$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa File: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (raw, json) Hash identifier: 4mXeU5O3PALv3QEZsFTkzOzx5yDWq6LGK8PBeqzWVWI= Subject key identifier: 3A:F2:FF:1E:5D:50:98:87:F6:15:6D:7F:B6:C8:6A:06:56:22:86:C0 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 63E96A8384446CFF54A7A1DC8AB11870AA50E444 Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa Signing time: Tue 22 Oct 2024 03:00:00 +0000 ROA not before: Tue 22 Oct 2024 02:55:00 +0000 ROA not after: Tue 21 Oct 2025 03:00:00 +0000 asID: 151542 IP address blocks: 103.244.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e9:6a:83:84:44:6c:ff:54:a7:a1:dc:8a:b1:18:70:aa:50:e4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Oct 22 02:55:00 2024 GMT Not After : Oct 21 03:00:00 2025 GMT Subject: CN=3AF2FF1E5D509887F6156D7FB6C86A06562286C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3c:9b:f7:2c:9d:82:bd:a5:8d:8f:4e:83:93: 7b:07:7e:8e:20:5d:bd:6f:47:bd:2e:5f:ca:b4:c8: f6:a1:da:01:b1:f9:08:7d:79:7d:48:76:f8:20:51: 81:e5:83:c9:16:1e:a2:04:eb:06:98:b2:98:22:4f: 80:7b:f8:cc:1f:69:71:c2:3f:f1:48:b7:29:0c:ef: 95:e7:ed:9d:59:7f:60:eb:de:b8:e4:db:44:83:ba: 48:d4:94:8a:3b:b3:c3:d1:58:d4:db:86:86:ff:3c: 73:2a:b9:1d:fe:76:5b:a0:90:4d:f2:6f:60:c4:48: 95:25:1e:5d:1d:41:bb:05:0e:e5:ca:ce:d2:75:9f: ee:63:a8:e1:6a:85:ad:47:99:16:33:0d:a9:61:9b: c7:cc:d8:31:42:4e:aa:19:bb:88:7e:e6:dd:f9:43: 30:62:15:ac:93:7e:7b:45:e2:c1:ec:70:9f:df:f9: d9:69:7c:c1:23:50:b8:ec:74:6c:dc:0f:46:b1:2d: e6:1f:4a:0e:e6:0c:dd:16:cb:14:e6:fc:0c:ee:65: 03:fc:7c:f9:49:b2:c1:f9:70:12:1a:2c:d7:a0:19: 6c:90:bd:7a:1d:af:71:2c:67:8d:70:dd:65:bd:29: 64:2e:95:75:bf:88:e6:57:61:73:6b:66:f9:09:09: cc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F2:FF:1E:5D:50:98:87:F6:15:6D:7F:B6:C8:6A:06:56:22:86:C0 X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.106.0/23 Signature Algorithm: sha256WithRSAEncryption 54:52:a4:43:a4:73:cc:1e:4a:0e:b4:bc:81:35:15:83:9c:4d: 7d:3a:23:31:78:0f:3b:6f:fc:a5:9f:3c:77:94:25:c3:28:38: 27:55:78:ed:fd:2b:40:af:fa:d5:35:d5:75:6f:3a:3f:8d:77: 77:07:13:c7:13:e0:55:10:0e:13:ac:8e:1e:fb:eb:4b:5f:97: 06:28:dd:b5:52:a5:7d:91:8b:38:3a:49:db:f0:66:b5:f6:ec: b4:0f:10:cb:02:7b:f0:28:33:67:ba:05:76:ac:95:e5:fe:81: c4:01:10:1b:63:23:73:6e:96:8b:bd:e1:e7:44:16:0e:0d:b2: 73:d9:c1:63:2a:34:2e:9a:09:8c:b6:c6:4e:fd:c7:fe:95:7c: a9:d7:3a:46:b6:55:e4:e8:02:4f:6c:7e:fb:c4:c6:86:75:b0: 87:1e:7e:37:28:f6:46:59:b4:9a:b5:8e:ab:6f:bd:17:70:76: 16:42:c5:db:82:31:64:62:50:d5:b7:44:b4:e1:ea:0b:32:74: 02:55:d7:4b:b1:94:78:0f:e3:d5:2e:ba:71:e6:73:20:63:5d: 41:f5:74:ed:bc:3b:41:53:02:ae:e9:a1:27:87:a6:49:d6:d1: 3c:7a:b1:95:e7:c8:18:06:9b:c5:42:e5:f6:58:46:88:01:dc: 08:f5:e7:c5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUY+lqg4REbP9Up6HcirEYcKpQ5EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNDEwMjIwMjU1MDBaFw0yNTEwMjEwMzAwMDBaMDMxMTAvBgNV BAMTKDNBRjJGRjFFNUQ1MDk4ODdGNjE1NkQ3RkI2Qzg2QTA2NTYyMjg2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPJv3LJ2CvaWNj06Dk3sHfo4g Xb1vR70uX8q0yPah2gGx+Qh9eX1IdvggUYHlg8kWHqIE6waYspgiT4B7+MwfaXHC P/FItykM75Xn7Z1Zf2Dr3rjk20SDukjUlIo7s8PRWNTbhob/PHMquR3+dlugkE3y b2DESJUlHl0dQbsFDuXKztJ1n+5jqOFqha1HmRYzDalhm8fM2DFCTqoZu4h+5t35 QzBiFayTfntF4sHscJ/f+dlpfMEjULjsdGzcD0axLeYfSg7mDN0WyxTm/AzuZQP8 fPlJssH5cBIaLNegGWyQvXodr3EsZ41w3WW9KWQulXW/iOZXYXNrZvkJCcyfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUOvL/Hl1QmIf2FW1/tshqBlYihsAwHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwZGIwZGVjLWY0OWEtNGU3Yy04 NTZiLWIxZjA1NDBiMWUyNS8wLzMxMzAzMzJlMzIzNDM0MmUzMTMwMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzEzNTM0MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn9GowDQYJ KoZIhvcNAQELBQADggEBAFRSpEOkc8weSg60vIE1FYOcTX06IzF4Dztv/KWfPHeU JcMoOCdVeO39K0Cv+tU11XVvOj+Nd3cHE8cT4FUQDhOsjh7760tflwYo3bVSpX2R izg6SdvwZrX27LQPEMsCe/AoM2e6BXasleX+gcQBEBtjI3Nulou94edEFg4NsnPZ wWMqNC6aCYy2xk79x/6VfKnXOka2VeToAk9sfvvExoZ1sIcefjco9kZZtJq1jqtv vRdwdhZCxduCMWRiUNW3RLTh6gsydAJV10uxlHgP49UuunHmcyBjXUH1dO28O0FT Aq7poSeHpknW0Tx6sZXnyBgGm8VC5fZYRogB3Aj158U= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org