$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa File: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (raw, json) Hash identifier: 26YINQme/iBjXm8kI77CvEcmVoMDQs4ckNihzd85Z90= Subject key identifier: 94:2E:C9:7E:A2:C5:E6:51:73:42:E9:F4:B4:B6:AB:2D:20:FD:2A:F7 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 14A9AED954AD96FFCD1B52FC13818524246FA72E Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa Signing time: Sat 24 Aug 2024 03:00:01 +0000 ROA not before: Sat 24 Aug 2024 02:55:01 +0000 ROA not after: Sat 23 Aug 2025 03:00:01 +0000 asID: 141966 IP address blocks: 103.166.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a9:ae:d9:54:ad:96:ff:cd:1b:52:fc:13:81:85:24:24:6f:a7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Aug 24 02:55:01 2024 GMT Not After : Aug 23 03:00:01 2025 GMT Subject: CN=942EC97EA2C5E6517342E9F4B4B6AB2D20FD2AF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ef:b5:54:e3:c6:6c:2e:95:39:e3:eb:8b:6b: b6:80:47:53:c8:e0:c9:1a:07:58:05:bc:3c:12:25: 2c:63:ac:e2:85:96:80:73:0e:82:4c:2f:84:3e:24: 6a:0e:72:22:19:1d:f9:ec:a6:9c:33:cd:82:25:db: 14:0a:cc:74:0d:a8:8d:17:52:57:7f:9b:d3:cb:0e: ff:f3:b0:e1:f7:d3:00:bd:5a:40:1b:ff:63:75:aa: d6:f6:d9:6d:bf:9a:24:77:ed:7b:48:1e:e9:c5:da: a6:3f:7f:ae:cf:0b:27:0f:50:81:fd:3a:ee:94:f2: 00:88:9e:df:ef:83:d2:36:c0:06:37:5e:75:5a:21: d8:80:51:f4:11:8e:58:49:12:a0:57:9c:d2:b9:b5: f3:d5:c7:d8:9c:ab:62:12:ae:56:8f:f9:3f:4e:d3: e2:cb:b3:01:4b:4f:da:10:4b:4d:88:ef:0e:f2:e3: 2b:5c:ed:3e:76:9e:82:59:5a:50:16:c6:4c:66:2d: 00:2d:ff:e3:0d:38:db:06:b8:5d:2e:5f:d2:aa:d9: 1d:dc:dd:19:11:e2:42:c8:73:e3:c2:48:5e:2f:aa: be:e3:30:6c:95:67:79:b4:b2:1b:b8:87:c5:e4:f1: 9f:3e:97:ea:6a:54:a7:63:da:20:17:74:71:4e:be: fb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2E:C9:7E:A2:C5:E6:51:73:42:E9:F4:B4:B6:AB:2D:20:FD:2A:F7 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.254.0/24 Signature Algorithm: sha256WithRSAEncryption 71:3d:ba:ea:fa:ac:0a:0a:17:ff:df:c8:f3:26:cc:85:da:a6: bb:19:d2:ee:ce:c3:b3:2a:b7:18:7f:fd:3b:2c:53:4a:29:2c: be:9a:ae:74:c8:39:47:b9:b3:99:cc:6c:cf:eb:db:a8:cf:4d: d5:21:68:d2:cf:9e:0e:90:74:e4:e3:00:39:82:03:20:cb:b5: f1:9e:86:aa:d2:bc:2d:d8:02:b8:c7:36:12:e3:c1:92:ba:76: 9a:d8:1f:1c:d5:3b:f7:ff:d3:e4:95:47:04:48:7c:d4:3d:ff: 21:26:7f:c0:02:be:81:d6:06:c6:45:e6:c0:2a:44:17:92:e3: 2b:16:44:11:d1:7d:94:d8:6b:ed:b6:37:6f:7b:eb:a0:6c:e0: 9b:4a:06:88:bb:e0:39:92:a8:02:22:2a:22:5f:7f:ab:fb:51: b5:42:28:b2:03:11:e3:f7:72:40:a5:75:90:56:26:59:13:83: 3b:73:63:42:bd:6e:f8:f2:f9:4e:1f:84:51:49:8d:61:70:d1: 15:ea:5e:2c:85:b3:05:23:5d:81:8a:23:6b:24:50:12:50:21: 7c:30:ee:e7:22:71:6e:a4:a4:3d:aa:b2:4b:78:57:71:f5:8c: 99:9f:15:f1:0a:6d:51:ee:1f:85:e5:30:03:bf:76:3c:fa:41: 1a:53:03:1d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUFKmu2VStlv/NG1L8E4GFJCRvpy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNDA4MjQwMjU1MDFaFw0yNTA4MjMwMzAwMDFaMDMxMTAvBgNV BAMTKDk0MkVDOTdFQTJDNUU2NTE3MzQyRTlGNEI0QjZBQjJEMjBGRDJBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC377VU48ZsLpU54+uLa7aAR1PI 4MkaB1gFvDwSJSxjrOKFloBzDoJML4Q+JGoOciIZHfnsppwzzYIl2xQKzHQNqI0X Uld/m9PLDv/zsOH30wC9WkAb/2N1qtb22W2/miR37XtIHunF2qY/f67PCycPUIH9 Ou6U8gCInt/vg9I2wAY3XnVaIdiAUfQRjlhJEqBXnNK5tfPVx9icq2ISrlaP+T9O 0+LLswFLT9oQS02I7w7y4ytc7T52noJZWlAWxkxmLQAt/+MNONsGuF0uX9Kq2R3c 3RkR4kLIc+PCSF4vqr7jMGyVZ3m0shu4h8Xk8Z8+l+pqVKdj2iAXdHFOvvshAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUlC7JfqLF5lFzQun0tLarLSD9KvcwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyOWY4OTAyLTFhMDYtNDVhOC1h OTk4LTcyZTQ2YWFhZThmYy8wLzMxMzAzMzJlMzEzNjM2MmUzMjM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpv4wDQYJ KoZIhvcNAQELBQADggEBAHE9uur6rAoKF//fyPMmzIXaprsZ0u7Ow7Mqtxh//Tss U0opLL6arnTIOUe5s5nMbM/r26jPTdUhaNLPng6QdOTjADmCAyDLtfGehqrSvC3Y ArjHNhLjwZK6dprYHxzVO/f/0+SVRwRIfNQ9/yEmf8ACvoHWBsZF5sAqRBeS4ysW RBHRfZTYa+22N29766Bs4JtKBoi74DmSqAIiKiJff6v7UbVCKLIDEeP3ckCldZBW JlkTgztzY0K9bvjy+U4fhFFJjWFw0RXqXiyFswUjXYGKI2skUBJQIXww7ucicW6k pD2qskt4V3H1jJmfFfEKbVHuH4XlMAO/djz6QRpTAx0= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org