$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132332e302f32342d3234203d3e203536323436.roa File: 3130332e31302e3132332e302f32342d3234203d3e203536323436.roa (raw, json) Hash identifier: GGZAxfO1iGJ/ouo0FaI5KJrYAZyrkK+JDuz4S04GjKw= Subject key identifier: 4E:50:71:EE:3F:C7:13:D3:79:43:88:57:88:9B:A6:26:7A:79:C2:A1 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 3FE2785E7D36DC57ED1D9C86FB42FDA14F4AB870 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132332e302f32342d3234203d3e203536323436.roa Signing time: Mon 01 Jul 2024 01:03:08 +0000 ROA not before: Mon 01 Jul 2024 00:58:08 +0000 ROA not after: Mon 30 Jun 2025 01:03:08 +0000 asID: 56246 IP address blocks: 103.10.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e2:78:5e:7d:36:dc:57:ed:1d:9c:86:fb:42:fd:a1:4f:4a:b8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 1 00:58:08 2024 GMT Not After : Jun 30 01:03:08 2025 GMT Subject: CN=4E5071EE3FC713D379438857889BA6267A79C2A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:9d:9c:e0:b1:cb:43:86:c4:40:d6:fc:fb: 64:a8:95:5f:50:dc:3b:3b:f5:00:66:df:86:1e:f6: 3d:84:aa:47:f4:2a:08:36:d4:d9:17:95:c4:e3:df: 9f:78:72:3d:97:f1:bf:ab:47:c9:ea:5f:9a:01:9c: 9d:c2:97:ac:0b:87:87:7e:ae:d3:d6:f4:33:d1:b1: 0a:f0:20:c4:a5:26:cf:3d:e1:b6:04:14:f1:d3:94: 67:99:ac:73:fe:b5:96:22:e7:8b:96:da:ba:89:9e: aa:53:23:9e:31:98:be:c6:aa:cf:63:75:f6:e8:d5: 9f:62:6f:b3:af:c3:9f:7b:03:f2:d0:ee:2c:5f:44: 43:12:9c:9a:e1:64:6a:44:41:ec:c0:1d:f5:82:ec: 3c:eb:a3:98:f5:49:61:90:a2:c3:f0:07:4a:30:fe: 11:33:c5:82:2f:4d:ff:6d:9a:96:59:fe:35:9e:36: 37:d3:6d:1a:39:69:96:21:b1:4e:ea:c2:54:0d:13: 40:2c:13:82:63:ed:a6:77:ce:ac:e0:46:c4:8f:26: 60:6a:cf:6f:d2:8c:ff:2f:f2:c6:29:a8:2a:23:08: ae:55:64:7f:92:01:02:b6:f5:81:62:db:cd:90:17: 4e:f8:54:16:57:fa:f8:1f:65:bd:90:76:fe:11:ef: 81:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:50:71:EE:3F:C7:13:D3:79:43:88:57:88:9B:A6:26:7A:79:C2:A1 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132332e302f32342d3234203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.123.0/24 Signature Algorithm: sha256WithRSAEncryption 07:66:8f:0b:24:5c:d3:56:0d:3c:50:d2:62:0d:d3:30:8e:c3: e6:5a:5d:74:70:c4:1a:0d:92:79:39:34:08:3f:a8:c6:46:f7: e9:b8:65:e2:30:3a:f7:a1:38:57:4f:52:1c:8d:70:64:c5:07: bb:ae:dd:16:b9:df:8f:17:a9:cb:22:e3:32:aa:cd:c5:2e:10: f1:dc:65:9a:c3:ad:db:5f:5a:fb:29:a0:06:ef:ee:df:22:76: 6d:07:e5:f1:89:92:d9:12:eb:c7:1c:f6:8e:8e:5d:e5:4e:0a: 0d:75:3e:9c:e2:0a:84:89:cf:fa:14:70:5c:3a:77:0e:37:f1: 70:39:33:e2:38:e8:33:bd:e7:f1:a1:40:e4:6f:90:20:b2:a4: 59:92:12:2b:c9:d0:d4:48:96:5c:d7:68:72:81:76:6b:60:5f: 4b:37:63:9c:85:b5:fa:40:42:eb:e3:7a:8f:a6:8f:d1:ac:f1: 70:1b:43:d7:8d:33:37:37:3b:39:c7:fb:e4:b4:11:87:45:e0: a1:a5:55:a9:81:3d:f5:68:15:81:ef:fc:85:f3:ff:b1:d2:f6: 3b:50:e8:19:6f:45:20:5c:f7:3f:cf:77:17:89:8c:d2:e1:af: ad:6d:bd:4c:a5:fb:d9:4b:e2:e6:8d:52:c7:c5:da:c7:b8:e3: ec:ee:8f:f1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUP+J4Xn023FftHZyG+0L9oU9KuHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNDA3MDEwMDU4MDhaFw0yNTA2MzAwMTAzMDhaMDMxMTAvBgNV BAMTKDRFNTA3MUVFM0ZDNzEzRDM3OTQzODg1Nzg4OUJBNjI2N0E3OUMyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VZ2c4LHLQ4bEQNb8+2SolV9Q 3Ds79QBm34Ye9j2Eqkf0Kgg21NkXlcTj3594cj2X8b+rR8nqX5oBnJ3Cl6wLh4d+ rtPW9DPRsQrwIMSlJs894bYEFPHTlGeZrHP+tZYi54uW2rqJnqpTI54xmL7Gqs9j dfbo1Z9ib7Ovw597A/LQ7ixfREMSnJrhZGpEQezAHfWC7Dzro5j1SWGQosPwB0ow /hEzxYIvTf9tmpZZ/jWeNjfTbRo5aZYhsU7qwlQNE0AsE4Jj7aZ3zqzgRsSPJmBq z2/SjP8v8sYpqCojCK5VZH+SAQK29YFi282QF074VBZX+vgfZb2Qdv4R74GJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTlBx7j/HE9N5Q4hXiJumJnp5wqEwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzAzMzJlMzEzMDJlMzEzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKezANBgkqhkiG 9w0BAQsFAAOCAQEAB2aPCyRc01YNPFDSYg3TMI7D5lpddHDEGg2SeTk0CD+oxkb3 6bhl4jA696E4V09SHI1wZMUHu67dFrnfjxepyyLjMqrNxS4Q8dxlmsOt219a+ymg Bu/u3yJ2bQfl8YmS2RLrxxz2jo5d5U4KDXU+nOIKhInP+hRwXDp3DjfxcDkz4jjo M73n8aFA5G+QILKkWZISK8nQ1EiWXNdocoF2a2BfSzdjnIW1+kBC6+N6j6aP0azx cBtD140zNzc7Ocf75LQRh0XgoaVVqYE99WgVge/8hfP/sdL2O1DoGW9FIFz3P893 F4mM0uGvrW29TKX72Uvi5o1Sx8Xax7jj7O6P8Q== -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org