$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa File: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: 2ZkkGd+fX3l5obE9PwHb34DV1uMCD1bcEHTNIogjlsk= Subject key identifier: 88:FE:ED:7D:AB:47:F1:9E:96:D6:5D:43:D4:80:E4:55:EE:71:9B:1F Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 56C776F6E9B4E1FA7122A512469F4CF7B88DA920 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa Signing time: Mon 26 Feb 2024 04:43:27 +0000 ROA not before: Mon 26 Feb 2024 04:38:27 +0000 ROA not after: Mon 24 Feb 2025 04:43:27 +0000 asID: 38320 IP address blocks: 103.29.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c7:76:f6:e9:b4:e1:fa:71:22:a5:12:46:9f:4c:f7:b8:8d:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Feb 26 04:38:27 2024 GMT Not After : Feb 24 04:43:27 2025 GMT Subject: CN=88FEED7DAB47F19E96D65D43D480E455EE719B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:f4:13:24:1c:5b:7c:f9:a8:00:a4:05:bb: 69:38:ea:78:4e:8b:23:1c:e6:b1:4c:09:bc:3e:06: e4:2e:9f:45:36:31:b1:de:87:67:5b:2b:fb:d0:02: 31:77:d8:6a:3e:15:05:73:3c:42:37:7a:18:11:08: d0:20:39:a6:4c:a6:f8:ab:4a:17:75:5d:2c:1e:78: 8e:4f:91:c1:9d:82:a1:42:3a:fd:18:f2:ff:b0:9e: 11:55:63:71:96:a9:0a:76:e6:f0:e2:55:e1:34:5a: 9a:ad:cd:b0:00:d6:93:74:b8:75:a7:d3:9e:e9:dc: 4d:bf:ca:06:b0:18:06:f0:65:fc:4f:b0:2f:b1:0a: 0e:f9:59:65:5a:ed:46:8e:48:34:82:db:d9:42:93: 7b:de:a8:8e:f6:da:bb:97:72:7c:27:6c:3e:e8:14: 1a:f4:4b:e1:79:6e:33:b1:15:15:c1:5f:47:03:73: 8f:ed:e7:12:69:f7:28:7f:03:05:86:10:42:7d:c4: 4d:f6:1c:c5:ef:0b:ac:83:a5:f5:09:87:7f:91:4e: 35:df:5f:d5:87:19:9b:28:cc:77:37:5b:d2:5a:13: 27:b9:7c:9c:d3:1b:09:c7:ef:bc:50:98:7d:bc:8c: ab:64:61:e7:13:ec:b5:14:ce:93:2a:73:a5:63:e7: 8d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FE:ED:7D:AB:47:F1:9E:96:D6:5D:43:D4:80:E4:55:EE:71:9B:1F X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3130332e32392e3136342e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.164.0/22 Signature Algorithm: sha256WithRSAEncryption 73:fa:62:f8:a8:30:5b:d8:1b:3d:db:f5:ce:95:46:bc:5a:91: e5:16:eb:c4:b7:3f:9b:0f:9b:ac:d2:68:93:ec:b9:58:c5:c0: 25:e7:39:f0:e1:25:36:77:54:f6:37:5e:bc:e4:80:0b:ee:43: 94:69:c8:4b:97:61:97:1e:d0:6e:90:49:66:f9:fd:1d:9c:70: 81:f3:20:f8:60:92:39:60:30:f9:9b:49:f4:47:c9:99:a3:4c: 83:48:5c:8b:88:cd:87:87:36:8d:57:24:9e:ff:16:f0:72:40: b8:f7:f0:e6:f5:c5:f2:e5:a1:f1:37:f8:07:fe:62:51:a8:ae: 28:05:d3:a9:62:4d:6b:53:4e:a4:3d:db:a3:2e:6b:f3:03:c9: a6:d5:e3:ab:05:e1:ae:76:7e:5a:42:56:eb:f3:73:f3:a3:59: 17:56:cb:02:24:9e:c6:09:f5:bd:ae:97:22:af:f3:7b:fb:6b: e6:8c:b6:69:f5:94:88:af:b5:f0:dd:14:4a:5e:a7:fb:ec:72: 06:bc:9c:d8:73:7e:c1:ae:47:46:60:f6:14:f1:7e:f2:f9:21: 5a:bc:a4:b7:f0:c2:1f:05:73:7d:12:65:0d:b5:3b:b5:0d:f3: f6:52:92:cc:6c:2d:a4:5b:15:d7:8b:2d:bb:28:56:b9:02:8d: 8f:52:76:d4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVsd29um04fpxIqUSRp9M97iNqSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNDAyMjYwNDM4MjdaFw0yNTAyMjQwNDQzMjdaMDMxMTAvBgNV BAMTKDg4RkVFRDdEQUI0N0YxOUU5NkQ2NUQ0M0Q0ODBFNDU1RUU3MTlCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3/QTJBxbfPmoAKQFu2k46nhO iyMc5rFMCbw+BuQun0U2MbHeh2dbK/vQAjF32Go+FQVzPEI3ehgRCNAgOaZMpvir Shd1XSweeI5PkcGdgqFCOv0Y8v+wnhFVY3GWqQp25vDiVeE0WpqtzbAA1pN0uHWn 057p3E2/ygawGAbwZfxPsC+xCg75WWVa7UaOSDSC29lCk3veqI722ruXcnwnbD7o FBr0S+F5bjOxFRXBX0cDc4/t5xJp9yh/AwWGEEJ9xE32HMXvC6yDpfUJh3+RTjXf X9WHGZsozHc3W9JaEye5fJzTGwnH77xQmH28jKtkYecT7LUUzpMqc6Vj540dAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUiP7tfatH8Z6W1l1D1IDkVe5xmx8wHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzAzMzJlMzIzOTJlMzEzNjM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcdpDANBgkqhkiG 9w0BAQsFAAOCAQEAc/pi+KgwW9gbPdv1zpVGvFqR5RbrxLc/mw+brNJok+y5WMXA Jec58OElNndU9jdevOSAC+5DlGnIS5dhlx7QbpBJZvn9HZxwgfMg+GCSOWAw+ZtJ 9EfJmaNMg0hci4jNh4c2jVcknv8W8HJAuPfw5vXF8uWh8Tf4B/5iUaiuKAXTqWJN a1NOpD3boy5r8wPJptXjqwXhrnZ+WkJW6/Nz86NZF1bLAiSexgn1va6XIq/ze/tr 5oy2afWUiK+18N0USl6n++xyBryc2HN+wa5HRmD2FPF+8vkhWrykt/DCHwVzfRJl DbU7tQ3z9lKSzGwtpFsV14stuyhWuQKNj1J21A== -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org