$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa File: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (raw, json) Hash identifier: 2kAwuTxDjWCw6sX6vuX7ESl/s76ZlSIQ2pRBpS6CjuA= Subject key identifier: 14:78:5F:1F:24:44:EC:B7:4E:02:9A:6E:C7:31:DF:6F:9D:07:77:5C Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 0C6EB3F4C1225DC1291D562832E17183E9468057 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa Signing time: Tue 30 Jan 2024 16:00:00 +0000 ROA not before: Tue 30 Jan 2024 15:55:00 +0000 ROA not after: Tue 28 Jan 2025 16:00:00 +0000 asID: 150501 IP address blocks: 103.120.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:6e:b3:f4:c1:22:5d:c1:29:1d:56:28:32:e1:71:83:e9:46:80:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Jan 30 15:55:00 2024 GMT Not After : Jan 28 16:00:00 2025 GMT Subject: CN=14785F1F2444ECB74E029A6EC731DF6F9D07775C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e4:9a:8f:d6:5c:8c:9d:21:40:f5:de:38:44: 88:cf:97:88:75:2d:34:fc:40:e4:a6:53:3a:9e:93: a4:9d:dc:e2:6f:89:cc:9c:af:db:ed:3b:c4:60:22: 3c:0e:37:2e:8c:a1:d2:57:42:fa:c8:fd:3b:56:75: d1:60:10:56:21:ea:05:63:94:b1:3a:e1:f5:61:5a: 33:a3:67:6c:8a:5f:39:a0:58:4d:95:27:3b:f1:f2: d3:ad:39:bd:88:3e:c0:ed:5b:30:08:05:fc:a9:62: 8e:fd:21:35:d8:9d:98:86:47:01:f4:ac:05:37:f2: d6:33:4e:e4:19:4b:28:78:7e:47:22:5a:b1:ef:44: 5a:79:27:52:a2:b6:85:fd:bb:88:ab:23:82:40:02: 8a:e0:61:56:7a:14:c7:36:5e:9b:ec:ea:ef:a5:7f: f3:c7:a6:b9:f6:28:b7:5e:c0:5c:0f:0b:5f:09:73: 36:a9:e1:26:24:ef:94:0d:11:e3:61:38:a8:a3:4b: d7:5a:34:1f:17:d9:c1:07:d2:92:5b:c8:99:78:00: fc:ed:d2:be:30:22:e6:0c:89:f4:37:2e:10:ce:23: 1b:38:b1:eb:77:5e:e2:da:19:24:b1:2f:81:4d:f8: bb:28:ab:d5:77:2c:59:9f:11:74:75:d7:05:63:b0: 73:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:78:5F:1F:24:44:EC:B7:4E:02:9A:6E:C7:31:DF:6F:9D:07:77:5C X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.76.0/24 Signature Algorithm: sha256WithRSAEncryption 12:f7:fa:ad:ec:b5:cf:40:94:90:92:c4:a6:06:d8:9e:1a:8c: fb:86:89:89:e6:27:24:ad:c6:1b:20:3c:2b:4b:96:d6:99:86: d5:5e:61:6d:fc:d0:32:62:54:c2:26:c8:ee:15:e9:33:0b:cf: e9:6f:23:06:68:47:e5:38:3c:d6:55:e7:5a:a5:d9:62:d1:d1: f9:b3:df:21:12:a3:86:af:ae:1f:34:b4:d6:a7:37:86:5b:96: 18:a9:44:51:94:51:d1:be:a5:8b:ed:1d:84:f8:c7:22:bc:e9: 61:32:b4:d9:8c:df:f1:25:fd:ba:ee:c2:e0:87:4e:a9:24:9e: 43:8e:99:e8:73:3a:ee:92:82:bd:30:54:0e:c5:ec:ce:49:6f: c4:34:ab:b1:f9:ed:9e:ce:a0:5b:35:e4:ed:07:3b:65:19:f2: 6a:a9:4d:31:06:0f:42:1e:ad:ce:ec:b3:24:67:6d:74:db:44: 37:d8:24:7b:38:88:6b:8c:89:9d:5f:93:f3:69:78:a5:47:29: f4:15:1d:55:5c:a1:50:14:64:f0:ab:8b:03:e1:01:c5:59:2e: 6c:9b:8e:56:d6:6e:2e:dc:a9:37:60:87:3e:32:07:35:8f:50: 2d:1e:0c:64:eb:49:5d:71:7e:43:df:b8:ff:64:84:bd:a2:30: fb:a8:f4:6a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDG6z9MEiXcEpHVYoMuFxg+lGgFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNDAxMzAxNTU1MDBaFw0yNTAxMjgxNjAwMDBaMDMxMTAvBgNV BAMTKDE0Nzg1RjFGMjQ0NEVDQjc0RTAyOUE2RUM3MzFERjZGOUQwNzc3NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl5JqP1lyMnSFA9d44RIjPl4h1 LTT8QOSmUzqek6Sd3OJvicycr9vtO8RgIjwONy6ModJXQvrI/TtWddFgEFYh6gVj lLE64fVhWjOjZ2yKXzmgWE2VJzvx8tOtOb2IPsDtWzAIBfypYo79ITXYnZiGRwH0 rAU38tYzTuQZSyh4fkciWrHvRFp5J1KitoX9u4irI4JAAorgYVZ6FMc2Xpvs6u+l f/PHprn2KLdewFwPC18Jczap4SYk75QNEeNhOKijS9daNB8X2cEH0pJbyJl4APzt 0r4wIuYMifQ3LhDOIxs4set3XuLaGSSxL4FN+Lsoq9V3LFmfEXR11wVjsHPrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFHhfHyRE7LdOAppuxzHfb50Hd1wwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhZGM3NjVhLWZmOGQtNGIxZi1h NTlhLTI1ZmY3YmQ0ZjU4YS8wLzMxMzAzMzJlMzEzMjMwMmUzNzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3hMMA0GCSqG SIb3DQEBCwUAA4IBAQAS9/qt7LXPQJSQksSmBtieGoz7homJ5ickrcYbIDwrS5bW mYbVXmFt/NAyYlTCJsjuFekzC8/pbyMGaEflODzWVedapdli0dH5s98hEqOGr64f NLTWpzeGW5YYqURRlFHRvqWL7R2E+McivOlhMrTZjN/xJf267sLgh06pJJ5Djpno czrukoK9MFQOxezOSW/ENKux+e2ezqBbNeTtBztlGfJqqU0xBg9CHq3O7LMkZ210 20Q32CR7OIhrjImdX5PzaXilRyn0FR1VXKFQFGTwq4sD4QHFWS5sm45W1m4u3Kk3 YIc+Mgc1j1AtHgxk60ldcX5D37j/ZIS9ojD7qPRq -----END CERTIFICATE-----Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org