$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313335343539.roa File: 3130332e36382e322e302f32342d3234203d3e20313335343539.roa (raw, json) Hash identifier: 4pR1RjyUB+E2Dfg74EpxCAWMbmFTThQc5UTxZQAUSdM= Subject key identifier: 3F:4C:D1:4D:F2:AF:74:E0:45:C2:D7:73:AB:EE:BA:19:99:BF:11:66 Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Certificate serial: 4A439C5927BCC7C70E5134113A3FB4801BEC33EE Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313335343539.roa Signing time: Wed 20 Nov 2024 18:00:01 +0000 ROA not before: Wed 20 Nov 2024 17:55:01 +0000 ROA not after: Wed 19 Nov 2025 18:00:01 +0000 asID: 135459 IP address blocks: 103.68.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:43:9c:59:27:bc:c7:c7:0e:51:34:11:3a:3f:b4:80:1b:ec:33:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Validity Not Before: Nov 20 17:55:01 2024 GMT Not After : Nov 19 18:00:01 2025 GMT Subject: CN=3F4CD14DF2AF74E045C2D773ABEEBA1999BF1166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d3:19:82:da:67:13:0b:92:30:77:20:e6:66: 1c:a0:2e:68:46:f6:61:59:c8:52:a9:50:3b:0b:56: 22:1b:d8:a1:f0:2d:c0:2f:01:25:29:ee:b4:b3:2e: 31:da:8d:c1:89:92:5d:7c:71:f9:63:07:a2:1a:03: f8:04:fa:03:46:79:a7:a2:e9:e6:3b:83:43:9c:c9: ea:e5:52:59:a3:eb:b5:75:86:7a:21:de:23:b7:2b: 27:3e:f6:7c:93:7d:19:e6:28:e8:d5:50:60:28:f9: 2f:9f:22:bb:41:33:bd:37:a4:c3:e7:b6:65:e7:a7: ff:e8:6f:8b:14:5f:b4:7a:12:b9:76:52:62:cb:3e: a2:d7:10:8b:76:e1:37:80:29:ae:ba:fb:49:ea:75: e9:61:97:55:63:cd:2b:f4:ca:74:a3:eb:c5:08:00: 46:41:a2:6d:fe:f7:ed:3c:82:79:61:f3:f3:d9:5e: d3:c1:cc:ec:76:1d:5e:aa:8e:97:cc:05:5a:f9:b3: 1c:70:ee:f4:01:fc:9c:35:1e:01:33:eb:b7:d9:cd: 4e:28:9d:23:dc:c0:34:92:75:60:e6:77:01:85:cf: 7e:77:dc:d9:fb:ad:e0:9b:1f:56:2a:29:e6:85:41: c0:6f:97:e1:c2:15:70:a0:88:a3:9e:2c:01:9c:4d: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4C:D1:4D:F2:AF:74:E0:45:C2:D7:73:AB:EE:BA:19:99:BF:11:66 X509v3 Authority Key Identifier: keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313335343539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.2.0/24 Signature Algorithm: sha256WithRSAEncryption af:2f:52:b3:a7:4c:71:13:e5:a9:62:ee:bb:40:e6:99:a5:0c: 24:ea:19:fc:01:b0:fd:62:d8:64:fa:d5:ba:df:de:50:db:eb: f2:68:e9:d5:29:f8:98:83:35:d4:f4:c4:a9:36:43:07:1c:f0: 57:4b:74:9f:20:01:b5:e5:e6:df:6a:9c:85:d6:a7:9a:88:0b: 72:14:85:d6:7a:8d:24:58:2d:83:26:0c:5c:b4:cc:fc:89:59: 6f:94:48:06:c5:9d:7b:2c:e6:2e:f8:f4:ca:71:9e:e1:95:c3: f8:01:36:1f:1b:9f:f4:a4:c9:29:b5:96:05:a3:9a:e2:51:aa: 93:55:b5:31:a8:c5:8f:32:d5:f8:c3:75:3a:67:f9:18:0c:74: 9d:d0:0a:0e:04:e3:f0:aa:6a:c9:5b:8b:d7:fe:60:bf:22:9f: 50:69:2c:d5:a0:95:fe:eb:0e:05:a9:91:6c:8f:f1:70:6e:db: 03:30:03:97:8d:cf:f9:f4:51:aa:2e:9e:08:71:15:10:b8:01: b8:d3:58:32:47:96:2f:a1:0b:80:72:33:18:87:d9:03:39:ad: 0d:b7:6d:92:52:33:98:3a:f3:c2:b5:e0:aa:b5:2b:2f:1b:52: c8:16:2b:37:f2:c9:b3:58:fc:6e:e3:14:33:7f:d7:06:85:fb: ac:55:73:fe -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUSkOcWSe8x8cOUTQROj+0gBvsM+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw RTMxMDQ0ODAeFw0yNDExMjAxNzU1MDFaFw0yNTExMTkxODAwMDFaMDMxMTAvBgNV BAMTKDNGNENEMTRERjJBRjc0RTA0NUMyRDc3M0FCRUVCQTE5OTlCRjExNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs0xmC2mcTC5IwdyDmZhygLmhG 9mFZyFKpUDsLViIb2KHwLcAvASUp7rSzLjHajcGJkl18cfljB6IaA/gE+gNGeaei 6eY7g0OcyerlUlmj67V1hnoh3iO3Kyc+9nyTfRnmKOjVUGAo+S+fIrtBM703pMPn tmXnp//ob4sUX7R6Erl2UmLLPqLXEIt24TeAKa66+0nqdelhl1VjzSv0ynSj68UI AEZBom3+9+08gnlh8/PZXtPBzOx2HV6qjpfMBVr5sxxw7vQB/Jw1HgEz67fZzU4o nSPcwDSSdWDmdwGFz3533Nn7reCbH1YqKeaFQcBvl+HCFXCgiKOeLAGcTR/NAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUP0zRTfKvdOBFwtdzq+66GZm/EWYwHwYDVR0j BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx MDQ0OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlOTdkYmM2LTkzNzQtNDJlMi1h M2QwLTg3OWVkNmExOTE5Ni8wLzMxMzAzMzJlMzYzODJlMzIyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTMzMzUzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnRAIwDQYJKoZIhvcN AQELBQADggEBAK8vUrOnTHET5ali7rtA5pmlDCTqGfwBsP1i2GT61brf3lDb6/Jo 6dUp+JiDNdT0xKk2Qwcc8FdLdJ8gAbXl5t9qnIXWp5qIC3IUhdZ6jSRYLYMmDFy0 zPyJWW+USAbFnXss5i749MpxnuGVw/gBNh8bn/SkySm1lgWjmuJRqpNVtTGoxY8y 1fjDdTpn+RgMdJ3QCg4E4/Cqaslbi9f+YL8in1BpLNWglf7rDgWpkWyP8XBu2wMw A5eNz/n0UaounghxFRC4AbjTWDJHli+hC4ByMxiH2QM5rQ23bZJSM5g688K14Kq1 Ky8bUsgWKzfyybNY/G7jFDN/1waF+6xVc/4= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org