$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa File: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (raw, json) Hash identifier: Q3P+SORmjSYUFWgFOxdx+KlxGjY858iSOT5wN8UZTKY= Subject key identifier: 42:1B:2F:B1:F1:AC:95:D9:D4:8F:10:FE:DD:20:E5:31:2B:0B:23:38 Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 75D7CAD055433DCAA1B084346A7A0809F2F2CA58 Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa Signing time: Mon 18 Nov 2024 03:15:13 +0000 ROA not before: Mon 18 Nov 2024 03:10:13 +0000 ROA not after: Mon 17 Nov 2025 03:15:13 +0000 asID: 132829 IP address blocks: 103.134.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d7:ca:d0:55:43:3d:ca:a1:b0:84:34:6a:7a:08:09:f2:f2:ca:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Nov 18 03:10:13 2024 GMT Not After : Nov 17 03:15:13 2025 GMT Subject: CN=421B2FB1F1AC95D9D48F10FEDD20E5312B0B2338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:98:fa:e6:f3:9b:8d:17:bb:58:bd:c1:32: db:4e:8b:c4:de:8e:55:de:34:7e:f7:bb:63:5a:19: 53:3a:b6:8d:aa:ff:96:53:b4:34:bf:9b:73:64:b8: 5d:6f:ff:9e:81:a2:30:d0:b1:06:bc:ce:5f:f7:09: 51:2a:05:5e:f7:dd:88:75:c5:26:44:16:64:d1:be: f2:62:43:61:ad:0d:17:37:14:a9:b9:9e:d6:0a:33: 56:2e:8c:9e:a8:31:19:e1:be:99:0e:0b:89:a1:1c: a5:c8:86:65:c4:b9:83:bd:ce:3f:3d:b4:bd:b2:3f: d0:da:75:0b:b0:d0:9d:ab:72:8d:cb:5d:1a:3e:c2: a8:ea:8a:cb:f7:19:20:87:28:4d:e1:93:d8:07:ef: 46:0a:90:5d:fe:f2:f9:b9:17:13:f8:3b:4a:09:33: 8f:53:87:f5:ce:d3:cc:93:b4:43:59:31:6a:db:6d: 33:57:01:bf:23:5e:85:6c:04:19:0d:a3:73:4a:af: 77:ba:8e:06:0d:1b:e1:03:dc:94:e4:b9:e9:12:5d: c7:93:aa:a4:4e:84:31:3a:2e:22:26:92:bc:5e:15: 52:d8:b6:61:99:04:4d:70:be:c8:52:3b:ac:5c:67: 69:c5:90:e5:e8:a3:cb:d4:ab:37:df:2f:49:24:d2: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1B:2F:B1:F1:AC:95:D9:D4:8F:10:FE:DD:20:E5:31:2B:0B:23:38 X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.49.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:82:9f:4d:3b:6a:a9:f8:22:2f:dd:ce:88:96:c8:8b:c9:e7: 89:10:e3:84:c1:11:88:1c:d5:1d:18:8d:fc:b8:7e:43:1f:43: e9:72:33:fa:1d:7a:f6:cd:fd:d6:86:f0:10:a9:52:1f:08:bd: 73:e0:9a:80:be:9b:4b:7b:30:07:6f:9f:c6:ed:c0:3a:39:30: aa:cf:3e:72:a1:59:9d:7c:8b:37:54:80:69:e6:bf:8a:e3:ee: 63:eb:14:8c:a7:72:5b:d4:70:5b:92:a6:3e:4f:ef:05:7b:f1: 8a:d5:4a:bb:d3:08:cd:c6:a5:be:c1:cd:d4:16:54:62:d1:4c: c3:8e:84:6b:68:44:2d:81:84:5e:d2:2b:05:ba:fd:65:90:8e: 9f:4f:4f:b4:94:98:84:0a:80:22:cc:d7:a7:c6:ac:28:69:a8: c1:af:5c:9a:d2:6a:7e:b0:55:3f:58:81:95:f7:91:71:08:d8: 71:e3:ae:b0:d5:ce:3b:d0:aa:c6:e6:08:c4:55:39:e4:4c:b4: a4:46:6a:5e:21:cd:37:66:7c:25:71:3c:a5:c6:b7:ef:c8:21: 40:54:10:5b:24:54:b0:72:1d:8b:d7:20:09:dc:1a:e0:e4:44: 41:5f:a8:4c:3f:82:1b:48:31:e2:db:d4:3f:24:71:09:8a:63: 8b:0e:6f:7e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUddfK0FVDPcqhsIQ0anoICfLyylgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNDExMTgwMzEwMTNaFw0yNTExMTcwMzE1MTNaMDMxMTAvBgNV BAMTKDQyMUIyRkIxRjFBQzk1RDlENDhGMTBGRUREMjBFNTMxMkIwQjIzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnC5j65vObjRe7WL3BMttOi8Te jlXeNH73u2NaGVM6to2q/5ZTtDS/m3NkuF1v/56BojDQsQa8zl/3CVEqBV733Yh1 xSZEFmTRvvJiQ2GtDRc3FKm5ntYKM1YujJ6oMRnhvpkOC4mhHKXIhmXEuYO9zj89 tL2yP9DadQuw0J2rco3LXRo+wqjqisv3GSCHKE3hk9gH70YKkF3+8vm5FxP4O0oJ M49Th/XO08yTtENZMWrbbTNXAb8jXoVsBBkNo3NKr3e6jgYNG+ED3JTkuekSXceT qqROhDE6LiImkrxeFVLYtmGZBE1wvshSO6xcZ2nFkOXoo8vUqzffL0kk0poZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQhsvsfGsldnUjxD+3SDlMSsLIzgwHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljODVjNmI5LTM0ZjktNGE4NS05 Y2VhLWMxNmU5OGE4YjVlMC8wLzMxMzAzMzJlMzEzMzM0MmUzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzgzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4YxMA0GCSqG SIb3DQEBCwUAA4IBAQAvgp9NO2qp+CIv3c6IlsiLyeeJEOOEwRGIHNUdGI38uH5D H0PpcjP6HXr2zf3WhvAQqVIfCL1z4JqAvptLezAHb5/G7cA6OTCqzz5yoVmdfIs3 VIBp5r+K4+5j6xSMp3Jb1HBbkqY+T+8Fe/GK1Uq70wjNxqW+wc3UFlRi0UzDjoRr aEQtgYRe0isFuv1lkI6fT0+0lJiECoAizNenxqwoaajBr1ya0mp+sFU/WIGV95Fx CNhx466w1c470KrG5gjEVTnkTLSkRmpeIc03ZnwlcTylxrfvyCFAVBBbJFSwch2L 1yAJ3Brg5ERBX6hMP4IbSDHi29Q/JHEJimOLDm9+ -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org