$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa File: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (raw, json) Hash identifier: UhjsO7lD25cbpz0y9rL87C+R4mYJnmib/l7Rh5H6U/k= Subject key identifier: 28:CB:50:16:E6:27:C6:61:F7:24:39:C0:A8:1B:3B:24:EB:AB:06:C0 Certificate issuer: /CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Certificate serial: 68EEDA408F263943B2982A44A5303A073194B24E Authority key identifier: 5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa Signing time: Mon 01 Jul 2024 01:04:56 +0000 ROA not before: Mon 01 Jul 2024 00:59:56 +0000 ROA not after: Mon 30 Jun 2025 01:04:56 +0000 asID: 138828 IP address blocks: 103.137.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ee:da:40:8f:26:39:43:b2:98:2a:44:a5:30:3a:07:31:94:b2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Validity Not Before: Jul 1 00:59:56 2024 GMT Not After : Jun 30 01:04:56 2025 GMT Subject: CN=28CB5016E627C661F72439C0A81B3B24EBAB06C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:15:01:ed:48:c2:b6:86:5b:89:c2:fc:12: 04:06:72:ef:2e:68:03:bf:fd:4a:74:c7:45:e7:44: 35:7e:88:a7:c7:d7:ae:64:66:85:23:f4:ef:a3:83: 8b:f3:dc:65:1b:40:90:ff:7c:5a:d3:25:c4:9e:e8: 08:f0:42:95:48:86:fb:29:7a:05:b8:03:d6:22:9c: 18:ae:4f:49:e5:70:2e:45:bf:35:36:b8:f2:bc:a1: c4:a1:33:b8:06:38:c2:a3:0c:fb:69:58:99:2d:d5: e5:fc:fa:56:87:fe:fa:5d:e6:52:3c:84:09:a4:bd: 38:ef:64:82:c8:2d:4a:4f:1d:f5:44:95:76:53:c1: cc:95:b9:b1:00:e9:ab:0d:7d:a3:5a:c7:c2:69:80: 43:b6:74:b0:2e:20:ac:02:5f:3b:58:c6:39:d1:c5: 2a:94:7b:ee:73:7f:02:12:c5:b1:b8:bb:7f:90:d7: 4c:0f:bf:55:b1:05:1e:77:5f:d4:6c:7b:e5:32:44: f9:1a:a4:8d:2f:81:18:7b:57:e5:cb:54:14:fa:62: 4b:e3:f3:b3:b8:5c:a4:77:0b:fc:e5:c2:b7:2e:e8: 28:ec:04:5c:57:54:25:60:e7:79:36:88:b4:52:9b: 04:e8:7c:ba:06:f1:c2:20:f2:ee:2e:1d:19:db:88: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CB:50:16:E6:27:C6:61:F7:24:39:C0:A8:1B:3B:24:EB:AB:06:C0 X509v3 Authority Key Identifier: keyid:5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.82.0/23 Signature Algorithm: sha256WithRSAEncryption 49:23:4c:60:37:d4:4c:f8:0a:d7:c1:92:d9:6d:c7:b9:c0:81: 37:75:97:c1:d0:d1:78:f1:66:83:5e:5a:ab:64:cf:61:48:59: f5:43:3d:99:45:e1:a5:3f:c3:7e:87:30:62:d7:9e:b3:99:be: ff:08:22:20:5b:0b:34:72:b7:2c:91:2c:3d:f1:e7:8c:86:71: 3d:0f:ab:d5:4b:cb:48:4d:e8:61:e5:d4:84:ea:b2:33:75:cd: 41:82:29:7a:a1:f2:99:25:1c:1f:d1:1b:59:08:fe:a8:4e:0f: 4e:92:7c:da:2e:60:3c:44:b2:9e:8a:76:ab:6f:26:bf:54:57: 51:eb:c8:be:27:04:2e:2a:04:19:59:b8:a8:3a:3f:d2:9a:4c: 03:66:91:ac:aa:1b:d3:3c:d5:b3:0f:5d:12:37:6c:1e:ae:f0: 18:c5:6e:2d:17:f0:54:ef:6b:d3:fc:e3:ac:02:ea:d1:07:57: 7a:29:0b:03:39:11:9b:5a:41:64:5f:d4:9a:fc:29:a6:d9:e2: c0:5e:cb:81:4d:9d:27:a4:18:22:73:fe:09:f0:0c:52:8c:17: fd:f4:29:3d:7d:1d:7d:51:fc:47:80:05:17:0a:82:cd:f5:75: 4d:be:c9:05:1b:9c:2f:79:03:d4:38:a1:35:3e:a8:fb:ae:a2: 3c:61:15:c4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaO7aQI8mOUOymCpEpTA6BzGUsk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5 QkYzQjlGMDAeFw0yNDA3MDEwMDU5NTZaFw0yNTA2MzAwMTA0NTZaMDMxMTAvBgNV BAMTKDI4Q0I1MDE2RTYyN0M2NjFGNzI0MzlDMEE4MUIzQjI0RUJBQjA2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxXBUB7UjCtoZbicL8EgQGcu8u aAO//Up0x0XnRDV+iKfH165kZoUj9O+jg4vz3GUbQJD/fFrTJcSe6AjwQpVIhvsp egW4A9YinBiuT0nlcC5FvzU2uPK8ocShM7gGOMKjDPtpWJkt1eX8+laH/vpd5lI8 hAmkvTjvZILILUpPHfVElXZTwcyVubEA6asNfaNax8JpgEO2dLAuIKwCXztYxjnR xSqUe+5zfwISxbG4u3+Q10wPv1WxBR53X9Rse+UyRPkapI0vgRh7V+XLVBT6Ykvj 87O4XKR3C/zlwrcu6CjsBFxXVCVg53k2iLRSmwTofLoG8cIg8u4uHRnbiOiBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKMtQFuYnxmH3JDnAqBs7JOurBsAwHwYDVR0j BBgwFoAUXn5KY8cVspbVl7WqP+gAYJvzufAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU2Y2Q0MS0yZTRjLTRjYzItODgxZS1iYWI0NGE4ODRmZDQvMC81RTdFNEE2M0M3 MTVCMjk2RDU5N0I1QUEzRkU4MDA2MDlCRjNCOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5QkYz QjlGMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhZTZjZDQxLTJlNGMtNGNjMi04 ODFlLWJhYjQ0YTg4NGZkNC8wLzMxMzAzMzJlMzEzMzM3MmUzODMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4lSMA0GCSqG SIb3DQEBCwUAA4IBAQBJI0xgN9RM+ArXwZLZbce5wIE3dZfB0NF48WaDXlqrZM9h SFn1Qz2ZReGlP8N+hzBi156zmb7/CCIgWws0crcskSw98eeMhnE9D6vVS8tITehh 5dSE6rIzdc1Bgil6ofKZJRwf0RtZCP6oTg9OknzaLmA8RLKeinarbya/VFdR68i+ JwQuKgQZWbioOj/SmkwDZpGsqhvTPNWzD10SN2wervAYxW4tF/BU72vT/OOsAurR B1d6KQsDORGbWkFkX9Sa/Cmm2eLAXsuBTZ0npBgic/4J8AxSjBf99Ck9fR19UfxH gAUXCoLN9XVNvskFG5wveQPUOKE1Pqj7rqI8YRXE -----END CERTIFICATE-----Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org