$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138352e302f32342d3234203d3e203536323630.roa File: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (raw, json) Hash identifier: TcgbGNuyBQlZcuhqAjEp4zRcaDrtCAHLYUBwM9jkuOU= Subject key identifier: 76:6C:B9:C2:F9:3F:A8:DA:08:02:1D:4C:58:EF:23:A2:88:F3:78:98 Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE Certificate serial: 0D1E5364A3F98BF96F86C76735AB4668204DFC97 Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138352e302f32342d3234203d3e203536323630.roa Signing time: Tue 26 Dec 2023 10:00:34 +0000 ROA not before: Tue 26 Dec 2023 09:55:34 +0000 ROA not after: Tue 24 Dec 2024 10:00:34 +0000 asID: 56260 IP address blocks: 103.29.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1e:53:64:a3:f9:8b:f9:6f:86:c7:67:35:ab:46:68:20:4d:fc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Validity Not Before: Dec 26 09:55:34 2023 GMT Not After : Dec 24 10:00:34 2024 GMT Subject: CN=766CB9C2F93FA8DA08021D4C58EF23A288F37898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:57:69:e9:a9:83:5e:56:7d:47:f1:7e:be: 16:50:35:9c:b0:52:9e:d1:58:f6:d2:f0:6b:9c:d2: fb:31:9d:59:82:ac:ee:bf:af:65:54:b7:fb:1b:eb: 24:44:4a:e2:9b:70:38:88:53:62:5c:db:52:8b:6d: 80:c4:1c:1a:bb:e1:33:2d:67:da:09:2d:e3:61:cb: 02:04:12:b6:8b:5e:4b:a6:28:0e:39:82:cd:67:11: e1:3a:3c:b1:e3:f5:8e:80:f7:d9:b7:4c:9b:b1:bb: 27:9e:13:f6:63:c8:5b:e4:3e:c0:81:e4:a1:07:70: 7a:2e:b7:a0:7f:4d:4c:cd:73:9f:a6:55:7f:64:87: 85:bc:80:b0:eb:28:cc:22:43:d8:25:7a:22:f2:6e: 11:03:4b:4f:8d:a8:3e:11:c7:bb:9b:61:f8:14:fe: 77:6f:4b:1e:ac:b4:2b:f1:e0:1c:8c:06:b8:07:f7: 10:83:10:ea:1d:7a:e7:98:46:d5:2b:a0:5f:6c:da: 47:b0:ba:29:8a:94:73:f2:20:1c:0e:d4:af:ff:32: f0:6a:10:79:ee:e9:91:42:ff:71:55:b8:58:bc:2c: 22:e6:c3:94:1b:c8:b9:3b:a5:85:7e:f6:15:8a:65: fd:41:94:66:5c:5e:6a:90:4f:8a:5f:b2:a3:f4:8a: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6C:B9:C2:F9:3F:A8:DA:08:02:1D:4C:58:EF:23:A2:88:F3:78:98 X509v3 Authority Key Identifier: keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138352e302f32342d3234203d3e203536323630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.185.0/24 Signature Algorithm: sha256WithRSAEncryption 07:8b:7c:a7:eb:a3:81:3c:b5:8a:d1:40:de:99:ea:95:c5:58: 64:23:ec:53:3b:44:ec:b5:a4:d7:12:74:01:0f:2f:ab:77:29: ba:cf:47:2a:a2:58:70:ea:dc:67:01:ad:b1:f5:80:b6:4d:08: cf:82:34:f3:e4:13:7a:d4:b5:f9:98:e0:a4:f8:45:e3:cc:73: ab:8e:70:68:3b:1f:71:5b:7e:aa:45:7f:1b:1f:d2:81:b4:59: b0:9b:9e:d9:e4:c0:af:21:36:91:f0:60:aa:de:c6:7a:c7:f3: c9:40:bf:b2:5d:7a:9b:1c:23:fe:78:a3:b2:37:65:3b:71:55: 5c:91:d0:57:84:6d:57:d0:18:e7:cc:41:f1:55:29:ac:57:17: 09:9e:c0:fb:c3:84:26:39:81:97:1b:b9:74:63:80:4e:04:88: 70:89:34:6e:12:ff:30:02:91:63:bf:28:2d:d5:23:a6:c4:55: f4:07:2a:d7:8c:38:e5:8f:7d:62:d6:51:31:69:55:74:fe:25: 41:0d:d3:f3:bf:66:1f:64:0d:2f:91:e0:3f:13:60:21:31:08: ac:46:3f:68:d3:a7:f7:1d:49:52:f6:98:e9:17:48:25:73:80: c8:6a:32:2e:12:45:53:ee:ff:27:74:13:e6:af:cf:cd:6a:a7: e0:7d:c5:6e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDR5TZKP5i/lvhsdnNatGaCBN/JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQw NzY3MkJERTAeFw0yMzEyMjYwOTU1MzRaFw0yNDEyMjQxMDAwMzRaMDMxMTAvBgNV BAMTKDc2NkNCOUMyRjkzRkE4REEwODAyMUQ0QzU4RUYyM0EyODhGMzc4OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pFdp6amDXlZ9R/F+vhZQNZyw Up7RWPbS8Guc0vsxnVmCrO6/r2VUt/sb6yRESuKbcDiIU2Jc21KLbYDEHBq74TMt Z9oJLeNhywIEEraLXkumKA45gs1nEeE6PLHj9Y6A99m3TJuxuyeeE/ZjyFvkPsCB 5KEHcHout6B/TUzNc5+mVX9kh4W8gLDrKMwiQ9gleiLybhEDS0+NqD4Rx7ubYfgU /ndvSx6stCvx4ByMBrgH9xCDEOodeueYRtUroF9s2kewuimKlHPyIBwO1K//MvBq EHnu6ZFC/3FVuFi8LCLmw5QbyLk7pYV+9hWKZf1BlGZcXmqQT4pfsqP0inw9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUdmy5wvk/qNoIAh1MWO8joojzeJgwHwYDVR0j BBgwFoAUTET29UO9u4WNNlbUGjZmBAdnK94wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMC80QzQ0RjZGNTQz QkRCQjg1OEQzNjU2RDQxQTM2NjYwNDA3NjcyQkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQwNzY3 MkJERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZjJjNjZjLTFmODctNGQ5OC1h NDY3LTMyMThiNjQ1YjNhYy8wLzMxMzAzMzJlMzIzOTJlMzEzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcduTANBgkqhkiG 9w0BAQsFAAOCAQEAB4t8p+ujgTy1itFA3pnqlcVYZCPsUztE7LWk1xJ0AQ8vq3cp us9HKqJYcOrcZwGtsfWAtk0Iz4I08+QTetS1+ZjgpPhF48xzq45waDsfcVt+qkV/ Gx/SgbRZsJue2eTAryE2kfBgqt7GesfzyUC/sl16mxwj/nijsjdlO3FVXJHQV4Rt V9AY58xB8VUprFcXCZ7A+8OEJjmBlxu5dGOATgSIcIk0bhL/MAKRY78oLdUjpsRV 9Acq14w45Y99YtZRMWlVdP4lQQ3T879mH2QNL5HgPxNgITEIrEY/aNOn9x1JUvaY 6RdIJXOAyGoyLhJFU+7/J3QT5q/PzWqn4H3Fbg== -----END CERTIFICATE-----Generated at Sun Nov 24 13:13:45 2024 by rpki-client on console-fra.rpki-client.org