$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3234203d3e203535363636.roa File: 3130332e3134302e37362e302f32332d3234203d3e203535363636.roa (raw, json) Hash identifier: WrHOV9CkqWwA6e9g8Np4hlwu3J/FQXMp6TSsn1N3W7M= Subject key identifier: 3D:86:DE:44:E6:C2:77:AC:F0:44:82:66:A9:24:F7:E1:4B:B5:09:8D Certificate issuer: /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Certificate serial: 0A2576D724A6FA1A4DF3C38FF3C9B71F15F33F51 Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3234203d3e203535363636.roa Signing time: Fri 22 Nov 2024 09:00:00 +0000 ROA not before: Fri 22 Nov 2024 08:55:00 +0000 ROA not after: Fri 21 Nov 2025 09:00:00 +0000 asID: 55666 IP address blocks: 103.140.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 15:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:25:76:d7:24:a6:fa:1a:4d:f3:c3:8f:f3:c9:b7:1f:15:f3:3f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Validity Not Before: Nov 22 08:55:00 2024 GMT Not After : Nov 21 09:00:00 2025 GMT Subject: CN=3D86DE44E6C277ACF0448266A924F7E14BB5098D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:cb:57:54:20:d1:b0:ef:9e:56:9e:c0:79: 0b:3a:85:97:45:ce:29:01:3e:b1:cc:cb:63:81:99: 05:0e:50:ab:48:4b:d4:d3:55:12:33:93:85:1c:2c: 59:1c:04:ca:f1:33:31:75:47:59:3d:44:07:1c:a0: 4c:c7:85:e1:9e:6f:c9:25:32:f6:14:6e:78:3e:f0: e5:6e:3e:d6:ae:15:f7:81:29:a9:5a:d0:4a:c2:3c: 5a:d6:7f:47:e0:77:ec:a5:48:4e:73:3d:bf:e8:8b: 2a:cd:9b:e7:72:9d:36:b5:14:fd:6f:e7:b8:58:c7: 87:33:7f:89:87:f5:42:70:6f:53:ba:0b:04:59:ea: b7:fc:88:07:9c:2d:f6:da:fe:6c:47:07:7a:05:90: 09:11:4d:38:1d:25:bb:0e:c7:48:51:05:d2:c4:b7: ad:05:f1:fb:70:c5:ce:94:70:d6:18:92:3c:c5:ab: ec:a1:26:3a:02:3e:0b:4f:87:e5:04:86:28:d9:8d: fa:ef:94:31:eb:2d:44:7b:fb:3c:e3:dd:a1:31:75: 41:57:92:0e:a4:2f:e6:1a:74:1d:56:1d:3f:ad:d7: 89:cc:43:9a:42:ae:4a:6f:84:db:70:08:6a:48:1f: e7:a1:d5:11:a9:ad:9b:df:27:78:ba:a8:18:8f:0b: 04:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:86:DE:44:E6:C2:77:AC:F0:44:82:66:A9:24:F7:E1:4B:B5:09:8D X509v3 Authority Key Identifier: keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32332d3234203d3e203535363636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.76.0/23 Signature Algorithm: sha256WithRSAEncryption 56:4b:b7:1f:22:00:5c:70:7f:fb:a5:e2:d0:fd:3a:1e:3a:9d: 4c:95:6d:f2:0a:38:e4:2e:14:50:c0:73:de:9a:10:95:cd:e4: 56:19:30:6d:84:f6:1e:ca:31:9c:9c:73:07:7c:fa:19:f0:c2: e1:f5:3f:4b:8a:b8:4e:ae:0d:43:9e:49:f2:17:a2:98:d4:6e: 39:7c:72:28:f7:66:b1:9b:42:cb:a4:b1:09:fb:e2:4d:9e:d6: 2d:10:6b:0f:dd:65:52:41:18:7d:84:0f:f1:27:76:4d:6a:3e: 15:3a:97:94:db:c4:74:77:e8:92:40:ad:5d:7b:99:ea:5e:79: 2b:fd:81:b0:d6:26:f8:63:a5:ca:cd:28:d1:2a:99:99:c3:93: 25:83:34:22:8a:f7:36:e3:b0:dc:a2:d6:f6:2f:18:cd:0e:2f: dd:fc:07:fd:82:27:19:0d:b5:3f:94:61:e2:39:2c:99:dc:96: 62:64:76:d7:bc:53:09:48:de:ba:f4:c0:30:43:10:a0:d7:6e: eb:65:c0:a3:85:e1:f8:fb:d8:86:fa:71:86:5d:18:e4:35:c5: b6:96:ed:7d:dd:c5:72:b5:82:4d:ff:3a:b3:2a:ac:35:70:cb: dd:f9:8f:ad:e9:0c:25:53:ed:77:7d:1b:40:d8:9f:e0:12:f7: b9:a1:63:60 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCiV21ySm+hpN88OP88m3HxXzP1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkw ODM2NjZDNjAeFw0yNDExMjIwODU1MDBaFw0yNTExMjEwOTAwMDBaMDMxMTAvBgNV BAMTKDNEODZERTQ0RTZDMjc3QUNGMDQ0ODI2NkE5MjRGN0UxNEJCNTA5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIstXVCDRsO+eVp7AeQs6hZdF zikBPrHMy2OBmQUOUKtIS9TTVRIzk4UcLFkcBMrxMzF1R1k9RAccoEzHheGeb8kl MvYUbng+8OVuPtauFfeBKala0ErCPFrWf0fgd+ylSE5zPb/oiyrNm+dynTa1FP1v 57hYx4czf4mH9UJwb1O6CwRZ6rf8iAecLfba/mxHB3oFkAkRTTgdJbsOx0hRBdLE t60F8ftwxc6UcNYYkjzFq+yhJjoCPgtPh+UEhijZjfrvlDHrLUR7+zzj3aExdUFX kg6kL+YadB1WHT+t14nMQ5pCrkpvhNtwCGpIH+eh1RGprZvfJ3i6qBiPCwSJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUPYbeRObCd6zwRIJmqST34Uu1CY0wHwYDVR0j BBgwFoAUNeayNXyYuXTBS6il3ka1GQg2ZsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDA3MzE2NC04MDA4LTQ5YzYtYjE4Ni0zYzdmZTliODBhMTcvMC8zNUU2QjIzNTdD OThCOTc0QzE0QkE4QTVERTQ2QjUxOTA4MzY2NkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkwODM2 NjZDNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwMDczMTY0LTgwMDgtNDljNi1i MTg2LTNjN2ZlOWI4MGExNy8wLzMxMzAzMzJlMzEzNDMwMmUzNzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeMTDANBgkqhkiG 9w0BAQsFAAOCAQEAVku3HyIAXHB/+6Xi0P06HjqdTJVt8go45C4UUMBz3poQlc3k VhkwbYT2HsoxnJxzB3z6GfDC4fU/S4q4Tq4NQ55J8heimNRuOXxyKPdmsZtCy6Sx CfviTZ7WLRBrD91lUkEYfYQP8Sd2TWo+FTqXlNvEdHfokkCtXXuZ6l55K/2BsNYm +GOlys0o0SqZmcOTJYM0Ior3NuOw3KLW9i8YzQ4v3fwH/YInGQ21P5Rh4jksmdyW YmR217xTCUjeuvTAMEMQoNdu62XAo4Xh+PvYhvpxhl0Y5DXFtpbtfd3FcrWCTf86 syqsNXDL3fmPrekMJVPtd30bQNif4BL3uaFjYA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org