$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32342d3234203d3e2039333431.roa File: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: VkkcM1AqEwXsS/hQawzqHg+YyvXNA8/GMbHDz4dyi9o= Subject key identifier: 27:37:D7:CE:E0:01:58:FE:ED:CD:27:81:EE:6F:98:70:F9:FB:6A:C1 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 536A46F9B79C9D4AD8D7D6C25143488CD8BF6126 Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32342d3234203d3e2039333431.roa Signing time: Fri 06 Sep 2024 10:00:01 +0000 ROA not before: Fri 06 Sep 2024 09:55:01 +0000 ROA not after: Fri 05 Sep 2025 10:00:01 +0000 asID: 9341 IP address blocks: 103.20.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6a:46:f9:b7:9c:9d:4a:d8:d7:d6:c2:51:43:48:8c:d8:bf:61:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Sep 6 09:55:01 2024 GMT Not After : Sep 5 10:00:01 2025 GMT Subject: CN=2737D7CEE00158FEEDCD2781EE6F9870F9FB6AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:9c:f5:0a:9a:3a:88:79:02:a5:c5:2d:ca: 34:16:16:5c:87:08:b3:52:10:de:1b:a7:ea:38:26: b7:ad:94:12:4c:03:b2:cd:cd:f4:8a:06:e3:18:f8: 51:66:b2:25:15:f3:cf:f1:50:2d:f9:c0:cb:5d:6b: 9b:c5:52:e4:5c:b2:eb:91:3e:f7:27:5b:c2:7c:2c: 97:60:f8:df:83:0b:56:1c:d3:26:1a:66:56:7e:fe: b4:38:eb:a6:c8:af:b4:74:d9:a7:4b:4e:92:97:a0: 62:8d:32:96:5e:ac:27:91:cc:5c:0e:f1:eb:25:a4: 8e:ec:f5:07:de:7b:c3:22:93:93:cd:9a:51:94:23: cd:22:66:4b:90:c9:18:81:d5:4d:3c:00:be:8b:9e: da:9a:c7:51:10:be:d6:2a:3b:ab:9b:54:8a:59:34: e8:28:65:d1:1c:5f:7f:76:89:17:bd:c1:d7:9a:90: 4c:83:91:2a:19:bd:a5:b2:66:09:a0:bc:e1:5f:08: 9a:7b:8f:2a:1c:7f:f1:67:64:3e:0a:05:5a:51:d1: c1:09:d6:9f:f4:67:8b:e5:a8:ed:3c:66:d4:bb:55: 3d:ee:9e:9d:11:df:93:04:7a:09:67:fe:53:70:25: e7:27:be:00:0d:3f:b4:3a:0f:b4:ed:64:ca:f6:b4: c2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:37:D7:CE:E0:01:58:FE:ED:CD:27:81:EE:6F:98:70:F9:FB:6A:C1 X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.86.0/24 Signature Algorithm: sha256WithRSAEncryption 53:13:81:e7:4f:12:8e:f8:48:ff:6b:02:d3:c8:2f:a6:2e:39: 18:1c:c3:43:34:97:9b:9e:d1:95:98:18:c4:10:13:3b:00:44: b7:12:a1:6b:c6:3d:9e:60:e8:bc:d8:e8:26:b5:b1:21:94:a6: 31:a8:09:05:db:83:c5:86:52:19:3e:84:1b:40:50:b6:61:b4: 80:0d:42:72:84:17:51:4d:aa:55:80:fc:1b:73:7d:a6:6a:0c: 1c:65:4e:58:ff:00:e5:80:3a:d1:9a:f0:6b:5c:fc:60:c5:50: 31:30:93:b2:45:f4:83:ee:68:7e:98:bb:ef:d7:37:ae:ad:57: 31:27:51:9e:51:d8:f6:7a:d8:2c:32:52:f1:22:4e:9d:85:72: 9e:01:8b:40:0c:cd:5f:43:55:f3:93:35:bb:e9:d7:a8:d5:8a: b9:76:02:82:4a:f6:7f:dc:48:cf:6d:c8:dd:d5:b2:7a:2d:f2: 90:33:e7:22:1d:d2:c4:51:cd:c5:0b:01:23:3f:7c:22:22:ac: 41:45:81:ac:22:5e:a3:54:dd:dd:c8:a0:66:28:bc:f4:03:b5: 74:81:ac:4c:fd:3b:f4:b5:c3:19:9f:e2:34:67:3e:9b:4b:2e: 0b:6d:81:1f:ae:bb:39:bc:4f:a8:88:ae:35:16:8c:ec:c7:e5: fb:f6:ca:f4 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUU2pG+becnUrY19bCUUNIjNi/YSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNDA5MDYwOTU1MDFaFw0yNTA5MDUxMDAwMDFaMDMxMTAvBgNV BAMTKDI3MzdEN0NFRTAwMTU4RkVFRENEMjc4MUVFNkY5ODcwRjlGQjZBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3A5z1Cpo6iHkCpcUtyjQWFlyH CLNSEN4bp+o4JretlBJMA7LNzfSKBuMY+FFmsiUV88/xUC35wMtda5vFUuRcsuuR PvcnW8J8LJdg+N+DC1Yc0yYaZlZ+/rQ466bIr7R02adLTpKXoGKNMpZerCeRzFwO 8eslpI7s9Qfee8Mik5PNmlGUI80iZkuQyRiB1U08AL6Lntqax1EQvtYqO6ubVIpZ NOgoZdEcX392iRe9wdeakEyDkSoZvaWyZgmgvOFfCJp7jyocf/FnZD4KBVpR0cEJ 1p/0Z4vlqO08ZtS7VT3unp0R35MEegln/lNwJecnvgANP7Q6D7TtZMr2tMJJAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUJzfXzuABWP7tzSeB7m+YcPn7asEwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvMzEzMDMzMmUzMjMwMmUzODM2MmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnFFYwDQYJKoZIhvcNAQEL BQADggEBAFMTgedPEo74SP9rAtPIL6YuORgcw0M0l5ue0ZWYGMQQEzsARLcSoWvG PZ5g6LzY6Ca1sSGUpjGoCQXbg8WGUhk+hBtAULZhtIANQnKEF1FNqlWA/BtzfaZq DBxlTlj/AOWAOtGa8Gtc/GDFUDEwk7JF9IPuaH6Yu+/XN66tVzEnUZ5R2PZ62Cwy UvEiTp2Fcp4Bi0AMzV9DVfOTNbvp16jVirl2AoJK9n/cSM9tyN3Vsnot8pAz5yId 0sRRzcULASM/fCIirEFFgawiXqNU3d3IoGYovPQDtXSBrEz9O/S1wxmf4jRnPptL LgttgR+uuzm8T6iIrjUWjOzH5fv2yvQ= -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org