$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa File: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (raw, json) Hash identifier: yG4+2M7fws6C52HoixX4PcNGnAAet0z0xRyi0LE26aU= Subject key identifier: 3C:14:EE:1B:7F:2F:E3:D4:85:BA:B1:99:8E:C7:78:F0:10:D7:44:F5 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 49C8D5BD4A58FEE53F6A2920ADF460CEECF0D7E0 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa Signing time: Wed 20 Nov 2024 04:55:16 +0000 ROA not before: Wed 20 Nov 2024 04:50:16 +0000 ROA not after: Wed 19 Nov 2025 04:55:16 +0000 asID: 151554 IP address blocks: 103.244.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 22:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c8:d5:bd:4a:58:fe:e5:3f:6a:29:20:ad:f4:60:ce:ec:f0:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Nov 20 04:50:16 2024 GMT Not After : Nov 19 04:55:16 2025 GMT Subject: CN=3C14EE1B7F2FE3D485BAB1998EC778F010D744F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:63:47:49:5d:14:87:ab:c8:5c:c0:fc:91:65: 99:55:53:7a:86:b3:62:65:a0:03:c8:53:d7:58:78: dd:42:46:3f:9b:f1:fc:25:ce:9b:6e:71:6e:6f:05: 7a:96:da:7c:27:55:98:71:ab:33:05:b4:fd:75:5c: 82:f7:32:20:c8:be:2b:cc:21:44:14:94:b2:8d:4e: c6:a8:9a:2e:6d:78:04:6d:e0:82:a7:7c:41:3f:b5: 44:a9:6b:cb:ea:92:d8:b7:f1:bd:d3:0d:9d:d9:9b: d1:48:a3:72:cf:2b:2c:a5:db:f8:0a:cf:e2:a7:99: fa:78:52:05:e7:b6:7b:03:e3:c4:11:e2:e0:d7:1e: 29:f5:42:b7:db:1f:c6:21:e6:3d:5e:e8:04:60:bf: b9:66:fc:ec:9c:ae:66:51:37:a6:89:e3:49:fa:99: 33:93:32:b1:b3:e1:bb:48:90:02:a3:a8:ba:39:84: a0:95:24:1f:ff:22:6a:63:36:4f:ef:ed:52:b1:06: ff:85:fa:ff:ec:0f:22:61:e9:4b:4a:73:ef:97:19: c7:33:5b:28:1e:8f:9f:dd:f3:b9:ad:2d:ed:08:b9: 0c:8b:9a:66:ae:b6:64:f6:30:a8:6e:a1:d4:ce:7b: c0:94:c3:84:a6:40:33:21:33:c2:08:bf:64:25:96: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:14:EE:1B:7F:2F:E3:D4:85:BA:B1:99:8E:C7:78:F0:10:D7:44:F5 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.104.0/24 Signature Algorithm: sha256WithRSAEncryption 89:1e:99:48:72:2e:0d:ff:a9:ad:88:95:a9:01:90:8c:e9:fa: 45:d1:0d:63:0e:ea:9e:15:3b:38:b4:f8:38:17:44:ed:f3:56: ea:33:7b:86:ad:d6:23:fc:fa:8e:71:1a:66:27:d6:57:46:0f: 72:43:58:ce:5b:c1:6d:f2:4d:d2:0c:34:3a:45:a7:55:74:31: 45:45:ef:7c:d6:92:66:86:01:3f:65:05:43:7b:cd:d3:a6:09: 88:bd:7a:a2:ce:8d:36:74:cc:85:fa:4b:f6:4b:7d:af:0a:7f: 3f:4d:93:c2:42:2e:90:0c:1e:28:1f:74:5b:ab:f0:14:e3:68: c2:e5:c6:b5:9c:11:fb:de:ea:ab:13:95:6f:14:f0:16:68:e2: bb:90:a1:e2:9c:56:f2:5f:bf:25:36:66:a1:14:de:ff:f1:a7: e2:2b:62:40:d7:4e:05:c0:a5:a4:86:15:29:a6:bd:c4:f4:fc: 57:c7:11:ce:0e:b5:55:6b:49:db:95:8d:63:d1:43:97:f9:c6: 05:1e:66:1d:8d:38:86:f7:66:2d:93:f4:fa:46:2d:1e:13:20: 9d:28:ad:69:90:3c:0d:80:09:c1:bd:b1:d6:c4:8a:3d:5e:a0: 3f:ee:da:28:a0:90:5c:5e:7a:6a:97:bd:f6:80:75:ee:13:3d: 4b:3f:bf:96 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUScjVvUpY/uU/aikgrfRgzuzw1+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNDExMjAwNDUwMTZaFw0yNTExMTkwNDU1MTZaMDMxMTAvBgNV BAMTKDNDMTRFRTFCN0YyRkUzRDQ4NUJBQjE5OThFQzc3OEYwMTBENzQ0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQY0dJXRSHq8hcwPyRZZlVU3qG s2JloAPIU9dYeN1CRj+b8fwlzptucW5vBXqW2nwnVZhxqzMFtP11XIL3MiDIvivM IUQUlLKNTsaomi5teARt4IKnfEE/tUSpa8vqkti38b3TDZ3Zm9FIo3LPKyyl2/gK z+Knmfp4UgXntnsD48QR4uDXHin1QrfbH8Yh5j1e6ARgv7lm/OycrmZRN6aJ40n6 mTOTMrGz4btIkAKjqLo5hKCVJB//ImpjNk/v7VKxBv+F+v/sDyJh6UtKc++XGccz Wygej5/d87mtLe0IuQyLmmautmT2MKhuodTOe8CUw4SmQDMhM8IIv2QllrYnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPBTuG38v49SFurGZjsd48BDXRPUwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkMmZhNTFlLTNmZDQtNDUyMC1i Mzc1LTA5ZWVmNWUwZTUxMC8wLzMxMzAzMzJlMzIzNDM0MmUzMTMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTM1MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn9GgwDQYJ KoZIhvcNAQELBQADggEBAIkemUhyLg3/qa2IlakBkIzp+kXRDWMO6p4VOzi0+DgX RO3zVuoze4at1iP8+o5xGmYn1ldGD3JDWM5bwW3yTdIMNDpFp1V0MUVF73zWkmaG AT9lBUN7zdOmCYi9eqLOjTZ0zIX6S/ZLfa8Kfz9Nk8JCLpAMHigfdFur8BTjaMLl xrWcEfve6qsTlW8U8BZo4ruQoeKcVvJfvyU2ZqEU3v/xp+IrYkDXTgXApaSGFSmm vcT0/FfHEc4OtVVrSduVjWPRQ5f5xgUeZh2NOIb3Zi2T9PpGLR4TIJ0orWmQPA2A CcG9sdbEij1eoD/u2iigkFxeemqXvfaAde4TPUs/v5Y= -----END CERTIFICATE-----Generated at Fri Nov 29 08:55:24 2024 by rpki-client on console-ams.rpki-client.org