$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa File: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (raw, json) Hash identifier: vaCug1qVwQYV4Eir0Vlivt2Eyx887UV2TVWoqX0yQVI= Subject key identifier: F6:A8:1A:29:2F:17:23:15:2B:8F:28:D0:40:55:41:BA:8E:0B:61:E2 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 1732C34179425D88556EBAD84A3B48373532D4B6 Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa Signing time: Mon 01 Jul 2024 01:04:03 +0000 ROA not before: Mon 01 Jul 2024 00:59:03 +0000 ROA not after: Mon 30 Jun 2025 01:04:03 +0000 asID: 138119 IP address blocks: 103.126.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:32:c3:41:79:42:5d:88:55:6e:ba:d8:4a:3b:48:37:35:32:d4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Jul 1 00:59:03 2024 GMT Not After : Jun 30 01:04:03 2025 GMT Subject: CN=F6A81A292F1723152B8F28D0405541BA8E0B61E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:27:6d:6d:bc:41:a1:1e:d0:e8:d2:ce:7e: 1c:fd:5e:af:58:79:1d:ec:1b:15:73:31:02:60:67: 1e:5d:50:a7:6d:97:f1:4a:37:cc:05:8f:25:c0:d9: a0:9d:a7:09:c6:60:cd:f0:29:95:74:12:ed:2f:76: 8c:c4:00:85:24:0c:a7:ee:b1:40:69:d2:8c:3d:c2: 9d:1e:54:6b:c0:4d:91:22:f5:f0:b2:8f:df:a6:c3: ce:e1:11:06:41:f0:aa:6a:13:0a:f6:9b:b0:2e:58: d4:eb:ff:15:50:c0:d1:f1:e9:e5:9f:db:d0:94:80: 4f:d0:d4:21:78:3e:67:ff:a7:4b:b9:3a:33:f9:52: 0f:4c:37:87:a9:d9:ef:f8:96:b1:7b:2a:bc:1f:d5: ac:79:07:64:86:ff:7f:9f:16:49:9d:6f:29:cd:db: 00:f7:52:26:d6:9a:90:02:af:41:80:b5:5a:5d:3b: d1:8c:ef:53:cb:22:c4:dc:80:47:dd:9e:05:9b:40: 52:32:c1:e1:a1:86:e7:f2:1d:0b:f8:6a:82:0f:5b: 8e:1c:6d:83:f1:3a:e4:41:b0:4a:3d:90:10:ee:c7: 34:ff:b3:ca:76:d2:c0:70:4c:45:82:7b:a7:72:a8: e5:fe:de:93:fd:1d:20:5c:9d:d4:61:00:7a:92:31: e2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A8:1A:29:2F:17:23:15:2B:8F:28:D0:40:55:41:BA:8E:0B:61:E2 X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.28.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:9e:20:09:8f:93:13:35:a0:3f:2c:11:5f:de:93:c4:a1:34: 9e:52:85:27:47:6b:fd:e2:38:e3:03:8f:ed:74:62:c1:18:2c: bb:f0:c2:31:f8:77:48:3a:92:3d:51:ef:38:1b:21:6d:ac:4d: ab:23:ae:f6:56:b3:e1:bb:41:25:92:21:e6:42:3a:ad:49:62: cb:3f:e4:3f:66:63:42:ed:7c:b9:c8:84:a4:88:37:7d:9e:cb: 94:aa:9b:d7:43:00:16:19:fc:62:06:19:bb:eb:3a:71:80:e0: c9:b0:e9:7f:98:a3:9d:d4:cb:04:26:b6:cb:f0:e6:f7:9e:9e: b8:b3:77:ad:4f:61:c0:4a:79:95:1a:0a:aa:f8:cb:96:6c:57: 08:ec:aa:17:cc:18:ac:f2:52:ee:78:45:23:b5:82:f1:75:11: e5:85:7b:08:6e:f1:94:3d:88:d9:c1:b7:86:c5:32:d6:a0:5c: 02:1b:ac:21:34:93:4e:d8:2d:fa:0e:70:71:94:c5:52:8b:78: 61:ef:6c:9b:84:ec:b4:c9:d3:10:70:af:c5:62:8c:60:69:4c: d9:24:d0:25:60:42:ea:4f:0c:e5:7a:21:aa:dc:02:ed:2b:a0: c1:82:e7:11:5b:49:3e:46:20:3d:f2:5c:59:a0:13:83:35:b6: 6e:73:97:a5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFzLDQXlCXYhVbrrYSjtINzUy1LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNDA3MDEwMDU5MDNaFw0yNTA2MzAwMTA0MDNaMDMxMTAvBgNV BAMTKEY2QTgxQTI5MkYxNzIzMTUyQjhGMjhEMDQwNTU0MUJBOEUwQjYxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FidtbbxBoR7Q6NLOfhz9Xq9Y eR3sGxVzMQJgZx5dUKdtl/FKN8wFjyXA2aCdpwnGYM3wKZV0Eu0vdozEAIUkDKfu sUBp0ow9wp0eVGvATZEi9fCyj9+mw87hEQZB8KpqEwr2m7AuWNTr/xVQwNHx6eWf 29CUgE/Q1CF4Pmf/p0u5OjP5Ug9MN4ep2e/4lrF7Krwf1ax5B2SG/3+fFkmdbynN 2wD3UibWmpACr0GAtVpdO9GM71PLIsTcgEfdngWbQFIyweGhhufyHQv4aoIPW44c bYPxOuRBsEo9kBDuxzT/s8p20sBwTEWCe6dyqOX+3pP9HSBcndRhAHqSMeLTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9qgaKS8XIxUrjyjQQFVBuo4LYeIwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmNmVhMjIxLTc3YjctNDc5MS1h OGE4LWI1MTY0YjAwZjFjNS8wLzMxMzAzMzJlMzEzMjM2MmUzMjM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ34cMA0GCSqG SIb3DQEBCwUAA4IBAQCfniAJj5MTNaA/LBFf3pPEoTSeUoUnR2v94jjjA4/tdGLB GCy78MIx+HdIOpI9Ue84GyFtrE2rI672VrPhu0ElkiHmQjqtSWLLP+Q/ZmNC7Xy5 yISkiDd9nsuUqpvXQwAWGfxiBhm76zpxgODJsOl/mKOd1MsEJrbL8Ob3np64s3et T2HASnmVGgqq+MuWbFcI7KoXzBis8lLueEUjtYLxdRHlhXsIbvGUPYjZwbeGxTLW oFwCG6whNJNO2C36DnBxlMVSi3hh72ybhOy0ydMQcK/FYoxgaUzZJNAlYELqTwzl eiGq3ALtK6DBgucRW0k+RiA98lxZoBODNbZuc5el -----END CERTIFICATE-----Generated at Sun Nov 24 00:14:30 2024 by rpki-client on console-ams.rpki-client.org