$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa File: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (raw, json) Hash identifier: c3P2M0VXOcWc/kMqDxRrBxNZgSYKuvObUT8WGdbC1Pw= Subject key identifier: 3C:13:61:D2:94:3B:8C:AE:4E:2D:01:21:D7:88:02:BD:77:85:4B:B1 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 4F30FFFF2A860C1A6374775F6B8790F3F82D4255 Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa Signing time: Thu 22 Aug 2024 09:00:00 +0000 ROA not before: Thu 22 Aug 2024 08:55:00 +0000 ROA not after: Thu 21 Aug 2025 09:00:00 +0000 asID: 140028 IP address blocks: 103.146.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:30:ff:ff:2a:86:0c:1a:63:74:77:5f:6b:87:90:f3:f8:2d:42:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Aug 22 08:55:00 2024 GMT Not After : Aug 21 09:00:00 2025 GMT Subject: CN=3C1361D2943B8CAE4E2D0121D78802BD77854BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:a7:c2:4b:2f:8b:97:3a:be:a1:98:8e:88: 2a:9f:f3:e9:02:92:21:0c:dc:b5:0b:23:80:56:92: 68:be:a2:38:98:51:f8:da:66:49:90:89:37:53:f2: 5b:11:9c:27:fb:1e:0c:dc:83:2c:a5:7b:61:61:3e: a3:a8:63:8a:cd:00:5f:c5:ac:90:d0:ff:5a:c0:3b: 8c:1f:35:31:37:10:b9:07:55:27:39:10:91:8b:7a: b8:a8:0a:19:08:3d:d7:22:c4:58:b8:15:27:0d:ed: a9:28:8b:c3:64:68:2d:9f:42:64:eb:da:14:73:19: 84:e5:12:0d:b0:71:af:59:34:56:23:ed:23:94:16: 8c:50:94:76:d3:31:ae:64:80:89:24:86:db:ca:1d: 2d:37:e9:b7:0f:4a:99:53:6a:eb:d6:a5:64:51:ce: 76:e8:81:bd:fb:e6:3a:59:62:85:3d:fe:55:14:e8: 8a:dc:22:87:17:d6:2f:25:33:73:63:d0:3f:1e:ac: bf:f3:e8:21:3e:ab:32:68:dd:0f:9d:51:a2:8b:80: 7d:74:c3:2c:38:d3:bf:24:13:2a:d0:72:dc:79:39: cf:3e:08:1f:a2:04:84:59:44:82:cc:fa:e9:6d:1a: 8c:b8:c3:13:0b:fa:65:ad:d1:12:13:61:3b:e8:b4: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:13:61:D2:94:3B:8C:AE:4E:2D:01:21:D7:88:02:BD:77:85:4B:B1 X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.129.0/24 Signature Algorithm: sha256WithRSAEncryption 59:45:e9:a6:fe:96:31:27:4c:63:13:42:da:95:f0:a2:76:74: c2:17:ce:f9:81:44:49:ac:e0:e1:dd:93:7b:e2:9a:e0:d3:b8: aa:16:b2:0c:9a:88:8e:b7:23:75:b8:9f:19:0d:b0:25:35:99: ed:bd:d3:d1:8a:5c:e0:1c:be:a0:12:0e:30:a0:72:b1:34:9c: f0:77:2b:93:91:cc:6d:26:5a:82:e1:72:e6:fc:75:59:45:f4: 12:c5:38:df:71:de:56:30:c1:5c:6f:b9:bf:02:b4:7c:7b:25: f8:f7:9c:2c:46:1a:5e:28:43:bc:24:e2:6b:a5:2c:05:dc:f6: d7:ea:e7:0c:0c:3b:7a:ef:a9:5b:db:b6:93:44:6a:78:40:47: a9:8c:0e:39:37:2e:fe:0a:bd:3c:ee:f5:7a:bd:b1:c8:3c:e6: 51:e7:45:98:8d:a1:18:23:d6:54:ec:e2:55:9c:16:a7:38:ba: 46:3f:e8:48:f6:38:e8:6a:dc:ad:1c:c6:23:cf:94:d0:68:5d: a6:5a:1b:77:91:89:86:08:eb:d1:dc:1b:3b:59:aa:e9:30:e8: 12:80:08:1f:7f:5f:0d:2e:d2:e2:e5:37:a8:e2:b7:6d:97:0a: 1f:e7:52:9a:ce:8c:4b:2a:38:82:86:bd:38:d5:8e:e7:b8:0b: b6:46:cd:13 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTzD//yqGDBpjdHdfa4eQ8/gtQlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNDA4MjIwODU1MDBaFw0yNTA4MjEwOTAwMDBaMDMxMTAvBgNV BAMTKDNDMTM2MUQyOTQzQjhDQUU0RTJEMDEyMUQ3ODgwMkJENzc4NTRCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc5qfCSy+Llzq+oZiOiCqf8+kC kiEM3LULI4BWkmi+ojiYUfjaZkmQiTdT8lsRnCf7Hgzcgyyle2FhPqOoY4rNAF/F rJDQ/1rAO4wfNTE3ELkHVSc5EJGLerioChkIPdcixFi4FScN7akoi8NkaC2fQmTr 2hRzGYTlEg2wca9ZNFYj7SOUFoxQlHbTMa5kgIkkhtvKHS036bcPSplTauvWpWRR znbogb375jpZYoU9/lUU6IrcIocX1i8lM3Nj0D8erL/z6CE+qzJo3Q+dUaKLgH10 wyw4078kEyrQctx5Oc8+CB+iBIRZRILM+ultGoy4wxML+mWt0RITYTvotOcZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPBNh0pQ7jK5OLQEh14gCvXeFS7EwHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0MmFhMGE5LTQ1ODgtNGY4Ny1h Yjg5LWYzYjlkYzYxMDdiNi8wLzMxMzAzMzJlMzEzNDM2MmUzMTMyMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMyMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkoEwDQYJ KoZIhvcNAQELBQADggEBAFlF6ab+ljEnTGMTQtqV8KJ2dMIXzvmBREms4OHdk3vi muDTuKoWsgyaiI63I3W4nxkNsCU1me2909GKXOAcvqASDjCgcrE0nPB3K5ORzG0m WoLhcub8dVlF9BLFON9x3lYwwVxvub8CtHx7Jfj3nCxGGl4oQ7wk4mulLAXc9tfq 5wwMO3rvqVvbtpNEanhAR6mMDjk3Lv4KvTzu9Xq9scg85lHnRZiNoRgj1lTs4lWc Fqc4ukY/6Ej2OOhq3K0cxiPPlNBoXaZaG3eRiYYI69HcGztZqukw6BKACB9/Xw0u 0uLlN6jit22XCh/nUprOjEsqOIKGvTjVjue4C7ZGzRM= -----END CERTIFICATE-----Generated at Sun Nov 24 17:17:41 2024 by rpki-client on console-fra.rpki-client.org