$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa File: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (raw, json) Hash identifier: yxChVSnUcBAshSi2tdYxCJl1ssWL26R5uijV6Q3HksQ= Subject key identifier: 34:DD:B2:EC:68:31:6B:D2:9D:E6:29:5D:FF:7C:E8:38:42:9F:63:30 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 262AB525E0E6BCAC5FB013AA749B047E6023D4E8 Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa Signing time: Fri 07 Jun 2024 11:58:14 +0000 ROA not before: Fri 07 Jun 2024 11:53:14 +0000 ROA not after: Fri 06 Jun 2025 11:58:14 +0000 asID: 136828 IP address blocks: 103.98.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 07:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2a:b5:25:e0:e6:bc:ac:5f:b0:13:aa:74:9b:04:7e:60:23:d4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Jun 7 11:53:14 2024 GMT Not After : Jun 6 11:58:14 2025 GMT Subject: CN=34DDB2EC68316BD29DE6295DFF7CE838429F6330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:f5:a5:66:9f:d7:28:e3:24:3e:ee:9d:7f: 83:98:27:49:c7:b8:a4:e8:f7:8c:cf:18:c3:99:c4: 08:4e:32:e6:eb:12:3d:ab:dd:fb:f4:8e:50:11:eb: 64:5f:5a:79:c1:b0:8c:4e:85:37:c7:77:60:2b:8c: cf:1c:e0:df:54:46:7c:08:5d:39:16:96:9f:96:8b: ac:8f:31:4c:45:e9:a1:79:09:9c:81:fd:3f:e2:cf: da:16:2d:89:c0:26:ca:a9:74:56:3b:b5:94:df:78: cc:bd:bb:dd:e0:39:2d:1f:85:c1:8f:75:6d:71:29: 3b:b6:b2:24:ab:46:99:19:c2:d6:e9:2f:60:3a:d1: 25:f4:66:bd:46:8e:51:7d:9f:c2:32:f8:81:bf:79: 51:33:4d:66:e3:07:82:f0:d0:b1:fc:b6:0c:a5:bc: e7:fb:29:ef:2b:d6:3a:64:21:e7:a3:30:ef:8c:5b: f1:8d:0e:fc:3c:a3:54:39:de:46:bc:c8:d3:5d:f6: f6:06:4f:ee:3f:71:b7:82:e8:ad:38:71:6c:2e:8d: 15:9f:39:ce:71:af:e7:8a:76:b9:32:66:fe:b4:20: 67:89:20:d4:b4:0c:31:76:bd:31:51:6f:41:0a:0a: 34:b3:9a:39:55:4b:f0:70:36:8e:c0:46:28:de:f5: 58:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DD:B2:EC:68:31:6B:D2:9D:E6:29:5D:FF:7C:E8:38:42:9F:63:30 X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.120.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:9e:44:e8:1a:14:a8:2c:10:26:ef:02:91:3a:7c:07:ec:9c: f4:e7:f6:57:4b:68:82:60:00:dc:92:92:47:ca:9b:a3:5b:96: 32:2b:cd:e3:c6:9a:57:64:a8:17:3c:51:f4:f4:c5:93:25:86: 5f:93:37:8d:60:01:75:22:b2:4a:e3:81:de:bd:c0:2d:99:41: 72:88:67:b8:fc:79:00:54:89:f9:42:e5:55:70:95:37:d0:04: 8d:f4:40:3b:c1:9f:e1:79:fc:ee:11:b5:34:e3:3f:8b:f1:45: 11:9d:fb:66:ab:43:a2:9d:db:e0:04:17:1a:1d:52:c0:3e:9e: fa:4f:0f:c7:36:17:42:e1:70:9d:b5:3b:28:b0:f7:71:22:4b: 16:6c:7d:c2:80:00:17:a4:c7:fe:eb:30:46:a3:fc:6b:50:fe: 2a:03:6d:0f:35:e4:b0:a6:1c:4c:00:09:07:00:76:bb:09:64: 6a:32:1a:9c:da:cb:ee:ff:72:a4:48:86:3f:69:65:9e:a7:7c: 0f:f3:85:3f:72:23:24:6f:d3:76:a6:85:49:43:98:3e:19:9b: 6a:cf:88:8d:46:af:d9:1e:0f:ff:5d:b6:4d:34:ef:83:0b:d0: 77:c7:e4:4d:27:85:d7:7b:e2:ef:1f:88:4f:74:fc:03:6f:14: 32:6c:c2:75 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJiq1JeDmvKxfsBOqdJsEfmAj1OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNDA2MDcxMTUzMTRaFw0yNTA2MDYxMTU4MTRaMDMxMTAvBgNV BAMTKDM0RERCMkVDNjgzMTZCRDI5REU2Mjk1REZGN0NFODM4NDI5RjYzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzfWlZp/XKOMkPu6df4OYJ0nH uKTo94zPGMOZxAhOMubrEj2r3fv0jlAR62RfWnnBsIxOhTfHd2ArjM8c4N9URnwI XTkWlp+Wi6yPMUxF6aF5CZyB/T/iz9oWLYnAJsqpdFY7tZTfeMy9u93gOS0fhcGP dW1xKTu2siSrRpkZwtbpL2A60SX0Zr1GjlF9n8Iy+IG/eVEzTWbjB4Lw0LH8tgyl vOf7Ke8r1jpkIeejMO+MW/GNDvw8o1Q53ka8yNNd9vYGT+4/cbeC6K04cWwujRWf Oc5xr+eKdrkyZv60IGeJINS0DDF2vTFRb0EKCjSzmjlVS/BwNo7ARije9VgzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUNN2y7Ggxa9Kd5ild/3zoOEKfYzAwHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxMGJlMzUzLTRhYjgtNGI3Ny05 ODhkLTczOWY4MmI5ZjY0MS8wLzMxMzAzMzJlMzkzODJlMzEzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2J4MA0GCSqG SIb3DQEBCwUAA4IBAQCcnkToGhSoLBAm7wKROnwH7Jz05/ZXS2iCYADckpJHypuj W5YyK83jxppXZKgXPFH09MWTJYZfkzeNYAF1IrJK44HevcAtmUFyiGe4/HkAVIn5 QuVVcJU30ASN9EA7wZ/hefzuEbU04z+L8UURnftmq0OindvgBBcaHVLAPp76Tw/H NhdC4XCdtTsosPdxIksWbH3CgAAXpMf+6zBGo/xrUP4qA20PNeSwphxMAAkHAHa7 CWRqMhqc2svu/3KkSIY/aWWep3wP84U/ciMkb9N2poVJQ5g+GZtqz4iNRq/ZHg// XbZNNO+DC9B3x+RNJ4XXe+LvH4hPdPwDbxQybMJ1 -----END CERTIFICATE-----Generated at Fri Jun 28 03:21:57 2024 by rpki-client on console-ams.rpki-client.org