$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32322d3234203d3e20313335343834.roa File: 3130332e37372e3135362e302f32322d3234203d3e20313335343834.roa (raw, json) Hash identifier: vlDIC/lMXwB1lSYV52oEq30trZJO4UYf8/53n6LO/vI= Subject key identifier: 1F:C8:16:E9:F6:7F:F4:75:43:C8:FE:3B:70:4E:66:E3:87:DE:F0:50 Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 3BE24B9D9F751DA771EF16605127653BD16D08E6 Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32322d3234203d3e20313335343834.roa Signing time: Mon 01 Jul 2024 01:05:22 +0000 ROA not before: Mon 01 Jul 2024 01:00:22 +0000 ROA not after: Mon 30 Jun 2025 01:05:22 +0000 asID: 135484 IP address blocks: 103.77.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e2:4b:9d:9f:75:1d:a7:71:ef:16:60:51:27:65:3b:d1:6d:08:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Jul 1 01:00:22 2024 GMT Not After : Jun 30 01:05:22 2025 GMT Subject: CN=1FC816E9F67FF47543C8FE3B704E66E387DEF050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:3d:fb:8a:d7:c9:26:c8:ff:c2:d0:db:ea: 0b:7b:5f:2b:1e:ff:e3:17:bd:59:48:6b:a5:44:9c: 48:6e:d1:ee:ff:8f:ff:3f:64:b8:20:b1:78:a5:c6: 5b:e8:00:a1:84:69:19:b6:e1:10:0e:1e:b7:d5:53: 59:c2:dc:0a:ed:79:44:92:f9:f5:11:d4:f8:2d:ea: bb:10:7f:24:af:54:8e:4d:aa:9a:48:24:e0:05:c7: b9:1d:52:92:07:f0:ba:d0:c3:90:95:23:96:f3:65: 53:f3:cb:aa:18:e1:ff:3f:52:6b:b3:30:bc:03:25: 59:73:3d:2c:e8:8f:ce:a7:41:cf:48:23:11:6c:86: 14:a7:5f:b1:2e:57:2f:c3:c0:2f:0f:44:16:cf:52: c4:bf:f8:eb:69:4a:fa:6f:b9:37:71:ac:37:78:47: c0:11:6d:1d:29:30:f6:56:1d:85:d4:1a:6e:d7:25: 43:01:b0:4e:b3:53:88:1b:f9:7d:bf:3d:6a:8c:da: 8a:a6:3c:ec:cd:fb:70:71:d8:7a:06:a2:70:7e:df: e3:e9:0d:59:c2:02:15:47:31:14:53:cf:9e:0f:e3: 0f:d8:c9:c2:61:6a:09:36:27:ce:4e:a9:c4:6c:30: 93:b3:fa:3c:d6:87:35:bb:73:ce:96:b7:8b:c6:a4: 52:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C8:16:E9:F6:7F:F4:75:43:C8:FE:3B:70:4E:66:E3:87:DE:F0:50 X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32322d3234203d3e20313335343834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.77.156.0/22 Signature Algorithm: sha256WithRSAEncryption 63:8f:6a:7d:26:c8:65:64:0c:3c:6b:17:57:20:4b:81:36:ba: 1d:e4:5c:b5:b5:ad:50:24:dc:a4:ec:9b:2f:29:e5:a7:23:63: 22:34:29:8f:31:87:3f:20:69:a9:5f:72:13:ea:e5:32:e0:dd: 79:ef:f1:a2:35:5e:26:ca:ab:05:91:13:89:87:63:50:e0:4f: cb:11:06:8c:85:66:d4:d8:53:62:b4:56:95:b9:79:03:38:54: 92:6d:02:0e:e7:9b:1e:30:75:00:03:0b:d8:08:50:57:8f:3d: 02:db:2d:61:98:45:c9:79:a9:ef:f9:78:87:99:5e:e8:07:a9: e9:7d:01:3f:2f:a3:b0:2b:77:8b:91:36:c6:b3:2a:ac:d8:26: 2a:8e:01:2d:fc:a7:cd:48:fa:74:56:1b:87:c0:d7:7e:16:63: 66:9e:9a:81:87:2e:ae:99:ec:3a:33:51:46:ad:8d:3c:13:46: b3:73:00:08:b0:c7:b0:61:6a:1f:da:2f:8a:3a:15:3e:87:be: b0:bb:68:91:bf:7d:1f:84:c8:6a:88:79:d9:41:5f:38:d1:12: 5b:3a:16:32:4e:af:15:ce:11:ed:5b:19:81:3a:1b:0c:b3:a2: 8f:4c:24:5e:1a:b6:53:ae:e0:ea:c2:7b:87:fa:d8:7c:fa:7f: 50:26:c3:94 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUO+JLnZ91Hadx7xZgUSdlO9FtCOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNDA3MDEwMTAwMjJaFw0yNTA2MzAwMTA1MjJaMDMxMTAvBgNV BAMTKDFGQzgxNkU5RjY3RkY0NzU0M0M4RkUzQjcwNEU2NkUzODdERUYwNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsz37itfJJsj/wtDb6gt7Xyse /+MXvVlIa6VEnEhu0e7/j/8/ZLggsXilxlvoAKGEaRm24RAOHrfVU1nC3ArteUSS +fUR1Pgt6rsQfySvVI5NqppIJOAFx7kdUpIH8LrQw5CVI5bzZVPzy6oY4f8/Umuz MLwDJVlzPSzoj86nQc9IIxFshhSnX7EuVy/DwC8PRBbPUsS/+OtpSvpvuTdxrDd4 R8ARbR0pMPZWHYXUGm7XJUMBsE6zU4gb+X2/PWqM2oqmPOzN+3Bx2HoGonB+3+Pp DVnCAhVHMRRTz54P4w/YycJhagk2J85OqcRsMJOz+jzWhzW7c86Wt4vGpFLTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUH8gW6fZ/9HVDyP47cE5m44fe8FAwHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjM2YyMjg4LTg4Y2YtNGQyYi1i YmE2LWEwM2RkNWY4Mzc2MS8wLzMxMzAzMzJlMzczNzJlMzEzNTM2MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ02cMA0GCSqG SIb3DQEBCwUAA4IBAQBjj2p9JshlZAw8axdXIEuBNrod5Fy1ta1QJNyk7JsvKeWn I2MiNCmPMYc/IGmpX3IT6uUy4N157/GiNV4myqsFkROJh2NQ4E/LEQaMhWbU2FNi tFaVuXkDOFSSbQIO55seMHUAAwvYCFBXjz0C2y1hmEXJeanv+XiHmV7oB6npfQE/ L6OwK3eLkTbGsyqs2CYqjgEt/KfNSPp0VhuHwNd+FmNmnpqBhy6umew6M1FGrY08 E0azcwAIsMewYWof2i+KOhU+h76wu2iRv30fhMhqiHnZQV840RJbOhYyTq8VzhHt WxmBOhsMs6KPTCReGrZTruDqwnuH+th8+n9QJsOU -----END CERTIFICATE-----Generated at Sat Nov 23 21:51:28 2024 by rpki-client on console-fra.rpki-client.org