$ rpki-client -vvf repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa File: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (raw, json) Hash identifier: zhjLKdHiZJAAA60z4kxaHFx03Q2DU/hes1jKQwL/5G8= Subject key identifier: 67:F6:9D:5D:C5:E4:D5:1E:B1:20:1D:FB:57:00:9B:0F:7E:8A:09:FB Certificate issuer: /CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Certificate serial: 6C9A66A1942A21EBADBBD6435DCDF2CD792A1418 Authority key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa Signing time: Fri 09 Aug 2024 07:02:21 +0000 ROA not before: Fri 09 Aug 2024 06:57:21 +0000 ROA not after: Fri 08 Aug 2025 07:02:21 +0000 asID: 138851 IP address blocks: 103.138.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 16:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9a:66:a1:94:2a:21:eb:ad:bb:d6:43:5d:cd:f2:cd:79:2a:14:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Validity Not Before: Aug 9 06:57:21 2024 GMT Not After : Aug 8 07:02:21 2025 GMT Subject: CN=67F69D5DC5E4D51EB1201DFB57009B0F7E8A09FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:87:6b:b4:a2:48:2f:31:01:01:51:07:5d: 89:e7:4b:1e:e0:e0:16:c3:49:18:0b:d1:9c:32:59: 24:f9:0b:7a:cf:f1:b4:37:2d:5b:21:d8:e7:a2:4d: f1:19:d4:3d:a8:6a:ea:45:61:93:f5:26:35:bf:90: fc:11:9c:b1:45:c7:47:bc:4c:79:f2:13:89:6e:8c: 59:64:91:1c:9b:3c:71:a0:ac:62:f1:68:b0:c0:6b: 40:0e:08:e9:8e:ac:09:41:50:04:6e:23:a5:06:f7: 6a:83:b9:39:5b:eb:02:22:f0:41:f5:2c:d3:6c:7a: 62:92:3b:af:46:41:97:69:f7:fc:62:aa:94:94:c0: dd:8f:9c:50:3f:f5:76:66:18:bf:d6:e9:a5:19:fc: 03:d4:41:43:c8:36:63:4c:9e:6a:3a:cf:b0:f3:be: 62:b4:48:f9:c1:b1:1e:82:37:e1:7b:3f:43:6c:e2: f6:27:66:e7:7d:9c:fb:8e:0c:32:d0:50:cd:59:58: 1c:55:c1:cc:1f:2a:48:ae:bc:a9:7f:23:7d:62:65: 6b:39:8d:3e:66:ed:18:9f:94:c6:4f:70:cc:21:a1: 0f:ad:17:d5:d8:e9:01:04:aa:84:41:9e:8a:34:8d: bf:af:d0:8c:4e:f0:71:d7:ff:13:93:91:9b:5b:d2: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F6:9D:5D:C5:E4:D5:1E:B1:20:1D:FB:57:00:9B:0F:7E:8A:09:FB X509v3 Authority Key Identifier: keyid:58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.127.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:0e:c7:36:41:0b:69:63:0c:12:3b:ba:20:a7:5c:ce:47:8f: 5c:5c:07:9f:f6:bf:57:3b:9a:c3:45:1a:df:47:0f:da:85:69: dd:9f:8e:b3:14:82:bc:4e:86:1a:0c:8a:56:2d:30:0e:f4:30: ab:bf:eb:e1:97:02:4b:5d:5d:03:61:ca:76:49:3f:47:04:b0: 83:cc:dd:b7:b2:74:dd:b6:46:35:3d:a6:d0:b1:55:6d:79:12: 6e:e4:39:48:13:c2:11:7f:73:14:5f:11:12:ea:8d:dc:01:e9: ec:9b:64:24:56:90:0b:83:f1:56:f2:a1:17:52:d8:b2:84:f7: 91:06:a0:b2:94:15:e6:fe:cf:7f:e1:12:0a:a9:05:99:81:2b: 82:2a:cc:de:58:bb:f2:b0:c1:8a:6f:89:30:ea:08:b5:12:aa: 1e:9e:da:70:81:12:bc:b6:b4:52:03:fb:86:1f:ae:bd:7c:56: d7:20:e0:cb:3f:a1:d1:77:25:1b:bc:fb:40:8a:41:fa:e4:e7: 2a:12:fc:84:11:31:98:7d:f7:8c:f9:5c:dc:31:da:fe:15:3e: 14:88:9d:6e:22:a9:b3:88:62:aa:19:97:fe:f5:8a:87:27:4c: bd:b3:26:a6:2d:d2:0c:e5:21:fb:a3:e2:a0:57:dc:3a:28:60: 60:df:14:d1 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUbJpmoZQqIeutu9ZDXc3yzXkqFBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIw M0Q1MzVERjAeFw0yNDA4MDkwNjU3MjFaFw0yNTA4MDgwNzAyMjFaMDMxMTAvBgNV BAMTKDY3RjY5RDVEQzVFNEQ1MUVCMTIwMURGQjU3MDA5QjBGN0U4QTA5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3IdrtKJILzEBAVEHXYnnSx7g 4BbDSRgL0ZwyWST5C3rP8bQ3LVsh2OeiTfEZ1D2oaupFYZP1JjW/kPwRnLFFx0e8 THnyE4lujFlkkRybPHGgrGLxaLDAa0AOCOmOrAlBUARuI6UG92qDuTlb6wIi8EH1 LNNsemKSO69GQZdp9/xiqpSUwN2PnFA/9XZmGL/W6aUZ/APUQUPINmNMnmo6z7Dz vmK0SPnBsR6CN+F7P0Ns4vYnZud9nPuODDLQUM1ZWBxVwcwfKkiuvKl/I31iZWs5 jT5m7RiflMZPcMwhoQ+tF9XY6QEEqoRBnoo0jb+v0IxO8HHX/xOTkZtb0tQPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUZ/adXcXk1R6xIB37VwCbD36KCfswHwYDVR0j BBgwFoAUWG/o0n/01r1PqDn8WIRKSwPVNd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMC81ODZGRThEMjdG RjRENkJENEZBODM5RkM1ODg0NEE0QjAzRDUzNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIwM0Q1 MzVERi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JjMDcyZGI3LTAxMjctNDU2NC04 ZDIwLWJjZWQ1MjVhMTRiOC8wLzMxMzAzMzJlMzEzMzM4MmUzMTMyMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM1MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnin8wDQYJ KoZIhvcNAQELBQADggEBAA0OxzZBC2ljDBI7uiCnXM5Hj1xcB5/2v1c7msNFGt9H D9qFad2fjrMUgrxOhhoMilYtMA70MKu/6+GXAktdXQNhynZJP0cEsIPM3beydN22 RjU9ptCxVW15Em7kOUgTwhF/cxRfERLqjdwB6eybZCRWkAuD8VbyoRdS2LKE95EG oLKUFeb+z3/hEgqpBZmBK4IqzN5Yu/KwwYpviTDqCLUSqh6e2nCBEry2tFID+4Yf rr18Vtcg4Ms/odF3JRu8+0CKQfrk5yoS/IQRMZh994z5XNwx2v4VPhSInW4iqbOI YqoZl/71iocnTL2zJqYt0gzlIfuj4qBX3DooYGDfFNE= -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:27 2024 by rpki-client on console-ams.rpki-client.org