$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa File: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (raw, json) Hash identifier: Bx1b38fbUxJjhjrxeEuROMcN+gxdeGCZuXwCivK7OCQ= Subject key identifier: 83:B7:38:44:9B:B7:0B:38:4B:76:76:73:2B:31:29:E2:23:A3:E7:CF Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 28DE90F96CDC4323C1F738A8C90735231F7A2424 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa Signing time: Mon 29 Jul 2024 05:00:00 +0000 ROA not before: Mon 29 Jul 2024 04:55:00 +0000 ROA not after: Mon 28 Jul 2025 05:00:00 +0000 asID: 4800 IP address blocks: 103.239.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 23:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:de:90:f9:6c:dc:43:23:c1:f7:38:a8:c9:07:35:23:1f:7a:24:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Jul 29 04:55:00 2024 GMT Not After : Jul 28 05:00:00 2025 GMT Subject: CN=83B738449BB70B384B7676732B3129E223A3E7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:01:27:10:1c:b6:ca:f8:6d:4f:54:b0:2c: fa:17:7a:3a:e2:96:0c:60:0b:50:9e:a2:50:dd:fb: 42:9b:4c:ce:66:08:ab:dd:a2:b6:24:b7:ce:9f:a1: c5:ac:2a:8f:52:73:df:47:f9:59:4a:02:65:39:fa: 5e:df:9f:36:56:91:6d:41:60:38:ec:4c:67:2f:2f: 32:e8:ae:11:ec:52:40:7b:24:9f:5d:ea:43:24:c0: 01:6c:97:ce:96:dd:2a:04:53:f8:14:9e:f7:6b:61: 84:38:27:bd:a1:fd:86:12:39:fd:5a:06:7a:13:5c: 1c:db:da:02:da:d6:2d:e0:be:6a:d2:23:92:78:35: 22:29:cf:a4:ae:8d:95:46:94:d3:66:1b:2a:c7:8f: b7:eb:d2:ac:d2:0a:4a:62:b8:71:c2:5a:67:7a:df: 86:95:4c:0a:44:46:53:9c:25:6f:7c:70:09:0f:17: 3e:d2:ec:3e:95:2e:4f:86:f1:cd:21:4c:1d:47:89: 84:c1:ca:c4:e7:63:89:78:a4:10:8f:4e:ad:bf:b0: 5c:f1:85:fe:9b:4b:08:89:fa:00:1c:24:e2:43:52: c0:16:af:ee:99:f8:e5:ec:a7:f2:1a:a9:31:47:57: 73:c4:03:a0:77:27:de:47:5f:c6:8b:d1:e7:24:4c: 92:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B7:38:44:9B:B7:0B:38:4B:76:76:73:2B:31:29:E2:23:A3:E7:CF X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.214.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:28:e3:74:70:39:b6:67:06:b1:e2:0f:99:29:d9:d4:e6:b0: 37:3b:44:02:d4:67:25:03:08:c3:7f:2e:f8:aa:40:f6:fb:08: 93:05:aa:7b:be:81:e3:25:4c:24:1c:1c:6a:76:40:ba:55:d5: a0:4f:f5:2a:9e:18:4c:19:94:b1:01:da:d3:e7:6b:fa:73:53: ca:fe:68:12:3f:c2:79:cb:cc:0e:e7:59:27:43:f6:ac:f4:12: 34:70:8e:1b:d0:34:95:51:35:04:05:d0:d1:c7:f6:58:6f:c4: 01:f4:52:6a:aa:c3:30:66:50:e7:f9:b7:48:8a:3a:db:73:4d: 43:ca:24:29:3f:da:54:8d:ca:23:f3:39:68:d4:aa:08:0b:82: 87:90:aa:67:71:f1:81:18:42:f9:12:d7:f8:63:35:08:df:f6: 52:74:a0:60:ae:4e:a2:a5:40:81:d1:e2:78:b7:c8:96:32:07: d2:5c:4f:ac:ea:65:68:c4:11:b7:78:84:68:bc:f8:ff:e2:d2: 35:ca:c6:01:e5:75:30:91:cf:c0:f0:85:ba:be:69:b6:6e:2d: 5a:8b:f3:5e:4f:b4:ff:da:21:f3:37:3b:52:89:d1:1f:53:90: 34:b5:9f:db:56:fb:fa:4b:91:d1:61:e3:74:c1:6c:a9:c9:cb: cf:11:9e:ee -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKN6Q+WzcQyPB9zioyQc1Ix96JCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNDA3MjkwNDU1MDBaFw0yNTA3MjgwNTAwMDBaMDMxMTAvBgNV BAMTKDgzQjczODQ0OUJCNzBCMzg0Qjc2NzY3MzJCMzEyOUUyMjNBM0U3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XgEnEBy2yvhtT1SwLPoXejri lgxgC1CeolDd+0KbTM5mCKvdorYkt86focWsKo9Sc99H+VlKAmU5+l7fnzZWkW1B YDjsTGcvLzLorhHsUkB7JJ9d6kMkwAFsl86W3SoEU/gUnvdrYYQ4J72h/YYSOf1a BnoTXBzb2gLa1i3gvmrSI5J4NSIpz6SujZVGlNNmGyrHj7fr0qzSCkpiuHHCWmd6 34aVTApERlOcJW98cAkPFz7S7D6VLk+G8c0hTB1HiYTBysTnY4l4pBCPTq2/sFzx hf6bSwiJ+gAcJOJDUsAWr+6Z+OXsp/IaqTFHV3PEA6B3J95HX8aL0eckTJIzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUg7c4RJu3CzhLdnZzKzEp4iOj588wHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlNTE2ZTZlLWM2NzktNGU1MC1i N2FiLTFlNDA2NzkxMjVjZC8wLzMxMzAzMzJlMzIzMzM5MmUzMjMxMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWfv1jANBgkqhkiG 9w0BAQsFAAOCAQEAGijjdHA5tmcGseIPmSnZ1OawNztEAtRnJQMIw38u+KpA9vsI kwWqe76B4yVMJBwcanZAulXVoE/1Kp4YTBmUsQHa0+dr+nNTyv5oEj/CecvMDudZ J0P2rPQSNHCOG9A0lVE1BAXQ0cf2WG/EAfRSaqrDMGZQ5/m3SIo623NNQ8okKT/a VI3KI/M5aNSqCAuCh5CqZ3HxgRhC+RLX+GM1CN/2UnSgYK5OoqVAgdHieLfIljIH 0lxPrOplaMQRt3iEaLz4/+LSNcrGAeV1MJHPwPCFur5ptm4tWovzXk+0/9oh8zc7 UonRH1OQNLWf21b7+kuR0WHjdMFsqcnLzxGe7g== -----END CERTIFICATE-----Generated at Thu Nov 21 22:33:05 2024 by rpki-client on console-fra.rpki-client.org