$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32342d3234203d3e20313437313337.roa File: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (raw, json) Hash identifier: /fMbrSKhQJ8LJwxoq43vmw9q1iP6KJa0WtA6bwl4KhM= Subject key identifier: 5D:96:E0:00:0D:BC:8F:92:08:D0:81:90:26:3D:6D:1B:5A:05:6A:FF Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 502978BC7F9D99AD219E304096A45320A4BD1143 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32342d3234203d3e20313437313337.roa Signing time: Tue 12 Nov 2024 11:00:01 +0000 ROA not before: Tue 12 Nov 2024 10:55:01 +0000 ROA not after: Tue 11 Nov 2025 11:00:01 +0000 asID: 147137 IP address blocks: 103.177.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 15:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:29:78:bc:7f:9d:99:ad:21:9e:30:40:96:a4:53:20:a4:bd:11:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Nov 12 10:55:01 2024 GMT Not After : Nov 11 11:00:01 2025 GMT Subject: CN=5D96E0000DBC8F9208D08190263D6D1B5A056AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ec:50:e6:44:61:8c:27:fa:fe:96:81:94:c3: de:71:3b:51:e9:82:40:0b:1f:b1:ba:91:ae:60:f4: ec:2a:9d:17:fd:f7:85:14:32:5a:71:97:9f:e1:ea: 5e:95:1d:87:6f:a8:af:87:cd:c0:57:5d:a0:9b:2d: c2:cb:93:c0:d6:83:5f:0a:97:27:b6:8f:6a:df:63: 46:8d:d8:a7:3b:05:50:6e:44:78:0f:a7:40:86:94: de:e4:fd:fa:7a:c4:e7:08:04:bb:62:29:4d:0d:8d: c6:cb:20:b8:42:c5:84:3d:93:a2:bb:c2:9c:16:70: 19:52:42:14:78:12:f9:1d:e6:3b:f0:e1:3f:61:e0: 55:fe:af:8b:bf:ca:6b:da:11:34:8d:5e:4a:4d:7f: 3a:8d:48:27:53:07:20:ae:dc:50:2c:24:c8:10:a5: 86:7c:a2:4e:3c:30:46:10:9d:97:d2:c5:74:77:e7: b8:14:56:b1:e7:70:f3:3b:e3:92:40:2e:01:8c:81: ed:d3:b6:5c:56:77:5a:a2:c3:c7:76:f3:26:02:77: c9:f5:07:84:7b:0c:96:9d:2e:e8:86:74:a2:85:66: 56:57:29:08:61:8e:a8:64:59:11:8f:4f:51:4d:ff: 5e:11:80:4c:28:45:78:06:3f:29:f8:09:eb:85:44: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:96:E0:00:0D:BC:8F:92:08:D0:81:90:26:3D:6D:1B:5A:05:6A:FF X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32342d3234203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.8.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:91:39:46:65:dd:b3:21:57:6e:c0:a7:e9:1d:16:da:11:1a: 72:a0:03:5c:ba:64:f0:e0:81:aa:ff:03:d0:51:57:81:07:01: 58:a7:01:07:f3:ee:84:f7:5f:97:da:9b:87:14:bd:06:32:fa: a5:06:82:ae:3a:3e:9b:d5:a4:91:f9:be:fc:fb:54:c3:22:ff: ce:94:b8:58:d8:57:b1:e1:4a:d0:a1:05:90:73:9d:5d:58:bf: 6c:04:30:a6:38:8b:0e:82:a4:33:8c:6c:34:b0:dc:ea:f3:ee: e0:31:20:47:9f:cf:fc:09:d6:61:f8:f9:12:65:bf:e4:50:22: fc:2d:f9:6b:b8:05:51:d1:24:0c:09:65:c6:d6:57:ea:79:95: aa:26:fb:8a:a7:dd:53:10:b6:6a:ea:31:9d:bc:6d:16:4e:a7: e2:f8:d8:84:ee:10:5a:cb:82:35:86:fe:65:3f:c1:f2:dc:39: 98:e9:f7:72:a7:40:15:31:16:24:36:24:22:10:75:3f:60:1c: ba:53:1a:29:1d:38:af:ed:68:94:ef:56:92:49:87:37:7a:6d: e5:ed:7d:5b:c4:09:fd:f2:62:f0:db:79:1f:a3:e5:ab:da:6f: e2:b6:ab:3c:e3:52:11:18:5e:5c:b4:c5:9c:f8:29:ac:2b:62: 54:ec:38:20 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUCl4vH+dma0hnjBAlqRTIKS9EUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNDExMTIxMDU1MDFaFw0yNTExMTExMTAwMDFaMDMxMTAvBgNV BAMTKDVEOTZFMDAwMERCQzhGOTIwOEQwODE5MDI2M0Q2RDFCNUEwNTZBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7FDmRGGMJ/r+loGUw95xO1Hp gkALH7G6ka5g9OwqnRf994UUMlpxl5/h6l6VHYdvqK+HzcBXXaCbLcLLk8DWg18K lye2j2rfY0aN2Kc7BVBuRHgPp0CGlN7k/fp6xOcIBLtiKU0NjcbLILhCxYQ9k6K7 wpwWcBlSQhR4Evkd5jvw4T9h4FX+r4u/ymvaETSNXkpNfzqNSCdTByCu3FAsJMgQ pYZ8ok48MEYQnZfSxXR357gUVrHncPM745JALgGMge3TtlxWd1qiw8d28yYCd8n1 B4R7DJadLuiGdKKFZlZXKQhhjqhkWRGPT1FN/14RgEwoRXgGPyn4CeuFRNgTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXZbgAA28j5II0IGQJj1tG1oFav8wHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMxMzAzMzJlMzEzNzM3MmUzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGexCDANBgkqhkiG 9w0BAQsFAAOCAQEAPJE5RmXdsyFXbsCn6R0W2hEacqADXLpk8OCBqv8D0FFXgQcB WKcBB/PuhPdfl9qbhxS9BjL6pQaCrjo+m9Wkkfm+/PtUwyL/zpS4WNhXseFK0KEF kHOdXVi/bAQwpjiLDoKkM4xsNLDc6vPu4DEgR5/P/AnWYfj5EmW/5FAi/C35a7gF UdEkDAllxtZX6nmVqib7iqfdUxC2auoxnbxtFk6n4vjYhO4QWsuCNYb+ZT/B8tw5 mOn3cqdAFTEWJDYkIhB1P2AculMaKR04r+1olO9WkkmHN3pt5e19W8QJ/fJi8Nt5 H6Plq9pv4rarPONSERheXLTFnPgprCtiVOw4IA== -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org