$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32342d3234203d3e20313431363231.roa File: 3130332e3135352e36342e302f32342d3234203d3e20313431363231.roa (raw, json) Hash identifier: Yg9Z99W1S37LHu94jKoSFYOazyPnD7QNj8rNJcvSDtw= Subject key identifier: 0E:56:07:52:3D:1C:23:ED:7B:E8:3C:BD:94:DB:B1:B2:3E:5C:36:6D Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 3BC540F7B2ED70C37CE054EB6E0C2F622784320C Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32342d3234203d3e20313431363231.roa Signing time: Tue 18 Jun 2024 23:00:02 +0000 ROA not before: Tue 18 Jun 2024 22:55:02 +0000 ROA not after: Tue 17 Jun 2025 23:00:02 +0000 asID: 141621 IP address blocks: 103.155.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c5:40:f7:b2:ed:70:c3:7c:e0:54:eb:6e:0c:2f:62:27:84:32:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Jun 18 22:55:02 2024 GMT Not After : Jun 17 23:00:02 2025 GMT Subject: CN=0E5607523D1C23ED7BE83CBD94DBB1B23E5C366D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1a:d1:12:19:1b:e7:a2:8d:49:d8:73:8b:2b: 49:bc:d0:7d:9f:7c:62:9e:36:90:f3:1d:5f:0b:b3: b5:5a:b0:ff:5d:41:a3:60:f8:1d:74:f6:25:99:4b: a8:e7:e5:21:8e:43:82:84:30:eb:b3:5d:50:50:94: 9e:28:da:90:3d:ad:0b:08:26:be:74:07:15:48:47: bd:a7:42:99:8c:ab:c2:c8:eb:26:eb:b9:0e:cb:43: 8f:28:b1:f7:46:3c:65:9d:58:91:95:15:b8:49:8e: 18:15:02:d6:91:d0:40:81:52:35:1e:64:bd:e9:0c: aa:3c:a9:4d:24:73:83:b8:f2:6a:f5:1c:66:97:8b: 46:b3:80:b5:a6:b1:d8:b5:46:b6:bf:ee:84:17:89: 9d:a4:c4:3c:40:9d:2d:b8:71:c4:e4:de:f5:b7:ad: 66:70:c9:ec:93:14:a8:3a:72:14:65:00:8c:92:41: f0:86:99:26:b3:e0:d1:e1:0b:7f:5f:a6:1a:8b:3f: 5e:64:a2:1f:c6:3c:0b:4d:00:af:e9:d3:28:15:54: 18:4b:78:52:a5:26:30:70:74:b3:86:e7:6f:fb:d4: db:5e:13:b6:14:0d:72:b0:80:94:91:98:29:68:c0: 2a:ab:6f:60:09:9f:6d:67:44:48:22:f9:c2:8d:f5: 02:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:56:07:52:3D:1C:23:ED:7B:E8:3C:BD:94:DB:B1:B2:3E:5C:36:6D X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32342d3234203d3e20313431363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.64.0/24 Signature Algorithm: sha256WithRSAEncryption 38:46:21:04:8f:fb:a8:73:41:e2:39:6c:f0:3b:c5:db:a7:88: 57:a0:e6:7e:c1:16:e9:b4:bf:3d:f5:d4:77:5d:f0:9d:46:9b: e2:19:7f:52:7b:08:e6:1a:79:12:be:06:49:24:c8:7f:36:04: 79:ca:f0:af:c4:d1:56:d2:ac:9f:b1:92:cc:59:4b:86:b3:47: d6:bc:cd:1e:b3:63:ab:c1:f8:55:df:78:83:9e:c9:e2:b3:3f: 73:13:3d:a4:88:99:61:d0:e8:7b:07:09:20:16:3a:6f:10:3b: da:f8:03:7c:d3:ed:4a:97:15:95:8f:7e:ad:68:f4:e6:25:9c: 12:75:e8:09:12:46:2c:ea:06:8e:d4:72:f2:06:14:a2:50:32: 66:4b:fb:16:cd:c3:43:d0:a9:df:cb:95:65:7b:f3:83:e7:d3: 7f:1e:02:6c:f6:88:19:68:e5:41:aa:4b:06:4e:31:b3:a9:e5: ee:b8:16:2e:68:4f:33:34:90:2f:c7:1e:4a:85:15:e2:d3:77: 6b:cf:09:b9:c0:90:94:1e:43:46:f6:d1:2a:63:8d:7d:da:87: 3b:88:b4:31:97:11:9c:8e:33:55:cb:65:14:ef:29:b7:ad:3c: 02:cb:72:97:0a:e6:a9:88:d3:0f:d5:f5:1c:59:4e:92:41:67: d1:5b:1c:8b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUO8VA97LtcMN84FTrbgwvYieEMgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNDA2MTgyMjU1MDJaFw0yNTA2MTcyMzAwMDJaMDMxMTAvBgNV BAMTKDBFNTYwNzUyM0QxQzIzRUQ3QkU4M0NCRDk0REJCMUIyM0U1QzM2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXGtESGRvnoo1J2HOLK0m80H2f fGKeNpDzHV8Ls7VasP9dQaNg+B109iWZS6jn5SGOQ4KEMOuzXVBQlJ4o2pA9rQsI Jr50BxVIR72nQpmMq8LI6ybruQ7LQ48osfdGPGWdWJGVFbhJjhgVAtaR0ECBUjUe ZL3pDKo8qU0kc4O48mr1HGaXi0azgLWmsdi1Rra/7oQXiZ2kxDxAnS24ccTk3vW3 rWZwyeyTFKg6chRlAIySQfCGmSaz4NHhC39fphqLP15koh/GPAtNAK/p0ygVVBhL eFKlJjBwdLOG52/71NteE7YUDXKwgJSRmClowCqrb2AJn21nREgi+cKN9QKpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUDlYHUj0cI+176Dy9lNuxsj5cNm0wHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1NjRhYmZiLTE5NjItNDRhOS04 Mzc2LWNiZmIxZWZjZGFiYS8wLzMxMzAzMzJlMzEzNTM1MmUzNjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5tAMA0GCSqG SIb3DQEBCwUAA4IBAQA4RiEEj/uoc0HiOWzwO8Xbp4hXoOZ+wRbptL899dR3XfCd RpviGX9SewjmGnkSvgZJJMh/NgR5yvCvxNFW0qyfsZLMWUuGs0fWvM0es2OrwfhV 33iDnsnisz9zEz2kiJlh0Oh7BwkgFjpvEDva+AN80+1KlxWVj36taPTmJZwSdegJ EkYs6gaO1HLyBhSiUDJmS/sWzcND0Knfy5Vle/OD59N/HgJs9ogZaOVBqksGTjGz qeXuuBYuaE8zNJAvxx5KhRXi03drzwm5wJCUHkNG9tEqY4192oc7iLQxlxGcjjNV y2UU7ym3rTwCy3KXCuapiNMP1fUcWU6SQWfRWxyL -----END CERTIFICATE-----Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org