$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313530343633.roa File: 3130332e34332e32342e302f32342d3234203d3e20313530343633.roa (raw, json) Hash identifier: OhxlH/LfyaqTXPNzcQujhyugYguxiYMaN9FLasiqWOY= Subject key identifier: E0:72:7A:79:6D:CD:2F:D8:CE:DB:27:8E:66:6B:89:BA:CC:49:70:0C Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F Certificate serial: 7F9301799DE7DA505622FF62FA363FF6C7A499F7 Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313530343633.roa Signing time: Sun 24 Dec 2023 14:00:00 +0000 ROA not before: Sun 24 Dec 2023 13:55:00 +0000 ROA not after: Sun 22 Dec 2024 14:00:00 +0000 asID: 150463 IP address blocks: 103.43.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:93:01:79:9d:e7:da:50:56:22:ff:62:fa:36:3f:f6:c7:a4:99:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F Validity Not Before: Dec 24 13:55:00 2023 GMT Not After : Dec 22 14:00:00 2024 GMT Subject: CN=E0727A796DCD2FD8CEDB278E666B89BACC49700C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d0:78:17:f5:48:31:7c:e7:27:f4:eb:93:5c: 13:76:55:cc:3c:a8:86:51:0c:0a:8e:89:f2:6f:71: c6:e3:bb:00:53:47:da:74:79:03:69:5f:ec:5b:d6: 19:db:79:5c:7b:20:6c:51:eb:ac:9e:40:ac:80:f0: b6:a5:10:1f:22:f0:6f:81:69:df:7f:42:ea:ec:b4: b7:80:58:93:1e:24:57:59:8c:4d:fe:38:25:77:2a: 91:d9:91:5a:f2:d1:35:ae:f1:77:2e:6f:1f:6d:e9: cf:0a:da:a2:37:cb:53:57:cf:45:a5:5e:83:2c:40: 84:82:26:6c:38:40:87:a3:41:5e:76:b8:5d:21:8c: 6d:39:3e:de:46:43:ee:30:b1:b0:33:a6:4c:2a:48: ec:d0:7c:45:38:c2:53:02:2f:78:a7:96:04:20:66: 44:bc:16:8b:b3:cd:74:2f:9b:56:f5:14:8f:55:fb: 9b:af:67:f1:84:19:2e:34:b5:d0:c9:af:9f:9d:07: 22:27:eb:55:e7:c8:d5:5f:7b:5b:fb:48:42:80:e7: 4d:79:9f:93:45:8d:6b:35:d5:22:d7:06:49:9d:17: 10:59:04:28:68:85:0a:ba:9e:7e:58:54:1f:a8:f1: d8:8a:88:56:f6:49:46:8f:c9:2d:38:35:24:19:73: 52:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:72:7A:79:6D:CD:2F:D8:CE:DB:27:8E:66:6B:89:BA:CC:49:70:0C X509v3 Authority Key Identifier: keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32342e302f32342d3234203d3e20313530343633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.24.0/24 Signature Algorithm: sha256WithRSAEncryption 28:55:15:cb:f9:bb:07:a5:fb:4d:a8:77:51:32:36:bd:c7:94: b0:5a:1f:5f:7f:87:00:6b:44:ec:57:29:5b:bb:05:69:90:cc: ac:af:23:9c:4f:df:b9:e5:5c:c2:3c:43:5a:5f:1f:c5:9e:6d: b9:e5:42:19:e8:c1:33:52:3a:34:b4:b7:9a:0e:4c:49:4c:e0: 68:22:26:4a:41:02:f0:fa:59:72:71:11:42:dd:ef:db:75:3f: d1:54:1d:db:26:36:aa:cd:00:0a:29:8d:70:2b:df:17:79:c8: 2b:97:48:b8:25:69:5e:cf:b6:34:2d:20:f5:6e:ad:34:0a:34: 6c:d9:e1:26:cd:04:74:3e:9a:b3:d7:f8:49:16:71:9e:fb:d8: 0e:9c:c1:8f:cf:1b:04:ef:6d:cc:f0:59:ab:22:62:80:9d:da: 7e:90:de:71:fb:dd:19:4f:eb:a7:bd:e1:23:76:6f:ec:ff:32: 94:03:9a:a9:e4:a9:a3:7e:a7:3d:f8:08:f5:77:a7:86:98:fe: 86:fe:c1:77:7f:70:34:0e:27:2e:02:b7:75:5a:88:b9:70:d5: 96:c8:6d:4b:63:67:bf:e7:55:f2:ff:1a:da:83:0a:04:ac:38: 3c:db:d1:fa:22:12:72:3b:62:c3:50:4c:2a:e8:be:e7:4e:11: b0:9b:17:8e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUf5MBeZ3n2lBWIv9i+jY/9sekmfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0 MzFFMTc1RjAeFw0yMzEyMjQxMzU1MDBaFw0yNDEyMjIxNDAwMDBaMDMxMTAvBgNV BAMTKEUwNzI3QTc5NkRDRDJGRDhDRURCMjc4RTY2NkI4OUJBQ0M0OTcwMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT0HgX9UgxfOcn9OuTXBN2Vcw8 qIZRDAqOifJvccbjuwBTR9p0eQNpX+xb1hnbeVx7IGxR66yeQKyA8LalEB8i8G+B ad9/QurstLeAWJMeJFdZjE3+OCV3KpHZkVry0TWu8Xcubx9t6c8K2qI3y1NXz0Wl XoMsQISCJmw4QIejQV52uF0hjG05Pt5GQ+4wsbAzpkwqSOzQfEU4wlMCL3inlgQg ZkS8FouzzXQvm1b1FI9V+5uvZ/GEGS40tdDJr5+dByIn61XnyNVfe1v7SEKA5015 n5NFjWs11SLXBkmdFxBZBChohQq6nn5YVB+o8diKiFb2SUaPyS04NSQZc1K7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU4HJ6eW3NL9jO2yeOZmuJusxJcAwwHwYDVR0j BBgwFoAUCKlP1/DoooetMY16JiVBkkMeF18wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjA4M2Q0NC03ODM1LTQ0M2QtODUzYS0wYTc5Y2YwMGU5NTAvMC8wOEE5NEZEN0Yw RThBMjg3QUQzMThEN0EyNjI1NDE5MjQzMUUxNzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0MzFF MTc1Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyMDgzZDQ0LTc4MzUtNDQzZC04 NTNhLTBhNzljZjAwZTk1MC8wLzMxMzAzMzJlMzQzMzJlMzIzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcrGDANBgkqhkiG 9w0BAQsFAAOCAQEAKFUVy/m7B6X7Tah3UTI2vceUsFofX3+HAGtE7FcpW7sFaZDM rK8jnE/fueVcwjxDWl8fxZ5tueVCGejBM1I6NLS3mg5MSUzgaCImSkEC8PpZcnER Qt3v23U/0VQd2yY2qs0ACimNcCvfF3nIK5dIuCVpXs+2NC0g9W6tNAo0bNnhJs0E dD6as9f4SRZxnvvYDpzBj88bBO9tzPBZqyJigJ3afpDecfvdGU/rp73hI3Zv7P8y lAOaqeSpo36nPfgI9Xenhpj+hv7Bd39wNA4nLgK3dVqIuXDVlshtS2Nnv+dV8v8a 2oMKBKw4PNvR+iIScjtiw1BMKui+504RsJsXjg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:11 2024 by rpki-client on console-fra.rpki-client.org