$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33332e302f32342d3234203d3e20313530323238.roa File: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (raw, json) Hash identifier: JLuyTnkAd9LdVP7Ap7TsyT3WybJ3uwYm9GdHPUO4P9s= Subject key identifier: 16:C7:23:F5:98:38:E9:0B:F6:62:49:B6:8F:45:4E:8B:15:AA:05:0E Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 191DDCD3313891AC9BD4FC1EB708C5056B3AA4B4 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33332e302f32342d3234203d3e20313530323238.roa Signing time: Tue 08 Oct 2024 14:00:01 +0000 ROA not before: Tue 08 Oct 2024 13:55:01 +0000 ROA not after: Tue 07 Oct 2025 14:00:01 +0000 asID: 150228 IP address blocks: 103.17.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1d:dc:d3:31:38:91:ac:9b:d4:fc:1e:b7:08:c5:05:6b:3a:a4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Oct 8 13:55:01 2024 GMT Not After : Oct 7 14:00:01 2025 GMT Subject: CN=16C723F59838E90BF66249B68F454E8B15AA050E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:e4:da:5f:da:3f:87:b9:e9:f2:61:c2:f8: ba:c2:de:1e:15:33:5a:98:fc:67:86:69:15:6a:d7: 8e:84:dc:43:5d:ee:a8:96:ac:87:d6:06:f2:7d:70: c2:d7:64:d0:82:ac:81:99:b4:4b:70:2e:8d:03:4d: 5c:4f:e6:ad:b0:59:a8:b1:8b:04:fd:db:4c:1a:4d: b6:bd:e9:22:7a:65:a0:79:d5:bc:8d:38:a5:1a:c1: 4e:f9:5d:e9:52:60:9a:b0:7d:fa:22:7a:27:cf:45: 09:b3:0a:7b:79:97:03:a1:43:bc:a9:63:77:04:0b: 17:70:a7:63:41:c1:33:20:4b:2c:74:f1:30:79:12: 93:c2:67:5d:49:84:0c:30:cf:c3:44:1f:17:19:9b: 31:f7:e7:48:d1:16:e8:a8:b6:37:22:7c:e0:49:13: 0b:54:c0:87:f4:a9:d6:ba:b5:da:59:04:56:ae:c8: 7c:05:f7:96:50:a9:4e:e3:55:e1:60:87:e4:ee:8f: ba:f9:dc:d8:99:54:5b:8a:c6:64:54:56:9b:a2:4e: 2e:6f:fa:af:bc:d3:26:50:d2:ec:0a:d3:1f:9c:5d: 0c:e3:bc:14:d5:44:80:18:0b:88:cf:2b:80:3b:90: 94:16:5b:9b:36:65:71:d3:d0:5b:f2:47:61:79:c1: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C7:23:F5:98:38:E9:0B:F6:62:49:B6:8F:45:4E:8B:15:AA:05:0E X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33332e302f32342d3234203d3e20313530323238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.33.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:fc:83:af:53:ca:46:98:fa:f8:17:23:19:f8:fd:e7:dd:b0: 28:fd:87:39:82:b4:9b:0b:eb:f3:58:35:0b:5e:79:03:6e:4e: c1:d2:c5:a7:65:bd:1d:92:c1:45:46:06:ec:fe:ae:a9:45:d1: fb:38:e1:c0:74:47:ce:f8:03:40:9b:80:23:77:0a:e9:9e:d5: 57:db:3c:c5:85:d3:e9:45:e4:ba:f2:85:f0:c8:52:f6:01:18: 9e:c6:27:14:87:bd:85:e8:37:ed:f1:5b:b1:cf:a2:57:56:8c: 30:d1:ec:d7:8c:8c:c5:22:32:83:f1:0f:c2:45:7f:e3:1c:35: 2c:4f:ec:ae:87:1f:86:de:e6:c3:c4:21:cf:61:fc:5f:cd:71: 11:be:64:6f:6d:ca:3b:a9:20:aa:a8:49:2c:25:fc:5c:d7:5f: 05:fc:52:41:1a:35:f1:1e:74:72:d8:83:cd:f0:7b:c4:71:91: 0c:c1:a3:cd:87:44:c1:e0:02:4f:31:2b:79:49:9a:03:e5:8d: c5:7e:6d:2d:87:98:5e:e9:0b:4f:f6:7e:02:ef:6f:ff:54:14: ea:0f:f7:22:31:c2:a6:ce:40:1c:33:b7:5f:0b:76:53:24:98: c9:bf:11:ff:2c:af:ea:f5:04:00:7b:2f:05:16:c5:19:b3:dd: 6c:3e:12:37 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGR3c0zE4kayb1PwetwjFBWs6pLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNDEwMDgxMzU1MDFaFw0yNTEwMDcxNDAwMDFaMDMxMTAvBgNV BAMTKDE2QzcyM0Y1OTgzOEU5MEJGNjYyNDlCNjhGNDU0RThCMTVBQTA1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAOTaX9o/h7np8mHC+LrC3h4V M1qY/GeGaRVq146E3ENd7qiWrIfWBvJ9cMLXZNCCrIGZtEtwLo0DTVxP5q2wWaix iwT920waTba96SJ6ZaB51byNOKUawU75XelSYJqwffoieifPRQmzCnt5lwOhQ7yp Y3cECxdwp2NBwTMgSyx08TB5EpPCZ11JhAwwz8NEHxcZmzH350jRFuiotjcifOBJ EwtUwIf0qda6tdpZBFauyHwF95ZQqU7jVeFgh+Tuj7r53NiZVFuKxmRUVpuiTi5v +q+80yZQ0uwK0x+cXQzjvBTVRIAYC4jPK4A7kJQWW5s2ZXHT0FvyR2F5wbdfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFscj9Zg46Qv2Ykm2j0VOixWqBQ4wHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiOTA1NzY2LTQ0MGUtNGJjYi1h ZTcyLTNlNzg4MzFjZTlkYy8wLzMxMzAzMzJlMzEzNzJlMzMzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcRITANBgkqhkiG 9w0BAQsFAAOCAQEAffyDr1PKRpj6+BcjGfj9592wKP2HOYK0mwvr81g1C155A25O wdLFp2W9HZLBRUYG7P6uqUXR+zjhwHRHzvgDQJuAI3cK6Z7VV9s8xYXT6UXkuvKF 8MhS9gEYnsYnFIe9heg37fFbsc+iV1aMMNHs14yMxSIyg/EPwkV/4xw1LE/srocf ht7mw8Qhz2H8X81xEb5kb23KO6kgqqhJLCX8XNdfBfxSQRo18R50ctiDzfB7xHGR DMGjzYdEweACTzEreUmaA+WNxX5tLYeYXukLT/Z+Au9v/1QU6g/3IjHCps5AHDO3 Xwt2UySYyb8R/yyv6vUEAHsvBRbFGbPdbD4SNw== -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org