$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa File: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (raw, json) Hash identifier: iyoiMRwsIajIM2TaWhebxXz1q29AeJvhYkGXkSK1Bd0= Subject key identifier: 3A:BA:5F:E7:28:AB:35:1C:68:AE:42:C9:4D:4A:57:F6:6D:8D:72:78 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 4C6E9A81B83B01C42ACB3E1DA08943D515B1ADEF Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa Signing time: Wed 17 Apr 2024 09:02:27 +0000 ROA not before: Wed 17 Apr 2024 08:57:27 +0000 ROA not after: Wed 16 Apr 2025 09:02:27 +0000 asID: 135455 IP address blocks: 103.68.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6e:9a:81:b8:3b:01:c4:2a:cb:3e:1d:a0:89:43:d5:15:b1:ad:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Apr 17 08:57:27 2024 GMT Not After : Apr 16 09:02:27 2025 GMT Subject: CN=3ABA5FE728AB351C68AE42C94D4A57F66D8D7278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:47:0e:85:1a:50:5a:e1:82:f9:5c:aa:66: a0:3b:65:d6:d2:61:ac:c6:b3:fe:b5:ab:ba:ea:72: b7:60:82:5f:62:af:df:d3:69:18:b1:4d:be:88:cc: b5:20:52:89:57:ac:60:47:a1:6b:08:2b:d0:b3:90: d0:4f:6b:e4:26:81:e4:08:7a:f5:af:1b:81:0b:bc: 85:29:ba:22:18:bf:ae:a5:e5:a6:d8:9f:5b:f7:f2: ce:11:b3:ed:c0:ce:ff:10:27:3a:41:b8:c6:e3:2a: 68:24:6c:7d:46:61:c3:d5:aa:5b:70:ed:11:be:68: b5:d9:a3:96:db:56:da:f6:cb:4b:d4:7a:da:ae:75: 62:e4:3a:aa:c9:47:2f:71:22:7f:87:b2:7f:f7:c1: 38:92:79:fe:63:e5:56:06:48:81:97:8c:ff:e6:3e: bc:c5:dd:9b:2f:de:88:31:cb:22:a6:b9:fb:60:88: 69:43:89:ae:b0:0c:df:9e:f1:53:c9:11:bc:66:82: 01:52:42:16:bf:99:83:bb:74:76:50:d7:7b:9f:71: b0:96:19:78:4d:ca:d2:0c:37:eb:5a:75:39:c1:96: 10:43:50:05:e4:5b:02:0c:f3:4d:22:ee:8b:c7:33: cf:6f:a2:1f:19:f7:b2:eb:8f:68:31:d9:d4:e7:f1: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BA:5F:E7:28:AB:35:1C:68:AE:42:C9:4D:4A:57:F6:6D:8D:72:78 X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.137.0/24 Signature Algorithm: sha256WithRSAEncryption 67:e4:d9:1f:7b:23:a7:23:06:77:11:d1:78:4f:57:d8:0e:f5: e3:24:0a:dc:07:3a:8e:8e:41:42:eb:58:04:15:85:d1:58:08: 43:f1:bc:9d:63:ee:60:1f:a8:45:44:a6:1d:e6:2f:a3:07:e0: 61:6a:38:b3:a0:2f:1f:79:f3:24:b9:cd:32:5c:4e:4b:fb:74: 10:27:1a:3f:f7:61:2c:a9:74:b9:48:a4:19:e2:84:78:80:fd: 27:45:94:15:b6:0f:b3:a9:55:1a:9f:f6:74:06:14:38:e0:ca: 47:f0:cc:05:be:db:33:37:8c:c5:83:2d:a0:58:6a:53:94:b0: b7:ac:5e:a7:00:d5:d9:ad:de:ae:7d:9c:cb:30:32:ae:41:fc: 3d:03:de:59:b1:60:8c:f2:90:14:f0:3f:7b:78:dc:92:7a:99: 0f:b6:c1:e9:ad:5a:14:df:6c:17:30:a0:a4:e6:0a:e1:57:4e: 82:f3:6c:b3:31:58:3d:53:fe:e1:5c:e1:89:72:51:b0:cf:d6: 38:da:01:a0:ac:42:d1:c7:f4:05:4b:89:be:7e:1f:cc:66:8f: c1:03:c6:a7:a2:07:11:ac:e0:a4:94:e8:84:93:02:8d:10:03: 4a:9b:f3:fd:b5:a5:6a:4c:7f:5a:d4:e7:a6:b5:74:06:26:da: 69:5b:a4:77 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTG6agbg7AcQqyz4doIlD1RWxre8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNDA0MTcwODU3MjdaFw0yNTA0MTYwOTAyMjdaMDMxMTAvBgNV BAMTKDNBQkE1RkU3MjhBQjM1MUM2OEFFNDJDOTRENEE1N0Y2NkQ4RDcyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RkcOhRpQWuGC+VyqZqA7ZdbS YazGs/61q7rqcrdggl9ir9/TaRixTb6IzLUgUolXrGBHoWsIK9CzkNBPa+QmgeQI evWvG4ELvIUpuiIYv66l5abYn1v38s4Rs+3Azv8QJzpBuMbjKmgkbH1GYcPVqltw 7RG+aLXZo5bbVtr2y0vUetqudWLkOqrJRy9xIn+Hsn/3wTiSef5j5VYGSIGXjP/m PrzF3Zsv3ogxyyKmuftgiGlDia6wDN+e8VPJEbxmggFSQha/mYO7dHZQ13ufcbCW GXhNytIMN+tadTnBlhBDUAXkWwIM800i7ovHM89voh8Z97Lrj2gx2dTn8ZKLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOrpf5yirNRxorkLJTUpX9m2NcngwHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzZGMxYjA1LTJhNjktNDViMC04 YzQ0LTYyNjc3MjI3NmJkOS8wLzMxMzAzMzJlMzYzODJlMzEzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0SJMA0GCSqG SIb3DQEBCwUAA4IBAQBn5NkfeyOnIwZ3EdF4T1fYDvXjJArcBzqOjkFC61gEFYXR WAhD8bydY+5gH6hFRKYd5i+jB+BhajizoC8fefMkuc0yXE5L+3QQJxo/92EsqXS5 SKQZ4oR4gP0nRZQVtg+zqVUan/Z0BhQ44MpH8MwFvtszN4zFgy2gWGpTlLC3rF6n ANXZrd6ufZzLMDKuQfw9A95ZsWCM8pAU8D97eNySepkPtsHprVoU32wXMKCk5grh V06C82yzMVg9U/7hXOGJclGwz9Y42gGgrELRx/QFS4m+fh/MZo/BA8anogcRrOCk lOiEkwKNEANKm/P9taVqTH9a1OemtXQGJtppW6R3 -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org