$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa File: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (raw, json) Hash identifier: N2GLQMMA/qT2QiLPtJRjOfYhs4Npr6h5DA+qLf5C1dI= Subject key identifier: 81:24:2D:8C:24:CF:BF:D9:4E:44:B7:84:E7:67:CC:F9:F4:D2:D5:37 Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 7FBE8D87C025A926107F2E573F3D53D19EDEB67A Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa Signing time: Mon 01 Jul 2024 01:03:15 +0000 ROA not before: Mon 01 Jul 2024 00:58:15 +0000 ROA not after: Mon 30 Jun 2025 01:03:15 +0000 asID: 38515 IP address blocks: 103.107.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:be:8d:87:c0:25:a9:26:10:7f:2e:57:3f:3d:53:d1:9e:de:b6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: Jul 1 00:58:15 2024 GMT Not After : Jun 30 01:03:15 2025 GMT Subject: CN=81242D8C24CFBFD94E44B784E767CCF9F4D2D537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:60:75:44:08:6c:88:e2:f0:b3:d8:65:ce: 08:15:ce:a1:a6:ca:42:11:fa:c8:8d:e8:eb:5c:01: cc:74:33:89:6b:a7:55:21:50:85:86:ff:98:b0:98: 1f:17:3c:6d:15:f1:67:7b:68:c6:9d:04:2f:5e:e4: 9f:92:10:bc:43:a7:b8:17:a4:fc:da:30:3c:97:eb: 5f:d8:c3:72:b7:24:e6:cd:d0:9d:38:f0:0d:cf:9c: 43:02:64:71:cf:18:a6:2e:02:3d:49:44:fc:e8:79: 25:bd:de:b2:5d:eb:79:ea:19:a5:99:01:a8:08:a3: d4:ae:a0:d5:89:57:ff:f4:7b:d7:27:1b:10:fa:a1: 06:3f:a8:01:8d:67:72:bc:16:aa:2e:21:0f:f2:66: 75:8f:a0:ef:c8:94:33:ed:42:46:9e:41:88:e9:95: a5:66:f0:25:49:81:95:70:a8:02:51:43:89:9b:13: 0e:fe:5d:d0:72:4d:0f:62:0e:69:1f:a1:78:7b:ca: 6f:6d:0e:03:f3:6e:8e:ee:84:ad:2e:0d:45:36:60: e9:e1:7b:38:a4:f5:cd:91:ff:01:04:aa:cd:1b:01: 4b:43:9c:00:ad:26:e3:3a:d0:60:5b:5c:5b:96:5a: 21:83:ea:8f:4b:97:e4:fa:93:68:46:95:2a:72:b0: 45:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:24:2D:8C:24:CF:BF:D9:4E:44:B7:84:E7:67:CC:F9:F4:D2:D5:37 X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.249.0/24 Signature Algorithm: sha256WithRSAEncryption 29:f4:9b:66:b6:9b:4e:c5:37:cd:44:c4:70:e6:cb:d7:79:fc: 76:47:fb:77:a5:b9:a4:dc:73:e6:c9:ba:59:34:2a:2a:11:bd: 84:73:7f:3b:96:bd:20:c4:8f:96:de:27:48:d1:d8:e9:9f:e1: 9d:cc:18:26:a3:21:da:c1:7d:4f:0f:ee:e9:ee:49:9a:d5:6e: 4a:bf:e3:7a:d2:f3:0a:ef:03:5c:90:53:bd:e0:c3:5e:dd:af: 54:56:d4:72:59:7b:ac:a7:ac:ea:9d:c8:8a:5a:96:1d:29:f8: 5c:c6:b9:e4:23:74:de:b1:40:75:86:92:f0:11:24:87:cf:cc: 9f:c0:13:d5:ed:b4:49:18:7f:aa:84:ff:a8:97:8e:27:c7:b4: 2f:47:f0:3b:12:75:94:5a:39:c8:ee:07:8e:64:ba:81:cc:86: 8b:05:28:cd:02:8d:f3:07:37:01:b2:18:d4:31:26:dc:af:d2: b0:1b:ac:8f:38:f8:0a:cc:6e:e1:86:58:bc:a9:0e:55:65:21: 9d:8a:05:4e:63:fe:d3:de:63:8a:7e:43:f6:f2:fe:4e:7d:90: 05:0c:1a:42:8c:c6:ec:0c:44:a7:88:63:cc:f5:13:1a:c9:85: 2d:cc:eb:05:b4:ce:8f:1f:48:96:db:cc:e1:dc:7d:a6:f3:69: 69:44:29:45 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUf76Nh8AlqSYQfy5XPz1T0Z7etnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yNDA3MDEwMDU4MTVaFw0yNTA2MzAwMTAzMTVaMDMxMTAvBgNV BAMTKDgxMjQyRDhDMjRDRkJGRDk0RTQ0Qjc4NEU3NjdDQ0Y5RjREMkQ1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/WB1RAhsiOLws9hlzggVzqGm ykIR+siN6OtcAcx0M4lrp1UhUIWG/5iwmB8XPG0V8Wd7aMadBC9e5J+SELxDp7gX pPzaMDyX61/Yw3K3JObN0J048A3PnEMCZHHPGKYuAj1JRPzoeSW93rJd63nqGaWZ AagIo9SuoNWJV//0e9cnGxD6oQY/qAGNZ3K8FqouIQ/yZnWPoO/IlDPtQkaeQYjp laVm8CVJgZVwqAJRQ4mbEw7+XdByTQ9iDmkfoXh7ym9tDgPzbo7uhK0uDUU2YOnh ezik9c2R/wEEqs0bAUtDnACtJuM60GBbXFuWWiGD6o9Ll+T6k2hGlSpysEW1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgSQtjCTPv9lORLeE52fM+fTS1TcwHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzAzMzJlMzEzMDM3MmUzMjM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2v5MA0GCSqG SIb3DQEBCwUAA4IBAQAp9JtmtptOxTfNRMRw5svXefx2R/t3pbmk3HPmybpZNCoq Eb2Ec387lr0gxI+W3idI0djpn+GdzBgmoyHawX1PD+7p7kma1W5Kv+N60vMK7wNc kFO94MNe3a9UVtRyWXusp6zqnciKWpYdKfhcxrnkI3TesUB1hpLwESSHz8yfwBPV 7bRJGH+qhP+ol44nx7QvR/A7EnWUWjnI7geOZLqBzIaLBSjNAo3zBzcBshjUMSbc r9KwG6yPOPgKzG7hhli8qQ5VZSGdigVOY/7T3mOKfkP28v5OfZAFDBpCjMbsDESn iGPM9RMayYUtzOsFtM6PH0iW28zh3H2m82lpRClF -----END CERTIFICATE-----Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org