$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa File: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (raw, json) Hash identifier: heHR6tDdyfcDcl0ayUlIY67JEF5cb4FokE1+/fGTE2c= Subject key identifier: D6:6F:EF:70:EB:AB:28:B3:89:2A:0F:5E:34:0D:A9:AD:59:78:31:94 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 4DDAD41892AE4EF61757EE6B2844CAD37BB45332 Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa Signing time: Wed 14 Aug 2024 10:00:00 +0000 ROA not before: Wed 14 Aug 2024 09:55:00 +0000 ROA not after: Wed 13 Aug 2025 10:00:00 +0000 asID: 59279 IP address blocks: 103.227.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 12:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:da:d4:18:92:ae:4e:f6:17:57:ee:6b:28:44:ca:d3:7b:b4:53:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Aug 14 09:55:00 2024 GMT Not After : Aug 13 10:00:00 2025 GMT Subject: CN=D66FEF70EBAB28B3892A0F5E340DA9AD59783194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:f8:79:31:94:73:6a:55:4a:91:f7:8a:8e: 9e:c2:ad:23:25:1d:ce:d1:39:ea:3b:87:e7:c3:00: 08:20:46:b8:b7:88:c5:bd:fd:16:a0:ca:e4:93:5d: de:ec:4e:92:9b:11:25:4e:6c:85:05:5e:f3:f4:bd: 0e:51:00:8c:66:49:80:7b:05:ec:e9:27:6e:98:69: 60:1e:cc:dd:dc:66:7d:41:96:b5:4d:36:5d:51:0f: a0:b3:ab:8f:59:ea:a3:bd:d4:76:88:67:49:d4:2a: 58:54:bf:51:04:5d:76:7e:bc:9b:ca:c0:a3:94:b2: 4b:39:95:1f:97:c6:ef:12:19:8b:87:8a:96:55:d2: ff:7a:a5:a1:93:e5:76:c5:53:21:ad:0d:cf:72:7e: d2:e9:d2:f2:84:ff:d0:af:78:d3:9d:99:6b:51:9c: 92:91:0d:66:8e:d3:4d:84:34:ac:09:fa:db:12:7e: 30:a9:ab:46:d9:a4:f4:02:80:d3:86:11:95:f9:09: f6:e6:30:97:b2:bb:6c:6b:1b:e1:67:6b:80:6f:64: c9:1e:02:a0:1c:e7:d6:eb:f2:8f:dd:6a:05:fe:82: 61:86:30:b5:e5:3d:f9:33:8d:81:24:81:6f:cf:fe: c2:9f:51:3c:4b:ce:16:a7:53:e6:26:be:77:99:6f: 35:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6F:EF:70:EB:AB:28:B3:89:2A:0F:5E:34:0D:A9:AD:59:78:31:94 X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.252.0/24 Signature Algorithm: sha256WithRSAEncryption 40:d0:2b:38:49:5b:09:4c:73:0c:f7:83:5d:a1:4b:c0:c9:86: bb:55:82:15:5d:37:9a:66:6f:a0:0e:35:11:10:90:f8:cf:4f: ec:25:6c:a9:5b:5f:4c:00:67:7a:dc:19:39:c1:2c:eb:4b:9d: 46:ef:d9:1e:b6:97:ff:86:e9:e0:46:32:0f:eb:ed:ac:73:37: 51:2c:cb:d9:bd:b7:54:6f:64:c9:1e:f3:5b:14:95:66:97:55: 68:4b:94:fe:16:f0:22:4d:e4:b4:73:ca:f6:83:f6:94:19:30: f7:62:08:91:26:1c:4c:9b:c5:89:40:a5:12:a5:ba:2a:42:00: 2d:78:c3:59:48:46:3f:4e:0b:8a:1c:9f:55:86:4c:42:89:6f: bf:8f:d1:d4:cd:7c:8e:3f:f7:1d:dc:8a:82:bd:cc:70:b2:bf: c1:dd:06:2a:e8:66:cf:a2:f8:2e:21:a0:e1:ae:35:92:18:12: 18:15:3c:cb:8d:a0:e1:c2:02:ef:ff:b9:0a:a8:1e:17:fb:e2: 1c:f8:92:c7:5b:0c:a5:e3:7f:90:2f:32:e4:5c:6b:52:ec:75: fd:25:a9:fb:cc:7b:70:17:03:45:8f:48:70:70:1b:30:64:c1: e9:bc:11:51:56:aa:d5:d5:15:bc:b7:11:98:7d:88:72:ed:50: 02:2e:45:62 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTdrUGJKuTvYXV+5rKETK03u0UzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNDA4MTQwOTU1MDBaFw0yNTA4MTMxMDAwMDBaMDMxMTAvBgNV BAMTKEQ2NkZFRjcwRUJBQjI4QjM4OTJBMEY1RTM0MERBOUFENTk3ODMxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4vh5MZRzalVKkfeKjp7CrSMl Hc7ROeo7h+fDAAggRri3iMW9/RagyuSTXd7sTpKbESVObIUFXvP0vQ5RAIxmSYB7 BezpJ26YaWAezN3cZn1BlrVNNl1RD6Czq49Z6qO91HaIZ0nUKlhUv1EEXXZ+vJvK wKOUsks5lR+Xxu8SGYuHipZV0v96paGT5XbFUyGtDc9yftLp0vKE/9CveNOdmWtR nJKRDWaO002ENKwJ+tsSfjCpq0bZpPQCgNOGEZX5CfbmMJeyu2xrG+Fna4BvZMke AqAc59br8o/dagX+gmGGMLXlPfkzjYEkgW/P/sKfUTxLzhanU+YmvneZbzVFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1m/vcOurKLOJKg9eNA2prVl4MZQwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlZmZmYzJkLWNjYTctNDhlNi05 Y2Q2LTU2NWMxMWM0NTQ0MC8wLzMxMzAzMzJlMzIzMjM3MmUzMjM1MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+P8MA0GCSqG SIb3DQEBCwUAA4IBAQBA0Cs4SVsJTHMM94NdoUvAyYa7VYIVXTeaZm+gDjUREJD4 z0/sJWypW19MAGd63Bk5wSzrS51G79ketpf/hungRjIP6+2sczdRLMvZvbdUb2TJ HvNbFJVml1VoS5T+FvAiTeS0c8r2g/aUGTD3YgiRJhxMm8WJQKUSpboqQgAteMNZ SEY/TguKHJ9VhkxCiW+/j9HUzXyOP/cd3IqCvcxwsr/B3QYq6GbPovguIaDhrjWS GBIYFTzLjaDhwgLv/7kKqB4X++Ic+JLHWwyl43+QLzLkXGtS7HX9Jan7zHtwFwNF j0hwcBswZMHpvBFRVqrV1RW8txGYfYhy7VACLkVi -----END CERTIFICATE-----Generated at Mon Nov 25 07:18:15 2024 by rpki-client on console-ams.rpki-client.org