$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e312e302f32342d3234203d3e20313335343539.roa File: 3130332e36382e312e302f32342d3234203d3e20313335343539.roa (raw, json) Hash identifier: ySL0w18ZFEonAAh3PhTuUdA6gYBAA6WRoBXrmZ+L+Js= Subject key identifier: CB:3F:D4:43:85:0D:20:A9:BD:E4:72:CE:21:DF:90:7E:FC:34:3B:CA Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Certificate serial: 2594D508E375769E8A12FDF7AC693384E87C4C47 Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e312e302f32342d3234203d3e20313335343539.roa Signing time: Wed 20 Nov 2024 18:00:01 +0000 ROA not before: Wed 20 Nov 2024 17:55:01 +0000 ROA not after: Wed 19 Nov 2025 18:00:01 +0000 asID: 135459 IP address blocks: 103.68.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:94:d5:08:e3:75:76:9e:8a:12:fd:f7:ac:69:33:84:e8:7c:4c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Validity Not Before: Nov 20 17:55:01 2024 GMT Not After : Nov 19 18:00:01 2025 GMT Subject: CN=CB3FD443850D20A9BDE472CE21DF907EFC343BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:37:15:4a:6b:5e:32:f3:26:8c:38:35:ef: a8:97:a3:45:d6:d6:8f:1e:35:1f:dc:43:71:36:ac: c6:17:14:b4:d6:8d:0d:7e:0b:26:f5:27:46:b1:af: 66:79:f4:fd:b1:ff:9c:4f:80:d5:36:c2:90:03:5d: ef:77:00:7c:c1:f3:2c:b8:1f:e4:f8:21:c7:d5:d8: b2:bf:4d:23:2e:0a:f3:5b:ec:52:69:19:57:19:fb: f6:67:bd:60:c3:cf:29:c5:ed:f2:2f:8d:71:e1:bf: 79:b8:71:37:d3:06:11:6b:fc:fa:73:51:32:fd:96: a8:63:ee:bc:be:b6:7d:42:43:5d:f0:a8:53:3c:a0: 82:f4:ba:f7:4f:7d:de:7c:99:27:22:0a:90:30:b4: 2d:cb:c5:c9:1f:a3:03:00:00:68:83:91:d2:0a:40: 70:6d:11:58:13:7a:05:7c:56:81:60:05:00:09:64: 5b:06:4c:80:c8:a6:2a:92:ad:a5:89:40:8e:b7:e5: 86:50:14:59:1e:3f:d9:79:ac:d5:a3:92:05:bb:98: 39:03:ca:57:0e:ea:2f:4d:a8:f6:29:3f:e0:81:fd: 53:a4:1d:30:12:66:39:19:a6:79:83:4d:fd:bf:2f: 38:13:5a:76:43:a2:64:b5:72:1b:76:58:a5:c3:85: 93:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3F:D4:43:85:0D:20:A9:BD:E4:72:CE:21:DF:90:7E:FC:34:3B:CA X509v3 Authority Key Identifier: keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e312e302f32342d3234203d3e20313335343539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:81:ac:02:e3:f4:3d:3b:5c:11:05:06:e4:37:1e:b4:ef:9a: df:9d:d2:de:0f:86:df:9d:fd:29:d9:d2:44:7b:17:b6:ed:6d: ca:d2:cc:40:d6:23:d4:98:ca:ff:bb:6f:c3:02:bc:10:5f:23: e9:43:cd:a1:c4:12:89:d3:f5:f7:21:16:fb:c9:bb:f6:5f:e6: f1:29:58:7d:33:38:fd:6c:7b:87:32:73:f3:2b:9a:41:aa:86: f7:4d:63:fe:9d:e7:0e:8e:c2:62:54:f3:28:48:30:40:fe:58: bc:65:fc:75:67:c2:a8:3b:ec:53:84:ae:ef:17:fa:ba:59:67: 41:87:74:1c:28:97:09:51:b5:b5:0c:ca:78:7c:37:d6:06:2e: fb:5d:1e:f5:99:33:78:d3:a8:21:d8:97:d6:e4:94:47:09:7c: 14:2c:0d:80:23:17:3c:eb:a5:8a:2a:9c:26:d3:e7:29:ee:e3: b4:3a:44:c8:10:11:a5:3f:7d:1f:d7:fb:a8:ea:8c:ed:23:2f: 22:cb:c2:6f:6d:ad:61:6d:42:49:7a:3b:f2:9e:ea:73:bc:21: 67:9e:3a:d5:d9:51:5a:a7:34:a1:e2:8d:d5:75:ce:3a:ad:64: b6:78:e4:c8:65:cd:73:a0:c9:27:1d:a2:63:27:5c:d2:9e:32: 7b:d7:7f:0d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUJZTVCON1dp6KEv33rGkzhOh8TEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw RTMxMDQ0ODAeFw0yNDExMjAxNzU1MDFaFw0yNTExMTkxODAwMDFaMDMxMTAvBgNV BAMTKENCM0ZENDQzODUwRDIwQTlCREU0NzJDRTIxREY5MDdFRkMzNDNCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLTcVSmteMvMmjDg176iXo0XW 1o8eNR/cQ3E2rMYXFLTWjQ1+Cyb1J0axr2Z59P2x/5xPgNU2wpADXe93AHzB8yy4 H+T4IcfV2LK/TSMuCvNb7FJpGVcZ+/ZnvWDDzynF7fIvjXHhv3m4cTfTBhFr/Ppz UTL9lqhj7ry+tn1CQ13wqFM8oIL0uvdPfd58mSciCpAwtC3LxckfowMAAGiDkdIK QHBtEVgTegV8VoFgBQAJZFsGTIDIpiqSraWJQI635YZQFFkeP9l5rNWjkgW7mDkD ylcO6i9NqPYpP+CB/VOkHTASZjkZpnmDTf2/LzgTWnZDomS1cht2WKXDhZNfAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUyz/UQ4UNIKm95HLOId+Qfvw0O8owHwYDVR0j BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx MDQ0OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlOTdkYmM2LTkzNzQtNDJlMi1h M2QwLTg3OWVkNmExOTE5Ni8wLzMxMzAzMzJlMzYzODJlMzEyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTMzMzUzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnRAEwDQYJKoZIhvcN AQELBQADggEBADyBrALj9D07XBEFBuQ3HrTvmt+d0t4Pht+d/SnZ0kR7F7btbcrS zEDWI9SYyv+7b8MCvBBfI+lDzaHEEonT9fchFvvJu/Zf5vEpWH0zOP1se4cyc/Mr mkGqhvdNY/6d5w6OwmJU8yhIMED+WLxl/HVnwqg77FOEru8X+rpZZ0GHdBwolwlR tbUMynh8N9YGLvtdHvWZM3jTqCHYl9bklEcJfBQsDYAjFzzrpYoqnCbT5ynu47Q6 RMgQEaU/fR/X+6jqjO0jLyLLwm9trWFtQkl6O/Ke6nO8IWeeOtXZUVqnNKHijdV1 zjqtZLZ45MhlzXOgyScdomMnXNKeMnvXfw0= -----END CERTIFICATE-----Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org