$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa File: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (raw, json) Hash identifier: irxpSzMwEDnJMi4E68cBdpU73aFyQrctd7RFeIzrqMo= Subject key identifier: A9:A0:7F:1B:66:4D:4B:47:C0:2C:E4:08:7C:87:8A:63:60:B7:65:9C Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 6D6B8BA3BAAA6497C3605D370E348D7F2D6B799A Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa Signing time: Sun 29 Sep 2024 13:45:01 +0000 ROA not before: Sun 29 Sep 2024 13:40:01 +0000 ROA not after: Sun 28 Sep 2025 13:45:01 +0000 asID: 141071 IP address blocks: 103.97.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 03:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6b:8b:a3:ba:aa:64:97:c3:60:5d:37:0e:34:8d:7f:2d:6b:79:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: Sep 29 13:40:01 2024 GMT Not After : Sep 28 13:45:01 2025 GMT Subject: CN=A9A07F1B664D4B47C02CE4087C878A6360B7659C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:23:01:c4:01:64:fb:0c:28:cc:88:cf:2e: a8:c5:25:bd:9a:b5:3d:7f:99:13:ec:ae:a0:41:03: 2b:6a:30:86:7f:f5:d1:06:59:a6:8c:b8:af:b0:31: 56:d8:12:5a:ea:42:d0:1e:8b:c2:ef:47:79:68:45: 60:01:23:25:15:b5:db:42:5c:ac:99:b6:fb:8a:88: 42:4c:5d:e1:d8:7b:79:15:8d:d3:81:ff:aa:95:11: 53:92:d6:b7:c2:f6:7d:92:b8:61:41:98:f1:64:0a: aa:93:cd:91:73:2f:1a:96:6e:f1:37:6b:55:cc:25: 7f:15:dc:48:9e:07:55:53:fa:46:de:18:c7:55:cb: 5b:1c:f9:91:f9:4a:47:df:64:98:c9:dc:51:80:8e: 7f:8a:98:58:e3:46:50:95:2e:60:b0:93:ed:6a:8e: d2:17:43:49:2c:b1:a6:81:59:97:63:4f:dd:6e:19: 50:8c:ae:00:41:53:36:da:91:30:7e:15:0b:95:8c: fc:ff:44:76:13:e5:c5:bb:bd:a1:1d:04:eb:cb:f0: ce:38:f5:88:51:07:aa:e3:73:4b:16:c8:a5:3e:b8: 67:c7:0a:c2:37:5e:ae:d5:0a:ca:e2:9a:e8:86:fb: 0d:8b:93:3e:6c:64:ae:b7:02:92:44:9b:59:51:92: 47:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A0:7F:1B:66:4D:4B:47:C0:2C:E4:08:7C:87:8A:63:60:B7:65:9C X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.140.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:8f:99:32:ce:76:55:e1:d9:77:35:3d:41:48:bd:09:61:c5: af:5b:c3:31:5e:80:26:20:d2:6e:4e:f6:00:1d:36:fd:08:44: 27:56:10:6e:8f:69:32:be:79:78:53:5e:24:2b:df:98:89:be: 80:9a:98:cd:07:5b:72:f1:36:d0:2c:02:95:b9:89:4c:b9:d5: fc:05:fb:27:58:a9:39:36:b0:03:ee:26:2a:0d:72:a4:4a:30: 7a:93:a1:dd:66:0c:c8:3a:7b:87:04:4f:cd:02:f0:a3:23:f4: 0c:48:03:97:52:cb:f3:a7:ee:87:0b:72:03:d4:f5:45:76:e6: 42:07:b3:35:08:34:a6:63:01:fb:8b:8a:82:9c:bc:f1:4c:56: d2:8f:b0:c8:2d:0c:43:54:e9:f7:86:33:cd:90:68:f2:bc:bf: 06:6c:8f:d0:1c:ee:97:50:81:f5:de:a1:06:a2:37:14:b8:5b: f6:97:21:69:13:d9:9e:6e:55:19:e8:00:d8:19:0a:24:0d:8b: 03:a4:ac:f5:7b:7f:f1:79:6d:68:e4:2a:99:c0:fe:b2:73:af: f6:c8:d0:93:81:d9:73:70:cb:0c:36:77:69:b5:ba:b1:42:eb: 64:ca:e9:91:0a:41:a7:b3:7e:f5:1b:f0:2f:db:44:ff:c6:4a: d1:ca:26:21 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbWuLo7qqZJfDYF03DjSNfy1reZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNDA5MjkxMzQwMDFaFw0yNTA5MjgxMzQ1MDFaMDMxMTAvBgNV BAMTKEE5QTA3RjFCNjY0RDRCNDdDMDJDRTQwODdDODc4QTYzNjBCNzY1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsriMBxAFk+wwozIjPLqjFJb2a tT1/mRPsrqBBAytqMIZ/9dEGWaaMuK+wMVbYElrqQtAei8LvR3loRWABIyUVtdtC XKyZtvuKiEJMXeHYe3kVjdOB/6qVEVOS1rfC9n2SuGFBmPFkCqqTzZFzLxqWbvE3 a1XMJX8V3EieB1VT+kbeGMdVy1sc+ZH5SkffZJjJ3FGAjn+KmFjjRlCVLmCwk+1q jtIXQ0kssaaBWZdjT91uGVCMrgBBUzbakTB+FQuVjPz/RHYT5cW7vaEdBOvL8M44 9YhRB6rjc0sWyKU+uGfHCsI3Xq7VCsrimuiG+w2Lkz5sZK63ApJEm1lRkkdJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqaB/G2ZNS0fALOQIfIeKY2C3ZZwwHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E0MDE0MzZiLTAyNjctNDY2Yi1h MzQwLWUyODhkMmU5MzRhOC8wLzMxMzAzMzJlMzkzNzJlMzEzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2GMMA0GCSqG SIb3DQEBCwUAA4IBAQAKj5kyznZV4dl3NT1BSL0JYcWvW8MxXoAmINJuTvYAHTb9 CEQnVhBuj2kyvnl4U14kK9+Yib6AmpjNB1ty8TbQLAKVuYlMudX8BfsnWKk5NrAD 7iYqDXKkSjB6k6HdZgzIOnuHBE/NAvCjI/QMSAOXUsvzp+6HC3ID1PVFduZCB7M1 CDSmYwH7i4qCnLzxTFbSj7DILQxDVOn3hjPNkGjyvL8GbI/QHO6XUIH13qEGojcU uFv2lyFpE9meblUZ6ADYGQokDYsDpKz1e3/xeW1o5CqZwP6yc6/2yNCTgdlzcMsM NndptbqxQutkyumRCkGns371G/Av20T/xkrRyiYh -----END CERTIFICATE-----Generated at Sat Nov 23 03:54:22 2024 by rpki-client on console-ams.rpki-client.org