$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa File: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (raw, json) Hash identifier: eiRbNyy+2Cfq6J3LhynMxy6A7hN5h3MYyc0wfj6gskU= Subject key identifier: 3D:21:1C:BC:F0:20:F8:72:3F:41:9E:53:AA:48:78:B5:0A:11:43:C9 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 273F2A88DE774F41F88374839106CBE586C807E7 Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa Signing time: Tue 30 Apr 2024 11:54:15 +0000 ROA not before: Tue 30 Apr 2024 11:49:15 +0000 ROA not after: Tue 29 Apr 2025 11:54:15 +0000 asID: 140423 IP address blocks: 103.191.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3f:2a:88:de:77:4f:41:f8:83:74:83:91:06:cb:e5:86:c8:07:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Apr 30 11:49:15 2024 GMT Not After : Apr 29 11:54:15 2025 GMT Subject: CN=3D211CBCF020F8723F419E53AA4878B50A1143C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:23:41:e5:99:15:9e:2d:a4:4d:79:a9:dc:29: 2a:ef:6f:7a:f8:9b:28:96:b0:7d:a4:b5:f7:44:39: ed:96:fd:1b:17:49:a4:80:6c:79:79:c0:5b:c2:06: ed:2e:0b:d7:fb:bb:c5:f4:09:7d:84:0e:2d:84:e1: 59:da:1f:98:ee:ac:ba:6d:52:0c:95:68:4a:5d:98: 67:54:f6:51:fb:2d:8f:03:20:06:e2:2a:c5:83:f3: e4:f4:f5:8f:85:c3:41:ee:69:15:72:76:f1:9f:35: 48:70:d0:f0:f1:8e:2c:dc:5f:db:e4:7f:99:de:1f: e1:76:1b:d3:3b:23:7d:82:3e:2b:d5:e1:dd:06:53: 1c:05:15:dd:8c:10:23:5c:5b:60:ea:14:48:1f:88: 79:9f:03:13:f2:8d:5c:8e:dc:e3:fb:ab:35:97:74: 3f:a6:1b:ae:46:2a:15:39:02:d6:b5:59:84:a2:cc: 19:73:4b:cb:a3:01:a7:3c:44:54:74:41:de:d7:96: 31:77:cf:36:f1:27:65:e5:88:47:6b:f0:6a:5c:70: 83:39:87:b5:c6:35:e9:b9:8c:02:07:10:3d:37:20: 0d:ac:85:2c:5e:c4:d9:03:f5:e5:7a:bf:8c:50:27: c2:f0:e3:51:d5:26:39:ff:5d:4c:51:85:26:17:8d: 43:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:21:1C:BC:F0:20:F8:72:3F:41:9E:53:AA:48:78:B5:0A:11:43:C9 X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.61.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:86:83:df:e8:93:19:fe:d6:d5:c8:41:f6:2f:68:77:b2:52: bc:56:c0:d3:ec:56:77:5b:49:fe:ae:ab:ea:e1:80:45:da:d8: ba:09:db:fb:18:10:8d:60:71:d8:a7:c9:e0:3c:38:0b:a3:46: 28:06:33:a3:8e:7a:7f:41:00:4d:d5:23:bc:e1:87:08:1e:bd: dd:69:cb:0e:7a:8a:8f:94:1b:d9:9a:46:2a:66:ce:23:1c:f1: 8a:06:2c:9f:f6:85:69:19:f8:fb:d5:12:e4:0c:50:e6:62:86: 8c:ec:56:2d:50:91:7c:d8:01:69:87:09:3b:fd:a5:bd:0f:f5: 65:ce:97:a6:4e:84:5b:5a:e9:be:7c:88:29:3c:46:8b:43:f7: a3:c8:9b:81:09:14:72:84:42:72:73:58:fd:53:f7:89:65:30: f0:70:24:93:95:f7:71:7e:c2:ae:4e:40:ec:f6:fa:72:05:af: 8c:10:fa:a4:68:46:77:5d:a7:7c:d6:3f:de:38:f0:52:7a:49: 90:af:b7:f1:34:34:8f:76:cc:72:fe:5b:7f:c0:fe:2e:56:d1: 5f:7b:62:7b:1b:07:1d:de:53:da:fb:fa:56:06:34:ad:c5:d0: 55:94:06:ea:5f:4e:7b:c1:cf:7c:71:c9:b8:85:90:bf:d8:54: d8:da:32:ac -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJz8qiN53T0H4g3SDkQbL5YbIB+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNDA0MzAxMTQ5MTVaFw0yNTA0MjkxMTU0MTVaMDMxMTAvBgNV BAMTKDNEMjExQ0JDRjAyMEY4NzIzRjQxOUU1M0FBNDg3OEI1MEExMTQzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnI0HlmRWeLaRNeancKSrvb3r4 myiWsH2ktfdEOe2W/RsXSaSAbHl5wFvCBu0uC9f7u8X0CX2EDi2E4VnaH5jurLpt UgyVaEpdmGdU9lH7LY8DIAbiKsWD8+T09Y+Fw0HuaRVydvGfNUhw0PDxjizcX9vk f5neH+F2G9M7I32CPivV4d0GUxwFFd2MECNcW2DqFEgfiHmfAxPyjVyO3OP7qzWX dD+mG65GKhU5Ata1WYSizBlzS8ujAac8RFR0Qd7XljF3zzbxJ2XliEdr8GpccIM5 h7XGNem5jAIHED03IA2shSxexNkD9eV6v4xQJ8Lw41HVJjn/XUxRhSYXjUOlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPSEcvPAg+HI/QZ5Tqkh4tQoRQ8kwHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMzRkMmQ4LTM0YWYtNDc1Ny04 YWQ5LTkyZGEzNWQ5MjE2OC8wLzMxMzAzMzJlMzEzOTMxMmUzNjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ789MA0GCSqG SIb3DQEBCwUAA4IBAQBNhoPf6JMZ/tbVyEH2L2h3slK8VsDT7FZ3W0n+rqvq4YBF 2ti6Cdv7GBCNYHHYp8ngPDgLo0YoBjOjjnp/QQBN1SO84YcIHr3dacsOeoqPlBvZ mkYqZs4jHPGKBiyf9oVpGfj71RLkDFDmYoaM7FYtUJF82AFphwk7/aW9D/Vlzpem ToRbWum+fIgpPEaLQ/ejyJuBCRRyhEJyc1j9U/eJZTDwcCSTlfdxfsKuTkDs9vpy Ba+MEPqkaEZ3Xad81j/eOPBSekmQr7fxNDSPdsxy/lt/wP4uVtFfe2J7Gwcd3lPa +/pWBjStxdBVlAbqX057wc98ccm4hZC/2FTY2jKs -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org