$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e352e302f32342d3234203d3e20313530343630.roa File: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (raw, json) Hash identifier: OiXuaCFeHNTNKTkxwDwZ/IJjAlYs+aZs7qWhd3mySzg= Subject key identifier: 73:A5:51:A5:72:95:D5:C8:F4:1A:F6:BE:23:79:FB:1E:37:9C:5B:45 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 66BCD7E9D9D086AB2B71F7AEF9E8A5AC20E13099 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e352e302f32342d3234203d3e20313530343630.roa Signing time: Sat 23 Nov 2024 07:02:32 +0000 ROA not before: Sat 23 Nov 2024 06:57:32 +0000 ROA not after: Sat 22 Nov 2025 07:02:32 +0000 asID: 150460 IP address blocks: 103.46.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 13:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:bc:d7:e9:d9:d0:86:ab:2b:71:f7:ae:f9:e8:a5:ac:20:e1:30:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Nov 23 06:57:32 2024 GMT Not After : Nov 22 07:02:32 2025 GMT Subject: CN=73A551A57295D5C8F41AF6BE2379FB1E379C5B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:58:c5:b2:cc:6f:19:d0:ec:e0:d6:ea:82: 3b:22:ce:94:42:60:c6:76:ca:98:cf:91:3c:83:a5: 59:11:e7:e1:85:48:ac:90:a3:6f:87:da:f1:46:df: 80:bc:7c:19:d4:32:2e:e9:2d:ff:1b:3e:7a:65:37: 1f:5c:27:77:78:b1:5f:b6:7f:7c:34:cd:c5:6a:ab: 70:e4:de:33:1c:03:ef:4d:71:63:c6:88:40:5b:0f: 21:12:06:71:f5:a3:76:25:0a:5b:92:33:1f:85:13: 17:77:eb:38:3d:c7:58:5f:98:f3:95:53:fd:fc:7e: fb:09:fd:c3:6f:11:2f:44:57:96:4b:aa:32:ed:5d: 7a:6f:3b:2e:ce:0c:c0:26:b7:d7:41:b1:df:ae:50: 03:14:f4:c9:6e:ad:e6:40:7b:71:00:3a:a4:fb:28: cd:a4:8e:7c:ff:82:fb:44:01:57:bd:62:d8:53:28: 20:dc:40:99:7d:15:73:5b:17:79:f8:a9:34:ae:8c: a4:be:f6:c3:be:76:d8:7d:5f:de:25:7d:1c:d3:d8: 1a:15:1c:92:c9:8b:e1:77:8f:fa:7b:a5:eb:10:e6: e2:d4:af:29:08:84:6f:75:3b:7d:f1:55:38:88:f5: dd:de:27:8c:f7:54:4a:c8:87:b3:2d:a2:7d:33:97: a4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A5:51:A5:72:95:D5:C8:F4:1A:F6:BE:23:79:FB:1E:37:9C:5B:45 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e352e302f32342d3234203d3e20313530343630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.46.5.0/24 Signature Algorithm: sha256WithRSAEncryption a8:b0:6c:e1:e1:0f:d0:e8:09:53:f4:6f:34:e6:98:ad:4a:71: 2b:fd:c1:95:70:a8:53:46:c3:f4:3a:f1:5c:3e:88:e3:ee:4e: 82:31:38:9e:d3:b0:d9:10:a0:aa:e7:99:76:bf:b8:67:14:de: ba:af:76:12:ad:bd:a0:f0:64:46:9c:03:fd:3f:92:72:2b:19: 4e:c9:d1:5b:40:7f:2a:93:22:0f:fe:c9:93:91:14:e0:12:f6: 9d:8f:b3:dd:e7:82:44:d0:eb:5d:12:67:38:09:ec:14:76:ad: d5:fd:80:de:a8:c4:79:2c:9e:9e:d1:46:39:63:ba:17:cd:44: 54:21:de:d2:b1:81:ec:97:71:f2:fd:8f:0b:3b:de:b6:e1:97: fd:fa:fe:7b:a4:b8:87:8a:df:8b:c0:0f:ed:39:4d:60:16:f2: 04:1e:24:86:6e:91:be:12:99:46:21:3d:29:0b:aa:54:0a:1e: 01:8b:e4:e8:82:3d:62:e2:06:65:c2:2d:11:a5:2d:19:c7:fd: e9:ac:bf:f9:ac:bc:18:61:ba:ab:90:2b:91:d4:9d:65:49:91: 0b:5a:aa:49:ad:2d:e0:d4:ed:25:4c:1d:ad:00:2c:15:2c:a6: 78:76:77:a8:35:84:6f:41:1d:dd:08:b8:9f:86:8a:13:f0:b2: 75:50:82:a3 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUZrzX6dnQhqsrcfeu+eilrCDhMJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNDExMjMwNjU3MzJaFw0yNTExMjIwNzAyMzJaMDMxMTAvBgNV BAMTKDczQTU1MUE1NzI5NUQ1QzhGNDFBRjZCRTIzNzlGQjFFMzc5QzVCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQljFssxvGdDs4NbqgjsizpRC YMZ2ypjPkTyDpVkR5+GFSKyQo2+H2vFG34C8fBnUMi7pLf8bPnplNx9cJ3d4sV+2 f3w0zcVqq3Dk3jMcA+9NcWPGiEBbDyESBnH1o3YlCluSMx+FExd36zg9x1hfmPOV U/38fvsJ/cNvES9EV5ZLqjLtXXpvOy7ODMAmt9dBsd+uUAMU9MlureZAe3EAOqT7 KM2kjnz/gvtEAVe9YthTKCDcQJl9FXNbF3n4qTSujKS+9sO+dth9X94lfRzT2BoV HJLJi+F3j/p7pesQ5uLUrykIhG91O33xVTiI9d3eJ4z3VErIh7Mton0zl6Q5AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUc6VRpXKV1cj0Gva+I3n7HjecW0UwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzhjZGE1LTM0ODMtNDJiMC1i Mzg1LWZjMDcwNzE2ZmJjYy8wLzMxMzAzMzJlMzQzNjJlMzUyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTM1MzAzNDM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnLgUwDQYJKoZIhvcN AQELBQADggEBAKiwbOHhD9DoCVP0bzTmmK1KcSv9wZVwqFNGw/Q68Vw+iOPuToIx OJ7TsNkQoKrnmXa/uGcU3rqvdhKtvaDwZEacA/0/knIrGU7J0VtAfyqTIg/+yZOR FOAS9p2Ps93ngkTQ610SZzgJ7BR2rdX9gN6oxHksnp7RRjljuhfNRFQh3tKxgeyX cfL9jws73rbhl/36/nukuIeK34vAD+05TWAW8gQeJIZukb4SmUYhPSkLqlQKHgGL 5OiCPWLiBmXCLRGlLRnH/emsv/msvBhhuquQK5HUnWVJkQtaqkmtLeDU7SVMHa0A LBUspnh2d6g1hG9BHd0IuJ+GihPwsnVQgqM= -----END CERTIFICATE-----Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org