$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa File: 3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa (raw, json) Hash identifier: 8Pihm82g70d0YD39AiI0nfOrZFr+2CjjXY243qvfoMg= Subject key identifier: BB:B7:73:8B:DA:BC:61:69:13:81:BC:6A:EA:07:4B:0F:A9:DF:FE:8F Certificate issuer: /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB Certificate serial: 5B0AA2EFE2BE12631BAAA39A7339C10B65062305 Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa Signing time: Mon 01 Jul 2024 01:04:49 +0000 ROA not before: Mon 01 Jul 2024 00:59:49 +0000 ROA not after: Mon 30 Jun 2025 01:04:49 +0000 asID: 63497 IP address blocks: 103.232.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 17:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0a:a2:ef:e2:be:12:63:1b:aa:a3:9a:73:39:c1:0b:65:06:23:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB Validity Not Before: Jul 1 00:59:49 2024 GMT Not After : Jun 30 01:04:49 2025 GMT Subject: CN=BBB7738BDABC61691381BC6AEA074B0FA9DFFE8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:e2:e5:50:84:f4:7f:d3:f2:8f:b7:15:76: a3:08:37:d2:d9:76:07:79:9a:f8:ef:0b:ca:71:f9: 8c:e1:53:7f:29:db:e5:45:00:3f:f5:aa:c3:01:4a: 5b:01:aa:eb:aa:bf:62:b0:b0:e1:7f:4c:19:97:23: 57:1d:10:60:ad:d1:04:9c:6a:ff:76:f6:42:97:d9: 8d:42:ef:b7:e0:6a:1f:c2:55:0d:a7:b0:d7:88:4b: ce:d7:a1:a4:38:81:97:ed:c8:d1:93:a6:14:53:9e: f0:84:8d:ab:71:15:0f:0c:c4:7f:3a:a5:46:40:48: 6f:e8:a3:76:80:b7:3d:30:f7:73:06:1e:c2:c8:b8: 47:96:7f:59:83:02:10:49:93:de:98:b3:aa:3b:6a: 0a:a8:12:40:31:83:db:6c:55:f1:53:4d:b2:f0:6d: 62:0f:83:85:c7:d7:f8:d5:96:14:33:9a:c8:38:01: f5:07:16:cf:48:85:4f:e2:72:36:fd:fb:b6:c1:b2: 70:7a:2f:63:57:d4:18:25:57:0c:eb:6b:45:11:8d: ce:4e:f3:25:02:7d:f0:de:32:41:31:46:dd:4f:88: 1c:3a:e8:33:12:28:17:19:14:7e:fd:f4:0b:02:7e: c7:89:7d:51:dd:4e:f3:65:61:c4:a9:29:87:40:46: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B7:73:8B:DA:BC:61:69:13:81:BC:6A:EA:07:4B:0F:A9:DF:FE:8F X509v3 Authority Key Identifier: keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234302e302f32342d3234203d3e203633343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.232.240.0/24 Signature Algorithm: sha256WithRSAEncryption 38:20:72:10:2c:04:af:19:77:59:37:52:c5:93:bd:44:51:3e: 88:5c:95:3f:c5:89:bc:fa:72:7b:36:d0:5d:ef:3d:88:a8:36: 76:04:19:6a:b6:33:57:fe:b7:81:ae:f8:d2:b2:37:46:10:56: 51:87:e6:9a:80:6d:13:1e:68:12:81:88:88:be:f2:3d:e5:18: 8d:14:d5:a1:4a:ed:ba:9f:c1:8f:65:5c:82:7d:e3:e7:a3:e1: 27:64:fd:e3:a2:ef:ad:13:80:f3:da:40:b1:bc:f9:13:6d:34: d6:72:4a:05:25:ac:60:c3:9c:1f:ea:7e:ad:93:63:f2:d4:f8: b0:00:17:5f:19:6e:50:b2:1a:3e:76:30:95:95:bf:52:94:24: 56:b3:9f:0e:5e:65:31:63:b7:ae:b0:cc:bd:84:54:fe:d5:09: 3c:4c:c1:b1:ba:9a:6b:17:1a:88:0a:47:04:06:b3:e6:cc:23: 62:06:77:1c:50:e6:45:7d:ea:d0:a4:fa:18:d5:bd:e3:fb:64: aa:9c:08:a1:01:de:24:f9:26:9e:5e:0a:d5:91:ba:9b:01:32: a8:99:25:b7:4d:ee:db:95:9c:ee:9c:76:e8:d5:3f:6f:c6:5a: 04:9a:80:2f:7a:b0:5a:14:96:71:0e:d0:0c:47:1b:0a:01:f1: e0:6d:d1:0c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWwqi7+K+EmMbqqOacznBC2UGIwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjEx NTFDNUVEQjAeFw0yNDA3MDEwMDU5NDlaFw0yNTA2MzAwMTA0NDlaMDMxMTAvBgNV BAMTKEJCQjc3MzhCREFCQzYxNjkxMzgxQkM2QUVBMDc0QjBGQTlERkZFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHeLlUIT0f9Pyj7cVdqMIN9LZ dgd5mvjvC8px+YzhU38p2+VFAD/1qsMBSlsBquuqv2KwsOF/TBmXI1cdEGCt0QSc av929kKX2Y1C77fgah/CVQ2nsNeIS87XoaQ4gZftyNGTphRTnvCEjatxFQ8MxH86 pUZASG/oo3aAtz0w93MGHsLIuEeWf1mDAhBJk96Ys6o7agqoEkAxg9tsVfFTTbLw bWIPg4XH1/jVlhQzmsg4AfUHFs9IhU/icjb9+7bBsnB6L2NX1BglVwzra0URjc5O 8yUCffDeMkExRt1PiBw66DMSKBcZFH799AsCfseJfVHdTvNlYcSpKYdARnInAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUu7dzi9q8YWkTgbxq6gdLD6nf/o8wHwYDVR0j BBgwFoAUAyGYT5gjCk+UZn6CwKPesRUcXtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTYzM2I4ZS0wZGY5LTQ0YWMtOWNhZS1kNmY2NzY1YTUyYzkvMC8wMzIxOTg0Rjk4 MjMwQTRGOTQ2NjdFODJDMEEzREVCMTE1MUM1RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjExNTFD NUVEQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNjMzYjhlLTBkZjktNDRhYy05 Y2FlLWQ2ZjY3NjVhNTJjOS8wLzMxMzAzMzJlMzIzMzMyMmUzMjM0MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+jwMA0GCSqG SIb3DQEBCwUAA4IBAQA4IHIQLASvGXdZN1LFk71EUT6IXJU/xYm8+nJ7NtBd7z2I qDZ2BBlqtjNX/reBrvjSsjdGEFZRh+aagG0THmgSgYiIvvI95RiNFNWhSu26n8GP ZVyCfePno+EnZP3jou+tE4Dz2kCxvPkTbTTWckoFJaxgw5wf6n6tk2Py1PiwABdf GW5Qsho+djCVlb9SlCRWs58OXmUxY7eusMy9hFT+1Qk8TMGxupprFxqICkcEBrPm zCNiBnccUOZFferQpPoY1b3j+2SqnAihAd4k+SaeXgrVkbqbATKomSW3Te7blZzu nHbo1T9vxloEmoAverBaFJZxDtAMRxsKAfHgbdEM -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:37 2024 by rpki-client on console-ams.rpki-client.org