$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa File: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (raw, json) Hash identifier: WU4OS1OV+8iN1dmvrErpUWqbsC92MVIT7keo4SWEOZs= Subject key identifier: B7:AD:BB:5B:AD:0D:CC:CF:EE:F8:50:AC:F3:00:E3:E5:52:11:44:1F Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 216D29FC2798FB85C23133C8C76795959777765E Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa Signing time: Wed 23 Oct 2024 05:00:00 +0000 ROA not before: Wed 23 Oct 2024 04:55:00 +0000 ROA not after: Wed 22 Oct 2025 05:00:00 +0000 asID: 150470 IP address blocks: 103.51.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6d:29:fc:27:98:fb:85:c2:31:33:c8:c7:67:95:95:97:77:76:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Oct 23 04:55:00 2024 GMT Not After : Oct 22 05:00:00 2025 GMT Subject: CN=B7ADBB5BAD0DCCCFEEF850ACF300E3E55211441F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:dc:05:a6:81:90:7b:77:ad:55:54:3a:ca: d9:64:6c:d8:86:15:77:1e:9e:e0:35:d8:59:85:76: c7:9e:6b:dd:19:9c:87:cd:c1:b2:c7:45:f4:1c:ae: 86:d9:d3:21:6b:29:fe:27:bb:4a:23:4e:5c:b2:97: 37:14:dd:88:7d:f9:db:9c:14:7f:f2:5b:75:5b:00: 2c:41:da:e1:bb:55:47:9d:85:4f:f3:45:4a:9b:a2: 33:3a:7e:99:64:7a:3d:61:42:15:3b:71:09:5a:de: 00:7f:12:c1:35:89:8e:e1:bc:24:25:57:0a:1e:6b: e5:ae:83:cb:08:bc:c5:f8:17:2f:f8:65:a6:92:d4: b5:6a:39:04:83:85:a4:4b:f4:3e:cf:21:00:f4:07: d0:75:78:15:8e:03:c9:2e:59:f5:6f:36:5e:7b:45: 36:5e:7d:df:01:46:1d:ed:c0:a1:3f:3c:12:02:42: c7:33:fe:5c:54:04:d7:29:7b:01:db:89:c6:c9:8a: 11:71:71:14:eb:cd:3c:17:e5:2b:91:84:b6:34:76: ba:85:de:1e:35:cc:3e:1d:b2:73:72:1f:3c:c5:13: f7:f7:1a:86:ab:2d:87:24:fc:db:08:88:b4:d1:a1: 29:fc:42:5a:2e:5e:89:10:ad:69:59:32:60:a8:f3: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AD:BB:5B:AD:0D:CC:CF:EE:F8:50:AC:F3:00:E3:E5:52:11:44:1F X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.51.122.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:78:3b:46:80:36:17:30:0e:0b:cb:17:68:d8:9b:ac:fb:ab: 7b:f1:1f:69:db:3e:7d:7d:d9:85:21:14:36:51:11:92:36:d6: 7b:30:56:24:99:a6:f2:fa:30:12:d6:e9:dd:58:25:82:ba:e9: 63:03:b3:1c:90:bf:fc:c5:00:6a:6b:da:11:8e:b7:08:79:0e: ea:57:01:2e:8c:8f:48:4c:ce:25:cb:af:54:0f:42:6d:3c:c4: 62:b4:f0:66:ff:f6:e8:90:a5:be:12:c2:67:de:9a:1a:44:9f: 65:e9:16:6c:69:1d:d6:05:61:d4:b2:af:a2:39:16:77:0e:0e: 76:01:37:d2:b4:dc:57:52:d7:a3:ca:75:9e:87:f6:99:1a:77: c4:a9:5a:86:29:81:11:35:ae:c7:32:63:56:c5:80:06:fb:fe: 01:4e:e5:db:e8:fa:9d:58:91:34:31:5d:7b:d8:ef:1d:2f:f5: ee:f1:41:0a:62:c0:8e:30:b4:30:8d:6d:fc:3a:1a:4b:28:e2: 81:f4:5e:7c:f1:4f:57:f9:74:d4:ad:45:3d:a5:47:b7:88:f1: ca:82:89:44:29:bd:b6:87:5b:b3:7c:fe:cf:d9:ab:f0:16:6c: 65:e8:e7:f4:20:8b:4e:f0:04:df:8a:a3:d8:83:6b:58:af:93: 44:05:4a:2e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIW0p/CeY+4XCMTPIx2eVlZd3dl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNDEwMjMwNDU1MDBaFw0yNTEwMjIwNTAwMDBaMDMxMTAvBgNV BAMTKEI3QURCQjVCQUQwRENDQ0ZFRUY4NTBBQ0YzMDBFM0U1NTIxMTQ0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLaNwFpoGQe3etVVQ6ytlkbNiG FXcenuA12FmFdseea90ZnIfNwbLHRfQcrobZ0yFrKf4nu0ojTlyylzcU3Yh9+duc FH/yW3VbACxB2uG7VUedhU/zRUqbojM6fplkej1hQhU7cQla3gB/EsE1iY7hvCQl Vwoea+Wug8sIvMX4Fy/4ZaaS1LVqOQSDhaRL9D7PIQD0B9B1eBWOA8kuWfVvNl57 RTZefd8BRh3twKE/PBICQscz/lxUBNcpewHbicbJihFxcRTrzTwX5SuRhLY0drqF 3h41zD4dsnNyHzzFE/f3GoarLYck/NsIiLTRoSn8QlouXokQrWlZMmCo860RAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUt627W60NzM/u+FCs8wDj5VIRRB8wHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyOGVlYzViLTUzMjQtNDQyMi1h MzJmLTliMWRjZWQzNzU5Zi8wLzMxMzAzMzJlMzUzMTJlMzEzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzN6MA0GCSqG SIb3DQEBCwUAA4IBAQAdeDtGgDYXMA4Lyxdo2Jus+6t78R9p2z59fdmFIRQ2URGS NtZ7MFYkmaby+jAS1undWCWCuuljA7MckL/8xQBqa9oRjrcIeQ7qVwEujI9ITM4l y69UD0JtPMRitPBm//bokKW+EsJn3poaRJ9l6RZsaR3WBWHUsq+iORZ3Dg52ATfS tNxXUtejynWeh/aZGnfEqVqGKYERNa7HMmNWxYAG+/4BTuXb6PqdWJE0MV172O8d L/Xu8UEKYsCOMLQwjW38OhpLKOKB9F588U9X+XTUrUU9pUe3iPHKgolEKb22h1uz fP7P2avwFmxl6Of0IItO8ATfiqPYg2tYr5NEBUou -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org