$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa File: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (raw, json) Hash identifier: Pk+CfBb09D2NLm+w/mIdTLsk/cAe1V1lpiWgoIeGFHc= Subject key identifier: 36:10:A8:87:86:29:70:A9:D6:96:D8:2E:8E:4C:EB:AD:A9:4A:1A:48 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 45F384EABE4315816FBBF9DF1298A4F502BE8F03 Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa Signing time: Tue 29 Oct 2024 09:00:02 +0000 ROA not before: Tue 29 Oct 2024 08:55:02 +0000 ROA not after: Tue 28 Oct 2025 09:00:02 +0000 asID: 142352 IP address blocks: 103.1.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f3:84:ea:be:43:15:81:6f:bb:f9:df:12:98:a4:f5:02:be:8f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Oct 29 08:55:02 2024 GMT Not After : Oct 28 09:00:02 2025 GMT Subject: CN=3610A887862970A9D696D82E8E4CEBADA94A1A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:0c:84:85:58:70:4e:6e:3d:9c:4b:f4:18: f8:05:2f:67:f4:8f:90:ad:9f:4c:39:1a:8d:f7:09: 50:1d:d0:2e:84:93:79:a9:79:d3:4d:37:31:80:6e: 5a:40:98:e5:21:93:bf:b9:02:af:f7:89:68:07:f7: b7:68:7b:e5:ec:f6:2d:8e:cd:ac:1b:1f:de:5a:37: 58:93:e0:65:b1:6d:60:21:b7:f4:6f:15:85:5d:8f: ab:1d:bb:b2:a0:1d:77:fb:f9:41:4a:7e:6e:15:1d: 7b:4c:27:86:a7:c7:3b:61:10:61:99:08:5e:d1:8d: 03:ae:b0:61:b1:3e:a2:82:40:24:6e:43:99:be:c7: e1:9e:6f:33:8e:7c:f1:bd:26:24:39:7a:52:87:23: 35:7f:ff:d7:bd:56:bd:58:98:22:d6:f6:e1:83:b2: 5f:1a:b2:7d:3e:db:03:97:0f:db:50:86:32:9e:33: 7a:9f:c9:38:e7:cc:69:d0:28:ee:5c:00:db:1e:99: 3c:fb:b8:4a:82:aa:62:50:0f:2e:a8:ca:3c:16:bd: 9b:ac:c7:75:dd:5f:84:45:82:33:7b:ea:4a:6c:38: 63:66:fe:b4:77:8c:75:f5:a9:18:78:47:1a:a9:8c: 97:98:52:11:0e:d2:a2:c5:92:d1:df:76:c5:5f:29: 53:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:10:A8:87:86:29:70:A9:D6:96:D8:2E:8E:4C:EB:AD:A9:4A:1A:48 X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.1.50.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:3a:46:5d:63:47:82:2f:b3:ac:b2:4a:d4:ed:d1:8b:b5:22: e3:1c:f2:08:cd:67:1d:d2:43:72:34:7c:40:57:82:42:2f:37: 44:d0:92:97:d6:35:e7:07:9b:95:66:6e:bf:2f:43:e9:71:ab: b0:4a:a9:2c:06:6e:43:1c:79:72:61:43:a1:f9:1d:32:0f:3a: c3:21:03:79:27:06:92:13:20:cd:27:23:23:56:ac:e6:81:87: c6:8b:82:07:01:c8:c5:8a:78:d6:db:ef:c3:ef:b4:ee:35:1c: 50:41:cc:90:f3:f3:09:36:07:de:a2:5f:c7:79:aa:19:b6:9f: 12:3a:67:5c:fa:1f:dc:0a:1c:38:66:2f:71:9c:1f:b0:06:e9: 38:bc:27:f4:10:11:58:8c:41:35:af:00:3d:a3:62:66:38:a7: 3c:e0:ab:ee:fb:4b:de:4c:29:92:a0:0e:dc:0d:f1:54:52:16: 36:a1:00:dd:85:7d:ce:cb:52:17:53:e4:85:2e:ea:6b:05:f6: 14:27:b7:0c:92:02:cf:83:82:d7:ae:88:66:ed:42:f1:ab:02: e0:ee:cf:e8:fe:b3:2e:d2:d2:60:67:be:24:96:cd:ad:ba:ae: 9b:50:04:14:dc:5c:b7:bc:b3:35:13:ba:cd:dd:6a:1a:1d:6c: 25:e5:88:aa -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIURfOE6r5DFYFvu/nfEpik9QK+jwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNDEwMjkwODU1MDJaFw0yNTEwMjgwOTAwMDJaMDMxMTAvBgNV BAMTKDM2MTBBODg3ODYyOTcwQTlENjk2RDgyRThFNENFQkFEQTk0QTFBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdSwyEhVhwTm49nEv0GPgFL2f0 j5Ctn0w5Go33CVAd0C6Ek3mpedNNNzGAblpAmOUhk7+5Aq/3iWgH97doe+Xs9i2O zawbH95aN1iT4GWxbWAht/RvFYVdj6sdu7KgHXf7+UFKfm4VHXtMJ4anxzthEGGZ CF7RjQOusGGxPqKCQCRuQ5m+x+GebzOOfPG9JiQ5elKHIzV//9e9Vr1YmCLW9uGD sl8asn0+2wOXD9tQhjKeM3qfyTjnzGnQKO5cANsemTz7uEqCqmJQDy6oyjwWvZus x3XdX4RFgjN76kpsOGNm/rR3jHX1qRh4RxqpjJeYUhEO0qLFktHfdsVfKVMxAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUNhCoh4YpcKnWltgujkzrralKGkgwHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2NTJiZjljLTYzNGItNDBiOS1h YzBjLWE4N2I0N2Q1OWY5MS8wLzMxMzAzMzJlMzEyZTM1MzAyZTMwMmYzMjMzMmQz MjMzMjAzZDNlMjAzMTM0MzIzMzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnATIwDQYJKoZIhvcN AQELBQADggEBAF46Rl1jR4Ivs6yyStTt0Yu1IuMc8gjNZx3SQ3I0fEBXgkIvN0TQ kpfWNecHm5Vmbr8vQ+lxq7BKqSwGbkMceXJhQ6H5HTIPOsMhA3knBpITIM0nIyNW rOaBh8aLggcByMWKeNbb78PvtO41HFBBzJDz8wk2B96iX8d5qhm2nxI6Z1z6H9wK HDhmL3GcH7AG6Ti8J/QQEViMQTWvAD2jYmY4pzzgq+77S95MKZKgDtwN8VRSFjah AN2Ffc7LUhdT5IUu6msF9hQntwySAs+DgteuiGbtQvGrAuDuz+j+sy7S0mBnviSW za26rptQBBTcXLe8szUTus3dahodbCXliKo= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org