$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32332d3233203d3e203633383237.roa File: 3130332e33392e31322e302f32332d3233203d3e203633383237.roa (raw, json) Hash identifier: ESipPGaWYxRGOLDa3lXlGJb3f8FCnj+2d4bGvhqlgIk= Subject key identifier: EF:72:96:D9:9D:62:12:F3:FE:73:F4:7B:07:53:C5:8E:9A:C3:EE:DA Certificate issuer: /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B Certificate serial: 797A169D4BAAEEBC0E57404304B3636CEF344511 Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32332d3233203d3e203633383237.roa Signing time: Sat 28 Sep 2024 04:00:01 +0000 ROA not before: Sat 28 Sep 2024 03:55:01 +0000 ROA not after: Sat 27 Sep 2025 04:00:01 +0000 asID: 63827 IP address blocks: 103.39.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7a:16:9d:4b:aa:ee:bc:0e:57:40:43:04:b3:63:6c:ef:34:45:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B Validity Not Before: Sep 28 03:55:01 2024 GMT Not After : Sep 27 04:00:01 2025 GMT Subject: CN=EF7296D99D6212F3FE73F47B0753C58E9AC3EEDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:3d:3a:1b:c7:9f:72:67:b0:16:38:22:26: e0:0a:a6:cc:56:46:5e:e3:cc:d9:fd:10:08:fd:43: e6:3a:03:b6:b4:77:f2:42:78:dd:86:10:c0:96:d7: 2c:31:b6:69:4e:61:c7:00:c9:e3:36:07:41:0f:53: 99:98:9c:6e:82:32:e4:b8:ae:eb:43:fe:a6:bd:a3: ee:15:48:c0:2e:40:36:55:f1:34:c9:2a:24:ba:9d: 5e:ea:a2:d7:95:da:05:12:b4:53:8c:13:d4:88:ef: 81:98:7b:2f:0e:c1:e9:36:eb:82:34:75:42:da:5b: ef:16:ba:ee:30:d0:ff:49:9f:83:30:29:73:3c:0c: b6:78:0d:7d:75:03:a2:20:c8:14:2d:74:60:81:84: ba:ad:36:3d:bc:4d:b0:76:45:af:77:95:49:76:24: f9:ee:d6:f2:4f:61:35:e3:9d:72:1a:3c:a9:d4:60: 93:34:88:e3:bd:ed:8a:59:6f:63:33:ee:5b:c0:f5: a5:9f:7e:ed:d8:48:06:31:f9:28:fc:f6:d8:dd:51: a6:7f:4c:5c:aa:ee:a6:72:3a:29:0a:52:1a:05:d0: 2c:c0:fe:8b:05:88:35:dd:f1:6b:ae:cc:ac:05:64: 4e:81:91:07:fa:54:88:b2:1d:42:aa:c3:8a:9d:09: c2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:72:96:D9:9D:62:12:F3:FE:73:F4:7B:07:53:C5:8E:9A:C3:EE:DA X509v3 Authority Key Identifier: keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32332d3233203d3e203633383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.12.0/23 Signature Algorithm: sha256WithRSAEncryption 85:20:bc:63:5a:6b:68:64:98:7b:56:e3:e7:8a:60:ab:14:7e: 43:b3:b8:34:bb:01:c5:c5:82:4f:40:1d:ea:92:cb:51:57:cc: 6c:54:41:f0:9e:58:c0:ee:24:12:1d:1e:bc:2f:d5:b4:77:43: 26:89:d6:ce:50:d4:52:20:70:4c:49:f6:b1:43:ee:a2:2f:ca: 33:f1:ef:3e:e9:46:eb:7b:2b:f7:cb:fc:b4:3f:35:eb:98:21: 01:cf:9e:90:08:56:b0:96:eb:88:96:37:51:86:16:65:31:53: 01:0b:c5:f0:05:82:d7:66:a1:9d:cc:d0:71:55:49:da:b7:cd: 35:43:ba:30:30:90:e9:70:6a:1f:23:fe:a0:5f:50:8f:29:c7: 76:65:ef:5d:24:b4:c3:8e:9e:d6:f9:fe:03:1c:ea:ff:31:a2: 95:52:c7:05:05:59:0a:55:65:b6:e5:1a:2c:ea:b0:76:7f:27: 41:e8:8f:49:0a:18:76:2c:9b:d6:e6:f1:4a:ae:84:f9:72:7e: a2:3b:07:ad:ef:60:e1:66:33:e7:4b:08:95:28:13:75:40:b2: ed:2c:8e:24:0f:a1:c6:be:c4:4f:91:ec:ef:f0:f7:e2:d1:e1: 71:15:f1:f7:17:6b:a5:a0:3f:67:34:a5:40:59:fb:44:7a:8d: c4:0e:e9:4e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUeXoWnUuq7rwOV0BDBLNjbO80RREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNB MDMzNzg0QjAeFw0yNDA5MjgwMzU1MDFaFw0yNTA5MjcwNDAwMDFaMDMxMTAvBgNV BAMTKEVGNzI5NkQ5OUQ2MjEyRjNGRTczRjQ3QjA3NTNDNThFOUFDM0VFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVXz06G8efcmewFjgiJuAKpsxW Rl7jzNn9EAj9Q+Y6A7a0d/JCeN2GEMCW1ywxtmlOYccAyeM2B0EPU5mYnG6CMuS4 rutD/qa9o+4VSMAuQDZV8TTJKiS6nV7qoteV2gUStFOME9SI74GYey8Owek264I0 dULaW+8Wuu4w0P9Jn4MwKXM8DLZ4DX11A6IgyBQtdGCBhLqtNj28TbB2Ra93lUl2 JPnu1vJPYTXjnXIaPKnUYJM0iOO97YpZb2Mz7lvA9aWffu3YSAYx+Sj89tjdUaZ/ TFyq7qZyOikKUhoF0CzA/osFiDXd8WuuzKwFZE6BkQf6VIiyHUKqw4qdCcLvAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU73KW2Z1iEvP+c/R7B1PFjprD7towHwYDVR0j BBgwFoAU9ptjfqlN5MyRUL39Uye+A6AzeEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWE2ODcxMi0xZDlhLTQxNDMtODJmMS0xYzgyYzMzMTY1ZWEvMC9GNjlCNjM3RUE5 NERFNENDOTE1MEJERkQ1MzI3QkUwM0EwMzM3ODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNBMDMz Nzg0Qi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxYTY4NzEyLTFkOWEtNDE0My04 MmYxLTFjODJjMzMxNjVlYS8wLzMxMzAzMzJlMzMzOTJlMzEzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDM2MzMzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnJwwwDQYJKoZIhvcN AQELBQADggEBAIUgvGNaa2hkmHtW4+eKYKsUfkOzuDS7AcXFgk9AHeqSy1FXzGxU QfCeWMDuJBIdHrwv1bR3QyaJ1s5Q1FIgcExJ9rFD7qIvyjPx7z7pRut7K/fL/LQ/ NeuYIQHPnpAIVrCW64iWN1GGFmUxUwELxfAFgtdmoZ3M0HFVSdq3zTVDujAwkOlw ah8j/qBfUI8px3Zl710ktMOOntb5/gMc6v8xopVSxwUFWQpVZbblGizqsHZ/J0Ho j0kKGHYsm9bm8UquhPlyfqI7B63vYOFmM+dLCJUoE3VAsu0sjiQPoca+xE+R7O/w 9+LR4XEV8fcXa6WgP2c0pUBZ+0R6jcQO6U4= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org