$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa File: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (raw, json) Hash identifier: FrHSWZownm6A7T3AZIhQ7h7eaOkOIIg4+temM4RnNJ4= Subject key identifier: 4B:36:B0:2C:70:D9:A2:3F:84:8E:0E:C9:54:4B:2F:31:D7:B2:39:56 Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 0AFAA472FEE45C271B3011D7069724E234109C9B Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa Signing time: Fri 09 Aug 2024 04:03:00 +0000 ROA not before: Fri 09 Aug 2024 03:58:00 +0000 ROA not after: Fri 08 Aug 2025 04:03:00 +0000 asID: 138884 IP address blocks: 103.138.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 10:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fa:a4:72:fe:e4:5c:27:1b:30:11:d7:06:97:24:e2:34:10:9c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Aug 9 03:58:00 2024 GMT Not After : Aug 8 04:03:00 2025 GMT Subject: CN=4B36B02C70D9A23F848E0EC9544B2F31D7B23956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:3c:a0:76:67:aa:d9:a7:75:6c:d8:e2:a8: 8b:ad:ae:2d:83:42:05:f0:1c:af:4f:3d:8c:dd:90: 43:df:20:48:fb:71:1c:03:a1:d4:63:11:42:9b:7f: 4e:ff:bf:ed:5b:67:df:12:49:c5:2b:92:69:e2:ae: f3:ad:d9:7a:c6:06:c2:6c:0d:22:77:f5:2f:2d:c3: 86:35:f3:95:ac:ed:29:23:6d:38:0a:81:20:58:38: aa:ab:08:05:b0:c5:39:01:61:3e:93:68:53:33:18: 68:4e:4e:b2:7f:ba:30:69:a5:10:58:9d:60:d4:7b: cb:70:4b:b5:70:4c:56:e9:fe:a1:3a:c6:48:ae:06: 30:ce:dd:8d:1a:66:e8:1c:29:fc:30:c3:bd:97:08: 02:a9:c7:d9:35:a8:c4:46:4b:5c:d9:6b:e7:ef:c5: 2a:e0:bb:f4:c1:a2:94:c7:cb:a4:ca:65:16:0e:99: 5e:6b:16:cc:84:79:0e:e9:dd:bb:72:1f:51:db:b0: 3a:fd:f9:c0:a5:37:44:39:ba:df:c5:44:1c:f7:83: b4:6a:8c:28:0c:54:3c:35:b4:c2:d8:81:ef:0e:c3: f8:4b:e1:a9:4a:39:90:d3:95:92:21:28:10:ee:2f: 07:8c:e6:4c:bd:93:f5:eb:fa:4f:13:e5:16:0e:f5: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:36:B0:2C:70:D9:A2:3F:84:8E:0E:C9:54:4B:2F:31:D7:B2:39:56 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.70.0/24 Signature Algorithm: sha256WithRSAEncryption 10:65:ba:2a:bc:b6:f7:70:10:cc:6d:95:c3:08:2a:77:6e:12: dc:12:ee:26:a3:26:e2:77:b8:f3:d7:c1:a9:86:97:55:d7:f0: dc:d1:12:f4:5b:94:1d:43:96:ff:1d:d4:a8:23:03:47:72:43: 3f:0b:d7:e9:07:b4:bf:5b:90:99:cd:ef:b3:32:a3:44:f9:63: c7:01:13:c2:60:91:63:c2:97:a4:9a:32:9a:29:3f:cf:91:d0: 7f:bf:4f:95:79:b8:58:3d:51:e7:64:5e:bb:25:fd:1a:76:86: 21:dc:18:67:ce:22:c6:d7:7d:06:eb:02:c3:50:4c:4f:13:b1: 31:e6:d9:24:8e:34:b5:93:b9:2d:f7:c9:74:d6:e3:13:c1:6d: 49:e4:62:53:47:11:60:81:59:f0:b5:74:ea:94:45:f3:cf:e4: 18:92:82:92:79:1b:08:55:48:ec:dd:02:68:ed:6c:bd:c9:27: 9c:e3:a7:f2:cd:ab:4d:f9:99:b7:16:10:c3:47:70:bc:24:bc: 74:96:4e:51:cd:02:9e:cb:04:5f:1e:e1:28:e2:d8:0d:76:3a: 13:63:76:32:82:6f:dc:3c:d8:cd:d2:bc:48:4e:b3:08:1a:f2: 97:71:45:ed:07:a9:0f:2d:8e:46:0a:90:9d:cb:43:ca:2c:65: c8:81:61:0a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCvqkcv7kXCcbMBHXBpck4jQQnJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNDA4MDkwMzU4MDBaFw0yNTA4MDgwNDAzMDBaMDMxMTAvBgNV BAMTKDRCMzZCMDJDNzBEOUEyM0Y4NDhFMEVDOTU0NEIyRjMxRDdCMjM5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fTygdmeq2ad1bNjiqIutri2D QgXwHK9PPYzdkEPfIEj7cRwDodRjEUKbf07/v+1bZ98SScUrkmnirvOt2XrGBsJs DSJ39S8tw4Y185Ws7SkjbTgKgSBYOKqrCAWwxTkBYT6TaFMzGGhOTrJ/ujBppRBY nWDUe8twS7VwTFbp/qE6xkiuBjDO3Y0aZugcKfwww72XCAKpx9k1qMRGS1zZa+fv xSrgu/TBopTHy6TKZRYOmV5rFsyEeQ7p3btyH1HbsDr9+cClN0Q5ut/FRBz3g7Rq jCgMVDw1tMLYge8Ow/hL4alKOZDTlZIhKBDuLweM5ky9k/Xr+k8T5RYO9RLNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSzawLHDZoj+Ejg7JVEsvMdeyOVYwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyMGM2ZDY5LTYyOTAtNDAyZi1h ODRlLWQyODljNmU5M2E3My8wLzMxMzAzMzJlMzEzMzM4MmUzNzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4pGMA0GCSqG SIb3DQEBCwUAA4IBAQAQZboqvLb3cBDMbZXDCCp3bhLcEu4moybid7jz18GphpdV 1/Dc0RL0W5QdQ5b/HdSoIwNHckM/C9fpB7S/W5CZze+zMqNE+WPHARPCYJFjwpek mjKaKT/PkdB/v0+VebhYPVHnZF67Jf0adoYh3BhnziLG130G6wLDUExPE7Ex5tkk jjS1k7kt98l01uMTwW1J5GJTRxFggVnwtXTqlEXzz+QYkoKSeRsIVUjs3QJo7Wy9 ySec46fyzatN+Zm3FhDDR3C8JLx0lk5RzQKeywRfHuEo4tgNdjoTY3Yygm/cPNjN 0rxITrMIGvKXcUXtB6kPLY5GCpCdy0PKLGXIgWEK -----END CERTIFICATE-----Generated at Fri Nov 22 03:51:02 2024 by rpki-client on console-fra.rpki-client.org