$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/3130332e36372e39302e302f32332d3233203d3e20313532303035.roa File: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (raw, json) Hash identifier: 2deZljQHRC+27lOtPHeNXwE5AsA5ouy4hMQ4YZL8z3c= Subject key identifier: 00:2B:6C:5A:F8:BB:3A:1B:D8:5D:26:E4:36:67:64:3E:71:B1:38:44 Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Certificate serial: 2AD0CC4D2B1FA09ED425A3702F2439835A25C4BB Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/3130332e36372e39302e302f32332d3233203d3e20313532303035.roa Signing time: Sun 03 Nov 2024 08:00:01 +0000 ROA not before: Sun 03 Nov 2024 07:55:01 +0000 ROA not after: Sun 02 Nov 2025 08:00:01 +0000 asID: 152005 IP address blocks: 103.67.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d0:cc:4d:2b:1f:a0:9e:d4:25:a3:70:2f:24:39:83:5a:25:c4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Validity Not Before: Nov 3 07:55:01 2024 GMT Not After : Nov 2 08:00:01 2025 GMT Subject: CN=002B6C5AF8BB3A1BD85D26E43667643E71B13844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:70:57:25:01:f4:00:2b:bd:bb:23:38:11:59: c6:ce:f9:84:43:76:50:a3:5c:23:0c:9d:32:c6:26: 49:45:61:16:61:f4:1f:a8:4d:bf:c1:12:d3:2c:e2: 7f:7e:15:7f:f4:ea:6c:e6:d7:2c:f6:22:ce:39:42: ff:29:7a:7b:28:02:14:f1:50:96:05:4c:d7:c8:78: e4:d9:32:10:31:e2:bb:eb:5e:0c:b7:e6:c0:16:05: 34:58:35:b2:39:4b:05:d7:42:8f:52:be:ab:33:91: df:9e:d9:5d:fb:33:ef:fc:a5:4b:5a:82:19:c2:a4: 16:bb:74:da:3c:dd:3f:77:d2:d0:4a:97:6e:bc:dc: 17:1d:43:d9:3d:1e:c6:71:24:be:12:b1:b0:f1:e9: f0:ef:f6:37:bc:47:b2:0d:3b:39:2a:ea:91:93:8d: 52:36:b1:ab:a3:39:5d:3f:da:52:01:59:a2:93:47: f6:84:e5:c2:96:47:32:c4:25:12:2a:88:fa:45:b9: ca:bc:b1:ca:b3:68:8c:78:37:3c:1e:78:8a:de:cb: 97:0c:41:fd:3a:d4:d2:2a:68:0a:c7:75:f2:bd:95: a8:22:36:f9:61:68:f0:99:c3:81:e6:17:5e:e7:08: 19:a3:91:99:a4:f3:f3:8e:10:4e:16:d4:d1:5d:93: 56:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2B:6C:5A:F8:BB:3A:1B:D8:5D:26:E4:36:67:64:3E:71:B1:38:44 X509v3 Authority Key Identifier: keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/3130332e36372e39302e302f32332d3233203d3e20313532303035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.90.0/23 Signature Algorithm: sha256WithRSAEncryption ba:74:b7:8c:a6:3d:69:78:62:74:05:c0:74:08:3a:01:ce:f0: b1:a6:40:8c:ef:35:a6:dd:53:1f:b1:93:85:92:30:c4:d1:9c: 83:b9:4d:e2:e3:8d:7d:e3:49:17:83:46:e0:83:81:78:f8:04: 6c:ac:8e:ae:de:37:7a:18:02:74:ce:61:e9:04:cf:01:b8:cf: ec:a9:94:17:fe:e9:c1:f3:c1:d5:a5:aa:a6:0f:e9:39:6d:e1: 82:cf:bc:9f:9c:c5:be:85:e9:5d:7e:48:18:fc:29:08:29:c7: 64:e3:50:46:dc:8f:06:48:4d:a1:9f:e1:6f:1f:99:b8:21:25: d5:76:c1:04:bb:34:2b:ad:39:c9:b0:f3:ca:8e:04:9f:65:12: 65:5b:cd:1a:b1:4f:8a:1d:e4:03:52:a7:72:39:5e:30:45:d2: 50:13:47:5d:1a:26:91:80:44:ad:81:8f:07:a8:17:5e:af:be: 29:58:d6:2a:00:8d:5a:6c:c6:ae:6e:03:52:68:70:42:ce:a2: 46:34:05:d8:72:fd:c4:d5:1e:9d:72:86:37:1c:51:36:6a:2d: 21:86:e4:af:6b:20:00:1d:5c:d9:36:7a:09:b7:02:d4:c3:02: ef:33:5a:86:1a:a3:c6:da:4e:15:cd:33:80:63:2a:f1:88:09: 85:da:59:3b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKtDMTSsfoJ7UJaNwLyQ5g1olxLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3 MkZENTU2MTAeFw0yNDExMDMwNzU1MDFaFw0yNTExMDIwODAwMDFaMDMxMTAvBgNV BAMTKDAwMkI2QzVBRjhCQjNBMUJEODVEMjZFNDM2Njc2NDNFNzFCMTM4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcFclAfQAK727IzgRWcbO+YRD dlCjXCMMnTLGJklFYRZh9B+oTb/BEtMs4n9+FX/06mzm1yz2Is45Qv8pensoAhTx UJYFTNfIeOTZMhAx4rvrXgy35sAWBTRYNbI5SwXXQo9Svqszkd+e2V37M+/8pUta ghnCpBa7dNo83T930tBKl2683BcdQ9k9HsZxJL4SsbDx6fDv9je8R7INOzkq6pGT jVI2saujOV0/2lIBWaKTR/aE5cKWRzLEJRIqiPpFucq8scqzaIx4NzweeIrey5cM Qf061NIqaArHdfK9lagiNvlhaPCZw4HmF17nCBmjkZmk8/OOEE4W1NFdk1YbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUACtsWvi7OhvYXSbkNmdkPnGxOEQwHwYDVR0j BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3 RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE NTU2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NDg4NTE5LThmMDQtNDRmNS04 MzEyLThkOWQzNjE2ZDBkOS8wLzMxMzAzMzJlMzYzNzJlMzkzMDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMjMwMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdDWjANBgkqhkiG 9w0BAQsFAAOCAQEAunS3jKY9aXhidAXAdAg6Ac7wsaZAjO81pt1TH7GThZIwxNGc g7lN4uONfeNJF4NG4IOBePgEbKyOrt43ehgCdM5h6QTPAbjP7KmUF/7pwfPB1aWq pg/pOW3hgs+8n5zFvoXpXX5IGPwpCCnHZONQRtyPBkhNoZ/hbx+ZuCEl1XbBBLs0 K605ybDzyo4En2USZVvNGrFPih3kA1KncjleMEXSUBNHXRomkYBErYGPB6gXXq++ KVjWKgCNWmzGrm4DUmhwQs6iRjQF2HL9xNUenXKGNxxRNmotIYbkr2sgAB1c2TZ6 CbcC1MMC7zNahhqjxtpOFc0zgGMq8YgJhdpZOw== -----END CERTIFICATE-----Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org