$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa File: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (raw, json) Hash identifier: u64yXBIs0ModkICN72Kb3+oe1Z5jkUzC+/YwOwxAsWs= Subject key identifier: 91:10:74:25:9B:C4:49:26:64:2F:80:6F:69:5B:08:7A:62:D7:F2:EC Certificate issuer: /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Certificate serial: 161B0A60704DCEF4C31ED929EAE39D6F93DC528F Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa Signing time: Mon 01 Jul 2024 01:02:13 +0000 ROA not before: Mon 01 Jul 2024 00:57:13 +0000 ROA not after: Mon 30 Jun 2025 01:02:13 +0000 asID: 132642 IP address blocks: 103.19.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1b:0a:60:70:4d:ce:f4:c3:1e:d9:29:ea:e3:9d:6f:93:dc:52:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Validity Not Before: Jul 1 00:57:13 2024 GMT Not After : Jun 30 01:02:13 2025 GMT Subject: CN=911074259BC44926642F806F695B087A62D7F2EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:bf:24:ee:70:30:42:b4:ae:a8:20:44:bf:8a: 77:a4:10:f4:05:01:1b:13:cf:3e:44:ca:5b:05:74: ba:3a:d6:d9:c6:5c:d8:dd:64:b4:45:a0:c8:70:b8: 9d:58:8c:5c:77:1b:1d:77:24:72:c3:c1:64:86:6e: 9d:2f:ba:f7:60:a2:8c:5a:ef:8d:96:a8:09:48:2b: b5:64:3c:93:c2:fa:1c:50:c1:2a:c7:fc:91:1c:58: 38:47:a8:4d:5d:0c:76:6a:d5:8d:49:5b:ff:af:7f: b4:fe:8f:f2:55:cc:e0:6b:3d:4b:52:09:97:95:7a: e2:5a:10:99:a9:4a:90:d7:fa:1d:15:85:59:0e:07: 74:89:be:2b:2a:b6:ff:d8:d4:84:ff:dd:05:ab:b2: ac:92:1d:15:e8:8d:68:85:74:ad:b8:f1:5d:e3:db: f5:49:c0:49:74:62:ec:2a:e0:31:ac:39:5a:e2:72: a8:a7:5c:0e:f6:c0:ce:cd:25:e4:b6:57:00:84:56: bd:95:36:83:88:57:0f:4a:f6:70:2c:00:c4:79:d5: 43:26:1b:7e:df:f4:65:60:73:6b:7a:86:39:5a:1a: 98:21:b3:1b:94:c9:16:29:de:c3:26:0f:b5:07:0e: 17:78:a5:92:50:ce:c8:57:79:a9:cf:07:dc:43:46: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:10:74:25:9B:C4:49:26:64:2F:80:6F:69:5B:08:7A:62:D7:F2:EC X509v3 Authority Key Identifier: keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.180.0/22 Signature Algorithm: sha256WithRSAEncryption 16:2e:c7:a6:ba:fa:e2:c3:89:10:d0:ff:78:76:9e:89:59:3d: e4:02:d4:4c:6f:50:a4:b8:ea:34:90:39:e2:be:d2:d5:09:1a: bb:43:5c:05:ba:45:6b:9b:03:f7:77:3f:2d:1d:36:87:69:59: 72:3a:e6:2d:ee:99:80:ad:3e:9d:9d:b3:4b:7e:46:53:22:f7: 43:aa:8a:7d:e9:9b:4c:10:35:89:d7:e8:5f:7b:22:41:e8:7f: 1a:37:d0:05:ff:b9:72:7b:f3:e9:8a:e8:46:87:7f:a0:7e:66: 30:70:be:ef:d0:d6:51:8b:f1:09:d1:82:1c:94:e8:47:5f:89: 49:c2:aa:3b:63:db:35:2b:ec:86:d5:3c:ca:ac:a4:a2:4a:8f: d4:a7:fe:27:8d:82:79:62:12:6e:51:5c:c5:ec:00:71:63:24: ac:46:72:60:b6:53:de:e0:5b:5f:b6:ec:8f:10:2e:de:76:a8: 66:a4:91:7f:f2:ac:0c:ff:70:cb:7e:2b:a8:8a:c7:da:cd:9b: 4c:b0:36:1e:41:48:dc:b3:00:a7:4b:d2:e8:9c:eb:ad:f2:ce: 53:74:5a:ba:34:f6:c1:ef:88:ca:f5:86:cd:c3:16:c8:ad:cc: da:36:b0:6e:c6:02:63:0a:53:75:db:91:fa:1e:16:21:bf:8a: fa:6a:f3:5f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFhsKYHBNzvTDHtkp6uOdb5PcUo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0 MzdDQThFOTAeFw0yNDA3MDEwMDU3MTNaFw0yNTA2MzAwMTAyMTNaMDMxMTAvBgNV BAMTKDkxMTA3NDI1OUJDNDQ5MjY2NDJGODA2RjY5NUIwODdBNjJEN0YyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzvyTucDBCtK6oIES/inekEPQF ARsTzz5EylsFdLo61tnGXNjdZLRFoMhwuJ1YjFx3Gx13JHLDwWSGbp0vuvdgooxa 742WqAlIK7VkPJPC+hxQwSrH/JEcWDhHqE1dDHZq1Y1JW/+vf7T+j/JVzOBrPUtS CZeVeuJaEJmpSpDX+h0VhVkOB3SJvisqtv/Y1IT/3QWrsqySHRXojWiFdK248V3j 2/VJwEl0Yuwq4DGsOVricqinXA72wM7NJeS2VwCEVr2VNoOIVw9K9nAsAMR51UMm G37f9GVgc2t6hjlaGpghsxuUyRYp3sMmD7UHDhd4pZJQzshXeanPB9xDRmZ3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkRB0JZvESSZkL4BvaVsIemLX8uwwHwYDVR0j BBgwFoAUgYgjtQ+NY+nZU8S3UvBNsEN8qOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGM3NzNjOC1mYjU2LTQ0OWYtODY0OS0xMTJkNmUxNjg2YjMvMC84MTg4MjNCNTBG OEQ2M0U5RDk1M0M0Qjc1MkYwNERCMDQzN0NBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0MzdD QThFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUwYzc3M2M4LWZiNTYtNDQ5Zi04 NjQ5LTExMmQ2ZTE2ODZiMy8wLzMxMzAzMzJlMzEzOTJlMzEzODMwMmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzEzMzMyMzYzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxO0MA0GCSqG SIb3DQEBCwUAA4IBAQAWLsemuvriw4kQ0P94dp6JWT3kAtRMb1CkuOo0kDnivtLV CRq7Q1wFukVrmwP3dz8tHTaHaVlyOuYt7pmArT6dnbNLfkZTIvdDqop96ZtMEDWJ 1+hfeyJB6H8aN9AF/7lye/PpiuhGh3+gfmYwcL7v0NZRi/EJ0YIclOhHX4lJwqo7 Y9s1K+yG1TzKrKSiSo/Up/4njYJ5YhJuUVzF7ABxYySsRnJgtlPe4FtftuyPEC7e dqhmpJF/8qwM/3DLfiuoisfazZtMsDYeQUjcswCnS9LonOut8s5TdFq6NPbB74jK 9YbNwxbIrczaNrBuxgJjClN125H6HhYhv4r6avNf -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org