$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32342d3234203d3e203435323938.roa File: 3130332e3235332e3130362e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: 3PI2sMsvhhLRAE4ciHEnJ19giIuQ980lG5JAJWPkK04= Subject key identifier: E3:1E:E6:6E:E8:37:FB:2A:1A:96:15:37:F0:16:AD:98:D0:D6:1E:50 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 634A3881E52985D425EE876B3621FFA3DC6EE3AA Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32342d3234203d3e203435323938.roa Signing time: Tue 16 Jul 2024 17:00:01 +0000 ROA not before: Tue 16 Jul 2024 16:55:01 +0000 ROA not after: Tue 15 Jul 2025 17:00:01 +0000 asID: 45298 IP address blocks: 103.253.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4a:38:81:e5:29:85:d4:25:ee:87:6b:36:21:ff:a3:dc:6e:e3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Jul 16 16:55:01 2024 GMT Not After : Jul 15 17:00:01 2025 GMT Subject: CN=E31EE66EE837FB2A1A961537F016AD98D0D61E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:ce:52:f8:f1:0e:d1:ad:f9:b7:c1:21:49: af:7a:35:f4:e4:fd:5a:60:25:1f:94:73:7b:8d:d3: 09:fe:d2:8f:eb:fb:07:be:cf:d8:e5:55:b6:fa:1b: 5e:64:9f:be:3c:df:05:2a:e5:e2:bb:fc:ee:99:1b: dd:74:8f:31:46:7d:9f:d0:4c:aa:6e:0e:ee:91:a7: 2f:3d:43:d4:ed:f1:fd:eb:2e:f3:bb:ab:6f:0d:ce: c9:33:45:de:79:8d:ae:db:1b:9f:c2:29:93:77:5b: 8d:dc:44:c9:53:f4:e1:7d:4c:af:8c:15:5c:40:24: 5a:0f:82:83:ec:4e:31:82:19:4f:f4:d2:a6:da:92: ab:00:f4:af:c2:74:44:56:c6:01:82:b9:13:25:40: 4b:c8:a7:7b:73:b6:d4:06:7a:c5:48:87:79:c8:4f: 98:a6:cf:5b:28:59:59:ad:f2:9a:8a:dc:59:c6:09: 62:d8:a8:be:bc:4f:e6:28:ec:f8:a3:33:65:5a:58: ce:cc:95:4e:88:d3:5d:71:71:58:0e:0d:41:a0:9c: 7c:95:36:60:73:77:65:81:b0:00:e0:10:42:3b:2c: 2b:f7:91:33:dc:fe:0c:9c:09:42:68:f0:86:35:7d: 16:35:03:68:f7:b0:57:84:7f:35:c5:cf:30:72:72: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1E:E6:6E:E8:37:FB:2A:1A:96:15:37:F0:16:AD:98:D0:D6:1E:50 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.106.0/24 Signature Algorithm: sha256WithRSAEncryption 40:13:aa:6a:49:92:23:ba:d0:ea:a4:4c:c7:03:32:d1:10:ef: 81:ed:12:6c:67:a1:8e:36:8e:71:33:3e:3f:ac:2f:e6:41:4a: 76:fc:e3:a8:b7:09:78:73:12:47:70:22:c7:4f:fa:7d:e7:e5: 0a:5a:96:ef:a5:00:f2:2d:c6:c2:02:a5:bd:63:95:fa:cc:07: 15:b4:84:00:b1:b8:0b:7e:ff:f6:6b:2b:7e:74:e8:e0:97:08: 55:ad:a5:f4:91:a2:10:be:12:39:34:71:7f:88:e3:df:16:7a: 9e:2c:f3:8c:ef:2f:2b:b9:7d:3d:2f:47:88:92:f8:43:3e:ea: e7:8c:cc:0d:2d:94:5c:e7:03:6d:ab:05:ef:53:8a:70:8b:0a: 5e:ab:2e:cf:f2:28:ed:ab:c8:32:a7:13:59:c1:b3:49:bf:40: e3:7c:93:10:65:91:f8:6e:55:c4:4c:15:6c:56:31:8d:25:bf: 3c:9c:6a:af:43:31:61:6d:72:f2:10:0d:65:fb:b3:a1:bb:ee: 04:ac:b0:81:87:2c:1a:b7:02:db:10:4f:20:e4:9d:c6:ca:f9: a7:2b:f2:be:5d:38:42:92:39:ca:24:49:2a:d7:9b:a6:96:18: fe:99:bb:d5:fc:9a:e0:ca:2f:b4:d9:51:83:7f:8f:28:6b:3e: 37:70:5d:51 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUY0o4geUphdQl7odrNiH/o9xu46owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNDA3MTYxNjU1MDFaFw0yNTA3MTUxNzAwMDFaMDMxMTAvBgNV BAMTKEUzMUVFNjZFRTgzN0ZCMkExQTk2MTUzN0YwMTZBRDk4RDBENjFFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZe85S+PEO0a35t8EhSa96NfTk /VpgJR+Uc3uN0wn+0o/r+we+z9jlVbb6G15kn7483wUq5eK7/O6ZG910jzFGfZ/Q TKpuDu6Rpy89Q9Tt8f3rLvO7q28NzskzRd55ja7bG5/CKZN3W43cRMlT9OF9TK+M FVxAJFoPgoPsTjGCGU/00qbakqsA9K/CdERWxgGCuRMlQEvIp3tzttQGesVIh3nI T5imz1soWVmt8pqK3FnGCWLYqL68T+Yo7PijM2VaWM7MlU6I011xcVgODUGgnHyV NmBzd2WBsADgEEI7LCv3kTPc/gycCUJo8IY1fRY1A2j3sFeEfzXFzzBychN5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4x7mbug3+yoalhU38BatmNDWHlAwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzAzMzJlMzIzNTMzMmUzMTMwMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzIzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/1qMA0GCSqG SIb3DQEBCwUAA4IBAQBAE6pqSZIjutDqpEzHAzLREO+B7RJsZ6GONo5xMz4/rC/m QUp2/OOotwl4cxJHcCLHT/p95+UKWpbvpQDyLcbCAqW9Y5X6zAcVtIQAsbgLfv/2 ayt+dOjglwhVraX0kaIQvhI5NHF/iOPfFnqeLPOM7y8ruX09L0eIkvhDPurnjMwN LZRc5wNtqwXvU4pwiwpeqy7P8ijtq8gypxNZwbNJv0DjfJMQZZH4blXETBVsVjGN Jb88nGqvQzFhbXLyEA1l+7Ohu+4ErLCBhywatwLbEE8g5J3GyvmnK/K+XThCkjnK JEkq15umlhj+mbvV/Jrgyi+02VGDf48oaz43cF1R -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org