$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa File: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (raw, json) Hash identifier: mVNrzG20qa0eCoI99rW1aiWH+6G8WyyK2ntWMeca7/I= Subject key identifier: C4:9A:96:B7:16:9A:9D:48:53:68:C6:EC:C7:2D:83:27:C2:FB:03:58 Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 21DBF0328CEFDB2912DCF9346CC0E0D052E5712F Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa Signing time: Mon 19 Aug 2024 04:02:49 +0000 ROA not before: Mon 19 Aug 2024 03:57:49 +0000 ROA not after: Mon 18 Aug 2025 04:02:49 +0000 asID: 64300 IP address blocks: 103.80.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:db:f0:32:8c:ef:db:29:12:dc:f9:34:6c:c0:e0:d0:52:e5:71:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Aug 19 03:57:49 2024 GMT Not After : Aug 18 04:02:49 2025 GMT Subject: CN=C49A96B7169A9D485368C6ECC72D8327C2FB0358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:c6:6d:6b:12:74:54:a5:83:70:f6:2f:c5: f9:83:f3:47:19:8d:aa:e7:51:a1:72:14:93:5b:19: 1a:09:7e:08:79:74:2b:16:7f:ec:39:b6:fe:ba:cf: 9c:c8:a4:6b:a1:5a:3e:36:06:b0:bc:27:c2:2e:03: 86:a1:49:fa:4c:5c:09:4f:b1:3d:dd:e9:cf:b0:ea: 94:0f:a8:a8:02:66:58:9b:d9:25:0c:1e:ce:36:5f: a6:ae:e0:45:6a:b9:db:95:8b:61:fe:08:d9:93:38: 6e:32:6c:e4:4c:4e:95:ad:5c:7c:19:e9:ae:c2:25: 59:47:39:03:fb:f9:20:da:b9:60:b5:bb:21:98:95: fc:3d:e2:c6:88:5e:ed:7e:09:6a:9c:74:96:89:f5: 06:ef:9b:ec:21:63:fe:c6:25:55:c7:53:b8:0a:8a: d7:75:5e:ef:11:1f:09:5b:eb:84:19:4f:6d:16:dc: b5:39:37:22:64:1b:59:39:16:41:05:53:38:f5:2b: 3e:17:8d:69:8b:c7:99:08:a9:0c:53:20:f7:b4:ec: 57:57:a5:db:ba:5d:81:42:df:bf:b8:68:a4:bb:6d: a4:ee:94:30:03:78:3a:62:30:b5:1c:2e:58:e7:a1: 47:4a:8b:e8:3f:67:3e:0a:d8:c0:db:a8:9a:c3:4f: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9A:96:B7:16:9A:9D:48:53:68:C6:EC:C7:2D:83:27:C2:FB:03:58 X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32322d3232203d3e203634333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.80.80.0/22 Signature Algorithm: sha256WithRSAEncryption 32:c2:73:4c:e2:d5:de:5d:a2:b2:3e:42:e7:ce:46:a4:fd:2b: 6c:ed:93:97:fe:cd:30:5d:47:10:59:41:83:c3:da:12:aa:e2: da:79:ca:64:33:d3:a6:62:04:7f:da:78:fd:23:06:10:59:9e: aa:ae:7e:6d:bc:92:3d:ef:c0:be:36:24:6d:b9:55:f1:46:9c: 09:a5:c7:1b:91:f3:3b:69:ad:0f:62:d1:26:e9:39:ac:2b:2c: 1f:38:7b:7a:d9:fd:b4:45:9f:e7:61:d2:5c:86:e5:1d:14:41: 2d:86:df:85:f1:d2:12:21:c8:f8:51:0c:ae:e3:d6:9d:8d:80: 67:42:a8:05:d0:db:05:0f:69:bb:47:a9:f3:e6:de:cc:42:80: 08:d8:c8:44:62:a4:07:f3:87:c1:92:82:f3:bd:93:a3:f3:71: 42:94:2f:fd:3a:3c:e1:ce:7a:75:21:4e:e1:98:67:c7:fb:fa: b3:fb:f3:09:e3:a2:a3:91:b4:e5:88:d7:ea:f1:c7:04:61:2f: e7:23:e4:b0:16:d8:e4:6b:89:e7:7a:3e:c0:49:1a:0b:4a:76: 6a:b4:39:85:c0:b1:a7:74:db:83:fb:ab:92:f4:87:4a:47:da: 16:3e:ad:14:fc:35:48:87:68:66:5a:2e:f9:e7:d0:22:3e:ae: d7:51:61:6a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUIdvwMozv2ykS3Pk0bMDg0FLlcS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNDA4MTkwMzU3NDlaFw0yNTA4MTgwNDAyNDlaMDMxMTAvBgNV BAMTKEM0OUE5NkI3MTY5QTlENDg1MzY4QzZFQ0M3MkQ4MzI3QzJGQjAzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI78ZtaxJ0VKWDcPYvxfmD80cZ jarnUaFyFJNbGRoJfgh5dCsWf+w5tv66z5zIpGuhWj42BrC8J8IuA4ahSfpMXAlP sT3d6c+w6pQPqKgCZlib2SUMHs42X6au4EVquduVi2H+CNmTOG4ybORMTpWtXHwZ 6a7CJVlHOQP7+SDauWC1uyGYlfw94saIXu1+CWqcdJaJ9Qbvm+whY/7GJVXHU7gK itd1Xu8RHwlb64QZT20W3LU5NyJkG1k5FkEFUzj1Kz4XjWmLx5kIqQxTIPe07FdX pdu6XYFC37+4aKS7baTulDADeDpiMLUcLljnoUdKi+g/Zz4K2MDbqJrDT7sBAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUxJqWtxaanUhTaMbsxy2DJ8L7A1gwHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU4NmQzNjM3LTkyYjQtNGFjNy1h NzViLTk5Y2IwYjA1NjViMC8wLzMxMzAzMzJlMzgzMDJlMzgzMDJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDM2MzQzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnUFAwDQYJKoZIhvcN AQELBQADggEBADLCc0zi1d5dorI+QufORqT9K2ztk5f+zTBdRxBZQYPD2hKq4tp5 ymQz06ZiBH/aeP0jBhBZnqqufm28kj3vwL42JG25VfFGnAmlxxuR8ztprQ9i0Sbp OawrLB84e3rZ/bRFn+dh0lyG5R0UQS2G34Xx0hIhyPhRDK7j1p2NgGdCqAXQ2wUP abtHqfPm3sxCgAjYyERipAfzh8GSgvO9k6PzcUKUL/06POHOenUhTuGYZ8f7+rP7 8wnjoqORtOWI1+rxxwRhL+cj5LAW2ORried6PsBJGgtKdmq0OYXAsad024P7q5L0 h0pH2hY+rRT8NUiHaGZaLvnn0CI+rtdRYWo= -----END CERTIFICATE-----Generated at Mon Nov 25 02:45:36 2024 by rpki-client on console-ams.rpki-client.org