$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa File: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (raw, json) Hash identifier: D8GjnN9iSeoHD+w8PHTjqQPYgM2654viBTgPlB7vaQ8= Subject key identifier: F8:CE:B4:29:AD:75:CC:3A:5A:C0:DB:DC:B2:1C:3A:6F:63:09:6B:05 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 14511FAF2030B0F1A494DCBEBB6042313A55ACF7 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa Signing time: Sat 24 Aug 2024 03:00:01 +0000 ROA not before: Sat 24 Aug 2024 02:55:01 +0000 ROA not after: Sat 23 Aug 2025 03:00:01 +0000 asID: 141966 IP address blocks: 103.166.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:51:1f:af:20:30:b0:f1:a4:94:dc:be:bb:60:42:31:3a:55:ac:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Aug 24 02:55:01 2024 GMT Not After : Aug 23 03:00:01 2025 GMT Subject: CN=F8CEB429AD75CC3A5AC0DBDCB21C3A6F63096B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:60:29:19:6b:ad:92:30:b9:10:99:8f:76: 7a:2f:e0:34:ab:f8:18:ba:a0:18:8d:18:a3:83:28: 41:53:8e:d4:c8:fa:4c:d2:dd:da:c3:66:03:f8:e2: 9e:84:53:b5:c1:25:39:ce:af:94:74:ed:c0:1d:15: 27:51:8a:4e:da:b3:da:5d:5c:da:72:2b:ee:33:83: bb:ef:08:d7:c6:7d:51:fe:8a:75:19:97:39:5d:27: bd:38:6e:08:d9:6c:06:5e:21:b1:0a:c2:3a:96:00: 9e:52:86:41:19:7e:f3:54:58:a5:6a:a2:3b:bf:87: 1d:02:26:c3:e8:65:cc:88:83:fd:32:b4:a9:17:59: a7:10:31:fd:f3:22:ee:c8:22:d6:e9:eb:40:d7:ab: 5e:9e:3f:b8:f2:1f:13:64:87:4d:53:97:4b:4c:5c: c0:f3:5b:86:9f:a6:57:25:71:aa:dc:b7:fc:4d:7d: bd:37:c3:bb:a6:8a:df:95:d1:1f:4b:35:8d:2c:f2: 80:b8:f1:76:5b:0c:0c:a3:bd:ef:a1:01:0c:40:ed: 20:5b:dc:7a:e0:0a:b5:75:09:e9:49:fe:eb:15:8b: ec:70:ef:8a:0e:ac:ca:5b:89:05:32:40:c2:56:9c: 51:00:45:b9:29:13:46:b7:c2:1f:94:c1:0b:af:de: 96:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CE:B4:29:AD:75:CC:3A:5A:C0:DB:DC:B2:1C:3A:6F:63:09:6B:05 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.255.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:46:94:d4:fb:28:76:17:2e:90:5c:16:ed:09:1e:1e:32:68: ef:21:db:86:48:10:d5:bd:1f:3b:5e:d8:0e:85:98:47:71:30: f1:f8:f5:c3:34:36:61:85:f4:06:50:c1:0d:1e:22:a9:09:9b: 49:fd:33:72:11:6c:f8:09:b2:5a:2f:ca:0f:e4:43:34:a6:25: 99:96:6e:ba:bd:e9:21:d9:04:63:cf:4e:47:cc:9d:2e:69:8a: ba:e9:b5:a1:44:c3:10:40:22:43:77:1f:7c:06:89:d4:ef:c5: 0e:f4:d9:c0:99:6a:2e:aa:aa:9b:c1:72:76:4e:a0:a5:26:88: 55:63:52:22:fa:08:22:34:04:98:ff:db:16:73:52:a6:ba:2c: d7:eb:f0:97:a6:ef:f3:a7:24:ba:54:2c:1d:25:cf:d1:07:17: 0d:a1:53:b4:78:77:20:63:40:8e:d5:0d:5f:42:79:ca:ec:1b: 04:5f:87:cc:88:de:fe:51:01:80:5a:02:99:85:54:e7:2a:28: 65:65:83:41:9e:8e:21:69:05:ee:5b:50:56:ea:c5:ae:62:e8: ea:2e:9a:58:8f:fd:8c:cb:60:a0:62:1f:f3:09:ed:99:ad:cd: 60:1c:45:1a:16:80:f7:e4:82:ac:8c:3d:f7:66:8a:fb:76:75: 93:36:48:bc -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUFFEfryAwsPGklNy+u2BCMTpVrPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNDA4MjQwMjU1MDFaFw0yNTA4MjMwMzAwMDFaMDMxMTAvBgNV BAMTKEY4Q0VCNDI5QUQ3NUNDM0E1QUMwREJEQ0IyMUMzQTZGNjMwOTZCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8AWApGWutkjC5EJmPdnov4DSr +Bi6oBiNGKODKEFTjtTI+kzS3drDZgP44p6EU7XBJTnOr5R07cAdFSdRik7as9pd XNpyK+4zg7vvCNfGfVH+inUZlzldJ704bgjZbAZeIbEKwjqWAJ5ShkEZfvNUWKVq oju/hx0CJsPoZcyIg/0ytKkXWacQMf3zIu7IItbp60DXq16eP7jyHxNkh01Tl0tM XMDzW4afplclcarct/xNfb03w7umit+V0R9LNY0s8oC48XZbDAyjve+hAQxA7SBb 3HrgCrV1CelJ/usVi+xw74oOrMpbiQUyQMJWnFEARbkpE0a3wh+UwQuv3pbvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU+M60Ka11zDpawNvcshw6b2MJawUwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyOWY4OTAyLTFhMDYtNDVhOC1h OTk4LTcyZTQ2YWFhZThmYy8wLzMxMzAzMzJlMzEzNjM2MmUzMjM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpv8wDQYJ KoZIhvcNAQELBQADggEBAF1GlNT7KHYXLpBcFu0JHh4yaO8h24ZIENW9Hzte2A6F mEdxMPH49cM0NmGF9AZQwQ0eIqkJm0n9M3IRbPgJslovyg/kQzSmJZmWbrq96SHZ BGPPTkfMnS5pirrptaFEwxBAIkN3H3wGidTvxQ702cCZai6qqpvBcnZOoKUmiFVj UiL6CCI0BJj/2xZzUqa6LNfr8Jem7/OnJLpULB0lz9EHFw2hU7R4dyBjQI7VDV9C ecrsGwRfh8yI3v5RAYBaApmFVOcqKGVlg0GejiFpBe5bUFbqxa5i6OoumliP/YzL YKBiH/MJ7ZmtzWAcRRoWgPfkgqyMPfdmivt2dZM2SLw= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org