$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa File: 3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa (raw, json) Hash identifier: tDryOwBTBVZxPeCJINJ19f1hs1r6uQY2drXPiyvQ7m8= Subject key identifier: 90:4A:FD:7B:5B:55:F8:B7:37:36:EE:06:CC:97:C8:68:03:8C:B9:E5 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 546BF2625C4EEB43A533FAEB3F52951C1329E4BB Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa Signing time: Sat 20 Jul 2024 07:37:36 +0000 ROA not before: Sat 20 Jul 2024 07:32:36 +0000 ROA not after: Sat 19 Jul 2025 07:37:36 +0000 asID: 139949 IP address blocks: 103.25.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6b:f2:62:5c:4e:eb:43:a5:33:fa:eb:3f:52:95:1c:13:29:e4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Jul 20 07:32:36 2024 GMT Not After : Jul 19 07:37:36 2025 GMT Subject: CN=904AFD7B5B55F8B73736EE06CC97C868038CB9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:c4:34:a2:da:97:50:3f:fd:85:17:f9:9f: b3:93:41:93:58:98:af:c9:42:cc:e2:c8:22:20:18: 58:8a:49:32:e8:59:e3:8d:f3:93:8d:fd:f1:84:86: 3a:7c:28:33:74:a2:a1:5b:fb:42:2d:0a:77:24:f8: 36:80:23:46:0b:06:38:b7:b4:35:6d:75:11:0d:13: a1:bf:a6:2e:a9:20:6b:71:c9:5b:4d:7a:a7:dc:ed: c4:2e:c5:0f:ea:f2:de:04:d1:ff:e5:88:57:a7:3d: 9f:25:59:46:38:f9:54:29:6f:fb:b6:3a:18:43:60: 70:5f:3e:20:d7:bf:1b:c6:3c:d3:ee:c3:f3:a1:d1: a7:ba:d0:6d:2e:c0:bb:03:15:d8:ea:28:1a:32:8a: 55:ca:af:27:8e:02:29:38:06:0f:b0:29:7a:e5:57: cb:34:27:57:24:fa:54:03:c3:b7:90:65:60:b9:50: 07:ec:fa:8d:33:c3:5c:db:93:48:68:ed:a6:f0:92: 4b:5e:e0:c8:9e:41:c1:c6:ea:62:70:53:cd:b9:57: b1:43:48:bd:07:52:0b:f6:1b:e9:96:20:70:5f:88: d2:52:05:0a:07:3c:00:2c:59:cb:4f:00:21:44:93: 63:6a:e5:b7:5b:c7:2b:7d:4d:a5:da:52:30:cb:f6: bb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4A:FD:7B:5B:55:F8:B7:37:36:EE:06:CC:97:C8:68:03:8C:B9:E5 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.108.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:43:8f:c3:89:d8:b4:40:62:bf:32:25:4a:f8:a0:66:48:71: 7f:0f:6a:11:de:81:be:0c:cb:3e:07:4a:e2:44:f6:94:4a:77: ee:84:1b:c9:1c:23:bd:8f:2e:92:4b:0b:1a:a1:47:27:90:0c: b2:a9:56:ca:c6:54:bf:25:c7:35:30:97:84:85:66:f1:2a:c8: 83:12:0a:a8:67:49:06:5c:bf:79:4d:81:7c:48:4a:8c:f0:b7: 12:4f:2b:49:6c:63:8b:48:ae:c7:ed:70:0e:d3:97:7c:cd:f9: 0b:3e:ea:2f:55:61:4d:fe:25:15:83:85:f9:63:80:46:53:2f: 6b:33:35:cb:ba:d2:ef:40:30:c1:db:7f:a8:98:f9:c0:fa:e7: 1a:42:0c:f0:9a:af:9d:fd:f6:d5:0f:9e:ab:1d:72:55:6a:02: 79:34:af:72:99:31:fa:69:40:ab:64:83:94:27:1a:00:56:bd: 18:9b:ea:4f:45:b3:fc:80:f5:c9:bc:3a:e4:45:54:a9:e0:46: e1:e5:62:e1:17:58:a2:5c:bd:c9:ce:e9:d7:be:8b:62:25:33: 2f:c3:46:a2:76:ec:00:b7:be:2a:d2:8d:92:01:db:41:5a:cb: 0a:cf:15:9e:56:3c:09:e8:96:52:36:17:da:6d:1f:6b:8d:db: 8f:82:88:9e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVGvyYlxO60OlM/rrP1KVHBMp5LswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNDA3MjAwNzMyMzZaFw0yNTA3MTkwNzM3MzZaMDMxMTAvBgNV BAMTKDkwNEFGRDdCNUI1NUY4QjczNzM2RUUwNkNDOTdDODY4MDM4Q0I5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+o8Q0otqXUD/9hRf5n7OTQZNY mK/JQsziyCIgGFiKSTLoWeON85ON/fGEhjp8KDN0oqFb+0ItCnck+DaAI0YLBji3 tDVtdRENE6G/pi6pIGtxyVtNeqfc7cQuxQ/q8t4E0f/liFenPZ8lWUY4+VQpb/u2 OhhDYHBfPiDXvxvGPNPuw/Oh0ae60G0uwLsDFdjqKBoyilXKryeOAik4Bg+wKXrl V8s0J1ck+lQDw7eQZWC5UAfs+o0zw1zbk0ho7abwkkte4MieQcHG6mJwU825V7FD SL0HUgv2G+mWIHBfiNJSBQoHPAAsWctPACFEk2Nq5bdbxyt9TaXaUjDL9rsNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkEr9e1tV+Lc3Nu4GzJfIaAOMueUwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzAzMzJlMzIzNTJlMzEzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxlsMA0GCSqG SIb3DQEBCwUAA4IBAQCeQ4/Didi0QGK/MiVK+KBmSHF/D2oR3oG+DMs+B0riRPaU SnfuhBvJHCO9jy6SSwsaoUcnkAyyqVbKxlS/Jcc1MJeEhWbxKsiDEgqoZ0kGXL95 TYF8SEqM8LcSTytJbGOLSK7H7XAO05d8zfkLPuovVWFN/iUVg4X5Y4BGUy9rMzXL utLvQDDB23+omPnA+ucaQgzwmq+d/fbVD56rHXJVagJ5NK9ymTH6aUCrZIOUJxoA Vr0Ym+pPRbP8gPXJvDrkRVSp4Ebh5WLhF1iiXL3JzunXvotiJTMvw0aiduwAt74q 0o2SAdtBWssKzxWeVjwJ6JZSNhfabR9rjduPgoie -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org