$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313530313835.roa File: 3130332e34312e3234382e302f32342d3234203d3e20313530313835.roa (raw, json) Hash identifier: hyAN4VQBFL+6Qsple8qWz9PJHI/XwPa18Yzm8J6FcRc= Subject key identifier: 19:A5:8A:A2:D1:4D:F6:58:19:A7:04:E4:62:B7:AE:A3:06:C4:7C:B9 Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 044766B89EE0FD3211A789121B28AC78F585BA33 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313530313835.roa Signing time: Wed 20 Nov 2024 05:33:23 +0000 ROA not before: Wed 20 Nov 2024 05:28:23 +0000 ROA not after: Wed 19 Nov 2025 05:33:23 +0000 asID: 150185 IP address blocks: 103.41.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 10:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:47:66:b8:9e:e0:fd:32:11:a7:89:12:1b:28:ac:78:f5:85:ba:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Nov 20 05:28:23 2024 GMT Not After : Nov 19 05:33:23 2025 GMT Subject: CN=19A58AA2D14DF65819A704E462B7AEA306C47CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ba:b8:9e:cf:70:f2:c3:b5:c0:4f:b9:e4:b4: a6:11:be:d2:61:71:49:e2:d9:8b:da:6b:b6:64:b2: 33:f1:34:87:57:c0:30:9f:58:36:4a:2c:b3:94:51: da:6c:d7:e3:73:96:58:a2:f0:53:fe:03:26:f5:f9: c9:5f:09:d2:96:0c:53:30:4e:cb:04:a7:d8:01:9a: 60:0b:e6:96:1e:b4:6f:6d:71:bc:02:a3:6c:25:6f: 07:ab:18:27:eb:a7:94:23:36:ab:73:cb:54:d0:da: 0d:d9:88:9d:c4:4c:18:2d:d1:7c:b9:7e:b9:21:39: a5:81:26:c7:ce:8d:ce:1c:a5:12:00:b1:a2:17:02: db:e2:d9:82:9f:5d:f6:c5:89:22:00:2a:9f:05:c7: c4:59:32:b2:85:f2:e5:9f:60:5d:4a:b0:cb:84:e6: 45:e6:96:09:15:e3:af:57:07:b6:88:62:19:ec:7d: 99:4c:a3:c2:09:5c:e8:2e:11:96:99:6d:16:fa:17: 2f:61:79:45:74:72:75:74:ea:6f:3f:b3:d6:b2:4c: bc:c0:a6:48:06:3e:c2:0e:63:1b:fc:60:28:70:4b: 8e:a7:16:b4:a2:91:e8:7c:3f:5c:71:fd:b6:48:71: 02:c5:8b:45:55:a5:b1:db:a9:b7:69:1e:92:0d:d6: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A5:8A:A2:D1:4D:F6:58:19:A7:04:E4:62:B7:AE:A3:06:C4:7C:B9 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313530313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.248.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:66:15:03:20:4b:5a:df:a3:b6:28:d4:fc:f8:38:eb:dc:af: 38:cc:46:b9:ab:60:57:1a:74:33:51:71:c4:d5:26:d4:17:8b: 85:da:f5:32:dc:74:92:f1:e7:01:22:99:43:4c:1f:11:7b:8a: 35:bc:1b:5e:8f:4e:05:0b:fa:b6:7f:b4:14:dc:92:f3:fe:a2: b5:69:9e:7f:75:3e:74:e0:24:95:3e:0f:80:15:ca:a1:65:c6: 18:53:1a:df:dd:6b:bf:49:27:87:fb:04:91:e7:df:bd:63:37: 87:eb:e6:dd:3b:b4:c7:36:dc:a0:30:01:be:3f:aa:58:19:b1: 1e:99:27:12:a5:22:04:82:9c:72:53:d4:3e:12:71:7a:14:dd: 00:71:8d:30:1c:f2:d9:c4:0b:d9:d8:77:f9:8f:47:b3:6b:75: 5b:2b:00:60:71:ba:45:fb:16:7b:c0:5a:26:26:d0:25:6a:68: d5:12:f1:d7:e2:1b:f8:15:9c:62:17:15:a5:b9:6b:10:26:08: e7:73:f3:2f:89:80:f0:cb:69:b3:64:5f:db:c5:c9:cd:c8:a1: 4f:c4:57:e5:bd:0c:67:95:eb:39:e4:ec:4e:cd:d8:bf:4d:2f: 60:2d:77:df:14:c6:50:b7:37:e8:d1:b9:f5:e2:62:91:36:87: 63:f6:4c:59 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBEdmuJ7g/TIRp4kSGyisePWFujMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNDExMjAwNTI4MjNaFw0yNTExMTkwNTMzMjNaMDMxMTAvBgNV BAMTKDE5QTU4QUEyRDE0REY2NTgxOUE3MDRFNDYyQjdBRUEzMDZDNDdDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuriez3Dyw7XAT7nktKYRvtJh cUni2Yvaa7ZksjPxNIdXwDCfWDZKLLOUUdps1+Nzllii8FP+Ayb1+clfCdKWDFMw TssEp9gBmmAL5pYetG9tcbwCo2wlbwerGCfrp5QjNqtzy1TQ2g3ZiJ3ETBgt0Xy5 frkhOaWBJsfOjc4cpRIAsaIXAtvi2YKfXfbFiSIAKp8Fx8RZMrKF8uWfYF1KsMuE 5kXmlgkV469XB7aIYhnsfZlMo8IJXOguEZaZbRb6Fy9heUV0cnV06m8/s9ayTLzA pkgGPsIOYxv8YChwS46nFrSikeh8P1xx/bZIcQLFi0VVpbHbqbdpHpIN1nTRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGaWKotFN9lgZpwTkYreuowbEfLkwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3NTI3N2U4LTdkMGYtNDE4NC05 YzI4LWE2NjM1ZWZlZjI5Yy8wLzMxMzAzMzJlMzQzMTJlMzIzNDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzEzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyn4MA0GCSqG SIb3DQEBCwUAA4IBAQALZhUDIEta36O2KNT8+Djr3K84zEa5q2BXGnQzUXHE1SbU F4uF2vUy3HSS8ecBIplDTB8Re4o1vBtej04FC/q2f7QU3JLz/qK1aZ5/dT504CSV Pg+AFcqhZcYYUxrf3Wu/SSeH+wSR59+9YzeH6+bdO7THNtygMAG+P6pYGbEemScS pSIEgpxyU9Q+EnF6FN0AcY0wHPLZxAvZ2Hf5j0eza3VbKwBgcbpF+xZ7wFomJtAl amjVEvHX4hv4FZxiFxWluWsQJgjnc/MviYDwy2mzZF/bxcnNyKFPxFflvQxnles5 5OxOzdi/TS9gLXffFMZQtzfo0bn14mKRNodj9kxZ -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org