$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa File: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (raw, json) Hash identifier: OWaYDg1cDH9a+akHuxTt6wYPqaxaynY90OG7HIU4OWI= Subject key identifier: 69:81:92:C5:BE:BB:FB:EA:FE:16:BE:8C:0A:C4:FA:22:DB:03:91:45 Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 36568508E539B96E7CC6231F9A489A7F585220BB Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa Signing time: Sat 11 May 2024 07:00:01 +0000 ROA not before: Sat 11 May 2024 06:55:01 +0000 ROA not after: Sat 10 May 2025 07:00:01 +0000 asID: 141083 IP address blocks: 103.156.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 14:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:56:85:08:e5:39:b9:6e:7c:c6:23:1f:9a:48:9a:7f:58:52:20:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: May 11 06:55:01 2024 GMT Not After : May 10 07:00:01 2025 GMT Subject: CN=698192C5BEBBFBEAFE16BE8C0AC4FA22DB039145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:71:7e:73:2a:7a:55:93:7c:ef:86:8a:7a:b0: 11:9c:a7:4b:26:ce:3a:70:51:be:ff:0c:5c:c9:9c: fc:87:d6:f4:bc:c2:65:59:72:78:cd:00:23:3c:53: bb:f4:ee:c1:08:9d:0f:76:c2:ee:ce:26:c9:b2:f6: 6f:25:37:5a:7d:cf:22:e2:e1:73:ca:86:42:c8:ef: 3c:d6:1c:94:0e:4f:7f:8a:c6:ab:6e:ac:70:bf:84: 66:1c:af:5c:e3:02:44:3c:f9:3e:db:b5:7c:c8:59: de:30:43:9e:ab:9f:78:b6:50:3a:2d:b4:7e:56:41: 2a:49:8a:47:e6:a8:c4:dc:15:ba:c7:8c:97:e5:ad: 22:21:d9:51:a8:10:d8:35:2c:34:e9:02:80:1f:b6: f8:b1:3c:77:da:3e:b2:73:1f:72:a2:4b:a6:a6:45: ae:59:a4:af:aa:13:53:1a:5b:71:f2:04:47:ac:96: e4:ba:1e:47:78:64:77:43:30:6a:29:2a:1e:a5:30: a7:f9:7c:2c:6c:c6:52:40:09:e1:c5:cb:fe:73:3c: 4a:f0:a2:c9:45:f5:9f:31:80:d5:84:0b:39:7a:8c: f3:1a:39:68:e5:e0:47:3f:65:c0:02:5b:85:64:3a: 2e:2b:0d:a3:50:96:4a:a6:95:6a:22:d3:29:eb:70: a6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:81:92:C5:BE:BB:FB:EA:FE:16:BE:8C:0A:C4:FA:22:DB:03:91:45 X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.57.0/24 Signature Algorithm: sha256WithRSAEncryption 09:00:a1:bf:fe:a2:14:b8:e5:b0:d6:82:28:30:f2:da:e0:3b: aa:ab:2b:50:6d:f0:d9:45:c7:fd:9a:fb:3e:da:75:c2:e6:a6: fc:d1:1d:52:45:d2:92:9d:67:c0:58:9f:b8:ac:9c:ed:2e:4b: c9:a6:0d:42:d7:ad:d4:97:86:18:87:78:06:73:91:a1:22:df: b4:6b:15:4a:6f:89:e4:26:f5:25:ef:07:4f:44:ab:3c:9d:3a: ee:23:30:2f:a2:07:ab:ec:00:46:f8:4c:07:4b:c9:bc:f4:7e: 48:9c:90:87:d9:04:0c:1a:de:8b:f7:5a:97:dc:b4:2a:2d:46: 9d:c8:00:7b:ef:7c:ba:e6:e7:4a:3b:16:61:ce:e4:23:ba:15: f9:6f:c6:d2:36:eb:a8:5d:b0:6f:ee:7e:36:ef:ae:9f:70:02: 81:db:2a:d2:08:e2:2b:76:ce:ee:a3:68:4b:56:a3:a5:2f:8f: 81:be:a6:c3:4d:f7:23:a2:3d:90:52:5f:0c:cb:7c:6c:47:35: 06:70:0e:a9:33:88:de:2f:98:58:20:50:52:23:28:9e:a4:87: ff:90:aa:49:7e:9e:9b:0c:00:ab:43:0d:a1:20:91:3e:2e:62: 1e:6e:8b:32:3d:bb:ad:6c:66:6d:39:46:ca:1f:7d:1f:40:c9: 32:cb:ed:92 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNlaFCOU5uW58xiMfmkiaf1hSILswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNDA1MTEwNjU1MDFaFw0yNTA1MTAwNzAwMDFaMDMxMTAvBgNV BAMTKDY5ODE5MkM1QkVCQkZCRUFGRTE2QkU4QzBBQzRGQTIyREIwMzkxNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcX5zKnpVk3zvhop6sBGcp0sm zjpwUb7/DFzJnPyH1vS8wmVZcnjNACM8U7v07sEInQ92wu7OJsmy9m8lN1p9zyLi 4XPKhkLI7zzWHJQOT3+KxqturHC/hGYcr1zjAkQ8+T7btXzIWd4wQ56rn3i2UDot tH5WQSpJikfmqMTcFbrHjJflrSIh2VGoENg1LDTpAoAftvixPHfaPrJzH3KiS6am Ra5ZpK+qE1MaW3HyBEesluS6Hkd4ZHdDMGopKh6lMKf5fCxsxlJACeHFy/5zPErw oslF9Z8xgNWECzl6jPMaOWjl4Ec/ZcACW4VkOi4rDaNQlkqmlWoi0ynrcKaBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUaYGSxb67++r+Fr6MCsT6ItsDkUUwHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM3OGJiZmQ0LTY3YjQtNDk4ZC04 NDExLWU5NjRjNWZlMTE3Mi8wLzMxMzAzMzJlMzEzNTM2MmUzNTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5w5MA0GCSqG SIb3DQEBCwUAA4IBAQAJAKG//qIUuOWw1oIoMPLa4DuqqytQbfDZRcf9mvs+2nXC 5qb80R1SRdKSnWfAWJ+4rJztLkvJpg1C163Ul4YYh3gGc5GhIt+0axVKb4nkJvUl 7wdPRKs8nTruIzAvoger7ABG+EwHS8m89H5InJCH2QQMGt6L91qX3LQqLUadyAB7 73y65udKOxZhzuQjuhX5b8bSNuuoXbBv7n42766fcAKB2yrSCOIrds7uo2hLVqOl L4+BvqbDTfcjoj2QUl8My3xsRzUGcA6pM4jeL5hYIFBSIyiepIf/kKpJfp6bDACr Qw2hIJE+LmIebosyPbutbGZtOUbKH30fQMkyy+2S -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org