$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa File: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (raw, json) Hash identifier: k8P5AhT4s12SuVIrOLY9OUPcVfTVNiJQc/ut89s+Rrw= Subject key identifier: 3B:B1:45:4D:E6:8F:70:E4:A4:44:1E:C6:0C:A2:1C:1A:7E:6D:98:B5 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 7DEAD4D665299DABC9FED58D7550CCB3B79F5BD1 Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa Signing time: Mon 01 Jul 2024 01:02:13 +0000 ROA not before: Mon 01 Jul 2024 00:57:13 +0000 ROA not after: Mon 30 Jun 2025 01:02:13 +0000 asID: 139440 IP address blocks: 103.145.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ea:d4:d6:65:29:9d:ab:c9:fe:d5:8d:75:50:cc:b3:b7:9f:5b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Jul 1 00:57:13 2024 GMT Not After : Jun 30 01:02:13 2025 GMT Subject: CN=3BB1454DE68F70E4A4441EC60CA21C1A7E6D98B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:38:dc:6d:1b:09:81:ca:89:c6:39:72:5f: 49:58:53:c4:23:a9:8d:f2:86:23:33:ec:dd:7a:76: 46:b5:0d:d4:83:b9:17:ad:17:bd:f9:08:79:df:1f: e8:37:40:66:22:08:35:c6:cf:15:b7:23:90:aa:f7: 39:a7:96:50:ac:47:0c:74:d1:a1:ec:0c:ec:fc:8b: 1f:45:c3:98:85:86:55:65:71:39:a6:07:e5:60:8a: 93:87:18:47:d7:a5:db:3a:30:f6:a4:82:96:2d:a0: 91:e3:a5:2d:95:f3:4a:41:99:4e:b9:33:eb:94:2b: 0b:f4:8d:be:d1:ec:01:3d:7a:fe:64:e4:e7:ce:d0: cc:ad:41:28:c9:b4:99:a9:1b:2e:08:9b:db:5e:a6: 6b:11:32:12:d1:a4:4b:a7:c5:35:5a:ab:db:81:01: bf:fa:a2:4f:27:30:48:89:6e:26:b3:be:61:e2:48: b8:c5:e2:cd:dd:5f:11:c8:a0:45:b4:b6:61:dd:3b: 12:b8:d0:8f:92:78:4d:ce:54:f1:60:0a:5f:40:39: c9:78:21:cd:88:a7:b9:35:51:69:1f:8e:dd:8a:7b: f4:ab:91:37:66:a2:bf:6c:7f:7a:62:8c:1e:bb:75: 19:48:5e:59:83:ed:61:f2:17:62:1b:00:0c:ed:30: 3c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B1:45:4D:E6:8F:70:E4:A4:44:1E:C6:0C:A2:1C:1A:7E:6D:98:B5 X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.66.0/23 Signature Algorithm: sha256WithRSAEncryption 84:09:85:1b:36:65:8a:d8:12:b5:51:02:b4:b6:ed:a9:9a:89: 29:6b:b2:00:43:68:19:98:b3:7c:c6:58:03:02:10:26:4b:3c: 7f:84:b1:25:37:a0:87:69:f4:99:2e:24:92:b7:18:e0:7d:d0: c0:13:c7:fd:e6:f8:7c:f2:0d:d7:9c:75:c4:d6:19:05:f8:fc: 8a:6a:09:04:2a:74:51:7d:4a:02:f1:4a:41:a2:23:0a:9a:53: 56:8e:f1:8c:7e:11:38:93:d1:87:a6:7c:7f:8f:0c:13:8c:b9: b6:ea:17:2b:c1:92:30:a1:42:cc:0d:57:80:5c:39:fb:a0:5d: f3:d2:19:57:00:2b:2f:94:00:53:c6:b1:0b:e6:7e:2b:a2:8f: f4:5f:e0:f6:06:e7:8f:94:8f:d6:c4:e4:28:13:0b:e8:54:94: 1c:7e:dc:27:23:e1:14:68:9b:01:f9:33:f4:79:10:49:e4:ae: 11:24:d6:aa:e2:d1:52:1a:60:43:15:0d:ef:9b:fc:c7:b3:06: 31:69:84:47:46:ec:3a:24:73:3b:a1:d6:f2:fe:e8:74:8e:30: 5d:b7:33:9e:5d:0c:12:dd:26:cd:b6:af:2d:bf:ff:7f:c6:2a: 4e:97:ae:b5:8f:f9:78:43:5c:5d:30:ca:93:70:fe:d4:f8:db: 60:e8:cd:96 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUferU1mUpnavJ/tWNdVDMs7efW9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNDA3MDEwMDU3MTNaFw0yNTA2MzAwMTAyMTNaMDMxMTAvBgNV BAMTKDNCQjE0NTRERTY4RjcwRTRBNDQ0MUVDNjBDQTIxQzFBN0U2RDk4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNzjcbRsJgcqJxjlyX0lYU8Qj qY3yhiMz7N16dka1DdSDuRetF735CHnfH+g3QGYiCDXGzxW3I5Cq9zmnllCsRwx0 0aHsDOz8ix9Fw5iFhlVlcTmmB+VgipOHGEfXpds6MPakgpYtoJHjpS2V80pBmU65 M+uUKwv0jb7R7AE9ev5k5OfO0MytQSjJtJmpGy4Im9tepmsRMhLRpEunxTVaq9uB Ab/6ok8nMEiJbiazvmHiSLjF4s3dXxHIoEW0tmHdOxK40I+SeE3OVPFgCl9AOcl4 Ic2Ip7k1UWkfjt2Ke/SrkTdmor9sf3pijB67dRlIXlmD7WHyF2IbAAztMDzrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUO7FFTeaPcOSkRB7GDKIcGn5tmLUwHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMTkxMWI5LTFkMmYtNGJiNC05 ZDc1LTlhYTNjMzUxMDBlOC8wLzMxMzAzMzJlMzEzNDM1MmUzNjM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5FCMA0GCSqG SIb3DQEBCwUAA4IBAQCECYUbNmWK2BK1UQK0tu2pmokpa7IAQ2gZmLN8xlgDAhAm Szx/hLElN6CHafSZLiSStxjgfdDAE8f95vh88g3XnHXE1hkF+PyKagkEKnRRfUoC 8UpBoiMKmlNWjvGMfhE4k9GHpnx/jwwTjLm26hcrwZIwoULMDVeAXDn7oF3z0hlX ACsvlABTxrEL5n4roo/0X+D2BuePlI/WxOQoEwvoVJQcftwnI+EUaJsB+TP0eRBJ 5K4RJNaq4tFSGmBDFQ3vm/zHswYxaYRHRuw6JHM7odby/uh0jjBdtzOeXQwS3SbN tq8tv/9/xipOl661j/l4Q1xdMMqTcP7U+Ntg6M2W -----END CERTIFICATE-----Generated at Mon Nov 25 23:52:55 2024 by rpki-client on console-ams.rpki-client.org