$ rpki-client -vvf repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa File: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (raw, json) Hash identifier: U3Gs6gFYrqKdvd5j47kgxX4NaXmZB4E+Rz3ST2VSWc4= Subject key identifier: 19:72:FA:92:B5:52:22:31:CF:27:11:AE:8C:34:3E:F8:54:DA:BF:9B Certificate issuer: /CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Certificate serial: 1DEAE27D721508E352AF1C46BDB802CE54904E4E Authority key identifier: 9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa Signing time: Wed 23 Oct 2024 10:00:01 +0000 ROA not before: Wed 23 Oct 2024 09:55:01 +0000 ROA not after: Wed 22 Oct 2025 10:00:01 +0000 asID: 141652 IP address blocks: 103.162.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ea:e2:7d:72:15:08:e3:52:af:1c:46:bd:b8:02:ce:54:90:4e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Validity Not Before: Oct 23 09:55:01 2024 GMT Not After : Oct 22 10:00:01 2025 GMT Subject: CN=1972FA92B5522231CF2711AE8C343EF854DABF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:8d:6c:e1:e1:63:11:6b:df:c5:1d:1e:b4: 9a:3d:60:ed:85:4f:62:3f:7c:4c:d9:00:cf:ea:09: 8a:ff:b0:4b:d3:ef:30:e4:ba:67:b7:ef:7d:3b:5e: d2:5d:c9:ff:91:a3:a5:52:73:55:04:97:0b:b7:09: c8:d2:b1:1e:1b:f4:ed:82:ed:8b:82:36:7e:45:e7: cd:27:a7:9c:64:53:b6:10:93:7d:bd:37:a9:0e:fa: ac:9c:91:1f:97:bf:75:1a:2d:67:5e:ec:be:b7:22: 31:53:6e:9b:7d:f4:46:ff:f7:b3:ac:0e:d4:48:82: 42:8c:ee:3a:55:71:84:08:38:c8:69:67:1e:72:8d: a8:62:48:10:d3:ac:fb:2f:f0:63:50:0c:04:08:5c: 19:11:a2:97:d6:4d:00:b0:45:be:0b:e2:26:54:08: 57:85:42:ec:6e:4a:9f:5e:ce:1a:ff:13:eb:0d:ed: 47:69:49:e8:17:0b:c8:43:74:07:6e:bc:c4:44:ce: 5e:54:f3:1c:b1:8a:7d:5a:7e:67:c3:a0:e3:10:34: 47:f2:ac:e3:9c:49:6e:65:6b:bd:70:d6:ce:2a:73: 50:35:d8:f3:01:ca:2d:e7:7d:f5:11:c8:76:f8:f4: 13:56:b5:01:b9:33:8a:8d:1e:38:01:b9:de:e0:38: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:72:FA:92:B5:52:22:31:CF:27:11:AE:8C:34:3E:F8:54:DA:BF:9B X509v3 Authority Key Identifier: keyid:9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.112.0/23 Signature Algorithm: sha256WithRSAEncryption bc:6e:b6:f1:5c:65:e6:b5:f2:d5:05:5d:d1:aa:c7:e5:f9:e0: 73:f7:d0:94:a0:30:1f:84:28:cb:e5:18:e1:af:d4:b2:a3:fa: 9a:5c:34:02:64:04:ad:3d:61:60:b2:90:7f:e3:a0:69:41:e9: ef:1a:7b:da:f6:ce:11:fe:fc:bc:5b:eb:90:15:c7:b6:69:e4: 59:bc:a5:db:fc:52:c2:25:ab:06:49:6f:b0:fd:39:d3:2d:aa: d5:61:c7:3e:c1:a2:90:18:9f:fd:a1:18:62:26:c8:ec:cd:3c: 9f:3c:52:f2:94:bf:66:35:df:44:7d:9b:d1:c0:73:b5:67:0f: 4f:28:22:3a:13:63:ec:ec:45:4b:98:c4:e4:51:b8:15:05:c0: 4a:f7:6b:86:ed:b3:19:6f:95:26:ab:71:82:d1:9c:cf:fd:7f: 0f:4e:a0:c0:2e:19:df:58:3d:de:36:1f:40:17:73:af:87:fd: 75:ac:7c:d9:d7:67:61:6c:f5:b1:e0:d2:f3:d4:bb:71:21:1c: c1:d8:ba:77:53:62:0b:cc:89:84:02:44:9a:78:71:45:79:66: de:d6:45:2b:68:f4:b5:af:c7:22:6f:d5:61:0b:72:c1:47:1b: 3e:b7:c8:be:a9:80:dc:b2:bc:60:4c:36:37:49:d0:76:39:79: a1:eb:36:d0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHerifXIVCONSrxxGvbgCzlSQTk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2 RjYyNzAwNDAeFw0yNDEwMjMwOTU1MDFaFw0yNTEwMjIxMDAwMDFaMDMxMTAvBgNV BAMTKDE5NzJGQTkyQjU1MjIyMzFDRjI3MTFBRThDMzQzRUY4NTREQUJGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwaI1s4eFjEWvfxR0etJo9YO2F T2I/fEzZAM/qCYr/sEvT7zDkume37307XtJdyf+Ro6VSc1UElwu3CcjSsR4b9O2C 7YuCNn5F580np5xkU7YQk329N6kO+qyckR+Xv3UaLWde7L63IjFTbpt99Eb/97Os DtRIgkKM7jpVcYQIOMhpZx5yjahiSBDTrPsv8GNQDAQIXBkRopfWTQCwRb4L4iZU CFeFQuxuSp9ezhr/E+sN7UdpSegXC8hDdAduvMREzl5U8xyxin1afmfDoOMQNEfy rOOcSW5la71w1s4qc1A12PMByi3nffURyHb49BNWtQG5M4qNHjgBud7gOAHZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUGXL6krVSIjHPJxGujDQ++FTav5swHwYDVR0j BBgwFoAUnhBvlcxGG1sfSHpT9rLVo29icAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWQ3Mzg5NS1jODRjLTQ2NGYtOWI0Zi04ZDMwMzA2Yjk3MjcvMC85RTEwNkY5NUND NDYxQjVCMUY0ODdBNTNGNkIyRDVBMzZGNjI3MDA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2RjYy NzAwNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhZDczODk1LWM4NGMtNDY0Zi05 YjRmLThkMzAzMDZiOTcyNy8wLzMxMzAzMzJlMzEzNjMyMmUzMTMxMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnonAwDQYJ KoZIhvcNAQELBQADggEBALxutvFcZea18tUFXdGqx+X54HP30JSgMB+EKMvlGOGv 1LKj+ppcNAJkBK09YWCykH/joGlB6e8ae9r2zhH+/Lxb65AVx7Zp5Fm8pdv8UsIl qwZJb7D9OdMtqtVhxz7BopAYn/2hGGImyOzNPJ88UvKUv2Y130R9m9HAc7VnD08o IjoTY+zsRUuYxORRuBUFwEr3a4btsxlvlSarcYLRnM/9fw9OoMAuGd9YPd42H0AX c6+H/XWsfNnXZ2Fs9bHg0vPUu3EhHMHYundTYgvMiYQCRJp4cUV5Zt7WRSto9LWv xyJv1WELcsFHGz63yL6pgNyyvGBMNjdJ0HY5eaHrNtA= -----END CERTIFICATE-----Generated at Sun Nov 24 13:26:10 2024 by rpki-client on console-ams.rpki-client.org