$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32332d3234203d3e20313431303737.roa File: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (raw, json) Hash identifier: +823HS/ZLXy7YJoTx9tsaJGIQ/2DUTJiFFHC7z3DV5k= Subject key identifier: 34:9F:7E:53:9D:20:A2:36:B3:CF:60:C3:78:8F:67:72:F1:76:7E:00 Certificate issuer: /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1 Certificate serial: 7CC58E95CCA60CE7D098DBE25CD4614D13AB4861 Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32332d3234203d3e20313431303737.roa Signing time: Sun 11 Aug 2024 15:00:02 +0000 ROA not before: Sun 11 Aug 2024 14:55:02 +0000 ROA not after: Sun 10 Aug 2025 15:00:02 +0000 asID: 141077 IP address blocks: 103.178.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c5:8e:95:cc:a6:0c:e7:d0:98:db:e2:5c:d4:61:4d:13:ab:48:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1 Validity Not Before: Aug 11 14:55:02 2024 GMT Not After : Aug 10 15:00:02 2025 GMT Subject: CN=349F7E539D20A236B3CF60C3788F6772F1767E00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:05:5b:af:3f:d0:15:4b:f4:27:1e:64:b6: 03:be:67:81:11:89:f8:12:57:a9:77:94:02:72:12: 4a:d8:21:84:ce:29:a8:eb:a5:fa:bc:fb:98:2b:a9: b9:36:c1:fc:de:9a:d1:bf:a9:a1:55:8a:d8:7e:6b: b3:79:30:f4:34:fe:62:3f:33:4d:28:43:ce:c7:02: d7:9b:53:82:1e:20:63:47:0f:73:4e:51:2c:29:67: d0:8f:95:86:cf:88:1f:83:c4:dd:36:40:26:49:12: 7a:3c:ac:8e:88:2f:0f:a4:95:18:72:e7:13:01:9a: de:3d:6c:1a:49:71:04:22:f2:26:87:b4:aa:b2:f6: 11:23:4f:0e:af:b4:ed:4e:1e:ac:07:a5:f7:9b:7d: 98:52:1e:af:35:97:2e:09:26:7f:9c:a4:73:f6:ae: f2:94:db:ec:a3:c6:47:4f:42:03:8c:be:a4:45:c0: 79:46:50:e8:ef:f5:f1:38:09:22:02:b9:7a:26:65: 1e:d1:2f:14:20:14:76:fd:e4:99:9a:f0:cd:2d:02: 7d:8b:79:fc:db:ea:71:75:2e:58:ce:6f:c4:a0:5a: 0e:c9:b7:c4:83:a3:60:15:ad:5d:aa:20:e3:3f:fb: 4d:f8:3a:01:d8:12:d4:fb:87:b5:14:59:b3:ac:c6: 63:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9F:7E:53:9D:20:A2:36:B3:CF:60:C3:78:8F:67:72:F1:76:7E:00 X509v3 Authority Key Identifier: keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32332d3234203d3e20313431303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.2.0/23 Signature Algorithm: sha256WithRSAEncryption 80:66:d0:b7:db:4a:1e:3e:a0:58:2d:8f:d0:a9:00:2f:9c:fa: 68:0f:18:ce:f5:3d:6e:f2:14:fe:28:4b:00:ac:1e:50:37:54: 48:01:8a:05:59:50:ea:e4:5b:0c:dc:07:98:cf:eb:6d:f0:fb: e7:3d:23:87:94:4a:59:05:47:a0:0d:09:7c:c3:b2:8e:7d:d9: 5d:40:9f:52:d4:46:f6:41:ba:f9:e8:44:04:7d:70:fe:e1:f8: 04:d9:8c:24:aa:78:aa:6c:94:23:07:49:9c:32:f3:15:a7:d1: f8:68:17:9c:3c:2e:b9:f4:70:cd:ef:35:8a:9f:12:9c:38:09: b1:fd:c0:54:10:fd:28:fd:49:75:aa:fd:b9:f4:4f:39:b1:63: 70:62:bf:90:a5:51:47:06:74:bd:d5:fe:6a:6b:14:31:c3:ce: 15:62:f9:08:23:44:00:0d:47:3f:20:ba:10:2c:aa:b8:92:5b: 62:7f:ec:b0:43:60:94:26:25:2d:a4:5f:15:56:23:74:51:11: ea:9b:1b:07:1e:34:f9:b1:6c:d5:9e:fa:be:74:10:11:19:53: 82:54:d4:ce:24:12:ac:f0:10:59:75:c5:8f:b6:d1:cb:02:c5: ac:d4:86:63:6b:5f:2e:b7:6f:ae:9c:95:76:1b:7c:4b:95:58: bd:d0:f3:6d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfMWOlcymDOfQmNviXNRhTROrSGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4RDRG NDlCMEJGMTAeFw0yNDA4MTExNDU1MDJaFw0yNTA4MTAxNTAwMDJaMDMxMTAvBgNV BAMTKDM0OUY3RTUzOUQyMEEyMzZCM0NGNjBDMzc4OEY2NzcyRjE3NjdFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoAVbrz/QFUv0Jx5ktgO+Z4ER ifgSV6l3lAJyEkrYIYTOKajrpfq8+5grqbk2wfzemtG/qaFVith+a7N5MPQ0/mI/ M00oQ87HAtebU4IeIGNHD3NOUSwpZ9CPlYbPiB+DxN02QCZJEno8rI6ILw+klRhy 5xMBmt49bBpJcQQi8iaHtKqy9hEjTw6vtO1OHqwHpfebfZhSHq81ly4JJn+cpHP2 rvKU2+yjxkdPQgOMvqRFwHlGUOjv9fE4CSICuXomZR7RLxQgFHb95Jma8M0tAn2L efzb6nF1LljOb8SgWg7Jt8SDo2AVrV2qIOM/+034OgHYEtT7h7UUWbOsxmNZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUNJ9+U50gojazz2DDeI9ncvF2fgAwHwYDVR0j BBgwFoAUxgduMw1Gee8EVepADRFY1PSbC/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmZhZTU2NS00MTE0LTQ0MzQtOTQwZC03YzAxOTI4YzhhYjEvMC9DNjA3NkUzMzBE NDY3OUVGMDQ1NUVBNDAwRDExNThENEY0OUIwQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4RDRGNDlC MEJGMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiZmFlNTY1LTQxMTQtNDQzNC05 NDBkLTdjMDE5MjhjOGFiMS8wLzMxMzAzMzJlMzEzNzM4MmUzMjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzQzMTMwMzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeyAjANBgkqhkiG 9w0BAQsFAAOCAQEAgGbQt9tKHj6gWC2P0KkAL5z6aA8YzvU9bvIU/ihLAKweUDdU SAGKBVlQ6uRbDNwHmM/rbfD75z0jh5RKWQVHoA0JfMOyjn3ZXUCfUtRG9kG6+ehE BH1w/uH4BNmMJKp4qmyUIwdJnDLzFafR+GgXnDwuufRwze81ip8SnDgJsf3AVBD9 KP1Jdar9ufRPObFjcGK/kKVRRwZ0vdX+amsUMcPOFWL5CCNEAA1HPyC6ECyquJJb Yn/ssENglCYlLaRfFVYjdFER6psbBx40+bFs1Z76vnQQERlTglTUziQSrPAQWXXF j7bRywLFrNSGY2tfLrdvrpyVdht8S5VYvdDzbQ== -----END CERTIFICATE-----Generated at Sun Nov 24 21:43:11 2024 by rpki-client on console-ams.rpki-client.org