$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa File: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (raw, json) Hash identifier: Gi8pXuaHvIjRFGEOcjqpkp/ITy5FzjLcXXMmxYMHE20= Subject key identifier: 84:F3:75:38:B0:26:06:10:7B:E8:E1:62:F7:71:81:D2:B0:BA:21:9A Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 40B2BD79BF5B592DCAA53DAA9A1CBFC15F84B852 Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa Signing time: Wed 07 Feb 2024 02:00:00 +0000 ROA not before: Wed 07 Feb 2024 01:55:00 +0000 ROA not after: Wed 05 Feb 2025 02:00:00 +0000 asID: 138089 IP address blocks: 103.124.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b2:bd:79:bf:5b:59:2d:ca:a5:3d:aa:9a:1c:bf:c1:5f:84:b8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Feb 7 01:55:00 2024 GMT Not After : Feb 5 02:00:00 2025 GMT Subject: CN=84F37538B02606107BE8E162F77181D2B0BA219A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d8:1b:82:ce:a3:68:af:c7:8f:ab:d7:70:ad: 96:51:c4:70:f3:2f:6f:e3:f3:53:f9:f2:8a:79:f3: e6:ba:90:58:d6:29:fc:ba:64:65:49:22:ca:db:79: e4:d1:92:16:ea:8f:a5:e4:c1:0e:53:a8:e0:76:f2: 69:99:aa:99:f4:40:26:3a:1c:13:f1:d8:66:9e:bb: 0d:00:82:9e:71:bb:f5:fa:09:6e:a6:43:f6:73:16: cc:86:0f:de:c7:82:a1:0c:9d:ba:fe:e3:32:84:b0: 2c:91:e4:71:68:f3:ce:0d:b6:65:9f:c6:39:1f:42: 07:10:29:27:4f:43:9a:b2:b7:68:2a:2d:99:03:23: b9:e1:97:7c:69:9d:a9:eb:cc:e6:5e:78:df:7f:48: 41:33:b9:35:35:43:5a:14:9d:be:df:38:2b:08:9c: 53:ae:ab:7a:5a:83:4c:a4:2a:7f:f2:5a:f8:44:37: 32:ad:95:7e:d1:16:2a:36:e3:c9:ed:ab:cd:c6:2a: c4:48:58:2b:9a:de:fb:a7:35:20:11:3e:21:19:43: ca:11:80:53:ea:fb:e8:e0:03:aa:e8:11:e9:e1:89: 88:af:53:02:ef:8c:41:9e:80:19:f8:94:9b:a1:ec: 8d:15:fd:41:4a:c1:7c:40:fe:3f:e0:1a:5c:d0:93: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F3:75:38:B0:26:06:10:7B:E8:E1:62:F7:71:81:D2:B0:BA:21:9A X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.136.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:4e:ee:db:8f:03:1d:88:25:97:30:9c:d6:d9:eb:8c:c3:2c: 17:28:ce:c9:e9:39:18:d9:c3:f7:ad:00:a3:3b:ba:83:e1:1f: 34:90:c4:45:49:bc:dc:9a:95:2f:9b:e5:63:c1:dd:34:a3:72: 48:f2:bc:35:eb:13:83:bb:6b:79:ad:cf:92:80:51:1f:e4:4a: b8:e4:7d:6f:b2:be:ed:24:a9:ee:05:c9:8f:47:78:b9:35:49: 41:c3:e0:d5:76:fe:12:c7:b3:36:84:ca:b4:de:ce:64:78:3f: 4d:c7:25:ea:00:28:fe:c7:f7:cf:b2:f2:8f:89:19:d8:0c:21: 7c:e9:de:e4:69:5f:49:39:44:fa:0e:ff:11:86:bd:bc:20:38: d0:dd:ed:c1:e3:5d:4e:4b:d4:37:5a:11:34:0b:0e:f1:6d:aa: f4:6b:03:fe:5d:1c:d3:22:67:a6:5f:17:89:e7:46:d6:42:95: d9:f3:aa:2d:3b:6d:0d:98:cb:32:7a:c3:46:b7:0b:67:63:90: 90:07:ac:34:61:60:2d:8e:ee:73:e9:7e:47:64:a4:ea:7e:92: 8e:76:78:a0:33:98:45:58:d7:39:eb:32:ba:58:fd:46:ab:a0: 48:f4:bc:0d:39:06:60:d8:b3:20:4c:8a:09:85:b5:36:19:53: 15:0a:f7:10 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQLK9eb9bWS3KpT2qmhy/wV+EuFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNDAyMDcwMTU1MDBaFw0yNTAyMDUwMjAwMDBaMDMxMTAvBgNV BAMTKDg0RjM3NTM4QjAyNjA2MTA3QkU4RTE2MkY3NzE4MUQyQjBCQTIxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2BuCzqNor8ePq9dwrZZRxHDz L2/j81P58op58+a6kFjWKfy6ZGVJIsrbeeTRkhbqj6XkwQ5TqOB28mmZqpn0QCY6 HBPx2Gaeuw0Agp5xu/X6CW6mQ/ZzFsyGD97HgqEMnbr+4zKEsCyR5HFo884NtmWf xjkfQgcQKSdPQ5qyt2gqLZkDI7nhl3xpnanrzOZeeN9/SEEzuTU1Q1oUnb7fOCsI nFOuq3pag0ykKn/yWvhENzKtlX7RFio248ntq83GKsRIWCua3vunNSARPiEZQ8oR gFPq++jgA6roEenhiYivUwLvjEGegBn4lJuh7I0V/UFKwXxA/j/gGlzQk9JpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhPN1OLAmBhB76OFi93GB0rC6IZowHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMxMzAzMzJlMzEzMjM0MmUzMTMzMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnfIgwDQYJ KoZIhvcNAQELBQADggEBAExO7tuPAx2IJZcwnNbZ64zDLBcozsnpORjZw/etAKM7 uoPhHzSQxEVJvNyalS+b5WPB3TSjckjyvDXrE4O7a3mtz5KAUR/kSrjkfW+yvu0k qe4FyY9HeLk1SUHD4NV2/hLHszaEyrTezmR4P03HJeoAKP7H98+y8o+JGdgMIXzp 3uRpX0k5RPoO/xGGvbwgONDd7cHjXU5L1DdaETQLDvFtqvRrA/5dHNMiZ6ZfF4nn RtZCldnzqi07bQ2YyzJ6w0a3C2djkJAHrDRhYC2O7nPpfkdkpOp+ko52eKAzmEVY 1znrMrpY/UaroEj0vA05BmDYsyBMigmFtTYZUxUK9xA= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org