$ rpki-client -vvf repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa File: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (raw, json) Hash identifier: 5lSAfhj3GmV5N5rxZTfCvtvsl+6ptfLew1sFCpnyjDk= Subject key identifier: 8D:E0:D3:B7:4D:E4:6B:5B:A2:E7:6F:DC:27:5E:65:36:F7:F9:C2:37 Certificate issuer: /CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Certificate serial: 3191188D5FF2913E288F47D9B15A3E02C13D06E9 Authority key identifier: E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa Signing time: Sat 14 Sep 2024 08:00:01 +0000 ROA not before: Sat 14 Sep 2024 07:55:01 +0000 ROA not after: Sat 13 Sep 2025 08:00:01 +0000 asID: 134620 IP address blocks: 103.203.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:91:18:8d:5f:f2:91:3e:28:8f:47:d9:b1:5a:3e:02:c1:3d:06:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Validity Not Before: Sep 14 07:55:01 2024 GMT Not After : Sep 13 08:00:01 2025 GMT Subject: CN=8DE0D3B74DE46B5BA2E76FDC275E6536F7F9C237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:c5:ac:f3:f6:65:a1:3d:a9:e7:ec:2b:1a: 7f:fb:05:ae:93:9a:fe:75:70:5a:f9:53:2d:88:29: 77:d6:69:d5:c9:ce:4f:61:f1:c1:61:97:92:f7:30: 8c:f5:9c:2e:59:70:0d:f0:2a:47:58:6f:e3:fb:34: 1a:ee:f7:e4:51:51:36:e4:2f:a8:c8:48:58:dc:7d: a7:c9:6f:f9:4a:a3:28:72:99:e8:45:0a:7a:a9:e4: da:94:69:8b:8c:4e:d4:32:0e:b8:4e:f4:4a:70:7d: 7c:1b:fb:82:b1:d8:ac:17:1e:37:65:47:43:d3:b8: 87:2c:85:00:df:e6:cb:56:3f:1e:72:ec:0c:34:73: bc:6d:fa:51:62:ba:83:0a:52:a1:c8:6a:dc:b1:32: 0b:3c:4f:cd:60:0f:a4:c1:d9:f5:98:7e:f1:7b:c3: 55:f5:75:39:97:36:49:28:53:80:87:ba:40:d1:cb: dd:4f:33:61:3e:ed:82:39:0a:bf:03:5c:a4:a2:66: 3d:4b:ee:a5:00:78:2d:b7:44:57:13:7c:2f:b6:bc: 79:68:bb:27:c4:2b:c7:47:1d:3f:cc:25:59:06:05: 60:09:5d:13:b6:ce:d9:c7:72:da:00:c9:81:ab:a4: b2:65:02:8f:1c:95:82:a1:03:c5:c7:97:9a:8a:62: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E0:D3:B7:4D:E4:6B:5B:A2:E7:6F:DC:27:5E:65:36:F7:F9:C2:37 X509v3 Authority Key Identifier: keyid:E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.203.79.0/24 Signature Algorithm: sha256WithRSAEncryption 25:61:e5:f5:7b:94:af:c7:8e:ce:7e:50:c4:fd:65:a2:2e:0a: 13:4d:04:8b:b4:07:07:6e:24:6b:40:49:97:75:e0:b8:3a:14: 98:97:30:58:f5:99:e4:bc:ce:fe:9a:4b:eb:b7:21:01:b3:45: 42:22:47:e5:a1:07:35:23:fd:5b:3f:2c:87:6e:71:26:2a:fa: 6a:83:9f:86:7f:3f:5c:9f:b8:c9:78:72:31:d8:d4:fb:f3:91: 40:21:af:3d:63:45:f0:b1:c7:c0:68:ad:37:2f:48:43:7c:e3: 62:94:3f:d7:3a:75:8d:cf:af:d2:da:85:d2:8b:a2:cd:f0:30: 9b:65:95:69:69:cf:dc:1f:0c:03:4a:88:2d:8a:73:13:aa:8a: 5d:72:27:57:b4:d7:9d:17:74:06:ca:d2:ad:ea:ff:94:d4:01: ec:d2:50:a4:23:c2:29:8f:ae:9c:cc:d3:8d:79:92:e0:b0:9a: 61:8c:46:24:a0:e6:4a:43:3a:f6:3b:a8:0f:c1:4e:7a:a1:11: ea:e0:98:f0:60:06:67:d2:13:ac:c0:54:4e:d3:43:c1:27:63: 31:d0:e5:12:9c:d9:64:f7:0d:13:36:f5:3d:ae:b0:7e:2e:62: 8f:1b:ab:42:67:ee:99:13:4a:e7:59:b8:0f:1e:f1:34:e9:65: 77:f0:0e:03 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMZEYjV/ykT4oj0fZsVo+AsE9BukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFD REI2OTJBNDAeFw0yNDA5MTQwNzU1MDFaFw0yNTA5MTMwODAwMDFaMDMxMTAvBgNV BAMTKDhERTBEM0I3NERFNDZCNUJBMkU3NkZEQzI3NUU2NTM2RjdGOUMyMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FcWs8/ZloT2p5+wrGn/7Ba6T mv51cFr5Uy2IKXfWadXJzk9h8cFhl5L3MIz1nC5ZcA3wKkdYb+P7NBru9+RRUTbk L6jISFjcfafJb/lKoyhymehFCnqp5NqUaYuMTtQyDrhO9EpwfXwb+4Kx2KwXHjdl R0PTuIcshQDf5stWPx5y7Aw0c7xt+lFiuoMKUqHIatyxMgs8T81gD6TB2fWYfvF7 w1X1dTmXNkkoU4CHukDRy91PM2E+7YI5Cr8DXKSiZj1L7qUAeC23RFcTfC+2vHlo uyfEK8dHHT/MJVkGBWAJXRO2ztnHctoAyYGrpLJlAo8clYKhA8XHl5qKYl37AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUjeDTt03ka1ui52/cJ15lNvf5wjcwHwYDVR0j BBgwFoAU4aJLCY6awHxlj2r+4JkHUc22kqQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGFhNGMwZi05OTkyLTQyZmMtYTU0Mi1lZmY3NDA5MWIzMzQvMC9FMUEyNEIwOThF OUFDMDdDNjU4RjZBRkVFMDk5MDc1MUNEQjY5MkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFDREI2 OTJBNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkYWE0YzBmLTk5OTItNDJmYy1h NTQyLWVmZjc0MDkxYjMzNC8wLzMxMzAzMzJlMzIzMDMzMmUzNzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM0MzYzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8tPMA0GCSqG SIb3DQEBCwUAA4IBAQAlYeX1e5Svx47OflDE/WWiLgoTTQSLtAcHbiRrQEmXdeC4 OhSYlzBY9ZnkvM7+mkvrtyEBs0VCIkfloQc1I/1bPyyHbnEmKvpqg5+Gfz9cn7jJ eHIx2NT785FAIa89Y0XwscfAaK03L0hDfONilD/XOnWNz6/S2oXSi6LN8DCbZZVp ac/cHwwDSogtinMTqopdcidXtNedF3QGytKt6v+U1AHs0lCkI8Ipj66czNONeZLg sJphjEYkoOZKQzr2O6gPwU56oRHq4JjwYAZn0hOswFRO00PBJ2Mx0OUSnNlk9w0T NvU9rrB+LmKPG6tCZ+6ZE0rnWbgPHvE06WV38A4D -----END CERTIFICATE-----Generated at Sun Nov 24 10:18:22 2024 by rpki-client on console-fra.rpki-client.org