$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa File: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (raw, json) Hash identifier: MogNaCj5sk3XJEpkfUEURE+ZZFPXBmpIW01mKoDb4Uw= Subject key identifier: DF:15:94:EA:53:19:10:C3:C7:7B:0C:71:29:19:C5:8F:2E:34:39:15 Certificate issuer: /CN=C740DD931883C284135261B25A6958E80CDF63D2 Certificate serial: 35001E0FF52FB85E7585C0148312D20E272000F5 Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa Signing time: Mon 09 Sep 2024 04:00:00 +0000 ROA not before: Mon 09 Sep 2024 03:55:00 +0000 ROA not after: Mon 08 Sep 2025 04:00:00 +0000 asID: 135636 IP address blocks: 103.139.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:00:1e:0f:f5:2f:b8:5e:75:85:c0:14:83:12:d2:0e:27:20:00:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2 Validity Not Before: Sep 9 03:55:00 2024 GMT Not After : Sep 8 04:00:00 2025 GMT Subject: CN=DF1594EA531910C3C77B0C712919C58F2E343915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6c:26:7c:61:3a:40:ec:a2:ae:09:e7:3c:97: 7f:8e:6b:3f:3a:4c:d2:18:62:b5:6f:78:3b:7c:32: 5c:59:0c:05:2d:9b:89:78:99:48:88:b8:ce:7a:27: 18:da:c7:5a:fd:cd:f0:1d:a4:ce:b3:c9:2e:b3:99: b5:f1:7a:5f:b3:3f:2e:e8:42:14:52:26:12:ab:07: e3:18:02:b4:a4:12:3f:43:dd:75:a1:0a:01:86:24: d9:a4:e3:05:c2:d7:85:c4:37:6d:2b:ae:c4:64:50: 6f:65:3c:2a:10:5e:0b:88:dc:3a:65:d7:d8:ac:fb: 29:98:8a:d0:2b:06:db:97:6f:3c:32:a8:ce:80:81: 93:ec:57:4b:0f:8f:cf:a3:41:bd:3c:c5:b7:d7:f1: ed:02:1f:fb:00:2a:da:8b:61:55:f7:1d:55:09:a9: 43:88:0d:03:50:ac:71:02:6e:dc:1c:d3:c4:f9:6e: 89:dc:9d:a5:04:11:cb:da:2f:35:49:79:41:70:bb: 32:30:81:37:a4:e4:80:8d:43:54:43:b2:a0:52:0f: be:fa:b3:8c:9c:99:3c:4d:74:41:ce:a1:a8:c1:5e: c3:40:00:64:f6:09:0f:f1:e0:98:24:10:87:17:dc: c7:9e:7f:cb:8d:98:4b:83:13:84:11:01:08:0c:46: 8d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:15:94:EA:53:19:10:C3:C7:7B:0C:71:29:19:C5:8F:2E:34:39:15 X509v3 Authority Key Identifier: keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.120.0/24 Signature Algorithm: sha256WithRSAEncryption 70:65:d8:f8:cb:43:19:8b:b6:94:3d:23:d2:01:5e:c1:9a:3c: 08:3f:4e:dd:d0:be:c4:42:fb:6a:a6:92:be:b0:b0:d4:2e:53: 9c:7d:f6:bb:5d:d0:24:60:8c:aa:b4:0e:73:d5:92:23:27:05: 96:f3:c2:ea:45:72:54:5a:a1:9e:bc:d4:c1:bd:eb:b4:51:c5: 2e:61:a0:d4:38:b2:06:16:2d:66:98:7a:77:41:95:2c:ab:d4: d5:7e:78:b8:61:33:65:c4:b3:71:10:55:f8:2c:2f:f7:16:11: 53:cb:30:80:8c:53:1a:57:e6:5b:51:11:ee:06:6b:1f:6b:78: 0e:c0:d3:fa:e3:c3:3a:84:ec:75:1e:19:72:41:6a:2e:ca:1e: 24:eb:92:ce:b7:76:16:39:ed:4f:c9:4f:d0:0e:98:3a:57:54: 88:a6:89:ee:6d:e8:99:4a:bf:c4:0d:ee:25:c7:0f:ea:da:31: 22:51:15:df:86:9a:2f:49:2d:b9:da:86:f2:5f:0f:dd:21:eb: d7:fd:21:c4:57:04:8d:3d:a5:10:7b:75:a9:50:8d:e9:5c:20: 65:fa:37:1d:af:12:47:7d:5d:74:56:7a:0e:21:d2:c2:39:cf: b9:5f:30:3f:26:a7:1e:f4:79:ae:53:56:a1:55:5e:c0:be:1f: d9:20:5a:67 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNQAeD/UvuF51hcAUgxLSDicgAPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgw Q0RGNjNEMjAeFw0yNDA5MDkwMzU1MDBaFw0yNTA5MDgwNDAwMDBaMDMxMTAvBgNV BAMTKERGMTU5NEVBNTMxOTEwQzNDNzdCMEM3MTI5MTlDNThGMkUzNDM5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdbCZ8YTpA7KKuCec8l3+Oaz86 TNIYYrVveDt8MlxZDAUtm4l4mUiIuM56Jxjax1r9zfAdpM6zyS6zmbXxel+zPy7o QhRSJhKrB+MYArSkEj9D3XWhCgGGJNmk4wXC14XEN20rrsRkUG9lPCoQXguI3Dpl 19is+ymYitArBtuXbzwyqM6AgZPsV0sPj8+jQb08xbfX8e0CH/sAKtqLYVX3HVUJ qUOIDQNQrHECbtwc08T5boncnaUEEcvaLzVJeUFwuzIwgTek5ICNQ1RDsqBSD776 s4ycmTxNdEHOoajBXsNAAGT2CQ/x4JgkEIcX3Meef8uNmEuDE4QRAQgMRo1bAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU3xWU6lMZEMPHewxxKRnFjy40ORUwHwYDVR0j BBgwFoAUx0DdkxiDwoQTUmGyWmlY6AzfY9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDcxNDY2NS1jNjcwLTQ1MWUtYmRjYi05MDc0MjE5ZDU1Y2UvMC9DNzQwREQ5MzE4 ODNDMjg0MTM1MjYxQjI1QTY5NThFODBDREY2M0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc0MEREOTMxODgzQzI4NDEzNTI2MUIyNUE2OTU4RTgwQ0RG NjNEMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0NzE0NjY1LWM2NzAtNDUxZS1i ZGNiLTkwNzQyMTlkNTVjZS8wLzMxMzAzMzJlMzEzMzM5MmUzMTMyMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUzNjMzMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABni3gwDQYJ KoZIhvcNAQELBQADggEBAHBl2PjLQxmLtpQ9I9IBXsGaPAg/Tt3QvsRC+2qmkr6w sNQuU5x99rtd0CRgjKq0DnPVkiMnBZbzwupFclRaoZ681MG967RRxS5hoNQ4sgYW LWaYendBlSyr1NV+eLhhM2XEs3EQVfgsL/cWEVPLMICMUxpX5ltREe4Gax9reA7A 0/rjwzqE7HUeGXJBai7KHiTrks63dhY57U/JT9AOmDpXVIimie5t6JlKv8QN7iXH D+raMSJRFd+Gmi9JLbnahvJfD90h69f9IcRXBI09pRB7dalQjelcIGX6Nx2vEkd9 XXRWeg4h0sI5z7lfMD8mpx70ea5TVqFVXsC+H9kgWmc= -----END CERTIFICATE-----Generated at Mon Nov 25 04:52:35 2024 by rpki-client on console-fra.rpki-client.org