$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa File: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (raw, json) Hash identifier: NDaWukv8ocUDgGx5t4NmnZqYdPGRn5XZ/y/Huh+Gumk= Subject key identifier: A5:C5:F4:07:BF:BE:F3:72:4B:E6:57:D5:72:95:FF:70:59:5C:D8:BC Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 6D4C2B9B74F626C33DE442F094D4B77D9BDACCE4 Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa Signing time: Wed 30 Oct 2024 06:00:00 +0000 ROA not before: Wed 30 Oct 2024 05:55:00 +0000 ROA not after: Wed 29 Oct 2025 06:00:00 +0000 asID: 141645 IP address blocks: 103.162.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4c:2b:9b:74:f6:26:c3:3d:e4:42:f0:94:d4:b7:7d:9b:da:cc:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Oct 30 05:55:00 2024 GMT Not After : Oct 29 06:00:00 2025 GMT Subject: CN=A5C5F407BFBEF3724BE657D57295FF70595CD8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:4c:55:34:30:1f:0b:a0:5d:16:70:bc:16: 21:64:97:78:e6:29:80:67:68:ae:ee:e9:6a:76:e4: 32:7f:5d:3d:00:5e:ab:85:82:1d:2d:0e:28:8f:9e: 35:f3:1f:4c:76:d9:b8:73:da:4c:a5:2d:0e:e8:07: 79:8b:e3:92:56:2b:0b:1f:32:d8:50:4f:2a:eb:2a: e4:fd:51:71:48:d8:0a:3d:4d:ad:96:33:5a:32:5b: 5a:93:5a:0a:20:db:e0:6f:85:43:a5:a8:b3:06:9c: 48:e3:fa:78:57:8a:40:fc:e3:7b:f6:cb:8f:91:b1: 81:22:41:62:41:e5:aa:35:4f:70:e2:f2:ed:ad:01: 5e:a0:4a:9c:40:8b:1e:6c:ef:7d:0c:43:04:62:41: 3e:6b:58:02:52:a5:da:b8:5e:33:dc:16:8a:bb:03: 6b:25:a7:17:e9:e8:5d:52:00:35:f9:45:77:99:3b: 83:1a:3f:5c:a1:19:b4:fb:9b:6c:b9:86:f8:eb:d2: 22:d6:6f:f9:9c:bf:84:1a:fd:4b:f2:83:a4:62:d7: 18:0b:18:74:9d:53:b1:f2:52:ea:98:2c:2e:d8:95: 76:a8:fc:fe:9e:42:41:d6:62:3e:15:fa:70:5f:4e: c5:4c:2f:0e:63:a2:38:66:40:82:d7:de:95:59:bd: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C5:F4:07:BF:BE:F3:72:4B:E6:57:D5:72:95:FF:70:59:5C:D8:BC X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.54.0/24 Signature Algorithm: sha256WithRSAEncryption 44:96:b2:0c:cc:4c:5a:db:aa:48:2e:4b:2b:0e:3d:1e:64:77: c2:2d:85:fa:ae:70:68:51:f2:44:9e:ad:a5:84:3f:b1:79:38: ea:d8:cb:d0:84:48:ea:8d:88:21:3d:cf:ba:4b:aa:54:2e:b8: 26:40:6c:54:5d:69:ce:17:f6:82:02:5e:98:55:0f:15:06:fa: 6d:52:e8:1f:05:10:c5:20:d6:56:eb:df:40:dd:96:7c:f5:32: d6:0d:4c:58:e7:a7:6f:cb:20:29:dd:fe:fe:13:8e:20:e5:b2: ac:69:ff:3c:9d:a1:3e:74:88:dd:3d:4c:ee:ed:92:02:1a:da: 6c:80:2e:12:40:f4:64:f5:df:47:81:ba:1b:16:d1:6a:60:d5: a2:18:ac:45:f1:d4:1f:4c:3b:99:70:fc:c9:3d:94:21:dd:ec: e1:10:0f:86:83:87:4f:31:d3:f1:e1:a8:ed:0b:ce:78:2f:4d: 49:f5:94:46:aa:ec:54:6e:32:e8:5c:5c:5b:d1:d2:e3:49:fd: 48:a6:47:57:17:e4:27:82:53:ff:01:f8:92:c8:8e:68:80:6b: 77:4f:b8:56:59:11:bc:ba:80:8c:0e:6d:56:4f:b7:bf:6a:9c: 49:d7:fc:26:07:fd:61:6c:3a:6d:8c:ab:55:7d:4c:5a:71:db: 9b:62:53:a1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbUwrm3T2JsM95ELwlNS3fZvazOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNDEwMzAwNTU1MDBaFw0yNTEwMjkwNjAwMDBaMDMxMTAvBgNV BAMTKEE1QzVGNDA3QkZCRUYzNzI0QkU2NTdENTcyOTVGRjcwNTk1Q0Q4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDkxVNDAfC6BdFnC8FiFkl3jm KYBnaK7u6Wp25DJ/XT0AXquFgh0tDiiPnjXzH0x22bhz2kylLQ7oB3mL45JWKwsf MthQTyrrKuT9UXFI2Ao9Ta2WM1oyW1qTWgog2+BvhUOlqLMGnEjj+nhXikD843v2 y4+RsYEiQWJB5ao1T3Di8u2tAV6gSpxAix5s730MQwRiQT5rWAJSpdq4XjPcFoq7 A2slpxfp6F1SADX5RXeZO4MaP1yhGbT7m2y5hvjr0iLWb/mcv4Qa/Uvyg6Ri1xgL GHSdU7HyUuqYLC7YlXao/P6eQkHWYj4V+nBfTsVMLw5jojhmQILX3pVZvebtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUpcX0B7++83JL5lfVcpX/cFlc2LwwHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4NTNhZmRkLTJlMDktNDc3My04 YmU0LTZmZDBlZTkwYjA0MC8wLzMxMzAzMzJlMzEzNjMyMmUzNTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6I2MA0GCSqG SIb3DQEBCwUAA4IBAQBElrIMzExa26pILksrDj0eZHfCLYX6rnBoUfJEnq2lhD+x eTjq2MvQhEjqjYghPc+6S6pULrgmQGxUXWnOF/aCAl6YVQ8VBvptUugfBRDFINZW 699A3ZZ89TLWDUxY56dvyyAp3f7+E44g5bKsaf88naE+dIjdPUzu7ZICGtpsgC4S QPRk9d9HgbobFtFqYNWiGKxF8dQfTDuZcPzJPZQh3ezhEA+Gg4dPMdPx4ajtC854 L01J9ZRGquxUbjLoXFxb0dLjSf1IpkdXF+QnglP/AfiSyI5ogGt3T7hWWRG8uoCM Dm1WT7e/apxJ1/wmB/1hbDptjKtVfUxacdubYlOh -----END CERTIFICATE-----Generated at Wed Nov 20 18:59:47 2024 by rpki-client on console-ams.rpki-client.org