$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa File: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (raw, json) Hash identifier: bdO5l0ETxRn71OqLu5LsjllBOmAvc3iPhYJQJ+bSXoE= Subject key identifier: 5A:EA:EF:42:DA:32:E8:8E:15:7A:45:C6:BF:D0:BB:A1:22:2E:F2:8E Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 4E7058D756076F9CF3BE6DA8A31A031EF5E6C915 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa Signing time: Fri 11 Oct 2024 08:00:00 +0000 ROA not before: Fri 11 Oct 2024 07:55:00 +0000 ROA not after: Fri 10 Oct 2025 08:00:00 +0000 asID: 46047 IP address blocks: 103.195.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:70:58:d7:56:07:6f:9c:f3:be:6d:a8:a3:1a:03:1e:f5:e6:c9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Oct 11 07:55:00 2024 GMT Not After : Oct 10 08:00:00 2025 GMT Subject: CN=5AEAEF42DA32E88E157A45C6BFD0BBA1222EF28E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2f:7f:c6:e5:8e:a3:67:b1:c2:1f:c5:f0:d7: a3:31:1e:f9:44:02:1b:a2:2a:ca:ad:88:dc:6a:5e: 20:75:ea:d6:22:2b:3f:ef:08:df:5f:f2:c6:8d:28: 67:e7:9e:f6:3b:f8:f0:c4:63:ce:18:40:23:11:e7: 40:4b:ae:4f:71:5d:2d:65:7b:39:9c:70:20:c4:5f: 6a:0d:39:f6:5a:fb:99:cb:9c:83:bb:3d:e9:6e:5a: b0:ee:42:17:66:ca:19:52:0e:87:2b:3a:3a:23:f9: cd:b2:99:dc:8e:f2:fe:b2:13:c1:3e:a5:99:fa:ad: 94:6e:01:3f:88:39:66:8d:fe:08:c9:fd:46:fa:b8: 8f:26:7a:58:f4:d5:a0:8c:c3:fc:a9:71:34:88:6d: 04:6e:9a:a8:bb:d8:03:21:64:f4:2e:cb:72:a1:b9: dc:3a:b9:07:80:68:7e:ec:88:2e:b1:bc:c6:69:49: f0:53:40:d7:c4:88:ec:d7:a1:51:c0:bd:b9:e8:ac: e7:4e:ea:6e:97:ff:60:60:7e:3b:29:c3:d7:22:1d: 74:8b:2c:f9:b6:2b:fc:32:14:3c:f7:96:44:a7:16: 7a:39:df:1f:8f:4a:d1:f9:dc:d7:71:64:6f:c9:09: 33:1a:53:c8:d5:59:bc:58:15:be:cf:e5:79:34:24: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EA:EF:42:DA:32:E8:8E:15:7A:45:C6:BF:D0:BB:A1:22:2E:F2:8E X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.195.168.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:94:18:35:bc:2a:51:c3:ff:e5:98:01:02:2e:df:a7:ed:fb: 97:91:c1:7b:30:71:6d:b1:54:f9:3b:ca:fb:9d:2b:9f:ff:07: 72:fe:29:25:a3:7e:2d:b0:94:13:a1:0f:28:e5:cb:a0:8d:cc: 7d:87:03:65:34:c8:f3:85:3d:d7:b5:da:0e:d1:cb:18:30:17: 75:e1:9f:00:9f:6e:6d:af:39:b7:6b:ef:8d:c0:c3:8b:51:b3: b4:7d:43:4b:31:fa:a2:f1:70:48:b4:e3:9e:c1:aa:d8:07:c7: 86:06:64:44:97:a1:e2:f8:84:13:90:12:92:91:f9:00:93:e5: cc:31:f9:fd:8a:8f:08:c5:8a:df:b9:d0:bd:ea:03:e1:8b:41: 33:8e:36:cc:d5:f0:ce:af:cb:81:ae:54:84:69:14:1b:83:6a: c3:e7:3c:6a:8c:c2:67:8c:71:d8:4c:f5:ce:1f:43:e3:54:8a: f2:e8:d6:90:f7:d4:cf:b0:a6:83:0a:27:bb:a4:54:79:01:7f: 5d:48:23:81:dc:9b:cc:f7:5a:90:46:2b:e1:39:ab:17:c4:1f: ad:28:a3:44:29:ef:40:d8:f1:50:5f:29:a4:1d:3c:c6:03:72: b0:fc:fa:dc:cb:31:d8:aa:0f:c5:79:d3:28:f8:2d:1a:41:05: 76:39:9a:a2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTnBY11YHb5zzvm2ooxoDHvXmyRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNDEwMTEwNzU1MDBaFw0yNTEwMTAwODAwMDBaMDMxMTAvBgNV BAMTKDVBRUFFRjQyREEzMkU4OEUxNTdBNDVDNkJGRDBCQkExMjIyRUYyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmL3/G5Y6jZ7HCH8Xw16MxHvlE AhuiKsqtiNxqXiB16tYiKz/vCN9f8saNKGfnnvY7+PDEY84YQCMR50BLrk9xXS1l ezmccCDEX2oNOfZa+5nLnIO7PeluWrDuQhdmyhlSDocrOjoj+c2ymdyO8v6yE8E+ pZn6rZRuAT+IOWaN/gjJ/Ub6uI8melj01aCMw/ypcTSIbQRumqi72AMhZPQuy3Kh udw6uQeAaH7siC6xvMZpSfBTQNfEiOzXoVHAvbnorOdO6m6X/2Bgfjspw9ciHXSL LPm2K/wyFDz3lkSnFno53x+PStH53NdxZG/JCTMaU8jVWbxYFb7P5Xk0JLLrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWurvQtoy6I4VekXGv9C7oSIu8o4wHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMTI5Yzk0LWM1YTYtNGRkNC1i MzRhLTdlMzUzZGU2Y2U4MS8wLzMxMzAzMzJlMzEzOTM1MmUzMTM2MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzNDM2MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ8OoMA0GCSqG SIb3DQEBCwUAA4IBAQCflBg1vCpRw//lmAECLt+n7fuXkcF7MHFtsVT5O8r7nSuf /wdy/iklo34tsJQToQ8o5cugjcx9hwNlNMjzhT3XtdoO0csYMBd14Z8An25trzm3 a++NwMOLUbO0fUNLMfqi8XBItOOewarYB8eGBmREl6Hi+IQTkBKSkfkAk+XMMfn9 io8IxYrfudC96gPhi0EzjjbM1fDOr8uBrlSEaRQbg2rD5zxqjMJnjHHYTPXOH0Pj VIry6NaQ99TPsKaDCie7pFR5AX9dSCOB3JvM91qQRivhOasXxB+tKKNEKe9A2PFQ XymkHTzGA3Kw/PrcyzHYqg/FedMo+C0aQQV2OZqi -----END CERTIFICATE-----Generated at Mon Nov 25 02:56:53 2024 by rpki-client on console-fra.rpki-client.org