$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa File: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (raw, json) Hash identifier: uKza+NILBuHQRPIg5LCtzuv9seKbjSu4TPPeAiNkPk4= Subject key identifier: FA:77:52:9D:05:5F:0B:CB:52:74:0C:12:3F:0B:27:E8:C4:2D:D3:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 17CE9DA46A874F52641F8C893A4BBDDEBC2F1F04 Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa Signing time: Wed 14 Aug 2024 10:00:00 +0000 ROA not before: Wed 14 Aug 2024 09:55:00 +0000 ROA not after: Wed 13 Aug 2025 10:00:00 +0000 asID: 59279 IP address blocks: 103.227.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 12:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ce:9d:a4:6a:87:4f:52:64:1f:8c:89:3a:4b:bd:de:bc:2f:1f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Aug 14 09:55:00 2024 GMT Not After : Aug 13 10:00:00 2025 GMT Subject: CN=FA77529D055F0BCB52740C123F0B27E8C42DD383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:d1:61:22:2f:d7:9f:af:bd:a9:9d:a5:e2: 87:b1:a6:e4:57:47:db:d9:53:66:b4:b1:8e:7b:2d: 9e:b4:b3:1f:16:cf:64:58:53:ef:e6:3f:8e:cb:6d: 0f:39:24:d9:8f:ec:a3:2d:2b:7a:4a:b4:3b:97:21: 91:80:4c:96:75:75:8d:b1:fa:14:07:7c:e9:00:5b: ee:41:e6:c4:02:8e:01:b1:cb:ab:b1:b5:a4:8e:3b: ad:8f:b9:ce:71:5f:5a:12:26:92:4a:11:af:ea:e8: f1:a1:04:65:20:c2:a3:63:22:62:ef:55:9e:c7:9c: 2f:db:94:25:67:13:0d:ed:8a:20:25:c2:99:4e:18: 2f:14:6b:2c:bd:e2:8f:45:fb:b5:c6:af:e2:95:77: 10:ce:28:d3:a0:5b:c5:37:c5:fc:0e:a1:93:15:9a: dd:d1:bc:e5:92:52:d9:bf:9c:47:0e:d1:b2:55:5c: 01:52:f6:fd:15:ff:99:48:73:fa:1e:e4:bf:38:99: 7a:da:82:62:c2:de:f8:ce:b2:2e:98:48:d2:3a:be: dd:4f:96:6f:ea:a4:44:e9:c0:99:8c:32:16:f8:16: 9d:10:0a:1a:44:80:dc:4a:2d:ab:71:29:96:0b:10: 65:91:1e:93:1e:28:de:ba:29:f1:da:6e:b1:fa:16: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:77:52:9D:05:5F:0B:CB:52:74:0C:12:3F:0B:27:E8:C4:2D:D3:83 X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.255.0/24 Signature Algorithm: sha256WithRSAEncryption be:8a:b1:df:4e:3c:6e:cb:dd:88:53:f0:e7:1e:4b:02:3d:46: c3:28:1d:63:21:b2:12:d1:49:32:fd:e9:7a:d0:fe:9a:29:5a: f6:68:a2:85:19:b3:41:6e:f4:55:af:1c:b7:62:38:c3:30:95: 61:c0:f8:d5:03:51:58:ce:a2:64:dd:4b:c5:52:fe:8b:1e:3d: 4b:f0:ff:a3:b8:71:87:62:c7:3f:be:e8:e2:97:ef:d4:17:03: 2d:80:64:64:2f:70:fd:dc:40:a3:b5:72:79:5d:b0:e1:bc:75: 72:b3:8a:79:4d:7e:80:b3:0c:b1:12:d8:7c:c2:26:57:8d:12: 32:f5:99:67:33:e0:df:8a:90:1f:a2:a4:e9:59:97:e6:1c:32: 15:00:52:32:c1:32:ad:15:14:29:72:a5:d9:9e:0d:79:0e:fe: 85:26:5f:2f:b1:1e:f9:61:9b:c0:90:e4:87:cf:bc:52:e7:6b: 04:aa:7c:57:ab:d8:ff:ab:58:86:30:f5:ad:ac:7b:9f:d5:d1: 27:01:3e:be:86:6b:f0:29:fe:9a:4d:19:6b:bc:43:4e:dd:10: a0:b1:88:3d:a8:2c:3e:e2:8a:98:04:f5:7c:ba:2b:f2:ea:0d: 96:bf:a6:6e:04:14:57:e4:82:40:51:08:ba:9a:19:bb:b3:09: 93:ee:6e:fc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUF86dpGqHT1JkH4yJOku93rwvHwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNDA4MTQwOTU1MDBaFw0yNTA4MTMxMDAwMDBaMDMxMTAvBgNV BAMTKEZBNzc1MjlEMDU1RjBCQ0I1Mjc0MEMxMjNGMEIyN0U4QzQyREQzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1dFhIi/Xn6+9qZ2l4oexpuRX R9vZU2a0sY57LZ60sx8Wz2RYU+/mP47LbQ85JNmP7KMtK3pKtDuXIZGATJZ1dY2x +hQHfOkAW+5B5sQCjgGxy6uxtaSOO62Puc5xX1oSJpJKEa/q6PGhBGUgwqNjImLv VZ7HnC/blCVnEw3tiiAlwplOGC8Uayy94o9F+7XGr+KVdxDOKNOgW8U3xfwOoZMV mt3RvOWSUtm/nEcO0bJVXAFS9v0V/5lIc/oe5L84mXragmLC3vjOsi6YSNI6vt1P lm/qpETpwJmMMhb4Fp0QChpEgNxKLatxKZYLEGWRHpMeKN66KfHabrH6FjhtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+ndSnQVfC8tSdAwSPwsn6MQt04MwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlZmZmYzJkLWNjYTctNDhlNi05 Y2Q2LTU2NWMxMWM0NTQ0MC8wLzMxMzAzMzJlMzIzMjM3MmUzMjM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+P/MA0GCSqG SIb3DQEBCwUAA4IBAQC+irHfTjxuy92IU/DnHksCPUbDKB1jIbIS0Uky/el60P6a KVr2aKKFGbNBbvRVrxy3YjjDMJVhwPjVA1FYzqJk3UvFUv6LHj1L8P+juHGHYsc/ vujil+/UFwMtgGRkL3D93ECjtXJ5XbDhvHVys4p5TX6AswyxEth8wiZXjRIy9Zln M+DfipAfoqTpWZfmHDIVAFIywTKtFRQpcqXZng15Dv6FJl8vsR75YZvAkOSHz7xS 52sEqnxXq9j/q1iGMPWtrHuf1dEnAT6+hmvwKf6aTRlrvENO3RCgsYg9qCw+4oqY BPV8uivy6g2Wv6ZuBBRX5IJAUQi6mhm7swmT7m78 -----END CERTIFICATE-----Generated at Mon Nov 25 07:18:15 2024 by rpki-client on console-ams.rpki-client.org