$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232352e302f32342d3234203d3e203536323431.roa File: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (raw, json) Hash identifier: UjIV/riQTo8dasvJuqxqQ0jauvPuOkXhGx+ZlLnU9B8= Subject key identifier: 9A:9D:61:66:D7:93:29:6C:4D:42:07:62:01:2A:F8:71:2E:8D:3A:8C Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 61A45033C936126715AB10E5814AB12F74C34F99 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232352e302f32342d3234203d3e203536323431.roa Signing time: Mon 24 Jun 2024 05:00:00 +0000 ROA not before: Mon 24 Jun 2024 04:55:00 +0000 ROA not after: Mon 23 Jun 2025 05:00:00 +0000 asID: 56241 IP address blocks: 103.37.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 01:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a4:50:33:c9:36:12:67:15:ab:10:e5:81:4a:b1:2f:74:c3:4f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Jun 24 04:55:00 2024 GMT Not After : Jun 23 05:00:00 2025 GMT Subject: CN=9A9D6166D793296C4D420762012AF8712E8D3A8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6b:20:22:5b:1f:01:bd:28:7b:6a:44:8e:84: 9e:20:82:9b:d0:96:97:5a:ad:f1:a4:48:21:a1:b0: d0:ae:8b:9b:76:33:f0:63:e8:c8:53:b7:fb:af:ef: 06:f8:da:76:e4:d0:67:12:3a:11:b0:69:2b:e9:1e: 85:65:41:9c:78:28:5d:69:06:9e:45:5c:28:29:3f: 4d:9d:e0:7c:e0:3b:59:13:3c:8e:ba:fb:97:db:5e: 18:c1:b9:11:64:8e:ca:6f:8d:9f:44:ba:16:b4:96: 31:99:cf:98:f6:dd:a1:18:58:c2:3b:89:6d:5a:97: c7:48:af:40:66:7c:ee:ba:e1:8d:c0:c6:af:bb:1e: a5:e8:76:42:0c:05:13:bd:d6:c1:bf:66:c5:f3:98: b4:e2:63:56:41:14:1f:f7:b4:23:5c:da:38:f7:59: 0c:3f:83:d6:b3:af:dd:af:00:e2:64:00:43:ac:6f: 88:dd:d7:89:58:4a:c0:d4:09:e8:8f:82:71:b0:7c: dc:3c:62:05:42:23:0f:64:5b:fd:a3:46:79:44:e5: 0c:8e:5e:c9:d3:fe:18:c1:f7:5e:5e:a9:ac:65:e9: a5:03:5a:45:03:45:e6:de:c1:26:18:88:8e:9b:ec: ce:b8:ff:61:8d:0b:45:a9:a2:9d:91:66:a3:76:c3: 57:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9D:61:66:D7:93:29:6C:4D:42:07:62:01:2A:F8:71:2E:8D:3A:8C X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232352e302f32342d3234203d3e203536323431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.37.225.0/24 Signature Algorithm: sha256WithRSAEncryption d7:66:1f:f9:0c:a6:3d:1c:dc:f0:1c:1f:70:f7:2b:4a:39:78: ff:7a:bc:24:a2:db:3d:19:30:aa:38:c1:5a:45:e3:52:d3:6d: 09:1a:01:6f:82:b1:0e:17:39:14:28:44:4e:fa:d1:c7:91:51: fd:5f:2a:1a:15:34:a1:95:fe:bb:a2:06:9a:51:ee:d1:dd:c8: 62:42:4d:e3:7e:a5:b1:85:83:60:47:3d:67:1a:b6:bf:6a:28: d8:7f:c1:2d:76:4a:42:e8:09:1e:79:bc:89:e2:37:67:47:7d: ce:cd:7b:ac:a5:a3:b3:af:f5:ab:4b:c0:b3:b2:5d:0e:d9:3a: 18:3b:dd:2f:3c:6b:69:6b:4a:3e:8b:85:86:71:d1:53:d7:5b: c0:cb:33:90:3c:79:f1:4c:f4:28:27:29:14:ee:71:50:61:4d: aa:14:45:1d:97:e6:5d:ac:3f:b6:94:2b:da:88:0d:d8:09:46: 5e:76:d6:2c:60:f9:dd:84:9e:0c:fc:cf:45:70:46:ad:83:32: e6:e9:3c:16:f0:8f:d8:96:a3:06:f2:69:92:da:a9:15:43:7f: 1f:35:65:e5:f3:42:a8:ab:d0:50:81:be:d9:62:2e:26:30:f9: c8:4a:e4:82:c7:dc:08:2e:70:1e:60:67:ef:bb:b0:ad:8b:a0: fa:77:bb:5c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYaRQM8k2EmcVqxDlgUqxL3TDT5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNDA2MjQwNDU1MDBaFw0yNTA2MjMwNTAwMDBaMDMxMTAvBgNV BAMTKDlBOUQ2MTY2RDc5MzI5NkM0RDQyMDc2MjAxMkFGODcxMkU4RDNBOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqayAiWx8BvSh7akSOhJ4ggpvQ lpdarfGkSCGhsNCui5t2M/Bj6MhTt/uv7wb42nbk0GcSOhGwaSvpHoVlQZx4KF1p Bp5FXCgpP02d4HzgO1kTPI66+5fbXhjBuRFkjspvjZ9Euha0ljGZz5j23aEYWMI7 iW1al8dIr0BmfO664Y3Axq+7HqXodkIMBRO91sG/ZsXzmLTiY1ZBFB/3tCNc2jj3 WQw/g9azr92vAOJkAEOsb4jd14lYSsDUCeiPgnGwfNw8YgVCIw9kW/2jRnlE5QyO XsnT/hjB915eqaxl6aUDWkUDRebewSYYiI6b7M64/2GNC0Wpop2RZqN2w1epAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUmp1hZteTKWxNQgdiASr4cS6NOowwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05 OWVmLTVlOTZkOGUzN2U1MC8wLzMxMzAzMzJlMzMzNzJlMzIzMjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcl4TANBgkqhkiG 9w0BAQsFAAOCAQEA12Yf+QymPRzc8BwfcPcrSjl4/3q8JKLbPRkwqjjBWkXjUtNt CRoBb4KxDhc5FChETvrRx5FR/V8qGhU0oZX+u6IGmlHu0d3IYkJN436lsYWDYEc9 Zxq2v2oo2H/BLXZKQugJHnm8ieI3Z0d9zs17rKWjs6/1q0vAs7JdDtk6GDvdLzxr aWtKPouFhnHRU9dbwMszkDx58Uz0KCcpFO5xUGFNqhRFHZfmXaw/tpQr2ogN2AlG XnbWLGD53YSeDPzPRXBGrYMy5uk8FvCP2JajBvJpktqpFUN/HzVl5fNCqKvQUIG+ 2WIuJjD5yErkgsfcCC5wHmBn77uwrYug+ne7XA== -----END CERTIFICATE-----Generated at Sat Nov 23 03:54:06 2024 by rpki-client on console-ams.rpki-client.org