$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31352e302f32342d3234203d3e20313338303936.roa File: 3130332e38352e31352e302f32342d3234203d3e20313338303936.roa (raw, json) Hash identifier: uCvkpi9HolkTKU1xLo49+EhyF4G4kHCLMfW3P8bndvA= Subject key identifier: F4:B7:5B:21:73:F4:E8:1D:1A:D4:14:03:BE:9A:05:83:A7:25:F6:F5 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 6DCC112AFF61AFDE16D99729CDAF0657D2D5B0F6 Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31352e302f32342d3234203d3e20313338303936.roa Signing time: Tue 13 Aug 2024 10:04:48 +0000 ROA not before: Tue 13 Aug 2024 09:59:48 +0000 ROA not after: Tue 12 Aug 2025 10:04:48 +0000 asID: 138096 IP address blocks: 103.85.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:cc:11:2a:ff:61:af:de:16:d9:97:29:cd:af:06:57:d2:d5:b0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Aug 13 09:59:48 2024 GMT Not After : Aug 12 10:04:48 2025 GMT Subject: CN=F4B75B2173F4E81D1AD41403BE9A0583A725F6F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:af:0a:5a:10:d5:87:e9:5b:2c:6b:c8:f6: 2d:f6:19:f1:4e:a7:bb:cb:26:bb:de:1d:cd:3b:e2: d8:91:24:c4:f6:e2:d3:20:c4:53:1a:32:dc:5a:a8: eb:d9:92:6a:dc:d3:b7:4e:0d:65:7e:1f:b1:d0:ae: 4d:31:99:2c:98:2f:bc:82:b6:ce:cf:61:74:de:f5: 58:13:a3:dd:37:3a:15:ed:d8:ce:88:74:92:f8:69: 63:88:b7:23:2e:98:97:ba:11:73:52:ca:68:0d:1f: 15:2b:11:36:25:34:be:67:3a:c8:5a:1f:0c:78:39: b4:c5:5b:63:bf:2c:41:64:ba:17:0f:6e:6f:53:81: d8:50:0a:2f:1f:25:83:ba:e0:b3:9e:67:a7:1e:b1: 2e:1b:86:97:60:9d:fa:65:79:da:09:73:ed:01:ba: 16:61:44:4a:90:70:e0:04:29:a9:4b:43:fe:3e:7e: ab:20:e9:df:a5:ab:10:e9:73:c1:8f:7b:d9:10:7b: 17:76:82:2e:3d:0b:e2:d2:9d:30:3e:9f:e3:a4:fe: 38:7f:d3:3f:de:c5:19:5a:a4:7c:79:8e:8c:31:b9: 88:64:d4:aa:26:3d:87:3e:72:1d:22:f0:c9:84:1d: 51:8c:7b:54:43:14:9c:2a:04:32:c7:02:96:95:36: 79:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B7:5B:21:73:F4:E8:1D:1A:D4:14:03:BE:9A:05:83:A7:25:F6:F5 X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31352e302f32342d3234203d3e20313338303936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.85.15.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:26:54:2a:a3:2b:5b:54:47:ee:45:33:8a:83:30:02:ba:8d: 98:11:0f:40:00:bc:ad:6d:cb:be:8e:d8:79:41:59:03:7d:60: c3:20:f2:1e:37:39:91:4a:ae:d1:3d:08:7a:e5:44:71:54:c3: 32:ca:9d:78:3f:f1:91:2f:8f:c3:c3:77:6c:c7:65:e9:48:1a: 58:83:36:2e:08:82:f2:25:40:9f:33:15:5f:87:ea:fc:56:16: 7a:e3:81:17:e2:58:a0:26:5c:78:19:66:97:d5:28:fa:81:c8: 0e:a7:c8:6e:9e:60:80:17:14:be:c8:98:51:fb:a2:38:7b:26: b9:77:81:6d:72:ca:b3:ea:e9:a7:ac:b6:f3:56:fe:82:05:8d: 45:8f:c6:ee:91:9b:01:0b:74:71:ef:f6:6a:f6:94:c5:b0:70: 42:cf:49:90:cc:74:70:da:ff:ef:b9:73:d9:b2:f8:0c:91:04: 54:7d:c8:cb:8e:82:3f:24:ab:97:ee:e4:57:b9:a0:3f:15:13: 98:46:f4:7a:8c:88:31:0d:a5:94:f7:c1:71:32:4a:13:70:14: eb:bd:79:a3:9a:6b:27:cc:c7:be:7d:de:13:f8:57:c6:50:e0: b4:77:5b:2d:88:bd:5b:08:1b:0d:95:96:2c:6d:07:10:73:5d: e8:11:1a:a6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbcwRKv9hr94W2Zcpza8GV9LVsPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNDA4MTMwOTU5NDhaFw0yNTA4MTIxMDA0NDhaMDMxMTAvBgNV BAMTKEY0Qjc1QjIxNzNGNEU4MUQxQUQ0MTQwM0JFOUEwNTgzQTcyNUY2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5o68KWhDVh+lbLGvI9i32GfFO p7vLJrveHc074tiRJMT24tMgxFMaMtxaqOvZkmrc07dODWV+H7HQrk0xmSyYL7yC ts7PYXTe9VgTo903OhXt2M6IdJL4aWOItyMumJe6EXNSymgNHxUrETYlNL5nOsha Hwx4ObTFW2O/LEFkuhcPbm9TgdhQCi8fJYO64LOeZ6cesS4bhpdgnfpledoJc+0B uhZhREqQcOAEKalLQ/4+fqsg6d+lqxDpc8GPe9kQexd2gi49C+LSnTA+n+Ok/jh/ 0z/exRlapHx5jowxuYhk1KomPYc+ch0i8MmEHVGMe1RDFJwqBDLHApaVNnkhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9LdbIXP06B0a1BQDvpoFg6cl9vUwHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljNzAwMzUwLTY2MzItNDllMi1i N2UzLTVkNTczMjI0YzU2Yy8wLzMxMzAzMzJlMzgzNTJlMzEzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzODMwMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdVDzANBgkqhkiG 9w0BAQsFAAOCAQEASyZUKqMrW1RH7kUzioMwArqNmBEPQAC8rW3Lvo7YeUFZA31g wyDyHjc5kUqu0T0IeuVEcVTDMsqdeD/xkS+Pw8N3bMdl6UgaWIM2LgiC8iVAnzMV X4fq/FYWeuOBF+JYoCZceBlml9Uo+oHIDqfIbp5ggBcUvsiYUfuiOHsmuXeBbXLK s+rpp6y281b+ggWNRY/G7pGbAQt0ce/2avaUxbBwQs9JkMx0cNr/77lz2bL4DJEE VH3Iy46CPySrl+7kV7mgPxUTmEb0eoyIMQ2llPfBcTJKE3AU6715o5prJ8zHvn3e E/hXxlDgtHdbLYi9WwgbDZWWLG0HEHNd6BEapg== -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org