$ rpki-client -vvf repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/3130332e33392e37342e302f32332d3234203d3e20313530323732.roa File: 3130332e33392e37342e302f32332d3234203d3e20313530323732.roa (raw, json) Hash identifier: /jbCkGD1i8NyhuUnKVEmZYj4vCqIPPKrbQpk5MF5I1o= Subject key identifier: 51:70:1E:6A:BB:67:B9:A9:C1:80:E9:E2:E9:61:48:AF:21:1D:C1:7A Certificate issuer: /CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Certificate serial: 5939EFF25280A1B62E31ADAD6A9852008B3D410C Authority key identifier: 6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/3130332e33392e37342e302f32332d3234203d3e20313530323732.roa Signing time: Wed 23 Oct 2024 05:00:04 +0000 ROA not before: Wed 23 Oct 2024 04:55:04 +0000 ROA not after: Wed 22 Oct 2025 05:00:04 +0000 asID: 150272 IP address blocks: 103.39.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 02:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:39:ef:f2:52:80:a1:b6:2e:31:ad:ad:6a:98:52:00:8b:3d:41:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AAF6E8D1C9A809446CBC076FE39083AF954708E Validity Not Before: Oct 23 04:55:04 2024 GMT Not After : Oct 22 05:00:04 2025 GMT Subject: CN=51701E6ABB67B9A9C180E9E2E96148AF211DC17A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:16:ba:e0:c0:bf:f2:d7:5c:66:d2:ee:97: c9:70:90:23:c9:11:23:fa:8c:cb:72:47:a5:d1:d3: 16:57:b2:9f:21:5e:06:3e:b4:ff:ac:4c:3c:4f:f8: 07:3f:19:7d:93:55:9f:b5:c7:2e:7c:d8:7e:d8:c7: 83:0c:70:8d:ef:35:aa:f7:b5:b6:fc:5b:9f:38:28: f2:0a:15:cb:33:57:d2:81:aa:28:57:1b:e8:15:32: bf:75:2c:3b:66:cc:f4:05:11:f3:18:35:ce:d5:b5: 69:f6:b2:d2:0b:aa:e1:15:e4:aa:25:94:0c:f8:56: 1a:0e:1c:f2:66:0e:22:30:44:02:9b:ed:a5:96:19: 87:40:42:b7:89:b4:01:df:12:1e:33:dd:83:cb:4f: c7:36:ea:73:3c:11:50:ec:eb:5c:50:a3:b3:c1:a8: da:aa:71:e4:b0:d0:de:3a:6c:06:e8:a6:10:5a:ed: bd:76:2a:1a:74:f8:85:fe:9e:a8:f2:2e:cc:f0:0f: c6:46:ee:5f:7b:ea:47:89:ad:12:9b:ea:f9:c1:88: 17:b4:d9:ce:28:40:0c:53:7c:ff:f2:d9:a3:6e:72: 89:ce:83:66:aa:cf:85:c9:48:17:be:20:b4:e6:04: 76:1c:ec:da:3f:10:dd:0c:d5:e5:cc:a6:c7:bc:85: a6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:70:1E:6A:BB:67:B9:A9:C1:80:E9:E2:E9:61:48:AF:21:1D:C1:7A X509v3 Authority Key Identifier: keyid:6A:AF:6E:8D:1C:9A:80:94:46:CB:C0:76:FE:39:08:3A:F9:54:70:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/6AAF6E8D1C9A809446CBC076FE39083AF954708E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AAF6E8D1C9A809446CBC076FE39083AF954708E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e19abc8-8507-41ed-8289-7e3ac7b24935/0/3130332e33392e37342e302f32332d3234203d3e20313530323732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.74.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:40:99:7e:8f:e6:ac:1f:f1:53:32:51:55:9e:01:6d:25:10: d7:68:a2:07:47:b8:69:45:e3:63:e3:58:c5:64:b2:9b:8f:15: ca:db:6f:5b:28:19:30:73:a8:2b:3b:82:da:f1:8a:09:1d:62: b3:7e:bf:b9:31:82:d1:b9:d7:7a:22:9f:75:c2:70:db:59:1c: fb:49:1c:dc:00:4d:e1:de:44:ba:fb:88:6c:4d:af:13:da:34: de:83:f2:46:ec:1f:c7:97:d0:48:04:dd:20:4b:d8:4b:68:ea: 88:b9:86:48:59:6b:52:66:de:bc:9a:ef:37:3b:95:47:a4:2b: 40:ec:26:88:cd:dc:8a:af:29:c5:ae:1f:1a:f3:68:c8:ac:8b: 79:0b:87:aa:d5:56:dc:7b:f8:85:b9:7b:c3:1c:c1:e4:e4:cf: 79:21:17:95:2d:86:05:13:11:bc:59:ba:a2:3b:11:78:a4:22: 21:a2:a1:75:b1:02:2b:96:10:a2:6c:ce:ff:95:74:1b:8c:5d: 4c:6c:14:fb:30:f9:79:13:9a:c6:e5:38:7e:e8:0c:ef:e9:f9: b3:80:c3:58:5b:88:07:10:99:50:2b:25:17:41:e9:cc:de:f7: bb:72:ab:5d:f4:4b:d4:9f:f7:a7:4f:23:77:b8:7a:6e:c8:9d: 40:64:79:e0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWTnv8lKAobYuMa2taphSAIs9QQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FG OTU0NzA4RTAeFw0yNDEwMjMwNDU1MDRaFw0yNTEwMjIwNTAwMDRaMDMxMTAvBgNV BAMTKDUxNzAxRTZBQkI2N0I5QTlDMTgwRTlFMkU5NjE0OEFGMjExREMxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdsxa64MC/8tdcZtLul8lwkCPJ ESP6jMtyR6XR0xZXsp8hXgY+tP+sTDxP+Ac/GX2TVZ+1xy582H7Yx4MMcI3vNar3 tbb8W584KPIKFcszV9KBqihXG+gVMr91LDtmzPQFEfMYNc7VtWn2stILquEV5Kol lAz4VhoOHPJmDiIwRAKb7aWWGYdAQreJtAHfEh4z3YPLT8c26nM8EVDs61xQo7PB qNqqceSw0N46bAbophBa7b12Khp0+IX+nqjyLszwD8ZG7l976keJrRKb6vnBiBe0 2c4oQAxTfP/y2aNuconOg2aqz4XJSBe+ILTmBHYc7No/EN0M1eXMpse8haaNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUUXAeartnuanBgOni6WFIryEdwXowHwYDVR0j BBgwFoAUaq9ujRyagJRGy8B2/jkIOvlUcI4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTE5YWJjOC04NTA3LTQxZWQtODI4OS03ZTNhYzdiMjQ5MzUvMC82QUFGNkU4RDFD OUE4MDk0NDZDQkMwNzZGRTM5MDgzQUY5NTQ3MDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFBRjZFOEQxQzlBODA5NDQ2Q0JDMDc2RkUzOTA4M0FGOTU0 NzA4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlMTlhYmM4LTg1MDctNDFlZC04 Mjg5LTdlM2FjN2IyNDkzNS8wLzMxMzAzMzJlMzMzOTJlMzczNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcnSjANBgkqhkiG 9w0BAQsFAAOCAQEAakCZfo/mrB/xUzJRVZ4BbSUQ12iiB0e4aUXjY+NYxWSym48V yttvWygZMHOoKzuC2vGKCR1is36/uTGC0bnXeiKfdcJw21kc+0kc3ABN4d5EuvuI bE2vE9o03oPyRuwfx5fQSATdIEvYS2jqiLmGSFlrUmbevJrvNzuVR6QrQOwmiM3c iq8pxa4fGvNoyKyLeQuHqtVW3Hv4hbl7wxzB5OTPeSEXlS2GBRMRvFm6ojsReKQi IaKhdbECK5YQomzO/5V0G4xdTGwU+zD5eROaxuU4fugM7+n5s4DDWFuIBxCZUCsl F0HpzN73u3KrXfRL1J/3p08jd7h6bsidQGR54A== -----END CERTIFICATE-----Generated at Thu Nov 21 05:34:31 2024 by rpki-client on console-ams.rpki-client.org