$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa File: 3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa (raw, json) Hash identifier: DNJc9xkVk10+u7abf6ZM/Nl2Ukmj/FIJDXFuFGCkFwc= Subject key identifier: 5D:0A:D8:CA:29:3F:D5:EB:47:E9:5E:8D:D1:B4:C5:73:60:88:E6:6A Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Certificate serial: 17B3A00D95F1353AE1913F1402D3C3A4228B69D5 Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa Signing time: Mon 29 Jul 2024 08:35:09 +0000 ROA not before: Mon 29 Jul 2024 08:30:09 +0000 ROA not after: Mon 28 Jul 2025 08:35:09 +0000 asID: 150196 IP address blocks: 103.229.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b3:a0:0d:95:f1:35:3a:e1:91:3f:14:02:d3:c3:a4:22:8b:69:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E Validity Not Before: Jul 29 08:30:09 2024 GMT Not After : Jul 28 08:35:09 2025 GMT Subject: CN=5D0AD8CA293FD5EB47E95E8DD1B4C5736088E66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:02:04:04:3c:1c:ef:36:9a:b7:8e:bb:e6: ea:ca:8e:1a:22:68:11:66:b2:73:8a:6f:f7:6d:69: 4f:1e:75:b1:9b:88:31:e9:6b:15:89:f9:35:61:26: ba:d0:3f:7d:5d:09:cf:ef:78:d5:99:3e:03:be:bb: 50:6f:e1:84:94:33:fe:c9:f4:38:9a:46:74:34:62: 06:1b:9d:8c:3f:c0:70:70:cb:80:45:3a:79:1c:00: 96:1a:20:55:0f:1e:98:be:e2:a0:28:90:9f:38:fe: 52:ad:94:c5:7f:5c:32:99:6f:11:33:b0:43:09:d1: 9a:e1:25:bd:90:75:fc:94:1d:2b:fc:19:a0:f8:fb: 6a:90:f2:05:06:a1:f3:9d:77:4b:db:95:68:63:90: 79:8c:9c:64:5f:98:85:9a:6a:09:34:cc:e2:b3:21: 1e:71:dc:e2:e7:a1:50:90:9c:06:82:b6:dd:42:7a: cf:68:9c:47:07:47:11:fe:0a:fb:f8:9b:eb:ab:84: 04:c8:1d:38:0d:c0:c7:30:4d:85:bd:74:5c:2b:9f: c2:17:c6:50:30:d2:f1:b4:e1:2f:05:87:a2:ba:8c: 8a:f7:52:fd:93:e1:4c:e7:86:35:17:18:17:51:62: 0c:9a:45:b1:4f:9c:ec:ca:5c:95:a0:94:7d:1e:e0: 5c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0A:D8:CA:29:3F:D5:EB:47:E9:5E:8D:D1:B4:C5:73:60:88:E6:6A X509v3 Authority Key Identifier: keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/3130332e3232392e31342e302f32342d3234203d3e20313530313936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.14.0/24 Signature Algorithm: sha256WithRSAEncryption 78:32:96:cd:f8:67:4d:18:7f:e7:48:79:80:10:7f:c8:0b:5b: 98:44:a6:26:ab:0a:cb:89:83:a3:5a:58:87:4c:ea:e5:ce:64: e8:8a:6c:68:7a:0c:6f:73:58:9f:ea:18:10:b0:2f:27:6a:4c: 66:eb:f4:50:a3:10:b7:df:f3:10:63:ce:a9:70:99:31:d1:bb: 4d:ce:5d:0a:01:7b:a6:35:83:5e:84:4e:a1:b6:56:76:2f:ab: 76:a7:56:43:48:60:06:1e:03:63:8e:db:72:fb:66:9d:d9:61: 9f:27:52:a6:ad:f9:12:14:9a:3c:27:9e:01:3a:ef:ff:6a:87: 19:86:a8:12:a5:0c:cb:78:e6:90:42:53:8e:69:57:24:d9:a7: 21:92:cf:b8:8a:58:7f:2e:87:bd:57:3a:40:9b:b1:87:bf:9b: 87:25:e3:65:c5:5b:cf:cc:28:bb:1c:dc:85:3f:30:36:1d:77: 01:13:3b:80:21:be:7c:99:3c:4c:f9:84:3b:bf:19:b5:30:c9: 2f:8e:a8:7d:24:fe:f7:6b:00:5e:bc:1e:ea:08:cf:74:3c:63: c0:8a:9a:3a:a1:ee:51:14:e1:a0:d6:50:26:46:9c:01:65:ed: 63:96:40:1f:09:0c:0a:6b:5d:d1:7c:bd:db:6b:4e:ad:37:c7: d1:1d:ae:10 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUF7OgDZXxNTrhkT8UAtPDpCKLadUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3 REZDNkE4RTAeFw0yNDA3MjkwODMwMDlaFw0yNTA3MjgwODM1MDlaMDMxMTAvBgNV BAMTKDVEMEFEOENBMjkzRkQ1RUI0N0U5NUU4REQxQjRDNTczNjA4OEU2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6iwIEBDwc7zaat4675urKjhoi aBFmsnOKb/dtaU8edbGbiDHpaxWJ+TVhJrrQP31dCc/veNWZPgO+u1Bv4YSUM/7J 9DiaRnQ0YgYbnYw/wHBwy4BFOnkcAJYaIFUPHpi+4qAokJ84/lKtlMV/XDKZbxEz sEMJ0ZrhJb2QdfyUHSv8GaD4+2qQ8gUGofOdd0vblWhjkHmMnGRfmIWaagk0zOKz IR5x3OLnoVCQnAaCtt1Ces9onEcHRxH+Cvv4m+urhATIHTgNwMcwTYW9dFwrn8IX xlAw0vG04S8Fh6K6jIr3Uv2T4UznhjUXGBdRYgyaRbFPnOzKXJWglH0e4FwDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUXQrYyik/1etH6V6N0bTFc2CI5mowHwYDVR0j BBgwFoAUcx22dXK0ijqG8EdaDiHhon38ao4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yjc1YmZkMC1hODZjLTRiZWItOWY5OS1hYWMzM2ZiNWU0OWYvMC83MzFEQjY3NTcy QjQ4QTNBODZGMDQ3NUEwRTIxRTFBMjdERkM2QThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMxREI2NzU3MkI0OEEzQTg2RjA0NzVBMEUyMUUxQTI3REZD NkE4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiNzViZmQwLWE4NmMtNGJlYi05 Zjk5LWFhYzMzZmI1ZTQ5Zi8wLzMxMzAzMzJlMzIzMjM5MmUzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzEzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+UOMA0GCSqG SIb3DQEBCwUAA4IBAQB4MpbN+GdNGH/nSHmAEH/IC1uYRKYmqwrLiYOjWliHTOrl zmToimxoegxvc1if6hgQsC8nakxm6/RQoxC33/MQY86pcJkx0btNzl0KAXumNYNe hE6htlZ2L6t2p1ZDSGAGHgNjjtty+2ad2WGfJ1KmrfkSFJo8J54BOu//aocZhqgS pQzLeOaQQlOOaVck2achks+4ilh/Loe9VzpAm7GHv5uHJeNlxVvPzCi7HNyFPzA2 HXcBEzuAIb58mTxM+YQ7vxm1MMkvjqh9JP73awBevB7qCM90PGPAipo6oe5RFOGg 1lAmRpwBZe1jlkAfCQwKa13RfL3ba06tN8fRHa4Q -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:01 2024 by rpki-client on console-ams.rpki-client.org