$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa File: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (raw, json) Hash identifier: armCdMsgrh9HBVd3tCBMp8GfztvN8GGDpG5VkguYG4U= Subject key identifier: 5A:42:A1:EF:C3:60:9F:37:C1:7E:AC:78:73:BC:59:F3:A6:B8:4A:CF Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 677F13CF7FC7A7D5D17A1EB4220165B2773815AA Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa Signing time: Fri 30 Aug 2024 16:00:01 +0000 ROA not before: Fri 30 Aug 2024 15:55:01 +0000 ROA not after: Fri 29 Aug 2025 16:00:01 +0000 asID: 24206 IP address blocks: 110.44.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7f:13:cf:7f:c7:a7:d5:d1:7a:1e:b4:22:01:65:b2:77:38:15:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Aug 30 15:55:01 2024 GMT Not After : Aug 29 16:00:01 2025 GMT Subject: CN=5A42A1EFC3609F37C17EAC7873BC59F3A6B84ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4e:c7:10:9a:34:b2:43:76:9d:40:60:36:3e: 20:70:a4:5b:63:e6:99:29:7e:da:86:08:7f:5f:12: 12:3c:14:09:aa:92:11:c6:b9:3a:75:5f:40:ad:26: 71:3b:ee:e8:5f:26:79:f5:5b:ba:ed:ac:e0:bf:a7: fe:13:fd:dc:81:50:2a:9b:2e:4e:66:51:1f:49:86: 0c:71:84:54:67:6f:19:eb:86:ee:3e:fc:02:c9:7b: b1:7d:25:f9:e4:dd:1d:a7:2a:3d:57:39:4e:aa:cb: 0f:af:28:6d:7b:b5:b5:7d:8d:7e:2e:0e:8d:6a:fb: 98:77:35:8a:33:64:cc:44:e1:f4:7c:be:e0:ed:60: 61:00:2f:f1:bc:61:ba:31:e4:a4:60:98:06:be:e8: 11:92:9f:bc:1e:2c:4c:35:2a:8c:31:ae:dd:2b:f9: ff:13:59:cb:a1:00:6b:af:bb:44:fc:58:c1:69:72: e8:38:7e:3b:96:ab:d0:db:24:92:cd:47:b3:05:ed: 82:c2:9f:66:ee:6b:a5:a2:ed:21:cf:89:d6:ca:7f: 7a:5f:63:4f:7e:7f:10:fd:52:c9:ab:82:5e:5e:2b: 64:5b:5a:53:ff:f1:43:99:d6:66:eb:c4:c2:4f:32: d2:23:11:17:e3:27:36:02:ee:94:88:5b:5e:f9:38: 8d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:42:A1:EF:C3:60:9F:37:C1:7E:AC:78:73:BC:59:F3:A6:B8:4A:CF X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.44.169.0/24 Signature Algorithm: sha256WithRSAEncryption 84:28:cb:4d:f5:1d:dc:ec:64:8e:77:a7:b6:f7:35:c3:71:12: f5:c4:b2:f4:27:0e:16:4f:b8:78:25:96:88:19:de:7f:03:bc: 9c:6b:7d:64:cf:93:ad:f7:2c:23:f3:cf:fd:90:f3:be:d6:44: b9:56:2d:8d:76:cc:90:7d:8f:69:cb:24:83:44:83:58:10:f8: 55:81:0a:d4:0e:84:32:f7:2a:6b:89:5e:3e:57:e7:5b:a1:33: 2c:f7:f3:4f:9b:15:b9:09:f8:59:dd:31:2f:5f:96:3b:f2:f0: a2:7f:10:c9:14:45:d4:15:37:fa:20:e0:2f:a2:eb:9a:c7:3e: 96:02:aa:bc:f3:e8:69:b9:2e:9f:65:68:0b:9d:35:6c:b3:bc: 67:0e:1c:5c:9b:65:13:a8:2e:05:bf:1d:54:59:43:2b:58:26: 47:08:0a:5e:d1:21:f2:c7:af:fb:37:94:5f:33:66:eb:93:4b: b8:27:ff:be:7d:70:ec:26:a2:57:42:a0:f2:bb:36:45:ac:28: 64:45:f5:e8:b2:57:fd:79:49:8b:41:03:a2:6e:89:0b:63:bf: 3d:07:68:35:0a:a8:20:13:68:d0:a1:6e:59:3e:e8:bd:ac:ea: f4:f0:5d:1e:77:36:25:fc:d2:dd:9b:cd:1b:a0:14:6f:53:4a: b4:f1:c2:1e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZ38Tz3/Hp9XReh60IgFlsnc4FaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNDA4MzAxNTU1MDFaFw0yNTA4MjkxNjAwMDFaMDMxMTAvBgNV BAMTKDVBNDJBMUVGQzM2MDlGMzdDMTdFQUM3ODczQkM1OUYzQTZCODRBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlTscQmjSyQ3adQGA2PiBwpFtj 5pkpftqGCH9fEhI8FAmqkhHGuTp1X0CtJnE77uhfJnn1W7rtrOC/p/4T/dyBUCqb Lk5mUR9JhgxxhFRnbxnrhu4+/ALJe7F9Jfnk3R2nKj1XOU6qyw+vKG17tbV9jX4u Do1q+5h3NYozZMxE4fR8vuDtYGEAL/G8Ybox5KRgmAa+6BGSn7weLEw1Kowxrt0r +f8TWcuhAGuvu0T8WMFpcug4fjuWq9DbJJLNR7MF7YLCn2bua6Wi7SHPidbKf3pf Y09+fxD9Usmrgl5eK2RbWlP/8UOZ1mbrxMJPMtIjERfjJzYC7pSIW175OI0DAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWkKh78NgnzfBfqx4c7xZ86a4Ss8wHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG4sqTANBgkqhkiG 9w0BAQsFAAOCAQEAhCjLTfUd3Oxkjnentvc1w3ES9cSy9CcOFk+4eCWWiBnefwO8 nGt9ZM+TrfcsI/PP/ZDzvtZEuVYtjXbMkH2Pacskg0SDWBD4VYEK1A6EMvcqa4le PlfnW6EzLPfzT5sVuQn4Wd0xL1+WO/Lwon8QyRRF1BU3+iDgL6Lrmsc+lgKqvPPo abkun2VoC501bLO8Zw4cXJtlE6guBb8dVFlDK1gmRwgKXtEh8sev+zeUXzNm65NL uCf/vn1w7CaiV0Kg8rs2RawoZEX16LJX/XlJi0EDom6JC2O/PQdoNQqoIBNo0KFu WT7ovazq9PBdHnc2JfzS3ZvNG6AUb1NKtPHCHg== -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org