$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa File: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (raw, json) Hash identifier: gP8KkxonLoqcx7KZvnUv3ivtnAxFYtDlgM/zAdFC+W8= Subject key identifier: 55:90:AB:29:8F:F9:49:04:CA:FC:E9:12:D2:89:12:DF:C2:C8:EA:56 Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 54D472B219C894688895492AED80175D9C2FB612 Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa Signing time: Tue 24 Sep 2024 07:21:26 +0000 ROA not before: Tue 24 Sep 2024 07:16:26 +0000 ROA not after: Tue 23 Sep 2025 07:21:26 +0000 asID: 141058 IP address blocks: 103.36.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d4:72:b2:19:c8:94:68:88:95:49:2a:ed:80:17:5d:9c:2f:b6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Sep 24 07:16:26 2024 GMT Not After : Sep 23 07:21:26 2025 GMT Subject: CN=5590AB298FF94904CAFCE912D28912DFC2C8EA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:ef:4a:6b:f9:bc:20:13:22:4c:8c:6c:df: 27:db:0b:3d:80:7e:8e:f6:0c:e4:53:c9:e8:03:82: dc:0b:05:ba:97:29:26:d3:a7:ef:60:d0:12:36:12: 96:9a:9e:bc:6b:f2:68:13:96:1b:70:0a:36:07:8b: f3:77:5c:bb:37:c8:d3:d7:05:7b:08:04:7c:38:cd: 2c:1b:ad:ee:92:ff:cb:4b:45:3f:63:11:2d:83:40: 87:72:bd:48:c3:52:f5:3e:dd:10:a2:3d:4f:a2:f2: c2:d0:4a:68:98:fd:6d:09:64:7a:23:ae:0f:d2:94: e9:33:e9:7e:e1:89:c3:5a:c8:de:2b:d4:9a:95:5e: b8:e4:a0:6f:e5:a8:d1:9d:4a:2c:73:56:e2:b6:b0: 03:71:08:4e:f4:81:a3:21:0e:01:0b:c9:29:68:71: 4e:47:b5:2f:85:9e:8b:b6:34:e7:12:b4:a5:d6:45: 2b:53:0b:41:e7:5f:7e:a9:9b:22:a1:41:ed:7f:f4: 8e:46:6a:65:ef:0e:71:fc:20:67:24:ab:6b:a2:89: 98:33:d1:5a:63:8b:b7:a3:ae:6a:13:c8:8f:a6:c4: f1:47:69:70:cc:1d:6d:7c:ee:be:3d:90:10:72:d1: 0c:fc:40:7c:30:af:6c:0c:c2:07:b7:7f:f1:bf:62: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:90:AB:29:8F:F9:49:04:CA:FC:E9:12:D2:89:12:DF:C2:C8:EA:56 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.250.0/24 Signature Algorithm: sha256WithRSAEncryption 61:8a:c3:2b:3c:aa:5a:fc:9a:82:1a:88:14:82:39:5f:5e:e8: 20:ac:f3:96:2f:d1:22:9f:72:54:32:24:ab:19:4b:69:96:59: 5f:c1:c8:d5:d0:49:90:dc:f8:32:e3:3d:d8:fd:2f:15:75:a3: 11:5c:d0:7f:f2:78:75:2c:67:a9:3e:86:9d:af:e2:4f:1a:21: 21:da:9a:b6:63:d2:d3:67:c7:21:a6:f6:e1:2a:c4:4e:06:1f: 60:f5:ad:62:5f:07:79:a7:3c:4b:93:37:81:c4:6b:34:79:3e: 2b:35:8b:59:61:27:13:55:72:9a:72:48:e4:4a:c9:ca:4b:e2: c6:e4:87:ba:ac:1b:25:33:62:ac:ef:12:a5:77:a9:a5:ce:47: a7:87:63:ec:0e:22:72:ff:2c:bc:0f:57:09:d4:9b:dd:8c:fc: 2d:84:ef:fb:c6:53:59:df:7d:a9:46:cc:a1:3f:74:d3:b5:8a: 8e:d5:81:2a:c3:89:ec:94:12:2b:a3:16:f3:23:ed:22:a7:b7: 03:7a:4f:5a:f4:f0:be:ef:e4:53:f0:6f:99:26:b9:03:72:74: 2e:cb:d1:8e:ff:26:61:03:23:3a:90:35:e9:8b:2c:0c:32:29: 75:f0:d8:cd:15:a8:b5:53:9f:ec:25:81:2c:f6:28:c7:58:80: 3e:bd:de:6f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVNRyshnIlGiIlUkq7YAXXZwvthIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNDA5MjQwNzE2MjZaFw0yNTA5MjMwNzIxMjZaMDMxMTAvBgNV BAMTKDU1OTBBQjI5OEZGOTQ5MDRDQUZDRTkxMkQyODkxMkRGQzJDOEVBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7u9Ka/m8IBMiTIxs3yfbCz2A fo72DORTyegDgtwLBbqXKSbTp+9g0BI2Epaanrxr8mgTlhtwCjYHi/N3XLs3yNPX BXsIBHw4zSwbre6S/8tLRT9jES2DQIdyvUjDUvU+3RCiPU+i8sLQSmiY/W0JZHoj rg/SlOkz6X7hicNayN4r1JqVXrjkoG/lqNGdSixzVuK2sANxCE70gaMhDgELySlo cU5HtS+Fnou2NOcStKXWRStTC0HnX36pmyKhQe1/9I5GamXvDnH8IGckq2uiiZgz 0Vpji7ejrmoTyI+mxPFHaXDMHW187r49kBBy0Qz8QHwwr2wMwge3f/G/YsVrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVZCrKY/5SQTK/OkS0okS38LI6lYwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzYjg1OGY2LWRlMjAtNDEyMS1i Y2VhLTkwNzZlZGNjYzA5Ny8wLzMxMzAzMzJlMzMzNjJlMzIzNTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyT6MA0GCSqG SIb3DQEBCwUAA4IBAQBhisMrPKpa/JqCGogUgjlfXuggrPOWL9Ein3JUMiSrGUtp lllfwcjV0EmQ3Pgy4z3Y/S8VdaMRXNB/8nh1LGepPoadr+JPGiEh2pq2Y9LTZ8ch pvbhKsROBh9g9a1iXwd5pzxLkzeBxGs0eT4rNYtZYScTVXKackjkSsnKS+LG5Ie6 rBslM2Ks7xKld6mlzkenh2PsDiJy/yy8D1cJ1JvdjPwthO/7xlNZ332pRsyhP3TT tYqO1YEqw4nslBIroxbzI+0ip7cDek9a9PC+7+RT8G+ZJrkDcnQuy9GO/yZhAyM6 kDXpiywMMil18NjNFai1U5/sJYEs9ijHWIA+vd5v -----END CERTIFICATE-----Generated at Sun Nov 24 18:20:18 2024 by rpki-client on console-ams.rpki-client.org