$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa File: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (raw, json) Hash identifier: eyNlOOK7flr6lcs8vEnKls2Fnof2/EbtUjKLQ595d+Q= Subject key identifier: 0D:63:D0:F3:CE:A5:8A:FF:C9:17:74:3F:A6:50:0D:78:88:D1:10:CE Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 421BBF51A7A89CFA191B40A2678428CB6C493A6D Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa Signing time: Thu 28 Nov 2024 16:00:01 +0000 ROA not before: Thu 28 Nov 2024 15:55:01 +0000 ROA not after: Thu 27 Nov 2025 16:00:01 +0000 asID: 141639 IP address blocks: 103.162.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 20:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1b:bf:51:a7:a8:9c:fa:19:1b:40:a2:67:84:28:cb:6c:49:3a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Nov 28 15:55:01 2024 GMT Not After : Nov 27 16:00:01 2025 GMT Subject: CN=0D63D0F3CEA58AFFC917743FA6500D7888D110CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:12:6c:5a:81:c4:94:a9:1a:f9:9b:25:3c: a6:e0:25:ac:54:df:b7:ac:f7:b8:c3:47:4f:dd:b0: 20:74:92:04:60:23:c4:81:1b:bb:49:10:c8:c6:c8: 73:c3:26:fd:c9:48:29:0d:b2:dd:77:a4:42:e7:1c: 44:10:ae:8a:17:f7:31:7e:77:51:d3:58:0c:2e:c4: b2:ab:4d:cd:be:9e:e9:2f:69:8f:bb:0d:95:9c:b9: e1:31:32:c4:b8:92:90:85:42:d6:f9:4d:d5:ad:4f: 39:65:71:9d:d5:bc:f9:2d:da:00:f4:72:73:d2:03: 7a:a4:2e:1f:43:b5:e4:0d:2f:94:c5:a0:e1:78:f2: f4:40:e6:39:ca:60:67:2f:bc:26:bc:88:c7:66:06: fe:04:81:70:fe:a8:6e:24:10:70:92:13:7c:9a:f9: be:3d:14:ae:0d:2f:bd:b1:3f:af:5c:60:30:e9:b2: bd:73:97:6e:56:db:21:00:99:a8:bc:c4:47:44:a1: 46:08:5c:65:c8:ba:e2:30:6d:f8:a6:16:54:7a:b2: 6a:ee:11:c6:f3:45:91:8d:dd:74:25:e9:21:3d:ee: 3b:88:60:5a:c0:54:83:97:b2:63:1c:b8:95:9a:eb: df:77:7c:a2:df:7b:52:3c:6e:7b:ad:19:89:dc:7c: 8c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:63:D0:F3:CE:A5:8A:FF:C9:17:74:3F:A6:50:0D:78:88:D1:10:CE X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.36.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:71:04:e9:92:91:3b:57:63:8c:86:ad:35:ec:8a:6b:d2:88: fe:c7:8b:bd:6e:01:f3:aa:7b:75:31:1a:b5:95:1c:73:10:dd: e6:32:5c:f7:fb:f4:71:f2:31:9e:7b:12:4a:61:b4:e2:c1:9b: c3:67:4c:21:91:79:41:61:30:ca:0d:5d:be:32:3d:80:45:2b: 38:c7:9d:46:48:a2:1e:07:db:af:05:8b:bb:2f:54:94:98:6f: b2:fd:10:f6:3c:b6:30:e4:68:df:60:72:ca:f7:07:4e:5f:f7: 39:40:55:09:f6:3b:c5:aa:dc:85:b5:24:bc:35:7a:f1:3a:9b: bb:03:98:40:5f:8e:7d:1d:97:92:a9:8d:6c:a7:09:fb:17:2d: d4:44:28:d2:2e:26:70:30:26:81:1e:75:0a:f9:5f:c3:86:13: 14:04:d2:06:68:4f:b8:84:97:a9:f2:c6:35:be:17:36:4e:fe: 8e:da:ee:f3:23:93:66:51:25:9d:31:82:bd:1d:fa:69:47:e3: f0:f7:14:ae:e6:04:de:00:c8:7f:22:f0:b5:e2:ca:ca:d0:4b: 35:d7:b2:ab:eb:e9:e7:4a:18:50:a2:e7:31:cc:57:65:bf:58: 5f:ab:32:10:ae:c1:21:c0:f6:8d:af:c6:83:b5:dd:60:68:31: 1c:f5:b2:e2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQhu/UaeonPoZG0CiZ4Qoy2xJOm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNDExMjgxNTU1MDFaFw0yNTExMjcxNjAwMDFaMDMxMTAvBgNV BAMTKDBENjNEMEYzQ0VBNThBRkZDOTE3NzQzRkE2NTAwRDc4ODhEMTEwQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZRJsWoHElKka+ZslPKbgJaxU 37es97jDR0/dsCB0kgRgI8SBG7tJEMjGyHPDJv3JSCkNst13pELnHEQQrooX9zF+ d1HTWAwuxLKrTc2+nukvaY+7DZWcueExMsS4kpCFQtb5TdWtTzllcZ3VvPkt2gD0 cnPSA3qkLh9DteQNL5TFoOF48vRA5jnKYGcvvCa8iMdmBv4EgXD+qG4kEHCSE3ya +b49FK4NL72xP69cYDDpsr1zl25W2yEAmai8xEdEoUYIXGXIuuIwbfimFlR6smru EcbzRZGN3XQl6SE97juIYFrAVIOXsmMcuJWa6993fKLfe1I8bnutGYncfIxjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUDWPQ886liv/JF3Q/plANeIjREM4wHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2ZjNhZTk3LWY1MmUtNDk3Ny05 MGQxLTQzNDlhYWQwNTJhOC8wLzMxMzAzMzJlMzEzNjMyMmUzMzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6IkMA0GCSqG SIb3DQEBCwUAA4IBAQA6cQTpkpE7V2OMhq017Ipr0oj+x4u9bgHzqnt1MRq1lRxz EN3mMlz3+/Rx8jGeexJKYbTiwZvDZ0whkXlBYTDKDV2+Mj2ARSs4x51GSKIeB9uv BYu7L1SUmG+y/RD2PLYw5GjfYHLK9wdOX/c5QFUJ9jvFqtyFtSS8NXrxOpu7A5hA X459HZeSqY1spwn7Fy3URCjSLiZwMCaBHnUK+V/DhhMUBNIGaE+4hJep8sY1vhc2 Tv6O2u7zI5NmUSWdMYK9HfppR+Pw9xSu5gTeAMh/IvC14srK0Es117Kr6+nnShhQ oucxzFdlv1hfqzIQrsEhwPaNr8aDtd1gaDEc9bLi -----END CERTIFICATE-----Generated at Sun Apr 6 08:47:22 2025 by rpki-client