$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa File: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (raw, json) Hash identifier: VxDJRyHf4quz1NG42aRPhCKiwsHNdLZ5RbJ8wFW7Nhg= Subject key identifier: 8E:0E:E0:2A:CF:91:BA:7D:9E:A3:19:18:59:66:9F:69:A9:75:DA:18 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 23C8DE7042CE9E7344EC6D9D908D5E2A1137B15A Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa Signing time: Mon 26 Aug 2024 15:00:00 +0000 ROA not before: Mon 26 Aug 2024 14:55:00 +0000 ROA not after: Mon 25 Aug 2025 15:00:00 +0000 asID: 9341 IP address blocks: 103.17.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c8:de:70:42:ce:9e:73:44:ec:6d:9d:90:8d:5e:2a:11:37:b1:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Aug 26 14:55:00 2024 GMT Not After : Aug 25 15:00:00 2025 GMT Subject: CN=8E0EE02ACF91BA7D9EA3191859669F69A975DA18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:8c:75:50:70:4a:6b:c0:58:39:ee:3f:f8: d7:58:65:86:3a:6f:79:98:b0:bb:7c:7b:22:b5:fb: cb:16:81:c3:ed:b1:07:7a:c9:93:c3:89:0a:ec:ed: 6d:f3:91:4f:96:0f:3a:a9:bb:bb:e0:04:7e:ce:72: e5:e5:c2:db:4d:4d:c8:d5:65:e5:5d:e6:7c:11:14: cd:a7:6c:bb:46:c3:ee:1e:a7:ca:40:f5:16:d9:9d: 84:9a:b5:ec:e5:75:07:f1:14:b0:68:c5:e1:33:de: 88:ac:32:37:b6:e7:ed:cc:8b:1a:44:41:61:2a:14: b5:7e:91:ef:d6:95:f7:5a:2b:1f:06:cc:f5:20:84: 40:38:c5:92:c0:01:af:54:83:ea:be:ea:68:4c:90: cb:e3:58:76:36:62:3f:8b:3d:03:cc:86:c3:93:4e: 62:61:30:88:1b:14:b5:0e:ee:34:79:56:e3:c8:56: 95:f0:ba:2d:e2:73:7b:9c:aa:3c:bd:3d:f4:9a:b2: 8a:1a:43:b5:72:9c:4f:a2:99:82:54:17:68:96:f1: e6:c3:4f:31:1a:da:d0:27:9a:e2:4b:16:5d:69:64: cf:fe:7f:24:af:8b:83:17:fd:e3:7a:00:ad:28:b2: 49:91:12:cd:fd:82:bc:f3:4a:18:c8:12:9f:30:d1: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0E:E0:2A:CF:91:BA:7D:9E:A3:19:18:59:66:9F:69:A9:75:DA:18 X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.142.0/23 Signature Algorithm: sha256WithRSAEncryption ad:7d:cf:26:3e:cd:df:fb:48:74:91:64:11:fe:67:25:83:94: f8:44:ac:74:11:7a:79:cf:04:af:4c:bd:b2:ae:e1:69:9e:bf: 8f:62:2f:a1:d7:f2:53:f6:12:cb:53:cd:55:c7:12:38:a8:29: 79:ce:12:78:11:51:0b:75:99:61:19:86:0a:70:78:fa:3a:65: ae:22:f7:b2:60:ac:2b:f6:22:98:13:55:17:14:71:ce:be:80: d0:47:70:48:47:91:d7:4f:4c:f0:0d:39:71:b8:c6:42:f8:36: 41:f8:de:99:1c:39:70:be:b6:7f:a7:83:14:47:53:01:4c:94: 5b:cf:9b:6d:5e:90:85:83:54:10:f8:7e:71:10:ec:45:4c:44: b4:2c:91:b5:94:2d:74:47:08:e5:d4:63:6f:49:a1:78:96:8d: d1:6d:e2:55:09:c1:a6:e4:c5:71:05:51:0b:78:89:f4:c6:a9: ce:40:a8:d3:e0:1d:85:7c:1b:4b:2b:7b:b4:66:07:dd:b4:db: 66:89:8b:a2:c1:3a:20:c2:8d:b4:b0:45:9c:e4:85:a5:0c:62: fa:1a:e7:55:58:aa:09:28:d3:dd:51:d4:be:44:f7:8a:75:44: 2b:19:fa:07:aa:30:04:27:ff:27:2d:bf:5c:c8:0e:3f:b5:ff: e3:cc:b2:2e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUI8jecELOnnNE7G2dkI1eKhE3sVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNDA4MjYxNDU1MDBaFw0yNTA4MjUxNTAwMDBaMDMxMTAvBgNV BAMTKDhFMEVFMDJBQ0Y5MUJBN0Q5RUEzMTkxODU5NjY5RjY5QTk3NURBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSS4x1UHBKa8BYOe4/+NdYZYY6 b3mYsLt8eyK1+8sWgcPtsQd6yZPDiQrs7W3zkU+WDzqpu7vgBH7OcuXlwttNTcjV ZeVd5nwRFM2nbLtGw+4ep8pA9RbZnYSatezldQfxFLBoxeEz3oisMje25+3MixpE QWEqFLV+ke/WlfdaKx8GzPUghEA4xZLAAa9Ug+q+6mhMkMvjWHY2Yj+LPQPMhsOT TmJhMIgbFLUO7jR5VuPIVpXwui3ic3ucqjy9PfSasooaQ7VynE+imYJUF2iW8ebD TzEa2tAnmuJLFl1pZM/+fySvi4MX/eN6AK0oskmREs39grzzShjIEp8w0RxzAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUjg7gKs+Run2eoxkYWWafaal12hgwHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3NTk0NzZlLTZhZGItNGYyZS1i ZTc1LTg0NjcyNTllMTI4Zi8wLzMxMzAzMzJlMzEzNzJlMzEzNDMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnEY4wDQYJKoZIhvcN AQELBQADggEBAK19zyY+zd/7SHSRZBH+ZyWDlPhErHQRennPBK9MvbKu4Wmev49i L6HX8lP2EstTzVXHEjioKXnOEngRUQt1mWEZhgpwePo6Za4i97JgrCv2IpgTVRcU cc6+gNBHcEhHkddPTPANOXG4xkL4NkH43pkcOXC+tn+ngxRHUwFMlFvPm21ekIWD VBD4fnEQ7EVMRLQskbWULXRHCOXUY29JoXiWjdFt4lUJwabkxXEFUQt4ifTGqc5A qNPgHYV8G0sre7RmB92022aJi6LBOiDCjbSwRZzkhaUMYvoa51VYqgko091R1L5E 94p1RCsZ+geqMAQn/yctv1zIDj+1/+PMsi4= -----END CERTIFICATE-----Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org