAQEL BQADggEBAAcd10K0bJLHg6M7LnkZnBwS7iufWU0+MU4MdgtHHI9LyzRITM5RhR3W 03XD18byC0G9EaZPsZ+jTvt071QTfEHqiqeKCwyB28i62qehE5fqmLdBzEeQaLhQ nVNEtAHmnIHbxrN3EnTK4+5mUc4KCcvNzdK2Lwa2Nx0cQNVVx36FGfiageSweeYI iB8YBs/P4z/tn0R48mVkcBpX66c9noN/M2O5bV8XgvPCasJcNoIygxBu1lacPD/t pSMFnmIkFVhOTEQJXdO0EYiVRBQg6hAyexlfZCmtNEyn2tSIMf9EcmNsFjbWjEtk heYpKFdMkWDrbqA4lpnxSdtKxf1Jbh4= -----END CERTIFICATE-----Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org