$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa File: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (raw, json) Hash identifier: 9TS4OObq1JemZwvTvegCjn3AKYmdp3K1XOA4LLPSSqQ= Subject key identifier: 61:08:56:DE:1F:79:1E:03:35:14:3D:5F:CF:A7:E8:53:43:58:96:34 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 0DE2A29891ECFABE73CDB698365D4767A647DD09 Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa Signing time: Fri 27 Sep 2024 22:00:00 +0000 ROA not before: Fri 27 Sep 2024 21:55:00 +0000 ROA not after: Fri 26 Sep 2025 22:00:00 +0000 asID: 149883 IP address blocks: 103.156.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e2:a2:98:91:ec:fa:be:73:cd:b6:98:36:5d:47:67:a6:47:dd:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Sep 27 21:55:00 2024 GMT Not After : Sep 26 22:00:00 2025 GMT Subject: CN=610856DE1F791E0335143D5FCFA7E85343589634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:ee:47:cd:72:c7:55:f0:1a:15:a9:90:4d: b6:74:9b:43:54:7c:34:16:37:12:63:e0:7d:77:3b: 23:d1:55:27:44:e8:3d:bb:47:a3:ae:ca:67:3e:a8: 03:ac:a5:cb:6d:c3:ee:8e:90:6f:99:56:4a:a9:cc: 43:6f:67:d3:4f:f4:72:29:6a:60:1b:a2:d0:f5:b2: 32:4a:69:f4:62:6e:23:47:96:ab:ee:22:92:13:53: 11:2c:39:9b:2d:73:d1:03:2f:d3:8f:a2:3e:aa:fa: ce:ca:b3:c4:36:a6:7b:27:1d:c4:b0:aa:0d:86:f1: 3f:61:11:33:9d:8f:34:a2:68:df:e3:97:3b:71:94: 7a:c7:84:82:60:f0:e0:c4:bb:b6:63:7a:fc:46:ef: 7f:05:ee:23:c3:b3:a8:fb:9a:f8:66:44:08:33:aa: 6d:c8:c6:ad:48:d9:ce:a1:0f:8c:99:c0:ba:a3:3d: 50:33:c2:4b:9a:70:da:d4:da:49:f0:13:42:4b:6d: b2:40:ba:d1:f1:7d:f2:ca:eb:f4:4c:63:2e:e5:f3: 08:4d:59:5f:d2:4d:4e:67:f3:81:45:7a:8d:11:e1: e8:ac:2a:31:9b:4d:bc:79:79:cc:03:07:72:70:6d: 02:a7:87:01:cd:5b:a3:43:6f:35:a6:92:fd:c8:ab: e8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:08:56:DE:1F:79:1E:03:35:14:3D:5F:CF:A7:E8:53:43:58:96:34 X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.141.0/24 Signature Algorithm: sha256WithRSAEncryption 70:42:35:66:42:c5:77:13:2a:db:a7:6f:de:37:f8:16:16:8d: 24:6b:1c:4e:e3:26:be:cf:df:e4:47:47:03:f9:f2:b4:21:4b: 1d:c8:c5:f5:66:65:63:19:51:81:79:fe:f7:fb:87:b9:83:06: 77:48:88:10:2b:ee:21:07:4b:58:0a:e2:3a:42:43:d3:ad:28: 3a:5a:9f:dc:10:0f:19:ec:0a:02:de:8b:c9:e2:18:95:f8:f2: 4c:6f:6a:7a:bd:c5:8f:d9:3b:97:76:bd:c4:bc:c3:35:82:f7: a1:b2:20:78:32:44:be:e6:e9:3a:a7:9b:50:00:b5:49:b1:82: 79:d4:7a:c8:32:ef:98:e6:a4:2d:1c:e4:e3:00:ff:0b:83:02: 0c:4f:ff:16:b2:11:02:1f:8f:08:5e:fc:08:c8:fb:8f:69:a7: bd:b0:32:39:3b:69:0e:17:75:63:44:5b:9d:01:e9:40:e7:ce: d6:9c:7b:28:f0:3f:1c:66:6e:a6:27:39:43:8b:6b:50:85:2a: 82:83:20:dd:f5:f0:84:d3:89:b4:93:c5:24:80:00:bd:ac:7b: 56:5b:e3:5f:a3:c7:e9:ce:40:a2:6c:99:81:85:ae:f5:99:cf: f2:d3:2f:bf:d1:fb:69:06:aa:37:7d:05:89:0d:76:31:46:2c: a9:47:cb:c2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDeKimJHs+r5zzbaYNl1HZ6ZH3QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNDA5MjcyMTU1MDBaFw0yNTA5MjYyMjAwMDBaMDMxMTAvBgNV BAMTKDYxMDg1NkRFMUY3OTFFMDMzNTE0M0Q1RkNGQTdFODUzNDM1ODk2MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKiu5HzXLHVfAaFamQTbZ0m0NU fDQWNxJj4H13OyPRVSdE6D27R6Ouymc+qAOspcttw+6OkG+ZVkqpzENvZ9NP9HIp amAbotD1sjJKafRibiNHlqvuIpITUxEsOZstc9EDL9OPoj6q+s7Ks8Q2pnsnHcSw qg2G8T9hETOdjzSiaN/jlztxlHrHhIJg8ODEu7ZjevxG738F7iPDs6j7mvhmRAgz qm3Ixq1I2c6hD4yZwLqjPVAzwkuacNrU2knwE0JLbbJAutHxffLK6/RMYy7l8whN WV/STU5n84FFeo0R4eisKjGbTbx5ecwDB3JwbQKnhwHNW6NDbzWmkv3Iq+jbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUYQhW3h95HgM1FD1fz6foU0NYljQwHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwOTE3OTNlLWJkNjktNDVhNC05 N2E4LWM2OGFhM2RkNDdhMy8wLzMxMzAzMzJlMzEzNTM2MmUzMTM0MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM4MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnI0wDQYJ KoZIhvcNAQELBQADggEBAHBCNWZCxXcTKtunb943+BYWjSRrHE7jJr7P3+RHRwP5 8rQhSx3IxfVmZWMZUYF5/vf7h7mDBndIiBAr7iEHS1gK4jpCQ9OtKDpan9wQDxns CgLei8niGJX48kxvanq9xY/ZO5d2vcS8wzWC96GyIHgyRL7m6Tqnm1AAtUmxgnnU esgy75jmpC0c5OMA/wuDAgxP/xayEQIfjwhe/AjI+49pp72wMjk7aQ4XdWNEW50B 6UDnztaceyjwPxxmbqYnOUOLa1CFKoKDIN318ITTibSTxSSAAL2se1Zb41+jx+nO QKJsmYGFrvWZz/LTL7/R+2kGqjd9BYkNdjFGLKlHy8I= -----END CERTIFICATE-----Generated at Fri Nov 22 22:09:43 2024 by rpki-client on console-ams.rpki-client.org