$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa File: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (raw, json) Hash identifier: nDSHJLkitlb1GME6lEBPPHUWslDjiPtZnQkf1oppio0= Subject key identifier: A3:44:F6:AD:27:ED:18:32:73:F8:04:FC:FF:C6:27:FE:79:9B:5E:97 Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Certificate serial: 768D0D5DB8282273B43053B5A45365C1C4E94FB6 Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa Signing time: Fri 21 Jun 2024 10:00:00 +0000 ROA not before: Fri 21 Jun 2024 09:55:00 +0000 ROA not after: Fri 20 Jun 2025 10:00:00 +0000 asID: 150232 IP address blocks: 103.13.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8d:0d:5d:b8:28:22:73:b4:30:53:b5:a4:53:65:c1:c4:e9:4f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Validity Not Before: Jun 21 09:55:00 2024 GMT Not After : Jun 20 10:00:00 2025 GMT Subject: CN=A344F6AD27ED183273F804FCFFC627FE799B5E97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:4c:9c:10:d5:6a:a4:8f:c6:f0:be:db:af: 42:d9:0e:ef:c6:43:02:55:f9:9d:89:8e:4d:8a:f2: 3f:a3:38:d5:66:88:ca:51:e6:73:9d:ca:c7:bc:1e: 55:bc:2c:59:3f:e2:8a:3d:42:28:56:d9:31:eb:63: 7f:a8:c8:0b:1f:e9:96:b3:4a:cc:aa:1d:86:7f:8a: 76:94:7f:d7:25:23:c9:0a:82:d6:f4:d1:d1:7b:f7: 1d:22:87:d5:d4:e9:2c:4f:cd:37:44:d0:87:26:d5: a0:c2:22:a5:7c:82:72:c8:4f:6f:ea:15:a3:8e:a5: c4:f1:45:eb:93:74:ec:08:e8:1e:90:56:20:36:55: 73:8b:7c:20:58:13:b7:80:46:5b:b7:42:42:81:45: 5f:82:a1:9c:ca:9f:a8:9d:0f:10:8c:93:01:b7:f3: 0a:e0:42:6e:56:8d:b6:ae:46:17:8b:e8:76:31:b5: bd:e7:6d:df:81:83:c8:37:ce:4c:14:7c:db:77:06: 6e:18:bb:e8:a3:e4:a7:85:74:a1:95:c5:a8:fc:6b: 77:3d:14:59:2d:59:a8:10:df:ce:02:5b:8d:97:7e: 25:f7:ac:2d:3c:1d:a1:22:ee:62:dc:bd:fb:52:6d: 99:7d:ed:0c:b2:be:1d:a2:61:cc:a5:3a:04:f8:9f: 59:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:44:F6:AD:27:ED:18:32:73:F8:04:FC:FF:C6:27:FE:79:9B:5E:97 X509v3 Authority Key Identifier: keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.235.0/24 Signature Algorithm: sha256WithRSAEncryption 09:2f:2b:c7:13:fe:b1:46:c7:b3:6e:e1:22:f2:6c:c2:4e:d6: 5c:27:49:09:10:73:27:45:b3:b3:f9:cb:b9:2b:b9:08:6d:24: c5:98:f2:26:a1:01:e0:4a:6e:bc:72:d3:26:04:27:10:61:c4: 9d:33:83:f8:52:e7:a2:f2:2d:e8:14:2a:dc:bf:aa:1d:18:70: 21:84:72:75:ac:10:b1:54:84:de:fe:af:8f:a1:6c:84:17:bf: 1d:e4:14:13:88:c0:af:ac:71:57:d7:21:3e:0a:02:3b:64:72: f0:04:2f:fd:e2:1f:ac:3b:e9:ce:98:84:db:1f:2b:63:40:cc: cb:cc:c6:f2:84:f3:45:4e:47:fe:b1:fb:10:cf:f2:e0:8a:b9: 0d:33:6b:87:3a:23:7a:0f:2d:d4:00:b0:05:d6:be:dd:23:8c: 84:73:15:e1:a9:5c:38:da:bd:87:68:56:09:ba:e8:ce:4a:06: 3b:b4:6c:a4:82:c5:33:35:34:df:32:90:1d:bd:25:3a:08:fa: 2f:54:53:0f:28:cb:6f:7b:85:69:00:1b:c9:77:86:d0:75:c2: 41:40:5a:7d:d3:a2:82:ed:a5:be:95:04:87:ef:ad:3b:10:99: dc:38:78:22:8b:e3:63:d6:ac:cd:65:45:cb:5b:34:4e:d4:7d: 50:e5:38:46 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdo0NXbgoInO0MFO1pFNlwcTpT7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkw N0VFODY2QjAeFw0yNDA2MjEwOTU1MDBaFw0yNTA2MjAxMDAwMDBaMDMxMTAvBgNV BAMTKEEzNDRGNkFEMjdFRDE4MzI3M0Y4MDRGQ0ZGQzYyN0ZFNzk5QjVFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOakycENVqpI/G8L7br0LZDu/G QwJV+Z2Jjk2K8j+jONVmiMpR5nOdyse8HlW8LFk/4oo9QihW2THrY3+oyAsf6Zaz SsyqHYZ/inaUf9clI8kKgtb00dF79x0ih9XU6SxPzTdE0Icm1aDCIqV8gnLIT2/q FaOOpcTxReuTdOwI6B6QViA2VXOLfCBYE7eARlu3QkKBRV+CoZzKn6idDxCMkwG3 8wrgQm5WjbauRheL6HYxtb3nbd+Bg8g3zkwUfNt3Bm4Yu+ij5KeFdKGVxaj8a3c9 FFktWagQ384CW42XfiX3rC08HaEi7mLcvftSbZl97Qyyvh2iYcylOgT4n1n7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUo0T2rSftGDJz+AT8/8Yn/nmbXpcwHwYDVR0j BBgwFoAUNhttfhagK3MWtvke00siqQfuhmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YWM0ZDc1ZS0zZGE4LTQ5OTAtODA0Mi03ZTBlY2Y1OWYxM2IvMC8zNjFCNkQ3RTE2 QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3RUU4NjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkwN0VF ODY2Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhYzRkNzVlLTNkYTgtNDk5MC04 MDQyLTdlMGVjZjU5ZjEzYi8wLzMxMzAzMzJlMzEzMzJlMzIzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw3rMA0GCSqG SIb3DQEBCwUAA4IBAQAJLyvHE/6xRsezbuEi8mzCTtZcJ0kJEHMnRbOz+cu5K7kI bSTFmPImoQHgSm68ctMmBCcQYcSdM4P4Uuei8i3oFCrcv6odGHAhhHJ1rBCxVITe /q+PoWyEF78d5BQTiMCvrHFX1yE+CgI7ZHLwBC/94h+sO+nOmITbHytjQMzLzMby hPNFTkf+sfsQz/LgirkNM2uHOiN6Dy3UALAF1r7dI4yEcxXhqVw42r2HaFYJuujO SgY7tGykgsUzNTTfMpAdvSU6CPovVFMPKMtve4VpABvJd4bQdcJBQFp906KC7aW+ lQSH7607EJncOHgii+Nj1qzNZUXLWzRO1H1Q5ThG -----END CERTIFICATE-----Generated at Fri Nov 22 23:37:26 2024 by rpki-client on console-fra.rpki-client.org