$ rpki-client -vvf repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/3130332e3137372e362e302f32332d3234203d3e20313437313430.roa File: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (raw, json) Hash identifier: zqT5YWjMd6XfOxSy/65IPLyls5xiXGFCXPoGdWCUauk= Subject key identifier: EE:82:B3:C3:A2:24:3C:04:EB:42:20:73:A5:CF:0F:83:C9:3D:42:C9 Certificate issuer: /CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Certificate serial: 48BC22F7E8ED6714BDF2AA3788257B16DEC8096E Authority key identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/3130332e3137372e362e302f32332d3234203d3e20313437313430.roa Signing time: Sat 21 Sep 2024 04:00:02 +0000 ROA not before: Sat 21 Sep 2024 03:55:02 +0000 ROA not after: Sat 20 Sep 2025 04:00:02 +0000 asID: 147140 IP address blocks: 103.177.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bc:22:f7:e8:ed:67:14:bd:f2:aa:37:88:25:7b:16:de:c8:09:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Validity Not Before: Sep 21 03:55:02 2024 GMT Not After : Sep 20 04:00:02 2025 GMT Subject: CN=EE82B3C3A2243C04EB422073A5CF0F83C93D42C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:89:10:66:44:65:7d:5e:ac:b2:56:fd:46: 2c:da:57:ae:15:f5:28:8e:ff:47:fe:6e:de:68:29: ec:86:ce:df:2a:df:16:a6:33:ed:69:f0:b8:01:e5: fb:f3:99:10:62:58:bf:f4:db:86:5e:86:66:02:1a: fd:1a:90:2e:85:7b:a4:05:cf:26:a5:48:5d:38:3c: 61:da:d1:ee:43:cd:c6:44:59:d7:9a:3b:9d:7b:0d: e7:a5:23:44:79:92:80:37:1a:27:19:b9:1c:d7:60: 1e:95:99:e2:51:f1:e9:42:68:1e:7e:c8:45:16:35: e1:51:c7:73:c5:90:21:ee:8b:0a:dc:94:5c:4e:4a: 05:c5:4f:dd:53:3d:2d:55:02:48:65:ea:bd:27:e3: e1:55:af:4a:f3:1a:16:c4:de:ef:d6:be:b4:c8:ee: 37:9f:60:12:ec:53:22:3b:38:f2:e0:48:8d:85:5f: 9c:1e:1c:93:1e:de:8b:43:ec:8e:e7:75:18:fa:9e: f4:51:d7:ac:b9:1c:3e:8f:08:c4:ea:2d:19:e7:f1: 1f:80:92:39:19:d8:05:6c:2c:6d:f4:4e:2a:f6:d9: 89:ea:3f:e2:57:eb:62:f0:4a:49:ee:52:0b:6a:28: 40:56:94:77:41:d0:c7:cd:d1:75:1a:76:10:ff:5f: 6b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:B3:C3:A2:24:3C:04:EB:42:20:73:A5:CF:0F:83:C9:3D:42:C9 X509v3 Authority Key Identifier: keyid:53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/3130332e3137372e362e302f32332d3234203d3e20313437313430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.6.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:62:68:bf:4c:35:01:20:29:61:03:b8:4c:21:72:ae:5b:42: 7c:04:85:0e:de:e4:48:18:60:14:ca:0c:bf:a3:29:72:83:e4: 67:c5:cb:77:b3:f0:cb:3e:6d:31:fe:72:cf:6e:6b:e9:b3:db: 55:4c:3d:7d:41:56:4b:2b:6f:04:05:bf:e8:eb:02:a9:76:8b: c2:11:27:ee:e1:30:c8:53:90:e8:dc:77:d8:ac:f3:ed:bc:91: 8f:2a:48:bb:1a:4f:8a:c5:5a:85:ab:89:2d:b4:ef:f7:8e:f3: 56:d0:9e:4f:27:2d:da:4d:14:d1:03:e4:8d:b7:46:7b:dd:1f: 9b:5d:c5:57:ad:06:97:2e:5c:d7:50:45:db:38:4f:bd:7a:2b: c4:82:7e:86:36:1d:fd:76:19:79:73:87:a0:3a:c0:42:42:d4: 65:9f:f5:ba:de:ce:b4:51:67:0b:85:22:4c:d0:f2:c0:65:84: bc:2e:4c:ac:b1:cf:f1:56:cc:0f:81:10:23:a3:5f:97:dd:c9: 7e:2c:7a:b5:54:a2:8c:2d:e8:72:de:a4:ed:bb:ba:12:a8:f5: 97:97:13:cf:10:28:6e:8c:7f:df:e0:89:da:3f:c7:18:51:c5: 69:05:a1:cd:f8:c9:e7:15:02:9f:de:33:a8:9a:f1:cf:24:38: 14:17:03:ed -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSLwi9+jtZxS98qo3iCV7Ft7ICW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2RDI5 RUJGQjY0RTAeFw0yNDA5MjEwMzU1MDJaFw0yNTA5MjAwNDAwMDJaMDMxMTAvBgNV BAMTKEVFODJCM0MzQTIyNDNDMDRFQjQyMjA3M0E1Q0YwRjgzQzkzRDQyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CYkQZkRlfV6sslb9RizaV64V 9SiO/0f+bt5oKeyGzt8q3xamM+1p8LgB5fvzmRBiWL/024ZehmYCGv0akC6Fe6QF zyalSF04PGHa0e5DzcZEWdeaO517DeelI0R5koA3GicZuRzXYB6VmeJR8elCaB5+ yEUWNeFRx3PFkCHuiwrclFxOSgXFT91TPS1VAkhl6r0n4+FVr0rzGhbE3u/WvrTI 7jefYBLsUyI7OPLgSI2FX5weHJMe3otD7I7ndRj6nvRR16y5HD6PCMTqLRnn8R+A kjkZ2AVsLG30Tir22YnqP+JX62LwSknuUgtqKEBWlHdB0MfN0XUadhD/X2s5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7oKzw6IkPATrQiBzpc8Pg8k9QskwHwYDVR0j BBgwFoAUU7LKMALbjfz1SC+OCamG0p6/tk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjcxZmM2ZC1hYTNiLTRlZDctOGZlYy03NDI3YWEwNjFmOGUvMC81M0IyQ0EzMDAy REI4REZDRjU0ODJGOEUwOUE5ODZEMjlFQkZCNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2RDI5RUJG QjY0RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNzFmYzZkLWFhM2ItNGVkNy04 ZmVjLTc0MjdhYTA2MWY4ZS8wLzMxMzAzMzJlMzEzNzM3MmUzNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzQzNzMxMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWexBjANBgkqhkiG 9w0BAQsFAAOCAQEAOmJov0w1ASApYQO4TCFyrltCfASFDt7kSBhgFMoMv6MpcoPk Z8XLd7Pwyz5tMf5yz25r6bPbVUw9fUFWSytvBAW/6OsCqXaLwhEn7uEwyFOQ6Nx3 2Kzz7byRjypIuxpPisVahauJLbTv947zVtCeTyct2k0U0QPkjbdGe90fm13FV60G ly5c11BF2zhPvXorxIJ+hjYd/XYZeXOHoDrAQkLUZZ/1ut7OtFFnC4UiTNDywGWE vC5MrLHP8VbMD4EQI6Nfl93Jfix6tVSijC3oct6k7bu6Eqj1l5cTzxAobox/3+CJ 2j/HGFHFaQWhzfjJ5xUCn94zqJrxzyQ4FBcD7Q== -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:14 2024 by rpki-client on console-fra.rpki-client.org