$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa File: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (raw, json) Hash identifier: 2mf3MWd4Yf3DGipvibKgwCGflKjCe75JI3gRy14xu5A= Subject key identifier: AE:76:A2:39:CB:46:04:40:FF:E1:61:34:71:7D:22:EA:BF:CA:27:FC Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 517243AABCA426951D68B37E44A6399B9A5AABE0 Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa Signing time: Tue 16 Jul 2024 10:00:00 +0000 ROA not before: Tue 16 Jul 2024 09:55:00 +0000 ROA not after: Tue 15 Jul 2025 10:00:00 +0000 asID: 139427 IP address blocks: 103.144.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:72:43:aa:bc:a4:26:95:1d:68:b3:7e:44:a6:39:9b:9a:5a:ab:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Jul 16 09:55:00 2024 GMT Not After : Jul 15 10:00:00 2025 GMT Subject: CN=AE76A239CB460440FFE16134717D22EABFCA27FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:ed:2f:66:a8:f5:5c:ed:f4:11:69:2a:5c: 7a:60:9d:38:55:ac:fe:97:fe:59:aa:45:14:83:bb: 31:53:9d:4b:56:93:9a:27:6d:f5:57:03:80:eb:7c: f5:eb:fe:54:a3:a0:5f:b5:ff:19:31:a9:9b:22:23: 92:ec:de:99:c2:52:fe:9c:4f:9a:82:a2:bf:77:c6: 0d:61:69:2c:d5:b0:de:b2:5d:57:98:80:22:a8:64: 1a:8f:d3:de:ee:3a:61:8a:e6:06:86:50:25:d2:7b: 7a:36:a2:52:10:be:b4:76:18:ed:54:41:0e:0d:a6: 49:e9:44:52:84:e6:09:52:6c:36:97:d5:94:a9:59: e2:55:fc:2c:35:3d:74:4b:e0:db:ba:52:09:d4:36: 88:06:10:67:ca:1b:a5:cf:9a:1c:b7:28:24:44:95: 73:f8:77:98:47:c8:44:bb:6f:ef:b7:5d:e9:4d:55: 17:56:a2:18:2a:45:ca:56:f6:ce:9b:07:33:20:9a: 5a:f6:4a:42:cb:c8:24:07:0f:33:f9:9e:b6:24:48: fc:ed:61:45:8d:0d:bb:b9:43:a0:59:80:5e:0d:0b: d0:56:77:65:90:d2:42:3e:1f:62:6e:78:f9:9b:9d: 31:d2:12:0b:f7:64:76:f1:99:d5:bc:e8:51:24:9b: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:76:A2:39:CB:46:04:40:FF:E1:61:34:71:7D:22:EA:BF:CA:27:FC X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.134.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:62:d2:11:ce:27:43:09:85:59:6a:e2:e6:d1:ab:b6:db:9b: a1:29:f9:2b:de:b0:70:58:cd:b7:94:5e:45:72:95:6f:b0:b9: 3d:dd:08:2e:7f:5e:72:b0:d4:2a:01:3a:c5:7b:0d:ce:92:2e: 30:12:0c:6f:a2:db:c0:ec:88:ca:c0:d9:40:b4:b6:5f:03:91: d6:da:a5:8f:5a:a0:ac:70:2b:0e:58:af:59:ac:25:d1:12:ce: 98:48:60:12:6c:1b:e2:92:de:7d:92:3a:81:25:ba:27:e6:e4: 32:b0:96:f1:a3:b9:98:3d:56:fc:03:bc:1a:41:77:7d:73:00: be:17:8a:cf:82:8b:b4:c8:86:50:e7:c8:59:57:56:1e:05:d0: 6c:5f:4e:44:8a:06:53:c8:5a:b0:23:4e:a5:58:08:9d:60:57: 7b:3e:18:86:03:8d:c8:92:a6:9b:3a:c0:41:16:d1:22:b0:4b: 66:f5:e1:11:97:e5:68:91:8d:e2:f4:d7:88:31:c9:24:1a:91: a1:d7:36:9d:75:e1:29:69:87:1d:6b:86:09:f5:68:a4:be:90: 79:23:7f:ed:c8:77:64:5d:70:12:13:e1:ef:9c:3c:b2:c1:f6: dc:12:6e:ff:67:86:5f:af:ed:98:1b:0f:c8:1d:21:ca:09:bf: f7:e4:df:8d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUXJDqrykJpUdaLN+RKY5m5paq+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNDA3MTYwOTU1MDBaFw0yNTA3MTUxMDAwMDBaMDMxMTAvBgNV BAMTKEFFNzZBMjM5Q0I0NjA0NDBGRkUxNjEzNDcxN0QyMkVBQkZDQTI3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmre0vZqj1XO30EWkqXHpgnThV rP6X/lmqRRSDuzFTnUtWk5onbfVXA4DrfPXr/lSjoF+1/xkxqZsiI5Ls3pnCUv6c T5qCor93xg1haSzVsN6yXVeYgCKoZBqP097uOmGK5gaGUCXSe3o2olIQvrR2GO1U QQ4NpknpRFKE5glSbDaX1ZSpWeJV/Cw1PXRL4Nu6UgnUNogGEGfKG6XPmhy3KCRE lXP4d5hHyES7b++3XelNVRdWohgqRcpW9s6bBzMgmlr2SkLLyCQHDzP5nrYkSPzt YUWNDbu5Q6BZgF4NC9BWd2WQ0kI+H2JuePmbnTHSEgv3ZHbxmdW86FEkmyXpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUrnaiOctGBED/4WE0cX0i6r/KJ/wwHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhOTE0YWRhLWE5YWEtNGQ3Zi05 ZTQ3LTU5NGJjYjdhNzBhYi8wLzMxMzAzMzJlMzEzNDM0MmUzMTMzMzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzkzNDMyMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkIYwDQYJ KoZIhvcNAQELBQADggEBAD1i0hHOJ0MJhVlq4ubRq7bbm6Ep+SvesHBYzbeUXkVy lW+wuT3dCC5/XnKw1CoBOsV7Dc6SLjASDG+i28DsiMrA2UC0tl8DkdbapY9aoKxw Kw5Yr1msJdESzphIYBJsG+KS3n2SOoEluifm5DKwlvGjuZg9VvwDvBpBd31zAL4X is+Ci7TIhlDnyFlXVh4F0GxfTkSKBlPIWrAjTqVYCJ1gV3s+GIYDjciSpps6wEEW 0SKwS2b14RGX5WiRjeL014gxySQakaHXNp114Slphx1rhgn1aKS+kHkjf+3Id2Rd cBIT4e+cPLLB9twSbv9nhl+v7ZgbD8gdIcoJv/fk340= -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org