$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32332d3233203d3e20313530343630.roa File: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (raw, json) Hash identifier: NXHMc5cBUZitTQZ4ST9s7lp3tsPIg2LlkZ5yYQ7KPUA= Subject key identifier: 53:24:37:43:27:D1:E1:9D:E3:B3:32:76:E5:EE:11:22:41:30:08:D8 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 166A85D95922A1CAF1226CC603FA1F8052F8F2AF Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32332d3233203d3e20313530343630.roa Signing time: Sat 23 Nov 2024 07:02:32 +0000 ROA not before: Sat 23 Nov 2024 06:57:32 +0000 ROA not after: Sat 22 Nov 2025 07:02:32 +0000 asID: 150460 IP address blocks: 103.46.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 13:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6a:85:d9:59:22:a1:ca:f1:22:6c:c6:03:fa:1f:80:52:f8:f2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Nov 23 06:57:32 2024 GMT Not After : Nov 22 07:02:32 2025 GMT Subject: CN=5324374327D1E19DE3B33276E5EE1122413008D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:34:01:1a:a3:1d:78:55:0c:dd:87:b1:76:67: e2:9e:06:df:d9:93:6e:f6:c8:af:40:03:b5:ba:42: 2b:b9:34:aa:38:4f:40:66:c1:62:d8:ae:78:99:13: 51:8f:4e:cf:e0:cd:45:bd:68:81:3b:e6:a3:11:89: 4e:99:fb:e8:0f:5e:44:31:3c:ab:ef:7c:17:02:77: a1:33:7c:20:dd:83:32:33:fd:52:16:9b:93:d2:1e: 7f:0d:a0:1c:2e:82:3d:7d:f1:8e:c2:00:2d:f9:9d: f7:39:b0:dd:34:1f:3c:fa:22:61:11:b9:d4:46:3a: c9:16:99:f5:b9:e1:ef:d4:34:a4:08:59:88:b7:89: 68:32:25:39:af:3c:20:dd:cc:a1:1e:19:1e:9b:12: cc:40:e9:ae:47:71:29:55:bf:12:4d:0a:3a:47:3a: b8:0c:dc:10:3a:bf:89:56:8a:68:01:2f:e0:9a:66: 6f:3c:0c:7c:f8:0e:1b:1a:a3:68:bf:00:91:bd:29: 55:a1:e4:24:aa:c3:c7:5c:67:61:1b:98:5e:f8:a7: ac:13:fd:7a:9d:36:f7:c1:a3:1f:0b:4a:47:4b:50: 36:da:80:e5:d3:95:06:d4:58:de:a9:ff:c9:a0:3a: ef:b3:31:17:8d:b3:63:4f:f9:d8:b5:4b:e9:d0:1c: 60:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:24:37:43:27:D1:E1:9D:E3:B3:32:76:E5:EE:11:22:41:30:08:D8 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e342e302f32332d3233203d3e20313530343630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.46.4.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:26:99:5c:d8:83:ef:47:4a:23:d7:b7:39:25:b5:34:a4:c5: 24:43:cd:cb:0a:e9:6f:9a:67:12:dc:2b:41:0a:10:b6:ec:b9: fc:c8:be:7e:47:ae:0d:42:b2:9d:a4:88:c9:a2:a2:bc:9c:ba: 0b:48:4e:3d:3c:3e:b4:6b:70:f5:c9:ca:13:72:79:ee:9c:5d: 08:9f:de:8d:e4:50:41:81:2f:32:98:2b:14:ed:a5:ab:30:c5: d9:3d:83:14:a9:95:c4:f7:69:5a:8f:05:de:9f:52:d4:f5:7a: 75:0b:61:fc:f8:14:1a:9f:9c:49:67:05:c9:09:16:69:6d:f7: 11:4e:b9:3a:47:f5:99:d1:ce:f7:c5:15:44:d4:b0:b4:bd:f4: a7:5b:8d:15:e5:b1:40:cb:c3:20:67:b8:a3:c0:fb:56:6c:78: 07:f3:53:cd:5d:f3:81:db:40:05:8b:6f:6c:da:f1:99:79:3f: dd:d2:e4:4e:ef:07:d8:19:3c:a9:c9:52:6e:3c:46:18:83:87: 00:89:bc:92:01:ab:5c:59:b5:ce:2d:2f:8b:25:af:c1:0d:93: 39:24:ae:0e:ab:e4:a4:9f:16:ec:20:bf:f9:9e:ee:10:43:5a: cb:f2:88:22:54:b7:e0:4a:4d:1a:30:b8:c1:d1:77:29:f9:39: ee:b1:40:04 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUFmqF2VkiocrxImzGA/ofgFL48q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNDExMjMwNjU3MzJaFw0yNTExMjIwNzAyMzJaMDMxMTAvBgNV BAMTKDUzMjQzNzQzMjdEMUUxOURFM0IzMzI3NkU1RUUxMTIyNDEzMDA4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNAEaox14VQzdh7F2Z+KeBt/Z k272yK9AA7W6Qiu5NKo4T0BmwWLYrniZE1GPTs/gzUW9aIE75qMRiU6Z++gPXkQx PKvvfBcCd6EzfCDdgzIz/VIWm5PSHn8NoBwugj198Y7CAC35nfc5sN00Hzz6ImER udRGOskWmfW54e/UNKQIWYi3iWgyJTmvPCDdzKEeGR6bEsxA6a5HcSlVvxJNCjpH OrgM3BA6v4lWimgBL+CaZm88DHz4Dhsao2i/AJG9KVWh5CSqw8dcZ2EbmF74p6wT /XqdNvfBox8LSkdLUDbagOXTlQbUWN6p/8mgOu+zMReNs2NP+di1S+nQHGDzAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUUyQ3QyfR4Z3jszJ25e4RIkEwCNgwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzhjZGE1LTM0ODMtNDJiMC1i Mzg1LWZjMDcwNzE2ZmJjYy8wLzMxMzAzMzJlMzQzNjJlMzQyZTMwMmYzMjMzMmQz MjMzMjAzZDNlMjAzMTM1MzAzNDM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnLgQwDQYJKoZIhvcN AQELBQADggEBAG4mmVzYg+9HSiPXtzkltTSkxSRDzcsK6W+aZxLcK0EKELbsufzI vn5Hrg1Csp2kiMmiorycugtITj08PrRrcPXJyhNyee6cXQif3o3kUEGBLzKYKxTt paswxdk9gxSplcT3aVqPBd6fUtT1enULYfz4FBqfnElnBckJFmlt9xFOuTpH9ZnR zvfFFUTUsLS99KdbjRXlsUDLwyBnuKPA+1ZseAfzU81d84HbQAWLb2za8Zl5P93S 5E7vB9gZPKnJUm48RhiDhwCJvJIBq1xZtc4tL4slr8ENkzkkrg6r5KSfFuwgv/me 7hBDWsvyiCJUt+BKTRowuMHRdyn5Oe6xQAQ= -----END CERTIFICATE-----Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org