$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa File: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (raw, json) Hash identifier: vw974+b7S4AeCMOfLxwb8dIT4RkLZFi3f5lsXumywts= Subject key identifier: 25:6A:14:35:D8:9A:1C:A4:EA:E4:57:58:4E:73:D6:D0:A2:E1:AC:EE Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 3AFA42DFB0E761AAA57C525084A69B2F5C735B89 Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa Signing time: Sun 29 Sep 2024 13:45:13 +0000 ROA not before: Sun 29 Sep 2024 13:40:13 +0000 ROA not after: Sun 28 Sep 2025 13:45:13 +0000 asID: 141071 IP address blocks: 103.97.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 03:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:fa:42:df:b0:e7:61:aa:a5:7c:52:50:84:a6:9b:2f:5c:73:5b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: Sep 29 13:40:13 2024 GMT Not After : Sep 28 13:45:13 2025 GMT Subject: CN=256A1435D89A1CA4EAE457584E73D6D0A2E1ACEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:ae:ef:b8:db:e3:29:4c:a5:f2:d7:69:d1: 4c:c8:c2:df:b1:df:f4:62:49:21:7f:c8:e2:0f:21: 6e:98:70:96:54:a6:24:c2:80:54:8c:fd:29:40:40: 45:b1:98:f0:f8:48:13:15:b4:de:da:6e:19:49:15: 2f:2f:f9:aa:a3:12:8d:83:37:ba:a9:5a:f5:84:24: 49:c9:f9:7e:a6:ec:0d:25:77:64:15:ff:12:45:3f: 55:1d:20:76:09:e3:fa:9a:d7:87:ff:72:b0:3f:20: ca:10:b2:9a:fd:1e:82:ae:a7:a7:fb:16:43:72:87: 23:23:66:bf:a7:bf:0d:3a:8e:8e:26:f3:75:4b:02: cf:7b:18:56:d5:dc:58:42:35:55:59:aa:c4:a7:39: 66:79:e2:4a:c0:0f:d4:48:31:64:74:ff:47:ac:2c: 5c:22:0c:11:0c:41:76:da:f8:7a:db:3d:b9:24:5f: 1e:d1:08:fa:ac:2d:a5:00:36:41:fb:27:d6:f2:af: 8d:c9:a8:c2:28:ef:98:6d:90:87:4a:f5:f4:52:06: 31:8d:aa:7a:59:7e:32:ab:16:11:62:62:1a:ba:68: 8d:6c:c9:ae:66:6f:b5:57:7c:de:a8:c2:0e:60:90: 60:13:98:73:5e:0f:0a:f4:0c:b2:74:8d:f7:ad:2d: 0f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6A:14:35:D8:9A:1C:A4:EA:E4:57:58:4E:73:D6:D0:A2:E1:AC:EE X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.141.0/24 Signature Algorithm: sha256WithRSAEncryption 15:4d:05:74:f7:3e:49:53:5d:4e:38:a2:6a:2a:22:9d:08:7f: 35:41:62:88:36:8a:d9:c4:8b:d8:33:9b:37:14:4d:cb:f0:de: 94:d5:b8:4b:ad:41:8d:49:f7:cd:e7:3a:11:b0:12:46:13:1b: 47:ff:d4:c8:9b:40:ff:ad:ac:a9:59:85:1f:0a:d1:c0:b0:bd: c5:fe:58:98:8e:d4:d7:d5:c8:03:89:e6:b4:a7:ea:d5:d0:20: e5:88:4d:61:4d:e3:54:d1:13:96:9c:b4:6c:cd:68:3c:d0:e7: 36:73:6c:2f:08:c5:95:4a:e4:4e:9f:26:e7:b7:15:27:cb:9e: fa:b2:20:93:de:b2:e0:6f:03:bb:ad:69:c8:8e:6a:0a:6c:d7: d5:57:84:4d:15:e4:09:0a:3a:8c:46:0e:3e:30:55:65:0a:ed: 13:3f:1d:99:a4:a8:a9:07:64:e4:46:e9:ff:f8:26:f1:51:fd: 11:c2:7a:3a:c0:eb:50:74:45:59:12:81:7e:b0:55:ab:b9:1e: 10:d5:16:2d:a7:5b:55:73:f0:5a:fa:ce:35:03:a2:70:99:02: 4a:57:fb:a5:ca:12:3b:4b:25:57:39:d3:94:bf:ea:da:bc:dd: bb:94:33:c0:9c:39:cc:4a:38:b9:bb:34:e3:52:16:ed:e3:b9: 9d:98:13:af -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOvpC37DnYaqlfFJQhKabL1xzW4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNDA5MjkxMzQwMTNaFw0yNTA5MjgxMzQ1MTNaMDMxMTAvBgNV BAMTKDI1NkExNDM1RDg5QTFDQTRFQUU0NTc1ODRFNzNENkQwQTJFMUFDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtu67vuNvjKUyl8tdp0UzIwt+x 3/RiSSF/yOIPIW6YcJZUpiTCgFSM/SlAQEWxmPD4SBMVtN7abhlJFS8v+aqjEo2D N7qpWvWEJEnJ+X6m7A0ld2QV/xJFP1UdIHYJ4/qa14f/crA/IMoQspr9HoKup6f7 FkNyhyMjZr+nvw06jo4m83VLAs97GFbV3FhCNVVZqsSnOWZ54krAD9RIMWR0/0es LFwiDBEMQXba+HrbPbkkXx7RCPqsLaUANkH7J9byr43JqMIo75htkIdK9fRSBjGN qnpZfjKrFhFiYhq6aI1sya5mb7VXfN6owg5gkGATmHNeDwr0DLJ0jfetLQ9xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJWoUNdiaHKTq5FdYTnPW0KLhrO4wHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E0MDE0MzZiLTAyNjctNDY2Yi1h MzQwLWUyODhkMmU5MzRhOC8wLzMxMzAzMzJlMzkzNzJlMzEzNDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2GNMA0GCSqG SIb3DQEBCwUAA4IBAQAVTQV09z5JU11OOKJqKiKdCH81QWKINorZxIvYM5s3FE3L 8N6U1bhLrUGNSffN5zoRsBJGExtH/9TIm0D/raypWYUfCtHAsL3F/liYjtTX1cgD iea0p+rV0CDliE1hTeNU0ROWnLRszWg80Oc2c2wvCMWVSuROnybntxUny576siCT 3rLgbwO7rWnIjmoKbNfVV4RNFeQJCjqMRg4+MFVlCu0TPx2ZpKipB2TkRun/+Cbx Uf0Rwno6wOtQdEVZEoF+sFWruR4Q1RYtp1tVc/Ba+s41A6JwmQJKV/ulyhI7SyVX OdOUv+ravN27lDPAnDnMSji5uzTjUhbt47mdmBOv -----END CERTIFICATE-----Generated at Sat Nov 23 03:54:22 2024 by rpki-client on console-ams.rpki-client.org