$ rpki-client -vvf repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa File: 3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa (raw, json) Hash identifier: V8mvaIJQ1Y5QrLUbV7DeIcJtER+0IVMCtRUWtU2bck4= Subject key identifier: 2D:B0:B8:5B:C3:00:5C:60:3A:C1:5A:4E:6F:01:A7:63:76:AB:C0:1B Certificate issuer: /CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Certificate serial: 2406EE9D4F7F60B79FE454FA06D80471A2D5D04A Authority key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa Signing time: Tue 16 Jan 2024 17:00:00 +0000 ROA not before: Tue 16 Jan 2024 16:55:00 +0000 ROA not after: Tue 14 Jan 2025 17:00:00 +0000 asID: 139391 IP address blocks: 103.143.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:06:ee:9d:4f:7f:60:b7:9f:e4:54:fa:06:d8:04:71:a2:d5:d0:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Validity Not Before: Jan 16 16:55:00 2024 GMT Not After : Jan 14 17:00:00 2025 GMT Subject: CN=2DB0B85BC3005C603AC15A4E6F01A76376ABC01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:b5:8c:ff:0e:55:af:55:cd:5e:3a:4d:64: 90:44:39:94:23:1b:e7:ff:41:5e:de:5b:08:4d:6e: 3a:89:34:3f:84:56:1c:21:27:34:2d:e8:c4:51:18: c4:20:b5:89:9a:12:5b:3f:15:d4:66:02:e8:25:87: 04:4b:32:cf:ad:3d:0a:99:8a:4b:e2:d1:d1:36:f3: be:94:e4:fc:41:69:f2:fb:8f:d6:e3:b0:a3:b8:a6: 4b:4f:11:f3:c9:0e:c7:66:f7:f6:20:c4:6d:1d:ad: ef:55:89:49:f9:89:78:3b:c4:11:78:07:65:0e:41: bd:29:66:b3:e2:a1:3d:14:f2:1b:ba:51:f9:75:2a: 6a:88:a8:1e:c0:ca:59:50:07:2a:d8:48:f1:90:02: 3f:fe:bb:dd:5c:0d:65:74:62:72:71:07:b4:af:c6: 1c:2e:f5:98:ce:3b:25:f3:27:05:fa:7e:7f:8f:08: 96:09:9e:20:32:9e:65:8b:e5:99:ae:4f:28:55:e3: 5c:75:90:db:18:1e:a1:74:1f:3a:76:e2:16:54:99: 6d:72:bc:1c:03:40:e0:f0:be:96:13:cd:b9:70:d1: a1:6d:c4:32:e3:68:c7:c0:6a:fc:f6:af:25:32:41: 1a:3c:9e:77:c9:44:ef:00:3c:01:53:e5:ad:a1:15: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B0:B8:5B:C3:00:5C:60:3A:C1:5A:4E:6F:01:A7:63:76:AB:C0:1B X509v3 Authority Key Identifier: keyid:8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.68.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:d9:75:04:7c:ed:95:ed:16:9d:90:bc:63:f3:7f:04:53:c9: 9e:78:40:38:c8:d5:74:6f:c6:86:3f:db:0d:c7:46:5d:5c:4f: 61:c9:9c:4f:a6:e7:5b:94:b7:aa:c1:fa:4d:fe:e4:a5:d7:81: 67:51:41:f4:b2:7e:a1:3a:3b:37:e9:0b:3b:64:c3:c7:5b:ae: 94:2d:b4:98:72:80:b9:14:db:47:40:d2:cf:41:ad:20:c0:62: c6:ba:2c:17:76:b5:a9:92:cd:15:5b:2a:67:eb:31:84:8b:97: 96:cb:92:b8:b1:15:26:2f:94:86:09:a8:d7:d2:ae:ec:63:a4: f6:66:1e:7f:30:77:a0:fa:a5:57:55:fd:ae:82:70:e8:a0:bc: 7c:66:64:bc:9f:dc:41:3f:b7:98:0b:80:04:c0:18:3d:75:c6: b2:38:e8:5f:91:c7:1a:03:85:97:5c:0c:f9:6d:45:bc:86:11: 5d:57:88:c6:a8:52:88:59:fa:de:8d:38:0e:63:a3:27:19:b6: 93:3f:bf:82:d8:cc:5f:a0:20:02:13:dd:a3:b3:ad:2a:12:fc: 66:e2:30:c3:50:0b:2f:85:4c:01:fe:38:0b:e8:91:53:d7:8e: 6e:33:0b:79:42:bf:9c:0f:4d:83:fb:e4:60:f1:58:41:a7:be: 62:25:56:f0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJAbunU9/YLef5FT6BtgEcaLV0EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3 NURCQzQ5MjAeFw0yNDAxMTYxNjU1MDBaFw0yNTAxMTQxNzAwMDBaMDMxMTAvBgNV BAMTKDJEQjBCODVCQzMwMDVDNjAzQUMxNUE0RTZGMDFBNzYzNzZBQkMwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFbWM/w5Vr1XNXjpNZJBEOZQj G+f/QV7eWwhNbjqJND+EVhwhJzQt6MRRGMQgtYmaEls/FdRmAuglhwRLMs+tPQqZ ikvi0dE2876U5PxBafL7j9bjsKO4pktPEfPJDsdm9/YgxG0dre9ViUn5iXg7xBF4 B2UOQb0pZrPioT0U8hu6Ufl1KmqIqB7AyllQByrYSPGQAj/+u91cDWV0YnJxB7Sv xhwu9ZjOOyXzJwX6fn+PCJYJniAynmWL5ZmuTyhV41x1kNsYHqF0Hzp24hZUmW1y vBwDQODwvpYTzblw0aFtxDLjaMfAavz2ryUyQRo8nnfJRO8APAFT5a2hFZUBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULbC4W8MAXGA6wVpObwGnY3arwBswHwYDVR0j BBgwFoAUi0oMEPiKC2755FEPD2EnrXXbxJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTQyNDI4MC0zM2JlLTRlYjctOGRiOS1lMDNkNDE3YzRkOTcvMC84QjRBMEMxMEY4 OEEwQjZFRjlFNDUxMEYwRjYxMjdBRDc1REJDNDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3NURC QzQ5Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1NDI0MjgwLTMzYmUtNGViNy04 ZGI5LWUwM2Q0MTdjNGQ5Ny8wLzMxMzAzMzJlMzEzNDMzMmUzNjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzMzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ49EMA0GCSqG SIb3DQEBCwUAA4IBAQBe2XUEfO2V7RadkLxj838EU8meeEA4yNV0b8aGP9sNx0Zd XE9hyZxPpudblLeqwfpN/uSl14FnUUH0sn6hOjs36Qs7ZMPHW66ULbSYcoC5FNtH QNLPQa0gwGLGuiwXdrWpks0VWypn6zGEi5eWy5K4sRUmL5SGCajX0q7sY6T2Zh5/ MHeg+qVXVf2ugnDooLx8ZmS8n9xBP7eYC4AEwBg9dcayOOhfkccaA4WXXAz5bUW8 hhFdV4jGqFKIWfrejTgOY6MnGbaTP7+C2MxfoCACE92js60qEvxm4jDDUAsvhUwB /jgL6JFT145uMwt5Qr+cD02D++Rg8VhBp75iJVbw -----END CERTIFICATE-----Generated at Fri Nov 22 22:09:43 2024 by rpki-client on console-ams.rpki-client.org