$ rpki-client -vvf repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa File: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (raw, json) Hash identifier: ll5+Eoysy8XpiM0nraFXO1sEZ22G9cLIqmWZw25BjG8= Subject key identifier: 4F:A7:6A:BE:E6:64:B9:CC:F3:7E:9B:A5:4D:F5:43:05:B2:D8:63:49 Certificate issuer: /CN=99F644C407D1C8C133A923CC84619FC228E767AC Certificate serial: 65612190989FE31184559E68D33C1E89F814EBF2 Authority key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa Signing time: Tue 22 Oct 2024 14:01:31 +0000 ROA not before: Tue 22 Oct 2024 13:56:31 +0000 ROA not after: Tue 21 Oct 2025 14:01:31 +0000 asID: 142391 IP address blocks: 103.169.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:61:21:90:98:9f:e3:11:84:55:9e:68:d3:3c:1e:89:f8:14:eb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F644C407D1C8C133A923CC84619FC228E767AC Validity Not Before: Oct 22 13:56:31 2024 GMT Not After : Oct 21 14:01:31 2025 GMT Subject: CN=4FA76ABEE664B9CCF37E9BA54DF54305B2D86349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:70:d1:95:49:a4:77:23:a3:bf:3f:ef:3b: 0c:9d:56:ba:1b:1a:5e:26:41:9e:aa:00:c2:cb:ec: ed:e6:d7:f6:8e:7b:c2:38:7d:1c:3b:bf:85:b7:f7: ba:0e:e4:cd:28:c8:c2:b7:07:15:54:81:b0:5a:c7: c1:1d:e4:bc:8f:58:b2:18:e1:3b:21:dd:1e:a7:6d: 5a:85:0f:8d:4d:16:9e:b8:61:e9:a3:27:b1:d1:6e: 06:52:c8:4e:73:a8:15:72:8c:f6:ef:f4:39:c1:1e: 27:ce:cc:d2:2a:59:34:16:ef:1e:fc:b6:20:71:b9: 7f:c0:6f:89:de:53:57:0c:43:a2:ab:d6:40:63:52: ca:aa:2a:af:6e:0e:3c:20:08:2c:7f:a0:11:92:7c: 76:7f:01:01:69:14:7d:5e:02:3f:af:ff:9b:ae:3e: 82:1b:e1:bf:8b:6f:7b:ef:f6:0a:c2:90:d1:fa:43: 31:ba:bc:ac:1a:e3:8a:ec:81:1a:c9:79:07:3f:1a: d7:0e:5a:b8:7e:ed:35:f5:b0:34:82:18:2e:44:00: b9:c0:e2:7b:01:20:06:38:8a:1e:1d:bd:b8:6c:5a: ff:90:d9:13:2b:46:f0:17:b1:47:e0:08:8d:d1:93: 10:eb:d1:e7:48:45:a3:22:31:d1:91:c5:d2:ea:18: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A7:6A:BE:E6:64:B9:CC:F3:7E:9B:A5:4D:F5:43:05:B2:D8:63:49 X509v3 Authority Key Identifier: keyid:99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.44.0/24 Signature Algorithm: sha256WithRSAEncryption 71:a7:75:42:7a:5c:f6:d0:de:ab:3c:42:b9:b2:c3:bb:83:9b: c4:8e:70:19:7d:df:78:93:50:f9:4f:f9:4d:62:56:91:38:c6: 9f:af:0e:4c:a9:c4:7a:ef:73:c7:61:71:9a:6e:bf:f7:f0:f7: 33:0f:a4:fd:92:57:c3:d9:b6:4d:1f:a3:0c:3d:66:42:f7:02: cc:11:41:3e:6f:6e:77:f2:00:bc:9a:91:b2:b3:f4:7b:b3:e1: 7d:df:58:66:3c:8c:28:ce:4b:7a:ea:f0:76:60:7d:7d:5c:0b: f7:30:b4:18:e8:7f:a3:83:be:53:2c:6a:28:d3:71:a1:03:c1: 4e:75:c7:c9:46:e7:1c:e4:56:26:61:59:b7:68:31:ed:b4:68: d9:a9:97:67:59:5b:ad:72:8a:82:48:39:5c:46:a6:bb:50:3d: f3:1a:d8:10:13:33:fb:5a:44:39:f1:52:6a:98:c3:74:aa:55: c5:14:d8:9f:37:ea:ff:bd:57:bc:1c:4f:d1:47:26:38:f1:50: 42:b6:2c:02:a0:da:5a:00:f2:7a:a3:9a:d3:1e:dd:13:91:d8: 7c:62:4c:79:8b:b3:01:0d:26:a9:8d:d7:5b:f0:8e:97:ac:ac: e8:46:e0:2e:f9:5c:84:7b:41:3d:17:b4:83:09:25:d4:b7:c1: 2e:e4:b2:64 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZWEhkJif4xGEVZ5o0zweifgU6/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIy OEU3NjdBQzAeFw0yNDEwMjIxMzU2MzFaFw0yNTEwMjExNDAxMzFaMDMxMTAvBgNV BAMTKDRGQTc2QUJFRTY2NEI5Q0NGMzdFOUJBNTRERjU0MzA1QjJEODYzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOHDRlUmkdyOjvz/vOwydVrob Gl4mQZ6qAMLL7O3m1/aOe8I4fRw7v4W397oO5M0oyMK3BxVUgbBax8Ed5LyPWLIY 4Tsh3R6nbVqFD41NFp64YemjJ7HRbgZSyE5zqBVyjPbv9DnBHifOzNIqWTQW7x78 tiBxuX/Ab4neU1cMQ6Kr1kBjUsqqKq9uDjwgCCx/oBGSfHZ/AQFpFH1eAj+v/5uu PoIb4b+Lb3vv9grCkNH6QzG6vKwa44rsgRrJeQc/GtcOWrh+7TX1sDSCGC5EALnA 4nsBIAY4ih4dvbhsWv+Q2RMrRvAXsUfgCI3RkxDr0edIRaMiMdGRxdLqGKxxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUT6dqvuZkuczzfpulTfVDBbLYY0kwHwYDVR0j BBgwFoAUmfZExAfRyMEzqSPMhGGfwijnZ6wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMC85OUY2NDRDNDA3 RDFDOEMxMzNBOTIzQ0M4NDYxOUZDMjI4RTc2N0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIyOEU3 NjdBQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0NmI1MjQ4LWNlMzMtNGU5Ny04 ODJmLWY2MTQ1ZjMxOTAyNi8wLzMxMzAzMzJlMzEzNjM5MmUzNDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6ksMA0GCSqG SIb3DQEBCwUAA4IBAQBxp3VCelz20N6rPEK5ssO7g5vEjnAZfd94k1D5T/lNYlaR OMafrw5MqcR673PHYXGabr/38PczD6T9klfD2bZNH6MMPWZC9wLMEUE+b2538gC8 mpGys/R7s+F931hmPIwozkt66vB2YH19XAv3MLQY6H+jg75TLGoo03GhA8FOdcfJ Rucc5FYmYVm3aDHttGjZqZdnWVutcoqCSDlcRqa7UD3zGtgQEzP7WkQ58VJqmMN0 qlXFFNifN+r/vVe8HE/RRyY48VBCtiwCoNpaAPJ6o5rTHt0Tkdh8Ykx5i7MBDSap jddb8I6XrKzoRuAu+VyEe0E9F7SDCSXUt8Eu5LJk -----END CERTIFICATE-----Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org