$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa File: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (raw, json) Hash identifier: j2ooxEgwl+PYCxzVzg+BL2wikozzxYfw566b8wdA2jI= Subject key identifier: E6:FB:CA:32:F3:00:7D:2C:05:B2:7B:C4:E4:97:AC:78:36:CA:E1:8A Certificate issuer: /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Certificate serial: 1DF0EEBE95EAC90022E077B6DAC96FDA07D752D4 Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa Signing time: Wed 28 Aug 2024 02:00:01 +0000 ROA not before: Wed 28 Aug 2024 01:55:01 +0000 ROA not after: Wed 27 Aug 2025 02:00:01 +0000 asID: 140460 IP address blocks: 103.153.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 02:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f0:ee:be:95:ea:c9:00:22:e0:77:b6:da:c9:6f:da:07:d7:52:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Validity Not Before: Aug 28 01:55:01 2024 GMT Not After : Aug 27 02:00:01 2025 GMT Subject: CN=E6FBCA32F3007D2C05B27BC4E497AC7836CAE18A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:39:63:53:26:b0:00:ff:4c:90:b3:9f:e1: 23:17:76:59:2f:48:b8:65:b7:c7:ee:71:50:2f:f6: 9a:f6:96:62:ad:13:dd:87:28:17:bd:4f:75:2a:23: ef:11:a1:ff:23:e2:c4:b2:57:ee:e8:88:61:d7:9e: d9:3b:01:52:17:9a:d1:4b:29:7b:00:d3:f8:7f:66: 7b:55:43:50:4d:ed:ba:db:ac:2d:03:16:6b:44:0c: a0:03:c1:c3:90:f0:fe:fd:37:71:0b:cc:7c:2f:74: 62:c3:27:67:d5:5a:52:d6:fd:9d:22:ea:72:17:37: 57:cf:37:a9:ba:53:5e:04:b0:da:df:6b:32:bd:63: 8f:e4:da:3b:c4:9b:90:b1:d5:16:f0:87:32:58:60: 5e:87:80:2c:a7:2c:df:93:17:4f:50:10:db:e5:dc: 2f:97:9d:f4:8f:65:18:81:ec:e7:11:b5:61:7b:cb: c5:60:10:e1:56:27:fa:46:53:c5:c7:36:a9:06:7d: 54:f1:29:2e:eb:aa:40:29:af:85:f8:f4:59:33:75: 0e:0f:38:a4:69:52:99:0a:31:02:67:e8:82:3a:88: e7:6e:20:04:f5:6a:cf:0a:52:9f:96:7b:8b:a7:cd: 71:12:ef:f8:4b:37:ec:1e:03:24:d7:ac:b1:2f:59: ae:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FB:CA:32:F3:00:7D:2C:05:B2:7B:C4:E4:97:AC:78:36:CA:E1:8A X509v3 Authority Key Identifier: keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.96.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:4b:c3:9f:c0:99:15:ec:34:db:e3:8e:31:df:0d:aa:1f:ab: 98:84:1b:f8:0a:9a:27:13:ca:b0:43:61:ca:0e:fb:d6:e4:73: 45:47:a6:66:23:31:e3:c5:7e:49:c1:16:b7:85:72:a4:6f:b6: ff:9a:8d:c0:ca:6e:fa:48:ff:44:4f:1f:fb:90:76:b4:8e:6a: 77:96:35:62:7c:3d:27:9b:ec:64:3e:76:b6:6d:f9:6b:71:6b: fe:dd:55:3a:8e:be:4e:c2:76:7c:a4:73:ec:35:e9:4e:d7:cf: be:ed:d8:c6:14:0c:7c:a6:95:0d:8f:0d:cd:1b:86:c8:5e:45: c8:02:67:b9:83:11:7e:5b:2f:84:0c:42:7b:2c:5c:a8:f6:83: 5b:a8:e1:e5:d7:9f:14:29:ad:5e:42:38:5c:01:77:c2:9e:a8: 8e:c0:10:81:95:8e:47:7f:3a:85:f0:b5:ef:e6:4e:44:7b:14: 09:4d:70:52:1e:8f:c7:2e:ea:16:4a:ac:07:61:28:d2:5b:60: c5:c4:b0:a6:3f:68:35:3e:d6:8c:69:6c:c3:79:ee:1f:b5:af: 8c:f2:ce:72:ed:a4:1a:77:47:da:43:a0:48:3c:8b:83:c0:07: d9:aa:d1:d1:61:d0:e5:3d:3c:aa:7c:aa:1e:aa:29:fe:c3:ba: 4f:01:42:d8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHfDuvpXqyQAi4He22slv2gfXUtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlD NkE0Njg2ODAeFw0yNDA4MjgwMTU1MDFaFw0yNTA4MjcwMjAwMDFaMDMxMTAvBgNV BAMTKEU2RkJDQTMyRjMwMDdEMkMwNUIyN0JDNEU0OTdBQzc4MzZDQUUxOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc8zljUyawAP9MkLOf4SMXdlkv SLhlt8fucVAv9pr2lmKtE92HKBe9T3UqI+8Rof8j4sSyV+7oiGHXntk7AVIXmtFL KXsA0/h/ZntVQ1BN7brbrC0DFmtEDKADwcOQ8P79N3ELzHwvdGLDJ2fVWlLW/Z0i 6nIXN1fPN6m6U14EsNrfazK9Y4/k2jvEm5Cx1RbwhzJYYF6HgCynLN+TF09QENvl 3C+XnfSPZRiB7OcRtWF7y8VgEOFWJ/pGU8XHNqkGfVTxKS7rqkApr4X49FkzdQ4P OKRpUpkKMQJn6II6iOduIAT1as8KUp+We4unzXES7/hLN+weAyTXrLEvWa4lAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU5vvKMvMAfSwFsnvE5JeseDbK4YowHwYDVR0j BBgwFoAUjZVs8d9WhQyc9hc9+QFBqcakaGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMC84RDk1NkNGMURG NTY4NTBDOUNGNjE3M0RGOTAxNDFBOUM2QTQ2ODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlDNkE0 Njg2OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5NmE3NGRmLWQ5MDctNGFhZi1h ODM2LTQzZTRlMTk2ODUyNS8wLzMxMzAzMzJlMzEzNTMzMmUzOTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5lgMA0GCSqG SIb3DQEBCwUAA4IBAQCLS8OfwJkV7DTb444x3w2qH6uYhBv4CponE8qwQ2HKDvvW 5HNFR6ZmIzHjxX5JwRa3hXKkb7b/mo3Aym76SP9ETx/7kHa0jmp3ljVifD0nm+xk Pna2bflrcWv+3VU6jr5OwnZ8pHPsNelO18++7djGFAx8ppUNjw3NG4bIXkXIAme5 gxF+Wy+EDEJ7LFyo9oNbqOHl158UKa1eQjhcAXfCnqiOwBCBlY5HfzqF8LXv5k5E exQJTXBSHo/HLuoWSqwHYSjSW2DFxLCmP2g1PtaMaWzDee4fta+M8s5y7aQad0fa Q6BIPIuDwAfZqtHRYdDlPTyqfKoeqin+w7pPAULY -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org