$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa File: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (raw, json) Hash identifier: DSCdhRjgPhVc7GP3hYwZBTxGLDzPYuxYKap6JH0m82g= Subject key identifier: 3C:39:4D:B9:46:83:17:EC:8F:FE:32:D0:42:24:91:62:B2:CF:F7:88 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 691E5EBB975C2C7184C76416B92A4A8AFA1368CE Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa Signing time: Wed 16 Oct 2024 09:02:07 +0000 ROA not before: Wed 16 Oct 2024 08:57:07 +0000 ROA not after: Wed 15 Oct 2025 09:02:07 +0000 asID: 141615 IP address blocks: 103.161.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1e:5e:bb:97:5c:2c:71:84:c7:64:16:b9:2a:4a:8a:fa:13:68:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Oct 16 08:57:07 2024 GMT Not After : Oct 15 09:02:07 2025 GMT Subject: CN=3C394DB9468317EC8FFE32D042249162B2CFF788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:0a:a6:64:85:df:fb:65:22:27:aa:46:b2: 46:5e:e9:8b:e6:51:c2:3c:59:de:1c:67:61:23:14: e2:b9:7a:ce:f3:18:33:e9:8e:93:fb:d3:58:d3:bf: a6:fb:b8:56:ec:e7:4b:df:81:04:62:5b:80:93:d3: 7c:95:1f:cb:a8:ec:53:3a:94:1b:68:52:c3:c9:7d: d0:5c:82:ec:cf:85:d8:43:75:9e:1f:7d:3b:a2:0b: c8:b0:84:0d:2b:8d:3c:ce:5f:86:ab:2e:d0:be:fe: ac:30:f4:d2:56:04:b0:ea:1b:47:0f:14:f8:0b:97: e5:8e:d6:8b:ed:c4:0b:0c:1c:4e:12:5e:92:8a:41: eb:0a:5e:6a:a0:05:e1:c1:97:e6:86:16:3e:62:a5: 14:6b:bf:2d:3b:47:21:64:c4:c4:bc:b0:c5:e3:77: 55:74:90:80:da:2e:de:28:db:7a:3f:a6:4b:b9:e7: 56:05:35:72:12:0a:7a:f3:4d:ce:7c:7b:33:e2:44: b3:de:62:b6:4a:a9:76:48:ea:d1:15:bf:50:85:a5: db:6c:19:85:59:57:54:f5:94:c0:30:1b:2b:36:12: cd:23:30:08:1c:59:dd:5a:6d:99:bf:11:39:23:da: 3d:dc:1e:0c:02:79:11:1d:f6:ce:d2:61:a8:88:e8: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:39:4D:B9:46:83:17:EC:8F:FE:32:D0:42:24:91:62:B2:CF:F7:88 X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.111.0/24 Signature Algorithm: sha256WithRSAEncryption 40:8c:81:2a:c8:8b:da:81:b1:76:13:0a:c4:2a:6c:2f:69:2e: 88:2c:ac:5d:76:e9:dd:c6:36:59:c1:62:89:ed:62:bd:97:6f: fb:c6:9b:d9:ff:f5:55:bd:d3:b6:fd:04:96:ce:c0:93:b9:95: 1a:11:a3:16:09:0c:8e:f4:5d:80:25:25:75:3c:a6:cf:9c:b1: 83:a1:62:76:62:0d:31:42:e8:19:60:98:41:b1:d0:75:4c:af: 6d:8b:22:44:c7:06:28:33:fc:bd:46:32:14:45:c4:b1:97:5f: 9e:eb:aa:f8:1e:4b:63:b4:b3:af:25:b1:1a:aa:57:8e:64:f0: 70:3b:0e:3c:7b:34:e4:f7:d8:d1:33:7d:93:85:76:63:23:e2: 64:e2:04:23:e3:5a:10:43:03:77:65:39:a0:30:86:8a:26:11: 1e:11:57:f1:2b:a0:74:03:48:99:5d:49:b9:93:f6:2b:34:45: 7f:a8:3c:24:d4:54:bb:db:87:ed:44:18:29:a4:6e:a7:03:02: 90:30:ee:3c:d3:1c:3a:8b:8a:d5:10:8b:24:27:77:d7:6e:ed: 60:03:b7:e8:1b:ac:ad:99:ca:3f:24:73:25:c2:df:db:95:5f: 60:14:eb:5d:3f:2c:bd:ca:f0:55:57:98:d1:1d:cb:88:13:fe: 83:82:df:1b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUaR5eu5dcLHGEx2QWuSpKivoTaM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNDEwMTYwODU3MDdaFw0yNTEwMTUwOTAyMDdaMDMxMTAvBgNV BAMTKDNDMzk0REI5NDY4MzE3RUM4RkZFMzJEMDQyMjQ5MTYyQjJDRkY3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPQqmZIXf+2UiJ6pGskZe6Yvm UcI8Wd4cZ2EjFOK5es7zGDPpjpP701jTv6b7uFbs50vfgQRiW4CT03yVH8uo7FM6 lBtoUsPJfdBcguzPhdhDdZ4ffTuiC8iwhA0rjTzOX4arLtC+/qww9NJWBLDqG0cP FPgLl+WO1ovtxAsMHE4SXpKKQesKXmqgBeHBl+aGFj5ipRRrvy07RyFkxMS8sMXj d1V0kIDaLt4o23o/pku551YFNXISCnrzTc58ezPiRLPeYrZKqXZI6tEVv1CFpdts GYVZV1T1lMAwGys2Es0jMAgcWd1abZm/ETkj2j3cHgwCeREd9s7SYaiI6CBjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPDlNuUaDF+yP/jLQQiSRYrLP94gwHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmNDA4ZTQ0LTNlOWMtNDVlNS1i Y2E0LTVkZmJkNGIyNzEzMC8wLzMxMzAzMzJlMzEzNjMxMmUzMTMxMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMxMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoW8wDQYJ KoZIhvcNAQELBQADggEBAECMgSrIi9qBsXYTCsQqbC9pLogsrF126d3GNlnBYont Yr2Xb/vGm9n/9VW907b9BJbOwJO5lRoRoxYJDI70XYAlJXU8ps+csYOhYnZiDTFC 6BlgmEGx0HVMr22LIkTHBigz/L1GMhRFxLGXX57rqvgeS2O0s68lsRqqV45k8HA7 Djx7NOT32NEzfZOFdmMj4mTiBCPjWhBDA3dlOaAwhoomER4RV/EroHQDSJldSbmT 9is0RX+oPCTUVLvbh+1EGCmkbqcDApAw7jzTHDqLitUQiyQnd9du7WADt+gbrK2Z yj8kcyXC39uVX2AU610/LL3K8FVXmNEdy4gT/oOC3xs= -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org