$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa File: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (raw, json) Hash identifier: 0iCYxPC31pPSAvbDWlSbOf4wUHd4K3IjBuNWnJfYJIE= Subject key identifier: C3:83:D2:A2:71:BA:BB:11:3A:38:9D:3E:27:FC:38:9A:9C:81:07:4B Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 575E5FC90CE969B0AF7562FEB8E77AD3B9020FF2 Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa Signing time: Tue 16 Jul 2024 09:00:00 +0000 ROA not before: Tue 16 Jul 2024 08:55:00 +0000 ROA not after: Tue 15 Jul 2025 09:00:00 +0000 asID: 139427 IP address blocks: 103.144.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5e:5f:c9:0c:e9:69:b0:af:75:62:fe:b8:e7:7a:d3:b9:02:0f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Jul 16 08:55:00 2024 GMT Not After : Jul 15 09:00:00 2025 GMT Subject: CN=C383D2A271BABB113A389D3E27FC389A9C81074B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:48:24:09:88:79:20:aa:59:2f:63:d2:2b:d1: 1a:73:16:ea:ae:8a:28:cd:d0:d8:f8:60:05:0c:ca: 2a:06:aa:24:59:35:d9:84:26:26:73:6d:1c:4d:b3: 76:11:5e:a2:20:71:e7:8e:be:c5:17:44:e4:3e:a2: 64:6d:83:13:e8:1a:56:fe:c6:c1:48:d6:60:59:58: 86:25:61:cb:2d:a3:79:93:aa:5d:19:dd:8f:09:46: 0f:e2:d4:41:b5:7d:fb:62:0d:be:7e:53:19:cd:0f: 93:ff:11:ec:80:af:e9:1d:74:83:c2:bb:25:29:b3: 7a:fe:c8:86:72:e0:15:3e:14:b1:bb:81:eb:d7:0b: 2e:f7:70:1c:25:4f:88:00:1d:14:8b:75:df:e2:1d: cf:48:7e:5f:25:b4:dd:fd:79:29:2e:c1:35:14:dd: f6:ee:00:05:9a:4d:1f:4b:ea:ec:b5:4a:7f:09:07: 98:48:c0:7a:59:44:6f:be:cc:56:31:45:aa:91:b8: 3f:cf:76:40:f8:68:01:94:a2:f8:cf:dd:9e:5b:37: 2c:de:f8:b0:72:f6:25:d3:e7:cb:55:36:d1:fb:74: 24:81:cb:ab:b8:63:4d:25:62:00:f5:c2:94:85:e5: a9:d3:a6:24:7b:ea:41:aa:50:20:da:aa:cf:da:a9: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:83:D2:A2:71:BA:BB:11:3A:38:9D:3E:27:FC:38:9A:9C:81:07:4B X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.135.0/24 Signature Algorithm: sha256WithRSAEncryption 33:8b:33:cb:9e:08:25:d5:c1:e9:e6:cd:47:2c:05:8a:d5:71: b4:24:d7:db:13:92:15:6c:59:07:81:98:34:e9:d9:36:8d:c4: d6:bc:36:90:f7:d9:cf:2a:4a:6c:96:75:5c:bb:44:a3:70:63: 0e:3f:7e:19:ca:fc:5e:fa:48:e6:38:8d:24:a0:17:e3:45:c0: 78:38:34:88:f4:2d:ec:18:e6:c8:6b:d7:35:42:6a:14:f0:2e: 20:31:bc:a4:72:e2:ec:e5:a8:00:dd:49:6f:96:9d:4f:25:e2: 48:00:9c:66:fe:cf:d6:6b:ec:27:82:ed:a5:ed:84:f6:90:15: 6a:70:97:a9:c8:ae:b5:53:e4:e9:8c:43:33:35:f4:39:fa:84: e0:03:52:db:ec:c7:df:28:c4:60:ad:48:9f:2c:e2:53:44:4c: 94:49:e3:7e:07:cd:35:ee:0f:72:5f:8a:96:98:99:4d:5a:80: 11:6a:57:2a:aa:29:20:86:c3:ba:28:43:d3:83:8b:b3:b5:ea: 95:0c:fd:04:86:93:71:a3:c7:df:04:d0:9b:90:65:85:5f:ca: 46:b6:30:10:31:cb:6f:b7:fc:f8:4e:07:64:5e:d0:f1:93:fa: 29:73:24:f4:ad:73:f9:fb:9b:1d:b0:8f:ae:09:80:12:35:91: 28:e2:03:94 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUV15fyQzpabCvdWL+uOd607kCD/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNDA3MTYwODU1MDBaFw0yNTA3MTUwOTAwMDBaMDMxMTAvBgNV BAMTKEMzODNEMkEyNzFCQUJCMTEzQTM4OUQzRTI3RkMzODlBOUM4MTA3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtSCQJiHkgqlkvY9Ir0RpzFuqu iijN0Nj4YAUMyioGqiRZNdmEJiZzbRxNs3YRXqIgceeOvsUXROQ+omRtgxPoGlb+ xsFI1mBZWIYlYcsto3mTql0Z3Y8JRg/i1EG1fftiDb5+UxnND5P/EeyAr+kddIPC uyUps3r+yIZy4BU+FLG7gevXCy73cBwlT4gAHRSLdd/iHc9Ifl8ltN39eSkuwTUU 3fbuAAWaTR9L6uy1Sn8JB5hIwHpZRG++zFYxRaqRuD/PdkD4aAGUovjP3Z5bNyze +LBy9iXT58tVNtH7dCSBy6u4Y00lYgD1wpSF5anTpiR76kGqUCDaqs/aqUexAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUw4PSonG6uxE6OJ0+J/w4mpyBB0swHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhOTE0YWRhLWE5YWEtNGQ3Zi05 ZTQ3LTU5NGJjYjdhNzBhYi8wLzMxMzAzMzJlMzEzNDM0MmUzMTMzMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDMyMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkIcwDQYJ KoZIhvcNAQELBQADggEBADOLM8ueCCXVwenmzUcsBYrVcbQk19sTkhVsWQeBmDTp 2TaNxNa8NpD32c8qSmyWdVy7RKNwYw4/fhnK/F76SOY4jSSgF+NFwHg4NIj0LewY 5shr1zVCahTwLiAxvKRy4uzlqADdSW+WnU8l4kgAnGb+z9Zr7CeC7aXthPaQFWpw l6nIrrVT5OmMQzM19Dn6hOADUtvsx98oxGCtSJ8s4lNETJRJ434HzTXuD3JfipaY mU1agBFqVyqqKSCGw7ooQ9ODi7O16pUM/QSGk3Gjx98E0JuQZYVfyka2MBAxy2+3 /PhOB2Re0PGT+ilzJPStc/n7mx2wj64JgBI1kSjiA5Q= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org