$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa File: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (raw, json) Hash identifier: r0TbBF8saS2mOL5XeCwhn4JCtsrTGBwfR9bmqMpX7uY= Subject key identifier: A5:0B:3A:5D:E4:8F:39:F9:03:5A:D0:F5:B7:BF:82:2B:99:61:97:C9 Certificate issuer: /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Certificate serial: 4887FBDEF37B204CD4DC4508880B47C1816597B2 Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa Signing time: Thu 24 Oct 2024 08:01:17 +0000 ROA not before: Thu 24 Oct 2024 07:56:17 +0000 ROA not after: Thu 23 Oct 2025 08:01:17 +0000 asID: 135477 IP address blocks: 103.76.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:87:fb:de:f3:7b:20:4c:d4:dc:45:08:88:0b:47:c1:81:65:97:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Validity Not Before: Oct 24 07:56:17 2024 GMT Not After : Oct 23 08:01:17 2025 GMT Subject: CN=A50B3A5DE48F39F9035AD0F5B7BF822B996197C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:d3:96:b1:02:a0:df:68:71:07:8d:37:6b: 99:20:6b:c0:14:c4:18:f1:59:5c:b3:bb:08:00:18: 4a:de:f4:55:df:cd:3f:6b:b6:ad:47:d0:a7:49:37: 76:c7:7e:71:bd:d1:82:a1:a7:62:04:4f:83:5e:f5: 5a:7e:8d:cd:3c:94:02:df:a0:55:31:7a:ab:17:1f: 3d:0d:df:f8:1e:d2:58:ba:73:bb:26:42:86:87:78: 6f:d0:38:79:d7:0e:a7:0d:b1:30:6e:09:c1:f8:52: f1:3d:04:65:9a:a2:45:0d:66:9c:20:8c:69:43:ac: 16:40:1c:8f:ea:b2:b9:7f:37:21:70:62:6a:9f:0c: 01:38:8c:12:33:1c:10:eb:b5:2d:2c:3a:fe:a3:e0: ee:e0:88:61:e9:04:7f:64:24:8e:19:0d:96:14:45: 19:71:15:c8:3b:18:58:22:3f:93:87:c2:79:28:7e: 49:16:db:ab:be:39:9e:9d:a0:6f:65:af:68:cd:8a: f8:d2:1d:94:96:75:88:d9:1c:56:41:34:b6:32:42: 94:58:5e:e5:4f:4b:e0:c7:dd:66:5e:fb:68:04:e3: de:00:23:95:e8:31:d4:31:b1:58:ad:aa:d0:9b:17: cc:be:8a:ff:c5:39:42:6c:55:da:0c:7b:6a:a3:42: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0B:3A:5D:E4:8F:39:F9:03:5A:D0:F5:B7:BF:82:2B:99:61:97:C9 X509v3 Authority Key Identifier: keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.148.0/24 Signature Algorithm: sha256WithRSAEncryption 16:c2:d4:ff:5e:53:64:48:22:fa:ab:98:6d:f3:55:dd:61:20: e4:22:0e:e4:24:9c:11:b5:50:d4:04:75:fa:5f:22:23:5d:e1: 3f:50:2f:77:d6:02:ff:af:4f:1b:c6:15:09:b5:4c:d9:92:e0: 58:fc:5a:e8:e3:eb:8f:b3:e7:cf:3b:13:1b:37:b1:45:cb:af: e6:7b:71:26:ff:d3:77:6f:e8:ac:72:d6:d5:24:00:e8:45:a3: 12:ec:be:db:e1:a0:ca:3d:14:1e:fd:c1:a9:df:6f:05:c7:5f: 85:07:1d:5c:01:02:c2:9a:9a:ab:0f:a8:31:a1:2e:43:af:ab: 4c:ab:bb:6f:9a:bb:72:b7:f1:30:9d:f7:bb:03:d5:39:5c:d1: be:d0:af:74:97:a2:7d:9a:06:f8:b5:ce:41:d2:a3:de:a7:4e: 99:75:d3:2d:97:ed:64:17:38:1f:a1:33:88:a3:4c:e1:00:5b: 4b:23:9f:f2:00:fc:ec:69:32:8b:78:98:c0:74:f3:32:99:09: 52:62:82:d9:41:6b:76:29:37:50:cb:5a:d4:75:d1:74:90:2c: 89:1a:ac:07:7f:10:de:7c:47:51:e0:e2:6e:81:9d:46:d3:dc: ee:49:66:5b:30:bd:ff:09:81:aa:4f:28:2d:d8:09:0f:49:ca: ee:c7:53:54 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSIf73vN7IEzU3EUIiAtHwYFll7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5 Qjk0MTBFOTAeFw0yNDEwMjQwNzU2MTdaFw0yNTEwMjMwODAxMTdaMDMxMTAvBgNV BAMTKEE1MEIzQTVERTQ4RjM5RjkwMzVBRDBGNUI3QkY4MjJCOTk2MTk3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJdOWsQKg32hxB403a5kga8AU xBjxWVyzuwgAGEre9FXfzT9rtq1H0KdJN3bHfnG90YKhp2IET4Ne9Vp+jc08lALf oFUxeqsXHz0N3/ge0li6c7smQoaHeG/QOHnXDqcNsTBuCcH4UvE9BGWaokUNZpwg jGlDrBZAHI/qsrl/NyFwYmqfDAE4jBIzHBDrtS0sOv6j4O7giGHpBH9kJI4ZDZYU RRlxFcg7GFgiP5OHwnkofkkW26u+OZ6doG9lr2jNivjSHZSWdYjZHFZBNLYyQpRY XuVPS+DH3WZe+2gE494AI5XoMdQxsVitqtCbF8y+iv/FOUJsVdoMe2qjQps3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUpQs6XeSPOfkDWtD1t7+CK5lhl8kwHwYDVR0j BBgwFoAUgKV9krjUw/8X5xwDBdmtgpuUEOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC84MEE1N0Q5MkI4 RDRDM0ZGMTdFNzFDMDMwNUQ5QUQ4MjlCOTQxMEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5Qjk0 MTBFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3ZmRmNDNlLTRhNGMtNGRiYy1i Nzg1LWRkN2NiZjFhNjdiNy8wLzMxMzAzMzJlMzczNjJlMzEzNDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0yUMA0GCSqG SIb3DQEBCwUAA4IBAQAWwtT/XlNkSCL6q5ht81XdYSDkIg7kJJwRtVDUBHX6XyIj XeE/UC931gL/r08bxhUJtUzZkuBY/Fro4+uPs+fPOxMbN7FFy6/me3Em/9N3b+is ctbVJADoRaMS7L7b4aDKPRQe/cGp328Fx1+FBx1cAQLCmpqrD6gxoS5Dr6tMq7tv mrtyt/Ewnfe7A9U5XNG+0K90l6J9mgb4tc5B0qPep06ZddMtl+1kFzgfoTOIo0zh AFtLI5/yAPzsaTKLeJjAdPMymQlSYoLZQWt2KTdQy1rUddF0kCyJGqwHfxDefEdR 4OJugZ1G09zuSWZbML3/CYGqTygt2AkPScrux1NU -----END CERTIFICATE-----Generated at Fri Nov 22 22:09:43 2024 by rpki-client on console-ams.rpki-client.org