$ rpki-client -vvf repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa File: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (raw, json) Hash identifier: VSK8xHWFoAIqAfrfPnMHrz4hewwhCd2DZdkebu8f7l0= Subject key identifier: B5:F3:AF:6E:4A:39:1F:E8:DA:F4:64:8C:AF:88:97:65:27:AF:2B:3D Certificate issuer: /CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Certificate serial: 22FFD08E5D6F217070C312A19B741722C5C733E8 Authority key identifier: 9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa Signing time: Wed 25 Sep 2024 12:00:00 +0000 ROA not before: Wed 25 Sep 2024 11:55:00 +0000 ROA not after: Wed 24 Sep 2025 12:00:00 +0000 asID: 151553 IP address blocks: 103.255.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ff:d0:8e:5d:6f:21:70:70:c3:12:a1:9b:74:17:22:c5:c7:33:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Validity Not Before: Sep 25 11:55:00 2024 GMT Not After : Sep 24 12:00:00 2025 GMT Subject: CN=B5F3AF6E4A391FE8DAF4648CAF88976527AF2B3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:26:3d:90:1c:c6:dd:bf:f6:1d:c8:cf:51: 11:e5:82:e4:5c:7e:dd:03:ee:bb:f1:a7:14:91:c0: 72:74:50:fa:96:31:70:b9:6a:65:bc:6e:c2:87:b4: 78:17:2f:53:e7:0d:c5:b9:82:1e:9c:a6:c6:2a:ef: ae:34:4a:47:a5:1d:27:d6:08:2a:65:8e:a7:d3:be: 47:8d:d6:22:5f:e7:20:f5:5d:08:a0:ee:b6:fc:67: 37:8b:33:f8:bc:88:a9:af:56:7d:90:3f:ee:72:66: 18:c0:8a:1e:2d:3a:2a:57:29:d6:c3:0b:60:09:a9: 6e:88:ca:7c:cd:ed:08:9e:54:de:dc:e5:47:94:ad: 5f:1f:8e:8c:4d:1c:06:16:72:95:e6:3f:24:98:a3: cc:e6:7c:4b:1f:3c:a1:24:a3:a2:0d:95:5a:29:69: 8c:39:54:03:8f:66:65:01:a6:72:d6:ca:78:6d:b4: 28:5f:60:b0:91:07:a0:fe:e5:34:25:f8:c1:17:d6: 03:98:b2:88:e7:e2:9f:27:b6:2e:90:33:ec:a4:8f: 15:2b:ed:c3:5d:cc:fe:f5:a2:90:69:84:7c:6f:81: a6:59:b6:fc:cf:29:b4:07:f9:e6:f1:d6:8b:1b:dc: bf:5d:c1:74:eb:69:c1:18:67:00:95:9c:17:4f:ae: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F3:AF:6E:4A:39:1F:E8:DA:F4:64:8C:AF:88:97:65:27:AF:2B:3D X509v3 Authority Key Identifier: keyid:9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.98.0/24 Signature Algorithm: sha256WithRSAEncryption ad:a4:74:7c:68:b3:71:c0:ac:92:f2:f5:25:58:0c:fc:41:79: 4b:c7:50:89:53:26:b0:3a:a7:77:81:fc:90:a9:ff:5d:ba:86: cd:cb:61:43:6d:52:52:d5:68:c2:47:c3:87:3e:4a:0d:10:73: ae:e2:af:59:ea:0c:82:79:e7:93:ca:cb:fe:65:b5:ac:55:6a: 88:a1:aa:5e:c2:61:6e:d5:0e:b9:da:bd:55:db:4d:a1:9e:02: 91:08:82:92:85:c2:6c:a0:4c:d0:44:96:20:65:bd:9f:4c:47: bc:68:24:b4:46:e8:f8:6c:63:cd:99:9a:91:04:95:79:32:7a: 07:76:23:86:8f:e4:aa:25:3a:c1:e7:f5:8a:1a:f9:c5:23:78: 7b:c6:90:b6:86:3c:ad:81:73:67:c3:4d:fc:bf:76:cd:38:2b: cd:83:ef:03:16:a6:30:f3:77:91:a0:64:3e:04:8a:90:85:bb: ea:44:28:6a:92:7e:dd:29:75:2b:ff:94:d8:09:4c:96:14:c8: 64:2e:54:de:3f:25:39:12:8a:cb:dc:47:2d:65:39:b9:15:02: 66:fc:53:f6:02:e8:d3:c5:ed:4b:d8:64:8f:64:59:43:c0:fd: 00:82:2c:ab:d3:b3:e6:9a:05:cb:65:d3:22:8d:ba:8d:bc:21: 42:6c:31:1c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIv/Qjl1vIXBwwxKhm3QXIsXHM+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMy RTRBN0M1RjAeFw0yNDA5MjUxMTU1MDBaFw0yNTA5MjQxMjAwMDBaMDMxMTAvBgNV BAMTKEI1RjNBRjZFNEEzOTFGRThEQUY0NjQ4Q0FGODg5NzY1MjdBRjJCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJciY9kBzG3b/2HcjPURHlguRc ft0D7rvxpxSRwHJ0UPqWMXC5amW8bsKHtHgXL1PnDcW5gh6cpsYq7640SkelHSfW CCpljqfTvkeN1iJf5yD1XQig7rb8ZzeLM/i8iKmvVn2QP+5yZhjAih4tOipXKdbD C2AJqW6IynzN7QieVN7c5UeUrV8fjoxNHAYWcpXmPySYo8zmfEsfPKEko6INlVop aYw5VAOPZmUBpnLWynhttChfYLCRB6D+5TQl+MEX1gOYsojn4p8nti6QM+ykjxUr 7cNdzP71opBphHxvgaZZtvzPKbQH+ebx1osb3L9dwXTracEYZwCVnBdPrsInAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtfOvbko5H+ja9GSMr4iXZSevKz0wHwYDVR0j BBgwFoAUmve9BH88VPnOWCbckZbCoy5KfF8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTdmYjE3ZS05ZDU4LTRkNTEtODQ2ZS0wYTg0Yzg2OTkxNDIvMC85QUY3QkQwNDdG M0M1NEY5Q0U1ODI2REM5MTk2QzJBMzJFNEE3QzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMyRTRB N0M1Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1N2ZiMTdlLTlkNTgtNGQ1MS04 NDZlLTBhODRjODY5OTE0Mi8wLzMxMzAzMzJlMzIzNTM1MmUzOTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/9iMA0GCSqG SIb3DQEBCwUAA4IBAQCtpHR8aLNxwKyS8vUlWAz8QXlLx1CJUyawOqd3gfyQqf9d uobNy2FDbVJS1WjCR8OHPkoNEHOu4q9Z6gyCeeeTysv+ZbWsVWqIoapewmFu1Q65 2r1V202hngKRCIKShcJsoEzQRJYgZb2fTEe8aCS0Ruj4bGPNmZqRBJV5MnoHdiOG j+SqJTrB5/WKGvnFI3h7xpC2hjytgXNnw038v3bNOCvNg+8DFqYw83eRoGQ+BIqQ hbvqRChqkn7dKXUr/5TYCUyWFMhkLlTePyU5EorL3EctZTm5FQJm/FP2AujTxe1L 2GSPZFlDwP0Agiyr07PmmgXLZdMijbqNvCFCbDEc -----END CERTIFICATE-----Generated at Sat Nov 23 00:47:42 2024 by rpki-client on console-fra.rpki-client.org