$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa File: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: Dw/cfNum4SlCXx2aQw2+bHENQ4v1FsyS8brhulODo10= Subject key identifier: 49:97:D7:24:D5:3B:54:25:BE:35:DF:07:9B:CF:2A:71:BA:33:92:E9 Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E Certificate serial: 2EBF2911B547B6B54D4F7288A3A1879E02A72DBF Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa Signing time: Tue 09 Jul 2024 18:00:01 +0000 ROA not before: Tue 09 Jul 2024 17:55:01 +0000 ROA not after: Tue 08 Jul 2025 18:00:01 +0000 asID: 23679 IP address blocks: 103.238.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:bf:29:11:b5:47:b6:b5:4d:4f:72:88:a3:a1:87:9e:02:a7:2d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E Validity Not Before: Jul 9 17:55:01 2024 GMT Not After : Jul 8 18:00:01 2025 GMT Subject: CN=4997D724D53B5425BE35DF079BCF2A71BA3392E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:ab:f9:48:2b:c3:b1:e6:bb:bc:c7:c8:ee: 5f:70:81:af:9c:e1:88:76:e2:38:21:6e:ba:14:9b: 9e:4d:21:ec:9c:1b:50:fb:9e:46:54:0a:83:ce:f1: 1c:0c:67:ca:74:91:3e:a7:42:72:44:2b:f0:c6:44: 58:05:1b:82:bf:c8:bd:1f:53:eb:12:7b:fb:44:2c: d2:7a:2d:53:92:06:46:60:ff:dc:a7:14:f2:3f:d7: b9:31:c5:8d:f1:25:84:6d:91:2e:16:1b:23:71:41: 88:ee:81:23:66:4d:41:19:d9:27:bc:2c:94:7d:59: 5f:62:3c:3f:7c:1a:7a:29:ec:6b:f7:34:a4:56:40: 66:0b:10:53:30:3e:91:d2:4b:95:0f:b2:a0:32:d6: d3:bc:00:11:b7:06:b1:09:5c:af:e2:61:84:06:34: 2b:b8:10:b1:61:29:cb:91:e6:26:84:09:e9:dc:a1: f1:6c:39:f0:d0:4e:39:c0:03:93:0a:d8:47:fc:d2: d1:87:bf:e2:2d:b5:56:96:80:d6:14:2d:d1:30:a7: 83:34:31:e7:f9:eb:eb:10:69:fe:55:c7:2d:02:f5: 7f:58:2b:9d:0d:b6:84:c2:db:b0:e8:d8:3c:14:d0: 0b:40:75:0b:5c:52:98:05:3b:dd:34:45:6a:22:fd: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:97:D7:24:D5:3B:54:25:BE:35:DF:07:9B:CF:2A:71:BA:33:92:E9 X509v3 Authority Key Identifier: keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.202.0/24 Signature Algorithm: sha256WithRSAEncryption 09:ee:f5:23:b4:c3:3e:0e:7a:70:f4:54:4a:71:77:cb:0c:04: 3c:a9:13:a5:60:06:48:02:e8:bd:29:10:3c:1c:5e:c6:b4:b1: b3:05:be:40:43:11:d5:63:4d:5c:7b:db:b7:e9:8c:d2:fa:b2: ef:38:b4:d0:6c:b9:cf:f9:e7:48:17:d2:df:01:2e:f7:a1:59: 1a:52:6e:42:39:c9:96:e2:a6:8b:a0:4f:8b:1e:5a:a2:6e:47: ab:81:96:43:51:5f:68:5f:2a:36:c2:96:8c:3a:57:85:02:bf: 69:3f:59:ed:b5:0d:73:56:3a:86:a6:8a:6f:fe:56:49:97:4c: 57:8a:20:39:c9:8e:27:c4:3e:49:35:d8:44:69:0e:03:e7:f1: b3:7e:d8:36:94:88:59:8f:10:fc:21:d2:c8:fb:37:f7:b4:d3: 84:92:a1:ac:79:df:23:be:e6:37:77:30:bd:02:a5:1b:5b:d5: 59:1d:ed:46:4e:82:7f:4f:70:5d:f6:42:7b:10:63:53:e0:c8: 82:d1:6f:c4:1f:56:a9:cc:7c:77:8d:01:20:69:c7:62:69:41: d2:c4:1f:3e:15:47:43:7f:66:2c:11:8b:6a:7c:4b:58:37:f0: b4:cd:7b:3b:4e:b6:1f:0d:45:4d:0a:45:d7:6b:c2:ff:5c:9e: 55:1b:ab:e9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULr8pEbVHtrVNT3KIo6GHngKnLb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC NTlCRjkxRTAeFw0yNDA3MDkxNzU1MDFaFw0yNTA3MDgxODAwMDFaMDMxMTAvBgNV BAMTKDQ5OTdENzI0RDUzQjU0MjVCRTM1REYwNzlCQ0YyQTcxQkEzMzkyRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS86v5SCvDsea7vMfI7l9wga+c 4Yh24jghbroUm55NIeycG1D7nkZUCoPO8RwMZ8p0kT6nQnJEK/DGRFgFG4K/yL0f U+sSe/tELNJ6LVOSBkZg/9ynFPI/17kxxY3xJYRtkS4WGyNxQYjugSNmTUEZ2Se8 LJR9WV9iPD98Gnop7Gv3NKRWQGYLEFMwPpHSS5UPsqAy1tO8ABG3BrEJXK/iYYQG NCu4ELFhKcuR5iaECencofFsOfDQTjnAA5MK2Ef80tGHv+IttVaWgNYULdEwp4M0 Mef56+sQaf5Vxy0C9X9YK50NtoTC27Do2DwU0AtAdQtcUpgFO900RWoi/W4XAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSZfXJNU7VCW+Nd8Hm88qcbozkukwHwYDVR0j BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC RjkxRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzMxMzAzMzJlMzIzMzM4MmUzMjMwMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+7KMA0GCSqG SIb3DQEBCwUAA4IBAQAJ7vUjtMM+Dnpw9FRKcXfLDAQ8qROlYAZIAui9KRA8HF7G tLGzBb5AQxHVY01ce9u36YzS+rLvOLTQbLnP+edIF9LfAS73oVkaUm5COcmW4qaL oE+LHlqibkergZZDUV9oXyo2wpaMOleFAr9pP1nttQ1zVjqGpopv/lZJl0xXiiA5 yY4nxD5JNdhEaQ4D5/Gzftg2lIhZjxD8IdLI+zf3tNOEkqGsed8jvuY3dzC9AqUb W9VZHe1GToJ/T3Bd9kJ7EGNT4MiC0W/EH1apzHx3jQEgacdiaUHSxB8+FUdDf2Ys EYtqfEtYN/C0zXs7TrYfDUVNCkXXa8L/XJ5VG6vp -----END CERTIFICATE-----Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org