$ rpki-client -vvf repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa File: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (raw, json) Hash identifier: jjsfgdn+G6px4pcrBtWMzSX8FkNkVgW6p9wNnrTYDoQ= Subject key identifier: 8E:BE:8E:3A:32:2A:80:B6:22:44:22:42:28:17:A2:4E:90:91:11:FD Certificate issuer: /CN=09461F85D577EF79DE072EECCA1E12135A3715C0 Certificate serial: 56DC09FFB9786B84DF264B49A4D9CE38F1501381 Authority key identifier: 09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa Signing time: Tue 01 Oct 2024 04:03:49 +0000 ROA not before: Tue 01 Oct 2024 03:58:49 +0000 ROA not after: Tue 30 Sep 2025 04:03:49 +0000 asID: 17769 IP address blocks: 103.147.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:dc:09:ff:b9:78:6b:84:df:26:4b:49:a4:d9:ce:38:f1:50:13:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09461F85D577EF79DE072EECCA1E12135A3715C0 Validity Not Before: Oct 1 03:58:49 2024 GMT Not After : Sep 30 04:03:49 2025 GMT Subject: CN=8EBE8E3A322A80B6224422422817A24E909111FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:48:04:10:91:d1:ef:19:1b:f0:39:18:c2: 9e:c2:46:61:3e:04:b7:3a:3a:23:bd:74:64:48:31: 13:ad:5c:a5:86:4f:b9:83:5d:28:0c:6d:98:33:49: 12:70:18:12:cc:c7:80:8f:bb:bd:17:d5:3c:f2:67: 83:e4:19:1c:83:2d:74:71:4f:59:51:29:e5:54:ec: 6b:5b:9a:2d:a4:dc:58:68:de:3f:d0:fb:8c:b2:0a: d2:d4:7c:bd:ad:f8:0f:ca:90:eb:40:93:06:65:a4: 3a:52:79:5c:45:84:0b:6b:dc:c4:a0:1d:48:23:06: c9:30:df:98:54:f4:3b:87:9f:87:46:cc:50:76:10: 6e:6f:4f:79:ed:f8:68:bd:74:84:bd:4b:09:03:71: 0c:ed:8b:06:c0:96:08:3d:34:a4:c5:7e:7e:e5:a3: 77:1a:42:f4:8a:2b:4f:83:b1:08:17:ee:25:9a:a2: 72:5c:f7:30:16:02:d3:65:62:8a:e0:89:77:e3:18: 77:ec:04:34:bc:8b:84:2f:a9:e6:0a:b2:dc:9c:f6: bd:da:ff:4f:42:8a:05:2c:01:d0:b2:e9:70:9b:a0: 11:bd:85:e4:f3:1d:f9:15:f6:ff:67:c1:ef:99:ff: 30:96:18:f8:fb:2c:a8:dc:b5:38:71:3a:21:5b:d5: f6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BE:8E:3A:32:2A:80:B6:22:44:22:42:28:17:A2:4E:90:91:11:FD X509v3 Authority Key Identifier: keyid:09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.146.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:b4:09:48:ce:7c:0f:f8:0d:2f:1b:0a:e8:3b:37:8e:85:9f: fa:8c:e7:15:98:f3:b8:28:0d:d2:6c:5b:65:cb:35:ce:57:31: 86:a5:ef:78:a3:a0:a6:38:42:e2:a6:f8:09:7b:57:fd:35:3a: a5:ec:bc:3e:7c:87:0a:c5:47:f6:99:61:cd:23:21:e6:fe:f0: 75:ed:65:a3:26:38:64:6d:84:51:86:ea:5a:4c:f3:28:bf:b6: 3f:85:73:99:6e:5d:86:16:24:52:e3:63:aa:59:7e:dc:90:83: 36:cf:00:52:ef:c7:aa:82:bf:f3:b1:07:d5:0f:da:9d:fa:fd: e5:43:fb:62:ff:29:a8:da:e9:3f:ac:fc:de:77:38:49:3a:4c: e4:a8:0b:e1:e3:a1:2c:87:6a:b4:37:fd:5a:db:f5:5e:7a:34: dd:79:c3:02:59:d5:5a:45:df:e9:14:97:61:e3:d0:23:10:99: 5c:00:13:16:d6:ff:0b:c0:c3:69:6d:d8:78:db:ed:42:80:88: ab:d5:7b:03:42:05:c1:3f:44:b0:5e:9e:b5:82:30:25:a1:71: 6b:37:08:5f:1e:47:2f:59:5a:24:1e:50:61:50:c0:fe:61:f9: 06:52:9f:b8:60:2c:d9:cb:c3:f4:86:5e:1d:ff:9a:bf:70:6e: ed:5e:4f:63 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVtwJ/7l4a4TfJktJpNnOOPFQE4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1 QTM3MTVDMDAeFw0yNDEwMDEwMzU4NDlaFw0yNTA5MzAwNDAzNDlaMDMxMTAvBgNV BAMTKDhFQkU4RTNBMzIyQTgwQjYyMjQ0MjI0MjI4MTdBMjRFOTA5MTExRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQUgEEJHR7xkb8DkYwp7CRmE+ BLc6OiO9dGRIMROtXKWGT7mDXSgMbZgzSRJwGBLMx4CPu70X1TzyZ4PkGRyDLXRx T1lRKeVU7Gtbmi2k3Fho3j/Q+4yyCtLUfL2t+A/KkOtAkwZlpDpSeVxFhAtr3MSg HUgjBskw35hU9DuHn4dGzFB2EG5vT3nt+Gi9dIS9SwkDcQztiwbAlgg9NKTFfn7l o3caQvSKK0+DsQgX7iWaonJc9zAWAtNlYorgiXfjGHfsBDS8i4QvqeYKstyc9r3a /09CigUsAdCy6XCboBG9heTzHfkV9v9nwe+Z/zCWGPj7LKjctThxOiFb1fYFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUjr6OOjIqgLYiRCJCKBeiTpCREf0wHwYDVR0j BBgwFoAUCUYfhdV373neBy7syh4SE1o3FcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzNiOTU5ZS1mZjUyLTQwMjgtYjUzNC0xZDYwNWZhM2E4MGIvMC8wOTQ2MUY4NUQ1 NzdFRjc5REUwNzJFRUNDQTFFMTIxMzVBMzcxNUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1QTM3 MTVDMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3M2I5NTllLWZmNTItNDAyOC1i NTM0LTFkNjA1ZmEzYTgwYi8wLzMxMzAzMzJlMzEzNDM3MmUzMTM0MzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzczNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5OSMA0GCSqG SIb3DQEBCwUAA4IBAQAdtAlIznwP+A0vGwroOzeOhZ/6jOcVmPO4KA3SbFtlyzXO VzGGpe94o6CmOELipvgJe1f9NTql7Lw+fIcKxUf2mWHNIyHm/vB17WWjJjhkbYRR hupaTPMov7Y/hXOZbl2GFiRS42OqWX7ckIM2zwBS78eqgr/zsQfVD9qd+v3lQ/ti /ymo2uk/rPzedzhJOkzkqAvh46Esh2q0N/1a2/VeejTdecMCWdVaRd/pFJdh49Aj EJlcABMW1v8LwMNpbdh42+1CgIir1XsDQgXBP0SwXp61gjAloXFrNwhfHkcvWVok HlBhUMD+YfkGUp+4YCzZy8P0hl4d/5q/cG7tXk9j -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org