$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130372e302f32342d3234203d3e203538343832.roa File: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (raw, json) Hash identifier: knHWSv1RKHTEczSFkhAUfOUck8SGrm1/yToncehqe58= Subject key identifier: 9C:B5:BE:A3:E1:E4:DE:37:67:13:99:5F:22:63:37:2F:75:3C:92:54 Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE Certificate serial: 0DFD756F8DC85804B161BCA40191A59A5AF65DDB Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130372e302f32342d3234203d3e203538343832.roa Signing time: Tue 26 Dec 2023 10:00:34 +0000 ROA not before: Tue 26 Dec 2023 09:55:34 +0000 ROA not after: Tue 24 Dec 2024 10:00:34 +0000 asID: 58482 IP address blocks: 103.11.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fd:75:6f:8d:c8:58:04:b1:61:bc:a4:01:91:a5:9a:5a:f6:5d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Validity Not Before: Dec 26 09:55:34 2023 GMT Not After : Dec 24 10:00:34 2024 GMT Subject: CN=9CB5BEA3E1E4DE376713995F2263372F753C9254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:ac:6a:64:81:3f:32:3f:7e:a5:37:ff:e8: 4d:84:df:60:08:b5:c3:c4:31:11:87:e2:0b:dd:02: 60:00:9a:7a:cb:de:82:a4:b5:3f:c6:95:f4:20:1f: 74:8b:02:4e:59:48:c4:b9:35:ff:ef:35:ff:6e:9e: 41:f3:28:d5:fb:4d:cf:46:b2:20:1f:22:77:05:8f: 8e:f1:ea:9d:53:59:16:25:63:f3:ba:c6:cd:ec:71: 5a:21:ae:40:3e:13:cf:1b:73:c0:67:20:2d:f5:9f: 2d:29:13:e2:4d:9f:c7:df:61:c1:6c:f6:1e:21:c6: 19:25:b4:b8:55:fe:10:03:66:72:96:7a:c9:a7:93: e2:cf:c4:f1:6a:a6:16:3a:d0:09:9a:2a:f0:0e:6b: 9f:d5:7d:15:83:4b:e4:e6:40:ee:bc:7e:a5:23:30: 91:91:72:30:19:48:67:ce:a5:04:f1:96:e7:0a:cd: 42:35:cc:3f:40:f4:f3:42:81:9b:81:3a:89:96:64: df:ae:11:09:53:0d:d6:4b:9e:a1:27:9b:a6:36:e7: 6a:58:85:44:ec:3d:c5:15:ae:23:95:d8:40:8b:fd: 3b:26:0c:63:d3:31:e7:4a:66:8d:05:6e:7a:4a:38: e2:7e:f3:61:b0:cb:58:ca:e2:1a:1a:6e:22:f8:88: f8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B5:BE:A3:E1:E4:DE:37:67:13:99:5F:22:63:37:2F:75:3C:92:54 X509v3 Authority Key Identifier: keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130372e302f32342d3234203d3e203538343832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.107.0/24 Signature Algorithm: sha256WithRSAEncryption 61:db:64:c5:b9:52:56:8d:16:4d:e6:42:52:63:52:2c:a9:5f: b4:1b:b0:8f:4b:03:76:a0:a6:48:9f:34:a5:37:df:40:d0:02: 0f:dc:b8:c4:31:f2:0c:03:03:94:01:1b:bc:ed:2d:52:97:3d: 16:e8:36:35:5d:d2:84:85:d0:e7:1d:ed:9f:8d:ac:f7:d1:30: b4:94:99:88:4d:ab:a8:c1:cf:bf:71:5d:47:de:61:71:25:4e: 8f:75:79:fe:76:c4:85:5e:8a:35:66:c9:4a:20:3a:25:35:12: 8b:45:45:ac:c4:0f:dc:e6:43:a6:11:72:a2:d5:a7:b8:14:dd: 2a:53:8a:8d:46:7f:d6:37:d6:8c:c5:81:ec:16:a3:b7:e7:ef: f8:5f:c8:80:13:75:29:3f:67:43:28:37:93:ee:e1:99:55:7e: 5b:ba:33:4f:5a:a0:d3:f6:74:e9:7b:41:f8:30:e7:d0:a1:76: f8:38:04:23:7b:3a:9a:7f:93:0c:9b:f1:28:00:4d:46:d3:30: 41:ec:88:4b:92:95:c9:b3:ff:5d:81:19:f8:ce:b2:1b:3b:6b: 51:ec:6c:62:40:69:01:75:f3:b4:f6:be:cb:2e:63:c5:23:12: 9d:36:c3:78:12:d9:b1:53:be:51:03:7f:b8:92:68:48:f8:12: 7a:e9:8c:19 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDf11b43IWASxYbykAZGlmlr2XdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQw NzY3MkJERTAeFw0yMzEyMjYwOTU1MzRaFw0yNDEyMjQxMDAwMzRaMDMxMTAvBgNV BAMTKDlDQjVCRUEzRTFFNERFMzc2NzEzOTk1RjIyNjMzNzJGNzUzQzkyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+KxqZIE/Mj9+pTf/6E2E32AI tcPEMRGH4gvdAmAAmnrL3oKktT/GlfQgH3SLAk5ZSMS5Nf/vNf9unkHzKNX7Tc9G siAfIncFj47x6p1TWRYlY/O6xs3scVohrkA+E88bc8BnIC31ny0pE+JNn8ffYcFs 9h4hxhkltLhV/hADZnKWesmnk+LPxPFqphY60AmaKvAOa5/VfRWDS+TmQO68fqUj MJGRcjAZSGfOpQTxlucKzUI1zD9A9PNCgZuBOomWZN+uEQlTDdZLnqEnm6Y252pY hUTsPcUVriOV2ECL/TsmDGPTMedKZo0FbnpKOOJ+82Gwy1jK4hoabiL4iPi1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUnLW+o+Hk3jdnE5lfImM3L3U8klQwHwYDVR0j BBgwFoAUTET29UO9u4WNNlbUGjZmBAdnK94wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMC80QzQ0RjZGNTQz QkRCQjg1OEQzNjU2RDQxQTM2NjYwNDA3NjcyQkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQwNzY3 MkJERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZjJjNjZjLTFmODctNGQ5OC1h NDY3LTMyMThiNjQ1YjNhYy8wLzMxMzAzMzJlMzEzMTJlMzEzMDM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcLazANBgkqhkiG 9w0BAQsFAAOCAQEAYdtkxblSVo0WTeZCUmNSLKlftBuwj0sDdqCmSJ80pTffQNAC D9y4xDHyDAMDlAEbvO0tUpc9Fug2NV3ShIXQ5x3tn42s99EwtJSZiE2rqMHPv3Fd R95hcSVOj3V5/nbEhV6KNWbJSiA6JTUSi0VFrMQP3OZDphFyotWnuBTdKlOKjUZ/ 1jfWjMWB7Bajt+fv+F/IgBN1KT9nQyg3k+7hmVV+W7ozT1qg0/Z06XtB+DDn0KF2 +DgEI3s6mn+TDJvxKABNRtMwQeyIS5KVybP/XYEZ+M6yGztrUexsYkBpAXXztPa+ yy5jxSMSnTbDeBLZsVO+UQN/uJJoSPgSeumMGQ== -----END CERTIFICATE-----Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org