$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31312e302f32342d3234203d3e20313335343838.roa File: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (raw, json) Hash identifier: RYIOlBzHvZO7/GqWXZy8sW7t+WZfZAW7eIdeExepzYQ= Subject key identifier: E6:AA:60:22:79:75:72:26:B4:45:9A:FB:20:9F:0F:5C:66:78:BC:24 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 01E677F691CC3BE150462CFF7023FD73A7519538 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31312e302f32342d3234203d3e20313335343838.roa Signing time: Mon 25 Mar 2024 04:00:01 +0000 ROA not before: Mon 25 Mar 2024 03:55:01 +0000 ROA not after: Mon 24 Mar 2025 04:00:01 +0000 asID: 135488 IP address blocks: 103.95.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e6:77:f6:91:cc:3b:e1:50:46:2c:ff:70:23:fd:73:a7:51:95:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Mar 25 03:55:01 2024 GMT Not After : Mar 24 04:00:01 2025 GMT Subject: CN=E6AA602279757226B4459AFB209F0F5C6678BC24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:2b:a2:1d:3d:7d:2e:e0:5e:73:49:5d:d4: e9:9b:b3:56:70:8e:12:2b:99:8e:1d:91:a2:81:10: 7d:48:58:03:02:7f:12:47:fb:72:c4:e4:8a:e2:d4: 91:99:b8:be:30:6e:76:bf:b3:82:e3:24:89:e3:fe: 87:4c:d1:48:18:a2:c3:6d:36:47:23:60:f7:05:f3: 1f:a9:30:46:d3:57:7d:4b:a0:ca:15:72:94:55:f9: cc:45:23:e8:2e:46:0f:6a:51:b0:43:ab:2c:71:9b: 36:3c:1e:94:93:bf:ee:c3:5a:a8:a0:71:1d:e6:03: de:b4:1b:f7:c3:c5:49:d5:c9:3a:1a:05:a1:af:0b: bc:81:35:cd:49:2d:f5:e4:2b:ad:a3:ec:73:86:be: 4e:0c:bf:ab:0d:af:88:6a:e6:20:78:bc:5d:2f:ab: 2f:8c:8a:9f:d3:ea:40:eb:02:8f:ca:2a:d5:ee:06: 95:34:88:3d:f5:47:17:b5:4a:22:c9:1f:46:09:51: 85:38:c4:4f:a2:28:bb:0c:29:67:4a:23:c4:0b:52: 31:09:92:f1:b3:15:60:f9:46:f3:5e:86:7c:c1:3d: f2:09:96:ea:16:0b:cc:cf:16:c1:52:db:3e:9b:15: 4a:25:bd:ac:30:02:6f:33:52:ab:6a:d3:aa:b1:8c: ec:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AA:60:22:79:75:72:26:B4:45:9A:FB:20:9F:0F:5C:66:78:BC:24 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e31312e302f32342d3234203d3e20313335343838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.11.0/24 Signature Algorithm: sha256WithRSAEncryption 75:2e:e2:8f:92:3f:e0:a9:7a:19:7c:50:f3:89:ff:c1:3d:7b: 45:40:16:24:6d:8f:80:a2:e6:1d:8d:3a:69:ef:11:11:44:be: 8f:56:4c:c8:76:9b:16:03:02:4f:37:17:18:dc:90:39:96:69: 67:2a:4b:57:69:74:56:1c:c9:76:2a:13:f5:63:7f:2c:1a:bf: de:8b:ca:45:c5:31:a5:36:2f:f6:60:28:2d:f0:e3:ee:3b:c0: 65:79:e4:b1:29:35:9b:eb:12:2f:76:88:30:57:83:24:66:e7: 3d:bb:a5:17:4d:19:0c:04:34:da:80:19:ff:5f:6f:fc:ed:e0: ba:4a:f5:50:7d:c5:6e:3b:4b:8b:77:d1:a9:34:0c:09:a8:82: fd:94:cb:39:ad:e3:6e:5d:2c:9b:fb:ea:c4:75:34:55:2d:29: 39:4d:4b:1b:1f:ec:f9:19:80:10:02:e3:a2:c2:13:e3:3c:b3: 43:e0:76:1e:cf:a7:80:79:e5:fc:03:78:8b:f2:11:e3:fe:56: d0:fa:3d:2c:b7:89:23:63:ad:79:17:a0:16:4e:c8:dc:0f:43: 0e:73:19:0e:c0:97:35:64:91:53:cc:c6:74:b2:61:ed:56:2a: f5:fb:66:6d:5e:e7:92:77:ba:cc:93:d0:51:a5:83:66:37:50: 8b:a6:8e:c3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAeZ39pHMO+FQRiz/cCP9c6dRlTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNDAzMjUwMzU1MDFaFw0yNTAzMjQwNDAwMDFaMDMxMTAvBgNV BAMTKEU2QUE2MDIyNzk3NTcyMjZCNDQ1OUFGQjIwOUYwRjVDNjY3OEJDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/iuiHT19LuBec0ld1Ombs1Zw jhIrmY4dkaKBEH1IWAMCfxJH+3LE5Iri1JGZuL4wbna/s4LjJInj/odM0UgYosNt NkcjYPcF8x+pMEbTV31LoMoVcpRV+cxFI+guRg9qUbBDqyxxmzY8HpSTv+7DWqig cR3mA960G/fDxUnVyToaBaGvC7yBNc1JLfXkK62j7HOGvk4Mv6sNr4hq5iB4vF0v qy+Mip/T6kDrAo/KKtXuBpU0iD31Rxe1SiLJH0YJUYU4xE+iKLsMKWdKI8QLUjEJ kvGzFWD5RvNehnzBPfIJluoWC8zPFsFS2z6bFUolvawwAm8zUqtq06qxjOzjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU5qpgInl1cia0RZr7IJ8PXGZ4vCQwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNjQ2NWVjLTkxNjAtNDU5Yi04 ZDExLTk0OGZjMjZkYTFjMC8wLzMxMzAzMzJlMzkzNTJlMzEzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdfCzANBgkqhkiG 9w0BAQsFAAOCAQEAdS7ij5I/4Kl6GXxQ84n/wT17RUAWJG2PgKLmHY06ae8REUS+ j1ZMyHabFgMCTzcXGNyQOZZpZypLV2l0VhzJdioT9WN/LBq/3ovKRcUxpTYv9mAo LfDj7jvAZXnksSk1m+sSL3aIMFeDJGbnPbulF00ZDAQ02oAZ/19v/O3gukr1UH3F bjtLi3fRqTQMCaiC/ZTLOa3jbl0sm/vqxHU0VS0pOU1LGx/s+RmAEALjosIT4zyz Q+B2Hs+ngHnl/AN4i/IR4/5W0Po9LLeJI2OteRegFk7I3A9DDnMZDsCXNWSRU8zG dLJh7VYq9ftmbV7nkne6zJPQUaWDZjdQi6aOww== -----END CERTIFICATE-----Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org