$ rpki-client -vvf repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa File: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (raw, json) Hash identifier: sJLiD+0ejmoupyMGVx6CirdLJG++4SFUftxtfOcobHI= Subject key identifier: CC:D8:1E:65:A6:D1:6A:66:58:E7:5F:44:32:E2:B4:BD:DC:1C:A2:E0 Certificate issuer: /CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Certificate serial: 696B0569BE53BFC2F039E378944B3231DA942B46 Authority key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa Signing time: Tue 20 Aug 2024 06:00:05 +0000 ROA not before: Tue 20 Aug 2024 05:55:05 +0000 ROA not after: Tue 19 Aug 2025 06:00:05 +0000 asID: 136052 IP address blocks: 103.15.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6b:05:69:be:53:bf:c2:f0:39:e3:78:94:4b:32:31:da:94:2b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Validity Not Before: Aug 20 05:55:05 2024 GMT Not After : Aug 19 06:00:05 2025 GMT Subject: CN=CCD81E65A6D16A6658E75F4432E2B4BDDC1CA2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:3d:f8:9a:90:ed:1f:7f:29:e5:90:25:39: 14:cf:92:15:cd:7d:cd:7d:ca:ec:5f:83:17:b4:93: e3:06:1f:91:40:a5:05:4b:86:f5:e4:ec:33:f6:66: 19:c6:87:82:84:eb:65:dd:bc:e7:53:2b:80:3c:84: 1f:2e:48:29:11:5c:85:b1:89:46:80:8e:bb:b2:df: cb:ce:5b:13:49:44:5a:0b:bd:de:2c:62:e9:7d:32: b4:35:62:ac:3f:02:f4:76:a8:b0:9e:33:c2:1f:55: 92:b2:f8:e0:be:d5:cb:d1:d0:d6:b2:3c:72:96:67: 57:9f:31:59:dc:e8:da:95:3f:93:fd:59:48:f5:f0: 19:83:81:d3:57:4e:85:85:43:3b:46:f0:fb:8e:ba: a4:b6:f0:92:da:f1:71:08:b8:94:00:54:d5:7e:9b: c8:89:56:00:58:64:71:2d:85:cc:24:2e:59:7e:96: c7:05:17:08:c6:06:25:f5:d3:6c:d8:42:3c:2c:9e: ed:4f:55:41:3b:c5:a8:b0:a8:f2:f6:48:d3:23:47: 1d:1e:dc:04:9b:fe:b2:5f:10:60:23:60:15:b5:fc: 3c:cc:b3:cf:c7:68:ed:09:1f:03:16:7d:19:ae:12: 90:be:f5:2f:90:3b:fa:8c:47:ab:97:59:0c:9c:ff: a5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D8:1E:65:A6:D1:6A:66:58:E7:5F:44:32:E2:B4:BD:DC:1C:A2:E0 X509v3 Authority Key Identifier: keyid:AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.226.0/24 Signature Algorithm: sha256WithRSAEncryption 21:2c:9f:02:9f:d2:dc:cb:16:02:c6:8c:2e:72:a3:1f:15:95: a4:d1:ef:27:1c:ec:e9:5f:e8:62:d5:19:e1:fe:0f:60:93:52: 76:ed:e8:78:91:90:77:35:f3:5b:7e:f4:a2:4e:d2:5b:f0:be: 86:d1:2f:b5:63:25:e9:8d:ca:f3:ef:13:5c:54:d6:42:6b:20: 4f:fe:f5:d4:73:88:a2:10:21:22:d4:bc:20:c2:12:cf:56:e9: 5a:da:c7:75:c6:31:f0:8d:f8:1b:04:12:09:9b:b8:0f:fd:86: 98:f1:7f:de:ec:cf:c0:9d:41:e7:b5:fb:b1:90:4c:93:bd:d4: 9e:5e:90:83:4c:83:70:d5:55:57:40:7f:4e:35:d7:5f:02:bb: 91:52:88:73:c5:a5:b1:d8:40:61:e2:e5:33:ad:90:20:66:5e: 0e:e2:00:00:71:ef:f8:4c:ec:ad:38:52:e5:9f:cd:d1:ab:90: 6e:49:a3:e8:3d:bc:48:2c:3a:fe:29:d8:aa:0c:df:21:86:e3: e0:ca:f7:a1:0e:b9:74:96:f2:a5:57:9c:b9:18:ab:90:db:6a: 31:56:4c:b1:30:7b:30:44:ff:4d:e9:85:1f:79:ce:ba:b7:28: 83:8a:a4:72:e4:a4:f9:11:10:5f:0e:63:9d:27:d9:a0:ae:cd: 36:3c:45:5f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaWsFab5Tv8LwOeN4lEsyMdqUK0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIx MDZBNTk0QzAeFw0yNDA4MjAwNTU1MDVaFw0yNTA4MTkwNjAwMDVaMDMxMTAvBgNV BAMTKENDRDgxRTY1QTZEMTZBNjY1OEU3NUY0NDMyRTJCNEJEREMxQ0EyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5j34mpDtH38p5ZAlORTPkhXN fc19yuxfgxe0k+MGH5FApQVLhvXk7DP2ZhnGh4KE62XdvOdTK4A8hB8uSCkRXIWx iUaAjruy38vOWxNJRFoLvd4sYul9MrQ1Yqw/AvR2qLCeM8IfVZKy+OC+1cvR0Nay PHKWZ1efMVnc6NqVP5P9WUj18BmDgdNXToWFQztG8PuOuqS28JLa8XEIuJQAVNV+ m8iJVgBYZHEthcwkLll+lscFFwjGBiX102zYQjwsnu1PVUE7xaiwqPL2SNMjRx0e 3ASb/rJfEGAjYBW1/DzMs8/HaO0JHwMWfRmuEpC+9S+QO/qMR6uXWQyc/6UPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzNgeZabRamZY519EMuK0vdwcouAwHwYDVR0j BBgwFoAUr1LnFt5x7qk1P+qS+/ctohBqWUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMC9BRjUyRTcxNkRF NzFFRUE5MzUzRkVBOTJGQkY3MkRBMjEwNkE1OTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIxMDZB NTk0Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyYWMwY2E1LTVjZTctNGU2ZS05 ZmZmLTcyMTNlZjFlZjM2NC8wLzMxMzAzMzJlMzEzNTJlMzIzMjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw/iMA0GCSqG SIb3DQEBCwUAA4IBAQAhLJ8Cn9LcyxYCxowucqMfFZWk0e8nHOzpX+hi1Rnh/g9g k1J27eh4kZB3NfNbfvSiTtJb8L6G0S+1YyXpjcrz7xNcVNZCayBP/vXUc4iiECEi 1LwgwhLPVula2sd1xjHwjfgbBBIJm7gP/YaY8X/e7M/AnUHntfuxkEyTvdSeXpCD TINw1VVXQH9ONddfAruRUohzxaWx2EBh4uUzrZAgZl4O4gAAce/4TOytOFLln83R q5BuSaPoPbxILDr+KdiqDN8hhuPgyvehDrl0lvKlV5y5GKuQ22oxVkyxMHswRP9N 6YUfec66tyiDiqRy5KT5ERBfDmOdJ9mgrs02PEVf -----END CERTIFICATE-----Generated at Mon Nov 25 02:45:36 2024 by rpki-client on console-ams.rpki-client.org