$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa File: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (raw, json) Hash identifier: tkzZuf7JfbezRTv15414IroAVNAguQHh0TGGYRvOMs4= Subject key identifier: F4:A2:BA:32:D2:9E:A8:BE:59:E0:B6:BB:14:DB:47:F7:0C:C8:41:CF Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 25C4B5DB7509C4273CB6ACA98422AAEB27D54E2D Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa Signing time: Wed 17 Apr 2024 09:02:27 +0000 ROA not before: Wed 17 Apr 2024 08:57:27 +0000 ROA not after: Wed 16 Apr 2025 09:02:27 +0000 asID: 135455 IP address blocks: 103.68.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c4:b5:db:75:09:c4:27:3c:b6:ac:a9:84:22:aa:eb:27:d5:4e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Apr 17 08:57:27 2024 GMT Not After : Apr 16 09:02:27 2025 GMT Subject: CN=F4A2BA32D29EA8BE59E0B6BB14DB47F70CC841CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:64:4a:62:6b:6a:bc:eb:7d:4c:47:1b:6c:51: 55:81:aa:08:6f:ac:03:d9:f1:c7:b3:78:22:b1:e0: 40:8d:57:36:25:39:cd:e9:06:5d:2b:d0:5f:99:fb: bf:e2:88:20:ea:96:e1:c1:83:2c:c4:4e:1b:d3:b1: 54:d1:d7:e5:1b:ae:88:83:87:1b:7a:cd:a3:ac:d6: 1b:ca:40:d9:d4:67:54:40:77:59:30:af:89:a5:cc: d8:11:af:aa:36:12:33:bc:24:6b:12:b2:93:c9:db: 88:72:fd:57:af:03:92:4d:89:b0:e0:ea:bc:f8:50: 75:84:fa:73:9d:4f:cf:b3:43:bd:53:ce:06:07:bb: 94:83:d3:a3:e5:73:de:ef:5b:7e:20:e1:90:8f:23: e9:d0:98:cb:0a:8f:f5:d3:10:bf:e5:34:91:96:fa: 66:ca:0a:57:5e:d1:b7:3d:c6:55:6f:70:bf:ad:b6: 99:31:e7:1c:13:7d:74:a8:c7:21:7f:47:55:24:cd: 50:1a:7a:4f:b2:4b:ab:e9:ae:dd:a4:42:0b:e1:ad: 25:d5:97:3b:d0:a3:45:2b:ef:4e:a0:87:49:6b:17: 68:73:52:0a:dd:7f:5d:75:ca:5c:09:8d:8b:04:b9: bc:19:29:21:13:a8:f2:5a:c0:0a:93:38:5b:6f:51: 1f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A2:BA:32:D2:9E:A8:BE:59:E0:B6:BB:14:DB:47:F7:0C:C8:41:CF X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.136.0/24 Signature Algorithm: sha256WithRSAEncryption 64:e5:21:29:92:14:f9:ff:dd:ef:66:5a:73:5d:4b:7f:81:03: 3a:97:8a:5b:27:b8:73:64:a1:48:8b:68:ec:45:f2:cc:10:5f: 46:9b:e8:ae:fc:9e:23:c2:9a:66:6d:2c:31:07:a8:bc:11:d5: 9c:98:9b:1d:1c:71:11:68:8a:6e:09:47:11:43:63:34:5d:7f: 4d:62:ad:ec:54:fe:f6:31:1b:9e:45:7f:4e:3e:ae:fb:bb:4a: 90:2b:74:35:51:6e:42:c1:9c:a1:f3:1e:ba:c1:c0:24:f0:b3: 02:d5:f2:1f:20:16:58:24:66:7a:87:b1:20:ae:12:f9:d5:c0: 10:da:dc:43:8f:94:24:fc:6a:1b:59:9a:0d:e1:d0:52:d8:70: 42:64:6e:6a:fb:d4:84:10:64:cc:11:d9:34:90:70:bf:76:97: f0:98:2a:b5:47:7a:6b:a3:8c:ed:c5:71:65:46:bf:f1:bf:27: 52:58:e5:a7:09:54:8b:37:47:44:c2:00:3d:84:28:bb:94:f8: e2:74:c0:f0:27:fd:36:e7:a7:da:79:0f:70:d8:5d:73:18:99: e5:ec:fe:ea:7b:50:5e:55:df:30:95:dd:e7:b3:29:97:5b:a6: 5d:84:5a:8c:8e:c2:69:ac:75:a1:44:c5:ae:c8:93:25:6a:48: 9d:a2:5c:54 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJcS123UJxCc8tqyphCKq6yfVTi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNDA0MTcwODU3MjdaFw0yNTA0MTYwOTAyMjdaMDMxMTAvBgNV BAMTKEY0QTJCQTMyRDI5RUE4QkU1OUUwQjZCQjE0REI0N0Y3MENDODQxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbZEpia2q8631MRxtsUVWBqghv rAPZ8cezeCKx4ECNVzYlOc3pBl0r0F+Z+7/iiCDqluHBgyzEThvTsVTR1+UbroiD hxt6zaOs1hvKQNnUZ1RAd1kwr4mlzNgRr6o2EjO8JGsSspPJ24hy/VevA5JNibDg 6rz4UHWE+nOdT8+zQ71TzgYHu5SD06Plc97vW34g4ZCPI+nQmMsKj/XTEL/lNJGW +mbKClde0bc9xlVvcL+ttpkx5xwTfXSoxyF/R1UkzVAaek+yS6vprt2kQgvhrSXV lzvQo0Ur706gh0lrF2hzUgrdf111ylwJjYsEubwZKSETqPJawAqTOFtvUR+ZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9KK6MtKeqL5Z4La7FNtH9wzIQc8wHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzZGMxYjA1LTJhNjktNDViMC04 YzQ0LTYyNjc3MjI3NmJkOS8wLzMxMzAzMzJlMzYzODJlMzEzMzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0SIMA0GCSqG SIb3DQEBCwUAA4IBAQBk5SEpkhT5/93vZlpzXUt/gQM6l4pbJ7hzZKFIi2jsRfLM EF9Gm+iu/J4jwppmbSwxB6i8EdWcmJsdHHERaIpuCUcRQ2M0XX9NYq3sVP72MRue RX9OPq77u0qQK3Q1UW5CwZyh8x66wcAk8LMC1fIfIBZYJGZ6h7EgrhL51cAQ2txD j5Qk/GobWZoN4dBS2HBCZG5q+9SEEGTMEdk0kHC/dpfwmCq1R3pro4ztxXFlRr/x vydSWOWnCVSLN0dEwgA9hCi7lPjidMDwJ/0256faeQ9w2F1zGJnl7P7qe1BeVd8w ld3nsymXW6ZdhFqMjsJprHWhRMWuyJMlakidolxU -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org