$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa File: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (raw, json) Hash identifier: efLj25ix/3XnSCIV+vTekRdxejFibzSStSh3VR+XRXM= Subject key identifier: AD:7F:39:E9:89:10:15:9F:3F:9A:B9:83:C7:BB:3F:68:7F:82:F9:46 Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE Certificate serial: 6C9F44C7316D6F12E69765E1CC1568482BB531B8 Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa Signing time: Tue 26 Dec 2023 10:00:34 +0000 ROA not before: Tue 26 Dec 2023 09:55:34 +0000 ROA not after: Tue 24 Dec 2024 10:00:34 +0000 asID: 56260 IP address blocks: 103.29.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9f:44:c7:31:6d:6f:12:e6:97:65:e1:cc:15:68:48:2b:b5:31:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Validity Not Before: Dec 26 09:55:34 2023 GMT Not After : Dec 24 10:00:34 2024 GMT Subject: CN=AD7F39E98910159F3F9AB983C7BB3F687F82F946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:91:66:32:31:4b:51:3c:ef:3d:11:5d:f1: ea:e8:d1:da:ae:7b:09:45:7c:c8:81:1e:9b:a3:fa: b8:c0:f4:68:56:8c:4b:01:76:2a:d8:ad:f1:64:60: 61:c0:9f:cf:17:12:59:ed:8c:db:ee:ce:fe:9e:83: 3d:d7:26:45:0e:0a:c3:d2:76:36:79:19:7f:03:26: ff:ed:8b:0d:03:6a:da:61:53:33:83:f0:05:03:3d: 3a:63:e9:a3:c6:3c:77:e0:f4:5e:b8:c0:ed:59:ec: 98:2e:06:cf:df:14:a6:6d:f2:67:39:65:7f:b7:0b: c5:0a:6a:6b:83:c0:7d:de:09:8f:16:71:07:83:1f: 19:3e:76:84:db:87:77:19:bc:3b:c2:43:1d:63:f7: 07:d4:4a:eb:db:d4:bc:65:f0:b8:f0:b5:34:76:14: 6f:bc:2d:1d:52:10:fb:45:2e:c0:10:10:73:36:ec: 5d:e8:b8:18:26:dd:16:29:6d:7a:b4:27:9c:07:5b: 64:9a:93:66:20:54:b7:48:fd:1b:b9:f4:6a:1f:db: 6b:a4:ea:d7:da:13:85:ed:aa:58:72:92:b0:72:be: b1:a5:52:78:e1:2d:08:ce:4d:ce:25:a7:8c:d8:0c: c8:ea:a6:ea:e5:9f:d5:89:00:53:5e:6c:81:0f:f5: 18:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7F:39:E9:89:10:15:9F:3F:9A:B9:83:C7:BB:3F:68:7F:82:F9:46 X509v3 Authority Key Identifier: keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32342d3234203d3e203536323630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.184.0/24 Signature Algorithm: sha256WithRSAEncryption 36:d3:86:cc:3d:93:e1:71:06:9c:a0:4e:3f:8d:14:94:02:45: 4e:14:f2:fc:ee:63:97:49:16:e1:ae:db:0e:c5:24:c5:3b:f2: f5:92:19:5b:dc:1d:5a:29:b9:4a:e3:99:93:82:be:42:6e:c8: 53:dd:f5:3a:4e:96:a6:f9:6e:7f:f7:b4:c0:38:e8:5a:47:da: 1a:26:09:0d:d8:a3:42:b0:f3:d8:62:2c:c1:0f:ff:30:e5:ae: 81:16:f8:02:3c:51:2d:ae:3a:ea:2e:f1:f2:df:c5:d6:58:44: e2:55:aa:25:d0:33:d1:e2:8a:e8:df:19:53:63:fa:ab:83:00: 33:bf:30:11:45:08:9e:94:77:30:bf:9d:9d:9b:c8:c7:a9:a4: e3:33:62:13:7f:f7:9c:bb:ac:6a:7a:12:38:dc:4e:a4:13:c4: a4:68:29:a8:a2:29:74:aa:80:6e:54:f2:e0:29:60:dd:71:0d: f2:65:34:59:59:53:0b:cb:31:2b:d2:11:98:fd:2b:9e:ec:35: 03:b1:31:21:f1:9f:43:37:80:67:b6:86:16:0b:d1:2a:77:f3: 7c:ae:e8:cb:39:16:69:dc:68:74:a3:ad:ca:c5:4f:cf:be:01: 53:0b:36:0f:1e:6e:70:9f:60:ce:cd:57:11:fd:b1:81:66:8c: 4a:1c:3e:60 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbJ9ExzFtbxLml2XhzBVoSCu1MbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQw NzY3MkJERTAeFw0yMzEyMjYwOTU1MzRaFw0yNDEyMjQxMDAwMzRaMDMxMTAvBgNV BAMTKEFEN0YzOUU5ODkxMDE1OUYzRjlBQjk4M0M3QkIzRjY4N0Y4MkY5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFJFmMjFLUTzvPRFd8ero0dqu ewlFfMiBHpuj+rjA9GhWjEsBdirYrfFkYGHAn88XElntjNvuzv6egz3XJkUOCsPS djZ5GX8DJv/tiw0DatphUzOD8AUDPTpj6aPGPHfg9F64wO1Z7JguBs/fFKZt8mc5 ZX+3C8UKamuDwH3eCY8WcQeDHxk+doTbh3cZvDvCQx1j9wfUSuvb1Lxl8LjwtTR2 FG+8LR1SEPtFLsAQEHM27F3ouBgm3RYpbXq0J5wHW2Sak2YgVLdI/Ru59Gof22uk 6tfaE4XtqlhykrByvrGlUnjhLQjOTc4lp4zYDMjqpurln9WJAFNebIEP9RhjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUrX856YkQFZ8/mrmDx7s/aH+C+UYwHwYDVR0j BBgwFoAUTET29UO9u4WNNlbUGjZmBAdnK94wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMC80QzQ0RjZGNTQz QkRCQjg1OEQzNjU2RDQxQTM2NjYwNDA3NjcyQkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQwNzY3 MkJERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZjJjNjZjLTFmODctNGQ5OC1h NDY3LTMyMThiNjQ1YjNhYy8wLzMxMzAzMzJlMzIzOTJlMzEzODM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcduDANBgkqhkiG 9w0BAQsFAAOCAQEANtOGzD2T4XEGnKBOP40UlAJFThTy/O5jl0kW4a7bDsUkxTvy 9ZIZW9wdWim5SuOZk4K+Qm7IU931Ok6Wpvluf/e0wDjoWkfaGiYJDdijQrDz2GIs wQ//MOWugRb4AjxRLa466i7x8t/F1lhE4lWqJdAz0eKK6N8ZU2P6q4MAM78wEUUI npR3ML+dnZvIx6mk4zNiE3/3nLusanoSONxOpBPEpGgpqKIpdKqAblTy4Clg3XEN 8mU0WVlTC8sxK9IRmP0rnuw1A7ExIfGfQzeAZ7aGFgvRKnfzfK7oyzkWadxodKOt ysVPz74BUws2Dx5ucJ9gzs1XEf2xgWaMShw+YA== -----END CERTIFICATE-----Generated at Sun Nov 24 13:26:10 2024 by rpki-client on console-ams.rpki-client.org