$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa File: 3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa (raw, json) Hash identifier: Q/vj8e8aAkRGeQkUCDDQE56ayYlvn1SjQG2hHxKRj0A= Subject key identifier: 77:06:4D:B8:CC:96:A7:48:4F:9A:AC:F1:D6:6D:CA:B4:FA:1D:16:0B Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 58C976F137CB9CE8510AFAD1C0212CB66E77AC9D Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa Signing time: Wed 20 Nov 2024 10:03:11 +0000 ROA not before: Wed 20 Nov 2024 09:58:11 +0000 ROA not after: Wed 19 Nov 2025 10:03:11 +0000 asID: 58487 IP address blocks: 103.253.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c9:76:f1:37:cb:9c:e8:51:0a:fa:d1:c0:21:2c:b6:6e:77:ac:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Nov 20 09:58:11 2024 GMT Not After : Nov 19 10:03:11 2025 GMT Subject: CN=77064DB8CC96A7484F9AACF1D66DCAB4FA1D160B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:db:b4:26:68:2a:f9:83:57:18:5f:d6:da: 2b:ee:7a:bd:2f:6b:75:92:58:25:b1:74:63:da:63: 47:85:8a:5c:55:ee:20:64:52:20:32:2e:ba:9a:93: 5a:83:ac:18:8f:aa:79:6c:bf:6e:cc:56:f3:79:bb: 2c:1d:d9:33:53:2f:4b:72:09:50:e2:9e:43:a1:6e: 6f:b7:82:c6:41:24:41:bd:a3:59:28:f0:f7:99:00: 73:91:2e:d9:07:70:e5:ec:fb:dc:16:0c:c4:f5:31: b2:ed:0a:30:39:f4:de:82:e3:de:b2:97:20:53:94: d2:38:b3:26:0c:69:88:ff:b9:23:5b:67:46:e3:51: 0c:49:91:bc:7b:58:7d:8e:91:77:b9:ab:d1:9c:2b: e2:6f:94:12:5a:35:c9:ab:94:cd:6b:60:81:3c:27: 0f:40:4e:dc:e8:ff:01:ec:5d:b8:72:9c:9e:b1:4f: 30:a4:80:1b:f8:a3:fc:34:21:5d:14:30:d1:28:3a: 35:d3:b6:f5:d8:09:f6:eb:15:11:4c:a1:54:ea:26: 26:97:cb:3a:5e:c6:ab:77:3d:2e:f4:8a:dc:32:12: 68:49:c0:f6:61:13:d3:26:75:4e:e9:62:ab:1b:6a: eb:af:c8:50:3f:5e:bb:95:5d:d1:b0:2e:a6:05:bb: 2f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:06:4D:B8:CC:96:A7:48:4F:9A:AC:F1:D6:6D:CA:B4:FA:1D:16:0B X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.212.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:10:ed:c2:f1:b2:76:79:02:a2:0a:b8:93:03:64:a1:dd:59: ee:3f:5a:43:df:42:44:e3:f4:51:05:8e:b3:45:7c:1a:31:ca: 29:b4:5b:b5:6b:f3:c0:4c:31:0f:db:6f:d1:c3:00:59:cd:d4: 93:b1:82:60:ef:54:8b:f7:ae:80:55:33:95:b7:0a:61:90:32: f7:29:24:6b:fd:94:e0:9c:66:4b:07:f2:7e:42:07:41:03:91: 5a:8c:69:11:0c:58:63:43:d7:7a:8e:bd:b0:0a:7b:a5:e2:a6: c0:16:bd:34:40:77:65:b5:11:4e:a6:52:34:d3:fe:02:47:6a: 98:b0:b2:cf:36:f9:46:9a:dc:59:56:10:de:0f:50:6f:3d:d7: bb:7f:c9:93:96:c7:c6:f5:b2:bc:7b:47:24:5a:14:4c:f2:03: d7:b6:fb:81:de:69:f6:90:f1:fb:ae:97:ac:3d:c1:48:30:87: 16:cd:16:32:7e:87:34:64:f9:9d:7c:e1:60:2d:59:d8:da:e1: 6f:cb:f7:0b:22:1b:18:eb:9e:40:da:44:7e:f4:63:c9:09:b5: 66:1e:37:69:b7:b4:be:65:f8:be:c6:8a:1b:64:f5:29:39:bc: 2b:ae:53:69:75:25:7a:ad:c4:97:8c:d4:76:13:dc:22:b7:6e: 75:87:14:cb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWMl28TfLnOhRCvrRwCEstm53rJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNDExMjAwOTU4MTFaFw0yNTExMTkxMDAzMTFaMDMxMTAvBgNV BAMTKDc3MDY0REI4Q0M5NkE3NDg0RjlBQUNGMUQ2NkRDQUI0RkExRDE2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJB9u0Jmgq+YNXGF/W2ivuer0v a3WSWCWxdGPaY0eFilxV7iBkUiAyLrqak1qDrBiPqnlsv27MVvN5uywd2TNTL0ty CVDinkOhbm+3gsZBJEG9o1ko8PeZAHORLtkHcOXs+9wWDMT1MbLtCjA59N6C496y lyBTlNI4syYMaYj/uSNbZ0bjUQxJkbx7WH2OkXe5q9GcK+JvlBJaNcmrlM1rYIE8 Jw9ATtzo/wHsXbhynJ6xTzCkgBv4o/w0IV0UMNEoOjXTtvXYCfbrFRFMoVTqJiaX yzpexqt3PS70itwyEmhJwPZhE9MmdU7pYqsbauuvyFA/XruVXdGwLqYFuy9lAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdwZNuMyWp0hPmqzx1m3KtPodFgswHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMxMzAzMzJlMzIzNTMzMmUzMjMxMzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNTM4MzQzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/3UMA0GCSqG SIb3DQEBCwUAA4IBAQAvEO3C8bJ2eQKiCriTA2Sh3VnuP1pD30JE4/RRBY6zRXwa McoptFu1a/PATDEP22/RwwBZzdSTsYJg71SL966AVTOVtwphkDL3KSRr/ZTgnGZL B/J+QgdBA5FajGkRDFhjQ9d6jr2wCnul4qbAFr00QHdltRFOplI00/4CR2qYsLLP NvlGmtxZVhDeD1BvPde7f8mTlsfG9bK8e0ckWhRM8gPXtvuB3mn2kPH7rpesPcFI MIcWzRYyfoc0ZPmdfOFgLVnY2uFvy/cLIhsY655A2kR+9GPJCbVmHjdpt7S+Zfi+ xoobZPUpObwrrlNpdSV6rcSXjNR2E9wit251hxTL -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org