$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa File: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (raw, json) Hash identifier: 7wk2FS1q0MY6UUysFgAzRf+hpYiSaDcdE1K4QdpVo+4= Subject key identifier: CA:74:26:2F:56:C7:9B:B2:84:3D:09:63:C6:BB:77:87:33:AD:D8:2C Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 6682916C8A771956E6100F4DBA1B4650BAFCCFEE Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa Signing time: Mon 01 Jul 2024 01:05:23 +0000 ROA not before: Mon 01 Jul 2024 01:00:23 +0000 ROA not after: Mon 30 Jun 2025 01:05:23 +0000 asID: 137331 IP address blocks: 103.133.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:82:91:6c:8a:77:19:56:e6:10:0f:4d:ba:1b:46:50:ba:fc:cf:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Jul 1 01:00:23 2024 GMT Not After : Jun 30 01:05:23 2025 GMT Subject: CN=CA74262F56C79BB2843D0963C6BB778733ADD82C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f2:1f:6f:db:48:d8:7c:34:97:32:7a:c7:8b: d9:4d:88:3d:e5:39:a7:43:09:4a:07:50:6d:a2:41: 5c:d5:c2:5c:e5:1a:a8:74:1c:69:09:76:90:05:b7: 83:7c:a2:85:d9:1e:46:b4:37:66:13:18:3d:5e:f2: 47:92:75:7c:6e:b2:d2:ea:47:71:b1:5c:2e:ba:07: b0:44:87:1d:28:06:3c:4f:cc:c8:d6:69:ff:3e:eb: dd:d8:ec:a0:f4:d8:28:18:72:0a:92:8d:78:59:81: a6:7b:b5:19:2b:f5:28:56:49:66:39:6b:7b:c4:43: 83:b8:43:d3:af:ee:b9:7d:07:d4:6e:69:a3:e3:17: bc:a6:19:a5:9e:ec:43:07:11:f8:bd:87:b7:46:d8: 4d:d8:c5:a2:24:23:01:7c:8f:50:c1:71:79:24:cd: e6:d1:1f:71:0e:71:57:b8:ed:07:91:87:0e:e6:e0: 3d:65:8c:b0:0f:3f:89:47:db:5c:c6:12:73:4d:a4: 43:9d:6e:b4:1c:04:f8:f9:ce:3d:74:b9:e0:13:dc: 6b:55:75:09:3d:9e:1e:0f:d7:04:30:18:a1:6d:bd: 63:11:31:aa:33:eb:d5:45:ee:67:7d:49:43:10:fd: 90:0f:0c:83:ac:4d:a7:88:e9:ff:01:fd:cd:a8:5e: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:74:26:2F:56:C7:9B:B2:84:3D:09:63:C6:BB:77:87:33:AD:D8:2C X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.222.0/23 Signature Algorithm: sha256WithRSAEncryption 35:35:e4:07:79:0f:69:8b:15:95:73:bf:0c:ef:02:50:80:fc: 64:7d:27:1a:bb:92:df:da:5c:aa:ce:32:dc:a8:1f:a3:a1:10: f3:b5:5c:67:53:8c:e9:69:e3:bc:86:25:a3:bd:53:58:38:62: b0:8d:f2:10:5f:15:f0:de:ec:e7:5e:33:71:22:31:8c:1c:0a: 2a:71:b7:ea:2f:ae:9b:d9:e5:04:40:30:a1:04:ce:bf:9b:ce: e5:78:6c:2d:6e:14:fa:74:88:c5:ed:67:de:ed:0c:33:05:11: 63:22:e3:0e:63:b7:f9:09:7e:be:d3:18:56:9e:dd:e4:14:4c: 0f:ba:c4:db:f3:a4:c1:88:73:f7:a1:27:7d:2b:90:5f:59:e0: 18:ac:41:c7:8e:51:73:e1:b6:61:a1:49:b0:92:fe:6b:b4:3c: 2e:33:67:95:9d:ad:1a:90:8d:e3:69:ff:f8:b8:d1:39:91:2e: 68:75:b0:f1:6f:1d:2b:cc:09:62:ca:63:de:ef:5b:82:cb:2a: 45:40:1e:b9:b8:03:b5:ae:b3:d4:ed:ef:d7:fb:70:85:57:3d: 8d:76:69:06:ca:58:87:44:32:3a:12:30:75:2e:3a:c1:2c:50: 81:47:e9:5c:36:a1:06:c6:74:8a:8a:4e:d8:73:42:43:0d:62: 6d:f2:bc:c5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZoKRbIp3GVbmEA9NuhtGULr8z+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNDA3MDEwMTAwMjNaFw0yNTA2MzAwMTA1MjNaMDMxMTAvBgNV BAMTKENBNzQyNjJGNTZDNzlCQjI4NDNEMDk2M0M2QkI3Nzg3MzNBREQ4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj8h9v20jYfDSXMnrHi9lNiD3l OadDCUoHUG2iQVzVwlzlGqh0HGkJdpAFt4N8ooXZHka0N2YTGD1e8keSdXxustLq R3GxXC66B7BEhx0oBjxPzMjWaf8+693Y7KD02CgYcgqSjXhZgaZ7tRkr9ShWSWY5 a3vEQ4O4Q9Ov7rl9B9RuaaPjF7ymGaWe7EMHEfi9h7dG2E3YxaIkIwF8j1DBcXkk zebRH3EOcVe47QeRhw7m4D1ljLAPP4lH21zGEnNNpEOdbrQcBPj5zj10ueAT3GtV dQk9nh4P1wQwGKFtvWMRMaoz69VF7md9SUMQ/ZAPDIOsTaeI6f8B/c2oXiWLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUynQmL1bHm7KEPQljxrt3hzOt2CwwHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmZDgwZDk2LWVmMWItNDRiMi05 MDNhLTdmNmRhOTQxYTgzNi8wLzMxMzAzMzJlMzEzMzMzMmUzMjMyMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnhd4wDQYJ KoZIhvcNAQELBQADggEBADU15Ad5D2mLFZVzvwzvAlCA/GR9Jxq7kt/aXKrOMtyo H6OhEPO1XGdTjOlp47yGJaO9U1g4YrCN8hBfFfDe7OdeM3EiMYwcCipxt+ovrpvZ 5QRAMKEEzr+bzuV4bC1uFPp0iMXtZ97tDDMFEWMi4w5jt/kJfr7TGFae3eQUTA+6 xNvzpMGIc/ehJ30rkF9Z4BisQceOUXPhtmGhSbCS/mu0PC4zZ5WdrRqQjeNp//i4 0TmRLmh1sPFvHSvMCWLKY97vW4LLKkVAHrm4A7Wus9Tt79f7cIVXPY12aQbKWIdE MjoSMHUuOsEsUIFH6Vw2oQbGdIqKTthzQkMNYm3yvMU= -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:07 2024 by rpki-client on console-ams.rpki-client.org