$ rpki-client -vvf repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa File: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (raw, json) Hash identifier: 8AmYK5KC8hldB1muUmxdPCs0q6CgoH4COunOQq9ZmmY= Subject key identifier: 6F:83:09:42:E5:BC:E9:A2:5E:05:A6:80:54:40:7A:45:66:B0:61:6B Certificate issuer: /CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Certificate serial: 2DBEA3B81BC4B561879EC486DFA4A61340CD128C Authority key identifier: 6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa Signing time: Wed 04 Sep 2024 10:00:00 +0000 ROA not before: Wed 04 Sep 2024 09:55:00 +0000 ROA not after: Wed 03 Sep 2025 10:00:00 +0000 asID: 139952 IP address blocks: 103.160.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:be:a3:b8:1b:c4:b5:61:87:9e:c4:86:df:a4:a6:13:40:cd:12:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3 Validity Not Before: Sep 4 09:55:00 2024 GMT Not After : Sep 3 10:00:00 2025 GMT Subject: CN=6F830942E5BCE9A25E05A68054407A4566B0616B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:b8:3c:e7:a0:22:7f:0e:33:ba:e6:be:f2: 04:69:ca:a7:2c:cf:f0:a4:88:25:fe:67:59:4d:d8: 51:b4:bd:3a:e9:81:f5:4a:89:75:f1:13:18:9e:0d: 56:50:5f:cc:39:23:b3:d5:8a:19:fc:fa:87:d2:1c: 83:51:08:82:57:4d:69:45:45:ac:fd:32:c3:a2:18: 25:cd:8b:ce:f9:25:68:0f:91:be:83:a5:f6:31:a6: a7:62:5f:de:fa:b4:b8:93:75:bd:0d:3e:40:31:52: 0b:d0:47:eb:65:03:0e:df:36:af:09:3e:b1:94:ce: b8:9c:45:3c:1a:02:4b:d1:86:4a:9f:ed:6f:d5:29: 7b:2d:20:ce:24:f5:6b:75:e0:4f:cd:4d:98:35:1b: 68:b1:32:92:0b:ca:d9:1e:cb:1a:8c:03:55:5e:93: b9:32:87:30:92:f9:ab:9d:6c:8a:4a:4b:40:d6:fa: 79:6c:0b:0f:54:6b:39:1e:80:88:50:30:29:8d:5b: 03:ad:22:e6:5d:98:ef:01:8d:f3:0b:1c:55:ff:67: a9:aa:fa:4e:d7:8d:3a:c9:f3:98:0a:41:09:ed:e4: 42:81:a6:4c:51:06:d1:a3:0e:1e:c4:02:0d:be:97: cb:93:a2:2e:85:2b:67:b9:7e:f5:25:31:b7:fe:39: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:83:09:42:E5:BC:E9:A2:5E:05:A6:80:54:40:7A:45:66:B0:61:6B X509v3 Authority Key Identifier: keyid:6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.184.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:a0:f5:51:4c:c3:a4:80:f9:6d:e3:7d:d5:34:6f:f6:ab:a4: b0:11:27:10:20:f8:2b:6b:e0:04:3a:03:3e:98:a0:65:9d:d2: 71:56:7c:3c:18:86:8e:1f:a4:97:22:c2:7a:9d:41:62:c9:22: 61:3a:c0:ae:3f:a6:92:18:9d:a6:47:8f:e7:8d:71:83:80:42: 76:c7:a5:00:1a:cf:ee:72:69:94:bd:64:d6:96:41:19:68:99: 45:76:43:b6:3a:d5:4a:45:36:97:5f:8e:a3:18:2c:0b:a8:58: 07:f2:c5:df:ba:63:c7:7f:3a:2a:39:4e:6a:36:ce:da:b3:0a: 41:0a:4d:8e:24:96:c9:65:ae:e8:53:ef:4d:0d:e3:5e:3b:83: 74:e1:e9:cc:41:2f:5a:01:3a:23:ff:b2:ea:f1:5f:c3:92:50: 09:b2:87:44:cc:c8:7b:bc:cb:d9:df:b6:51:a3:82:6b:3a:bf: 14:dc:c6:5f:25:c1:d3:f6:e9:62:0e:b7:67:7a:83:06:68:7c: 0e:3c:41:f6:ad:e6:83:2e:2d:6e:01:dc:f2:3d:a1:b3:7b:b9: 4e:62:b2:a7:9e:63:74:c8:89:77:7a:ce:a5:51:4b:1d:d2:36: ee:4a:b2:9f:4b:51:8d:46:37:f3:07:19:40:c8:50:91:b7:4d: 3b:5d:5a:d5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULb6juBvEtWGHnsSG36SmE0DNEowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3 MDJGRUFEMzAeFw0yNDA5MDQwOTU1MDBaFw0yNTA5MDMxMDAwMDBaMDMxMTAvBgNV BAMTKDZGODMwOTQyRTVCQ0U5QTI1RTA1QTY4MDU0NDA3QTQ1NjZCMDYxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKrg856Aifw4zuua+8gRpyqcs z/CkiCX+Z1lN2FG0vTrpgfVKiXXxExieDVZQX8w5I7PVihn8+ofSHINRCIJXTWlF Raz9MsOiGCXNi875JWgPkb6DpfYxpqdiX976tLiTdb0NPkAxUgvQR+tlAw7fNq8J PrGUzricRTwaAkvRhkqf7W/VKXstIM4k9Wt14E/NTZg1G2ixMpILytkeyxqMA1Ve k7kyhzCS+audbIpKS0DW+nlsCw9UazkegIhQMCmNWwOtIuZdmO8BjfMLHFX/Z6mq +k7XjTrJ85gKQQnt5EKBpkxRBtGjDh7EAg2+l8uToi6FK2e5fvUlMbf+OfFFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUb4MJQuW86aJeBaaAVEB6RWawYWswHwYDVR0j BBgwFoAUamyBNlTgwpM55sr1IiAfjnAv6tMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgyYmNhMy1lODU4LTRkNTItYjFhMy0yZjRiYWU0N2M5ZjIvMC82QTZDODEzNjU0 RTBDMjkzMzlFNkNBRjUyMjIwMUY4RTcwMkZFQUQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE2QzgxMzY1NEUwQzI5MzM5RTZDQUY1MjIyMDFGOEU3MDJG RUFEMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ODJiY2EzLWU4NTgtNGQ1Mi1i MWEzLTJmNGJhZTQ3YzlmMi8wLzMxMzAzMzJlMzEzNjMwMmUzMTM4MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoLgwDQYJ KoZIhvcNAQELBQADggEBAJqg9VFMw6SA+W3jfdU0b/arpLARJxAg+Ctr4AQ6Az6Y oGWd0nFWfDwYho4fpJciwnqdQWLJImE6wK4/ppIYnaZHj+eNcYOAQnbHpQAaz+5y aZS9ZNaWQRlomUV2Q7Y61UpFNpdfjqMYLAuoWAfyxd+6Y8d/Oio5Tmo2ztqzCkEK TY4klsllruhT700N4147g3Th6cxBL1oBOiP/surxX8OSUAmyh0TMyHu8y9nftlGj gms6vxTcxl8lwdP26WIOt2d6gwZofA48Qfat5oMuLW4B3PI9obN7uU5isqeeY3TI iXd6zqVRSx3SNu5Ksp9LUY1GN/MHGUDIUJG3TTtdWtU= -----END CERTIFICATE-----Generated at Fri Nov 22 22:21:00 2024 by rpki-client on console-fra.rpki-client.org