$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa File: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (raw, json) Hash identifier: STe7OT88PHJHnz531m1I5MVHYJjriMNPu+KdDXd+zTA= Subject key identifier: 42:69:1A:C0:52:A9:F9:70:40:A7:4F:56:91:71:86:3C:55:9C:E4:AA Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 209439A4C280ECFE3C0DB185F08AC3E167274614 Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa Signing time: Thu 02 May 2024 01:00:00 +0000 ROA not before: Thu 02 May 2024 00:55:00 +0000 ROA not after: Thu 01 May 2025 01:00:00 +0000 asID: 138090 IP address blocks: 103.124.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:94:39:a4:c2:80:ec:fe:3c:0d:b1:85:f0:8a:c3:e1:67:27:46:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: May 2 00:55:00 2024 GMT Not After : May 1 01:00:00 2025 GMT Subject: CN=42691AC052A9F97040A74F569171863C559CE4AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:03:df:50:30:7b:2f:d4:ea:4c:8f:6a:49: 9a:42:f7:2b:a1:40:6d:fc:36:5f:a1:ef:a4:7b:02: f2:43:f8:79:16:62:49:43:31:83:78:ab:84:7b:11: 03:42:c0:dc:36:c6:6c:f2:11:65:32:f7:3d:53:0b: 39:09:81:19:4b:ba:22:ee:9c:d3:69:36:db:46:f3: 69:c3:a8:d2:b7:14:48:57:4c:fb:20:32:9d:fa:93: d7:94:65:5d:ad:04:9f:d0:00:25:65:6c:e7:88:35: 5a:bf:df:95:9f:35:f3:1b:e8:72:85:45:51:19:42: 84:23:ac:ab:61:1a:76:0a:f9:89:3d:bb:b0:44:51: 96:53:05:95:d5:0f:43:a6:9e:77:11:b5:28:f8:a9: 59:89:e4:a2:a1:5a:a3:89:c4:9b:78:db:31:8f:75: 68:13:fb:fa:ea:19:57:57:98:88:ae:24:82:a6:0a: 00:26:0a:1f:ee:e8:c5:33:4c:7a:c2:35:0b:6b:c4: e2:49:f1:e2:b8:15:54:99:0e:fc:56:1d:7a:b3:0c: 3f:05:d9:ee:16:be:bf:db:b1:f3:b5:15:cd:3a:4e: 36:4d:00:31:59:db:cf:b5:4b:94:ba:59:0e:f9:21: c7:d2:ef:5c:5c:a6:04:05:d9:9a:d6:52:c6:a7:fa: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:69:1A:C0:52:A9:F9:70:40:A7:4F:56:91:71:86:3C:55:9C:E4:AA X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.245.0/24 Signature Algorithm: sha256WithRSAEncryption 91:37:29:91:e5:11:46:cb:f7:61:6b:a5:45:b5:e3:d3:d2:15: 9c:c6:86:0d:90:46:16:86:cf:36:fc:b3:85:02:e6:5e:51:50: 52:c1:6d:69:8e:d8:4e:70:68:b7:65:a6:cd:09:6c:dd:56:72: d2:12:ab:6b:c4:f4:08:f8:ce:7e:ef:e8:7d:fa:48:90:17:20: b8:36:98:00:be:9a:66:a6:0f:22:ff:9c:f6:7b:e9:af:c5:33: a9:e9:94:3b:06:77:c6:05:8b:ec:9b:5f:ad:a5:e3:99:b9:55: 63:e5:f6:24:a2:0e:9b:23:6f:dc:ac:34:60:62:74:cd:15:df: 39:14:71:70:ca:bf:3d:6b:02:8a:2d:56:a6:10:0f:f5:da:90: b7:d6:24:1f:dd:3b:be:23:2a:4c:b6:2c:2f:e2:99:de:4d:8a: 72:e5:0d:8f:27:54:5c:25:68:ec:d0:11:b4:12:3c:67:ab:a5: 6b:63:77:35:27:9a:3b:ae:0b:dd:ed:59:96:53:f3:ad:9a:45: dc:27:9a:9f:89:1c:21:2c:4e:af:4c:39:7d:5c:0e:ba:57:c4: 8c:da:f1:17:4c:79:62:cc:9c:3e:42:c9:22:6a:83:d5:11:5c: b0:fa:b1:78:18:ff:da:23:60:72:9c:bc:7f:a0:2c:47:8b:9a: c2:8a:7e:c7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIJQ5pMKA7P48DbGF8IrD4WcnRhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNDA1MDIwMDU1MDBaFw0yNTA1MDEwMTAwMDBaMDMxMTAvBgNV BAMTKDQyNjkxQUMwNTJBOUY5NzA0MEE3NEY1NjkxNzE4NjNDNTU5Q0U0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAQPfUDB7L9TqTI9qSZpC9yuh QG38Nl+h76R7AvJD+HkWYklDMYN4q4R7EQNCwNw2xmzyEWUy9z1TCzkJgRlLuiLu nNNpNttG82nDqNK3FEhXTPsgMp36k9eUZV2tBJ/QACVlbOeINVq/35WfNfMb6HKF RVEZQoQjrKthGnYK+Yk9u7BEUZZTBZXVD0OmnncRtSj4qVmJ5KKhWqOJxJt42zGP dWgT+/rqGVdXmIiuJIKmCgAmCh/u6MUzTHrCNQtrxOJJ8eK4FVSZDvxWHXqzDD8F 2e4Wvr/bsfO1Fc06TjZNADFZ28+1S5S6WQ75IcfS71xcpgQF2ZrWUsan+nO1AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUQmkawFKp+XBAp09WkXGGPFWc5KowHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlMmM5Mjg1LWMwOWEtNDUwNi1h MzIwLWZkYTFhMDdmZDllYy8wLzMxMzAzMzJlMzEzMjM0MmUzMjM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM5MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfPUwDQYJ KoZIhvcNAQELBQADggEBAJE3KZHlEUbL92FrpUW149PSFZzGhg2QRhaGzzb8s4UC 5l5RUFLBbWmO2E5waLdlps0JbN1WctISq2vE9Aj4zn7v6H36SJAXILg2mAC+mmam DyL/nPZ76a/FM6nplDsGd8YFi+ybX62l45m5VWPl9iSiDpsjb9ysNGBidM0V3zkU cXDKvz1rAootVqYQD/XakLfWJB/dO74jKky2LC/imd5NinLlDY8nVFwlaOzQEbQS PGerpWtjdzUnmjuuC93tWZZT862aRdwnmp+JHCEsTq9MOX1cDrpXxIza8RdMeWLM nD5CySJqg9URXLD6sXgY/9ojYHKcvH+gLEeLmsKKfsc= -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org