$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32332d3233203d3e203234323036.roa File: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (raw, json) Hash identifier: IKrLXgzTRMNUHQiY7lPxbY4RYs8/kWiZvIMH5tUTx6c= Subject key identifier: 6E:46:B6:E6:2B:BB:E7:2B:8F:CE:F3:B6:9C:7A:47:A6:4A:2F:E2:6C Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 328EAA97F3B722C13CBAEF4928C1ABBF4BAA2AA3 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32332d3233203d3e203234323036.roa Signing time: Wed 21 Aug 2024 15:19:16 +0000 ROA not before: Wed 21 Aug 2024 15:14:16 +0000 ROA not after: Wed 20 Aug 2025 15:19:16 +0000 asID: 24206 IP address blocks: 110.44.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8e:aa:97:f3:b7:22:c1:3c:ba:ef:49:28:c1:ab:bf:4b:aa:2a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Aug 21 15:14:16 2024 GMT Not After : Aug 20 15:19:16 2025 GMT Subject: CN=6E46B6E62BBBE72B8FCEF3B69C7A47A64A2FE26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:4b:01:6a:e4:27:22:81:5f:5a:64:dd:fa: 04:1f:27:50:a2:a0:57:84:bd:17:cd:ad:86:d3:05: 52:15:f4:ed:01:8c:f7:8c:ea:ec:c6:8e:ab:66:2a: d1:1d:6c:09:ac:05:e4:52:7e:3f:55:6b:83:21:28: 27:f0:6c:31:26:88:cc:5f:6d:aa:ca:96:ff:73:11: 2b:48:22:b1:09:43:ab:db:90:6a:85:19:27:4b:0a: 60:d3:7a:ec:ba:f0:6b:93:5e:38:6f:5c:16:70:f5: 24:c6:0c:03:6b:b9:1d:01:81:90:02:87:ac:c7:a9: 3e:8a:48:d9:1d:7d:de:46:93:ee:8b:bd:fd:78:36: d9:1e:97:40:d5:e8:5d:81:42:aa:b6:d4:ea:5a:c8: f4:32:e3:19:cb:9c:4c:87:c5:54:06:61:1b:2a:23: ee:9f:5b:0b:ef:8e:51:42:57:31:f8:50:d1:05:c3: 7d:60:b8:e2:3d:83:5d:fc:fa:02:11:bf:66:3d:2c: 1d:59:04:99:aa:6c:5c:ae:84:3c:e4:cd:80:6e:98: 36:b0:8b:0c:f4:6a:59:14:67:5b:f7:06:0d:78:a4: b9:70:e8:5e:fc:c3:cf:90:3c:3f:e9:6d:a6:38:65: af:54:57:19:f1:17:0e:83:3f:a9:de:7e:3d:5c:b6: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:46:B6:E6:2B:BB:E7:2B:8F:CE:F3:B6:9C:7A:47:A6:4A:2F:E2:6C X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32332d3233203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.44.168.0/23 Signature Algorithm: sha256WithRSAEncryption 60:14:07:79:cb:92:44:a2:47:f3:f7:e5:8b:77:b6:d6:8d:44: 2a:44:d7:58:b6:3a:51:87:a0:5c:47:03:df:76:11:68:d4:18: 03:0c:47:5e:a9:b9:cd:39:d5:53:6c:43:25:a1:0a:1a:9e:78: 52:38:7f:39:5b:5d:3a:14:8f:a0:5b:79:8d:8b:35:29:79:2f: 24:78:48:76:3e:af:09:a6:7d:c1:bc:a7:f8:67:0c:d2:ab:7c: 78:bc:d5:da:4c:88:64:4e:3c:67:77:c6:24:d2:fa:58:99:09: eb:74:6a:05:60:9d:46:04:19:bd:4d:e5:3a:a4:ec:d0:ab:e6: 98:1c:a2:82:78:4e:d7:3e:8a:e3:8c:31:11:65:84:31:4e:43: a1:0f:21:f9:c4:8b:2a:a5:8e:1e:cc:4f:ba:6e:a7:1c:16:f1: 60:64:c3:58:a0:26:e3:3d:0c:c4:b4:da:f7:7c:49:4f:3b:a0: e4:bf:45:54:43:20:9a:69:72:ac:cd:2f:c7:c4:07:2d:ee:2c: 71:4c:44:7f:47:09:af:ad:8a:1e:1b:cc:bc:ba:34:74:17:d8: 71:60:7d:c6:e3:bd:80:8d:15:2d:2a:9b:3a:a8:0b:82:0c:04: 53:85:1c:a0:76:66:ca:96:51:49:f8:c3:f8:1d:dc:21:22:78: 11:fe:b5:00 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMo6ql/O3IsE8uu9JKMGrv0uqKqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNDA4MjExNTE0MTZaFw0yNTA4MjAxNTE5MTZaMDMxMTAvBgNV BAMTKDZFNDZCNkU2MkJCQkU3MkI4RkNFRjNCNjlDN0E0N0E2NEEyRkUyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qUsBauQnIoFfWmTd+gQfJ1Ci oFeEvRfNrYbTBVIV9O0BjPeM6uzGjqtmKtEdbAmsBeRSfj9Va4MhKCfwbDEmiMxf barKlv9zEStIIrEJQ6vbkGqFGSdLCmDTeuy68GuTXjhvXBZw9STGDANruR0BgZAC h6zHqT6KSNkdfd5Gk+6Lvf14Ntkel0DV6F2BQqq21OpayPQy4xnLnEyHxVQGYRsq I+6fWwvvjlFCVzH4UNEFw31guOI9g138+gIRv2Y9LB1ZBJmqbFyuhDzkzYBumDaw iwz0alkUZ1v3Bg14pLlw6F78w8+QPD/pbaY4Za9UVxnxFw6DP6nefj1cttJNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUbka25iu75yuPzvO2nHpHpkov4mwwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNjM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAW4sqDANBgkqhkiG 9w0BAQsFAAOCAQEAYBQHecuSRKJH8/fli3e21o1EKkTXWLY6UYegXEcD33YRaNQY AwxHXqm5zTnVU2xDJaEKGp54Ujh/OVtdOhSPoFt5jYs1KXkvJHhIdj6vCaZ9wbyn +GcM0qt8eLzV2kyIZE48Z3fGJNL6WJkJ63RqBWCdRgQZvU3lOqTs0KvmmByignhO 1z6K44wxEWWEMU5DoQ8h+cSLKqWOHsxPum6nHBbxYGTDWKAm4z0MxLTa93xJTzug 5L9FVEMgmmlyrM0vx8QHLe4scUxEf0cJr62KHhvMvLo0dBfYcWB9xuO9gI0VLSqb OqgLggwEU4UcoHZmypZRSfjD+B3cISJ4Ef61AA== -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org