$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa File: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (raw, json) Hash identifier: DMtHSjGMRMpOGHFnaPHxnZuOgbSBPmXTmIU67/fdkmY= Subject key identifier: 2F:CA:E3:B0:CA:1D:91:61:6C:75:1B:62:36:3E:CF:1B:27:67:53:1C Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 053F07E3B1E1C401F6460F6D7E2DFEC3F22209A0 Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa Signing time: Thu 04 Jan 2024 05:00:00 +0000 ROA not before: Thu 04 Jan 2024 04:55:00 +0000 ROA not after: Thu 02 Jan 2025 05:00:00 +0000 asID: 139952 IP address blocks: 103.31.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3f:07:e3:b1:e1:c4:01:f6:46:0f:6d:7e:2d:fe:c3:f2:22:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: Jan 4 04:55:00 2024 GMT Not After : Jan 2 05:00:00 2025 GMT Subject: CN=2FCAE3B0CA1D91616C751B62363ECF1B2767531C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:fa:7f:e5:4d:15:01:c2:7c:3b:bd:56:9f: de:01:3c:af:4e:f8:32:df:52:17:47:46:40:5d:8e: a6:67:8c:24:e1:9a:fe:7a:d4:16:e0:81:47:12:c6: 5f:fd:a9:0a:8d:66:f4:ae:54:0a:7a:24:11:58:f7: c9:55:01:57:d3:c4:f0:5e:7d:bc:ae:6f:28:04:13: 40:57:93:6e:a6:04:35:81:17:2f:f6:59:d1:85:8d: e4:5c:ea:3c:fa:54:39:ea:fb:53:52:9f:6c:33:d0: 25:2d:ae:93:29:dd:d5:52:38:95:7c:8e:96:2e:83: b5:b6:94:ce:89:cd:07:66:9a:5d:d0:60:a2:6d:57: ba:9f:ef:32:c7:93:87:e0:bb:f5:3f:63:f7:df:fa: b6:50:bd:3a:26:e9:fe:3f:3f:1e:8b:d3:e1:14:14: 36:de:75:6b:5c:8a:85:c6:50:6d:e2:c2:b6:05:8b: 78:69:ba:b9:f2:a1:52:5b:52:e7:6c:67:fc:ed:f5: d0:34:7d:98:dc:b1:d8:a6:1d:fe:da:fc:2f:31:e1: 87:2b:3f:8f:a0:ff:4b:09:b3:f9:8f:fd:26:3a:1b: 4d:d5:3d:d4:eb:d0:b5:e3:52:8e:c9:44:87:48:82: a1:47:4d:58:04:2b:67:d1:de:f2:4b:59:8f:fa:5b: 19:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CA:E3:B0:CA:1D:91:61:6C:75:1B:62:36:3E:CF:1B:27:67:53:1C X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.240.0/24 Signature Algorithm: sha256WithRSAEncryption 78:ab:66:09:32:58:31:26:bd:e9:59:12:38:7c:e8:c2:59:84: a5:13:7c:8f:79:ed:65:14:d0:10:16:dc:e2:d2:6b:06:83:83: d1:52:5e:4f:5b:af:e7:33:6b:f7:d7:a1:af:6d:31:00:8b:f7: 28:dc:7d:82:1e:66:55:40:62:1a:69:6a:e7:79:75:9c:15:dd: 10:f6:06:9c:d2:45:ff:d0:29:62:8e:3a:f7:58:41:d0:8e:e6: 29:7d:7f:29:08:d1:10:06:63:33:4d:2b:71:f6:db:b3:45:1f: c9:02:b6:31:1e:af:4a:79:a9:40:a1:ad:2b:6a:42:bb:a7:02: 68:dd:18:c0:bd:1a:b6:f3:47:06:14:fa:d9:70:a2:41:7f:b7: cc:d2:fd:a8:cb:2c:92:e2:1b:fa:1d:d7:15:be:9a:a4:03:de: fc:75:0d:0f:9d:bb:49:89:cc:85:ee:0c:a6:c0:f7:2f:ae:98: 74:91:cf:5f:cf:f1:a9:13:5a:61:62:46:3e:e7:7b:1a:bf:85: c7:66:4c:87:59:7e:a8:dd:bf:6d:42:56:ba:84:5b:e5:d0:42: 52:f9:05:70:cc:02:af:f8:9f:80:5b:eb:85:a6:57:b5:47:1a: 61:3a:60:42:91:e9:66:af:bd:ee:8d:8c:b1:57:9f:a1:27:f0: 2a:75:da:d0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBT8H47HhxAH2Rg9tfi3+w/IiCaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNDAxMDQwNDU1MDBaFw0yNTAxMDIwNTAwMDBaMDMxMTAvBgNV BAMTKDJGQ0FFM0IwQ0ExRDkxNjE2Qzc1MUI2MjM2M0VDRjFCMjc2NzUzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigfp/5U0VAcJ8O71Wn94BPK9O +DLfUhdHRkBdjqZnjCThmv561BbggUcSxl/9qQqNZvSuVAp6JBFY98lVAVfTxPBe fbyubygEE0BXk26mBDWBFy/2WdGFjeRc6jz6VDnq+1NSn2wz0CUtrpMp3dVSOJV8 jpYug7W2lM6JzQdmml3QYKJtV7qf7zLHk4fgu/U/Y/ff+rZQvTom6f4/Px6L0+EU FDbedWtcioXGUG3iwrYFi3hpurnyoVJbUudsZ/zt9dA0fZjcsdimHf7a/C8x4Ycr P4+g/0sJs/mP/SY6G03VPdTr0LXjUo7JRIdIgqFHTVgEK2fR3vJLWY/6WxndAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUL8rjsModkWFsdRtiNj7PGydnUxwwHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0MzAzNGFhLWYzOWMtNDhmNS04 NTJlLWQxYmQ3ZjE3YWE0Mi8wLzMxMzAzMzJlMzMzMTJlMzIzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx/wMA0GCSqG SIb3DQEBCwUAA4IBAQB4q2YJMlgxJr3pWRI4fOjCWYSlE3yPee1lFNAQFtzi0msG g4PRUl5PW6/nM2v316GvbTEAi/co3H2CHmZVQGIaaWrneXWcFd0Q9gac0kX/0Cli jjr3WEHQjuYpfX8pCNEQBmMzTStx9tuzRR/JArYxHq9KealAoa0rakK7pwJo3RjA vRq280cGFPrZcKJBf7fM0v2oyyyS4hv6HdcVvpqkA978dQ0PnbtJicyF7gymwPcv rph0kc9fz/GpE1phYkY+53sav4XHZkyHWX6o3b9tQla6hFvl0EJS+QVwzAKv+J+A W+uFple1RxphOmBCkelmr73ujYyxV5+hJ/AqddrQ -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org