$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33352e302f32342d3234203d3e203234353334.roa File: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (raw, json) Hash identifier: kOFuSaWcp+Tj246w7gXWZs/JRQP0bIRuXOfYlDYSSms= Subject key identifier: 31:AB:82:C7:2E:43:1E:15:4A:1F:5F:1C:90:47:46:47:F8:96:97:5C Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 3030F3479CAAA24227344749BDF9F794D1353F07 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33352e302f32342d3234203d3e203234353334.roa Signing time: Fri 26 Apr 2024 10:02:05 +0000 ROA not before: Fri 26 Apr 2024 09:57:05 +0000 ROA not after: Fri 25 Apr 2025 10:02:05 +0000 asID: 24534 IP address blocks: 103.149.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:30:f3:47:9c:aa:a2:42:27:34:47:49:bd:f9:f7:94:d1:35:3f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Apr 26 09:57:05 2024 GMT Not After : Apr 25 10:02:05 2025 GMT Subject: CN=31AB82C72E431E154A1F5F1C90474647F896975C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:dd:16:75:9a:ea:de:7c:74:e1:cd:20:cf: 2d:0c:f7:e1:04:62:37:09:f8:4a:4f:b2:64:c9:1c: 74:43:6a:56:f6:0f:07:6b:7e:8c:af:f9:bd:72:4f: c1:44:2b:75:43:74:8f:4a:ee:66:ba:18:a9:95:44: a8:34:81:b8:fa:81:6e:e8:f9:36:11:1f:44:bb:56: 4e:31:23:68:01:f9:b8:f9:ba:bc:ec:92:08:1e:cf: 53:ce:76:b1:35:f1:1a:00:4a:78:0c:ac:30:4c:4f: 04:00:53:6f:70:a5:fc:10:9d:29:22:31:b6:ba:a6: b5:9d:24:d5:20:e4:79:cd:dd:c7:0e:cf:90:2b:9e: d7:a9:3d:88:a3:17:1d:77:36:d2:67:b2:40:f7:14: f0:f2:f4:b7:3a:42:f6:7e:8b:5f:da:f6:fd:5f:9e: 65:26:6f:30:66:d4:7e:2b:46:b0:c4:11:91:34:53: 99:38:cc:76:33:0b:b1:88:3a:4d:05:aa:66:25:67: 42:af:3b:dc:a1:ef:1c:82:7e:99:92:1d:e0:c3:5e: 03:d5:a4:3c:6f:59:7b:3e:ff:38:86:cd:46:92:32: 44:c3:ae:e7:64:22:14:a2:41:a4:3f:2f:68:40:15: f6:11:8c:8e:b2:39:e2:3d:6b:64:b6:29:06:a3:c6: 62:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AB:82:C7:2E:43:1E:15:4A:1F:5F:1C:90:47:46:47:F8:96:97:5C X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33352e302f32342d3234203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.35.0/24 Signature Algorithm: sha256WithRSAEncryption 17:95:cc:a1:04:dc:c9:58:36:c8:eb:72:08:a1:8b:9e:a2:4e: 0e:23:6f:d7:6b:43:3a:92:67:34:13:80:6e:60:e3:f2:62:91: e5:61:0b:5e:8c:24:f5:5f:fd:48:80:d3:7a:dd:1c:97:ba:0c: 5d:80:d0:d1:58:3e:9e:73:04:56:e7:30:c5:c0:3e:7f:93:43: b7:bf:83:a6:55:62:06:bd:fe:3b:13:69:dd:dc:91:9f:18:5a: a8:99:2d:e2:77:d6:72:76:5c:1f:aa:11:2c:05:eb:ba:db:e9: 1e:31:72:13:37:7b:df:ac:62:c4:2f:af:64:16:37:2c:d9:ba: 33:9a:f9:29:23:11:07:d5:ab:1f:6c:e7:71:96:df:2e:61:93: a5:6a:5d:ae:ed:c1:c2:4a:34:0b:46:5f:36:91:cf:0b:61:7b: 52:8d:a8:f6:56:bf:d2:ed:7d:ae:f6:3d:0d:fe:07:02:f8:0e: 78:f5:e6:e8:e5:45:e3:36:18:b7:95:e8:22:24:c9:2a:44:b0: 21:ca:62:50:c5:b7:be:77:f0:36:8b:dd:fb:4d:06:8a:a0:6e: 9d:6a:e5:3f:ca:9f:96:df:a8:60:9f:16:49:1a:e0:98:c3:32: 57:2f:77:53:a6:9a:26:98:c6:09:22:49:61:88:4c:bc:0c:27: c5:f8:c2:de -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMDDzR5yqokInNEdJvfn3lNE1PwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNDA0MjYwOTU3MDVaFw0yNTA0MjUxMDAyMDVaMDMxMTAvBgNV BAMTKDMxQUI4MkM3MkU0MzFFMTU0QTFGNUYxQzkwNDc0NjQ3Rjg5Njk3NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGt0WdZrq3nx04c0gzy0M9+EE YjcJ+EpPsmTJHHRDalb2Dwdrfoyv+b1yT8FEK3VDdI9K7ma6GKmVRKg0gbj6gW7o +TYRH0S7Vk4xI2gB+bj5urzskggez1POdrE18RoASngMrDBMTwQAU29wpfwQnSki Mba6prWdJNUg5HnN3ccOz5ArntepPYijFx13NtJnskD3FPDy9Lc6QvZ+i1/a9v1f nmUmbzBm1H4rRrDEEZE0U5k4zHYzC7GIOk0FqmYlZ0KvO9yh7xyCfpmSHeDDXgPV pDxvWXs+/ziGzUaSMkTDrudkIhSiQaQ/L2hAFfYRjI6yOeI9a2S2KQajxmJdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMauCxy5DHhVKH18ckEdGR/iWl1wwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNjM1ZTI1LTg1OTktNDhhZS1i ZGNiLWUzMjNkZmM4OTZlYy8wLzMxMzAzMzJlMzEzNDM5MmUzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeVIzANBgkqhkiG 9w0BAQsFAAOCAQEAF5XMoQTcyVg2yOtyCKGLnqJODiNv12tDOpJnNBOAbmDj8mKR 5WELXowk9V/9SIDTet0cl7oMXYDQ0Vg+nnMEVucwxcA+f5NDt7+DplViBr3+OxNp 3dyRnxhaqJkt4nfWcnZcH6oRLAXrutvpHjFyEzd736xixC+vZBY3LNm6M5r5KSMR B9WrH2zncZbfLmGTpWpdru3Bwko0C0ZfNpHPC2F7Uo2o9la/0u19rvY9Df4HAvgO ePXm6OVF4zYYt5XoIiTJKkSwIcpiUMW3vnfwNovd+00GiqBunWrlP8qflt+oYJ8W SRrgmMMyVy93U6aaJpjGCSJJYYhMvAwnxfjC3g== -----END CERTIFICATE-----Generated at Sat Jun 22 20:36:51 2024 by rpki-client on console-ams.rpki-client.org