$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134382e302f32342d3234203d3e203538343737.roa File: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: FXD9Xl9HQjE5rhTpZsmUh0+M9Gq4Zq3tqVQkODiT8rI= Subject key identifier: 35:8B:D6:10:9F:9D:FB:0E:A3:C1:85:AE:DD:A3:A5:B8:FD:A9:A2:2B Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 0CAC988B935187D077EFE01D400787616FAF01C0 Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134382e302f32342d3234203d3e203538343737.roa Signing time: Mon 01 Jul 2024 01:05:28 +0000 ROA not before: Mon 01 Jul 2024 01:00:28 +0000 ROA not after: Mon 30 Jun 2025 01:05:28 +0000 asID: 58477 IP address blocks: 103.28.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ac:98:8b:93:51:87:d0:77:ef:e0:1d:40:07:87:61:6f:af:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Jul 1 01:00:28 2024 GMT Not After : Jun 30 01:05:28 2025 GMT Subject: CN=358BD6109F9DFB0EA3C185AEDDA3A5B8FDA9A22B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:14:39:ed:1d:5a:b6:9a:59:2f:e6:65:f5: ac:a0:33:a3:62:03:63:53:f5:57:b6:d0:c1:a1:fd: 27:27:b7:0f:b8:80:34:d1:12:e5:81:49:ad:36:d0: 28:9a:5d:43:c1:5c:ed:a8:a9:dc:06:b8:17:cf:6f: f7:b1:5b:42:88:1d:7d:00:b6:0d:42:94:f3:2c:ee: b3:29:3b:ec:d4:21:6d:03:8f:94:0a:41:d9:e8:a7: ca:4f:2f:0b:c1:8a:03:dc:36:aa:a4:ad:f2:3b:10: ec:cc:2a:84:6d:ac:0f:3b:56:9e:8b:f3:e1:e5:39: 28:f6:14:af:1d:50:25:b3:a5:05:21:e0:d6:e7:cb: 7d:27:34:a9:9b:d9:93:36:32:e1:13:83:20:32:b5: 9a:15:46:c6:57:92:9c:73:bf:b8:0f:e8:5d:4a:fc: 94:36:99:8e:1e:8a:2a:50:6f:82:ed:21:da:13:58: 0a:f0:10:1c:6e:f1:91:52:04:35:e8:f9:fb:97:67: b1:5b:58:59:cd:5b:1f:1d:92:9a:74:f4:c9:86:33: 26:76:b8:c2:24:75:43:8e:af:50:80:a6:f9:c5:ea: c5:21:25:53:d2:21:86:fd:e1:b6:8f:fc:5b:79:7d: a9:c7:a6:4d:ad:39:da:ef:07:41:a6:55:3a:04:be: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8B:D6:10:9F:9D:FB:0E:A3:C1:85:AE:DD:A3:A5:B8:FD:A9:A2:2B X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134382e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.148.0/24 Signature Algorithm: sha256WithRSAEncryption 13:d1:81:12:b2:99:22:88:5b:54:f7:eb:45:eb:0f:3d:7f:90: ed:a6:40:5e:50:14:e7:76:fc:de:f0:48:f3:d5:89:93:30:ba: 22:50:22:3c:df:ce:14:35:8c:40:ea:9d:29:0b:ed:3f:8d:c8: af:5d:83:2b:21:75:df:da:bf:fb:38:f7:52:92:8e:04:98:be: 34:e0:c3:ff:6b:4f:3a:3a:b1:0e:86:5e:7c:0e:f0:90:8a:5f: e0:42:c9:7f:98:03:a4:70:76:2a:70:de:fa:16:35:cb:ae:fd: 94:a8:a2:9a:4a:a4:24:29:2a:56:4a:5b:1a:2b:89:33:22:ab: 00:01:91:0a:cc:99:29:a5:7c:2b:31:a2:9c:9f:5b:dd:75:54: 1f:fa:89:71:34:38:92:f8:b0:a2:1b:f0:a1:1c:94:07:01:8b: 11:56:31:8f:30:42:69:47:01:f6:4a:c6:02:27:79:81:73:9a: b4:65:58:74:79:d6:9f:fc:09:bc:ef:9c:8d:29:b2:3b:b7:60: 48:10:dc:8c:22:6c:ee:01:39:a4:08:19:0d:e6:b5:cd:ef:ac: aa:cc:ef:a2:13:14:14:0e:c4:03:07:2f:e4:ca:c3:04:0e:e9: c2:9b:ca:28:4c:c9:24:43:49:e6:38:fd:2d:93:75:52:14:d7: ab:a9:eb:91 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDKyYi5NRh9B37+AdQAeHYW+vAcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yNDA3MDEwMTAwMjhaFw0yNTA2MzAwMTA1MjhaMDMxMTAvBgNV BAMTKDM1OEJENjEwOUY5REZCMEVBM0MxODVBRUREQTNBNUI4RkRBOUEyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY6hQ57R1atppZL+Zl9aygM6Ni A2NT9Ve20MGh/Scntw+4gDTREuWBSa020CiaXUPBXO2oqdwGuBfPb/exW0KIHX0A tg1ClPMs7rMpO+zUIW0Dj5QKQdnop8pPLwvBigPcNqqkrfI7EOzMKoRtrA87Vp6L 8+HlOSj2FK8dUCWzpQUh4Nbny30nNKmb2ZM2MuETgyAytZoVRsZXkpxzv7gP6F1K /JQ2mY4eiipQb4LtIdoTWArwEBxu8ZFSBDXo+fuXZ7FbWFnNWx8dkpp09MmGMyZ2 uMIkdUOOr1CApvnF6sUhJVPSIYb94baP/Ft5fanHpk2tOdrvB0GmVToEvmanAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUNYvWEJ+d+w6jwYWu3aOluP2poiswHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzZhYTAzLTFiNGQtNDM4ZS1h OWYzLWVmZWFhZTZiMDkyMS8wLzMxMzAzMzJlMzIzODJlMzEzNDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcclDANBgkqhkiG 9w0BAQsFAAOCAQEAE9GBErKZIohbVPfrResPPX+Q7aZAXlAU53b83vBI89WJkzC6 IlAiPN/OFDWMQOqdKQvtP43Ir12DKyF139q/+zj3UpKOBJi+NODD/2tPOjqxDoZe fA7wkIpf4ELJf5gDpHB2KnDe+hY1y679lKiimkqkJCkqVkpbGiuJMyKrAAGRCsyZ KaV8KzGinJ9b3XVUH/qJcTQ4kviwohvwoRyUBwGLEVYxjzBCaUcB9krGAid5gXOa tGVYdHnWn/wJvO+cjSmyO7dgSBDcjCJs7gE5pAgZDea1ze+sqszvohMUFA7EAwcv 5MrDBA7pwpvKKEzJJENJ5jj9LZN1UhTXq6nrkQ== -----END CERTIFICATE-----Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org