$ rpki-client -vvf repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa File: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (raw, json) Hash identifier: XF7kzYgNap4G0yVPFf7zneDBRYL02N7Ck706tPQbj40= Subject key identifier: 8B:B9:A4:84:78:A9:78:44:71:AE:32:E2:AB:1C:75:55:D1:53:B2:C3 Certificate issuer: /CN=07560F77A1685B4C155E037BCDB207359FA510B4 Certificate serial: 7E00F62CA204C01943FABA66B803E1EAA6009A41 Authority key identifier: 07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa Signing time: Wed 31 Jul 2024 08:02:42 +0000 ROA not before: Wed 31 Jul 2024 07:57:42 +0000 ROA not after: Wed 30 Jul 2025 08:02:42 +0000 asID: 142382 IP address blocks: 103.172.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.crl rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:00:f6:2c:a2:04:c0:19:43:fa:ba:66:b8:03:e1:ea:a6:00:9a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07560F77A1685B4C155E037BCDB207359FA510B4 Validity Not Before: Jul 31 07:57:42 2024 GMT Not After : Jul 30 08:02:42 2025 GMT Subject: CN=8BB9A48478A9784471AE32E2AB1C7555D153B2C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:18:ce:9b:e7:1e:c5:ec:b3:12:b0:e1:4a:11: 33:0d:69:56:e1:c5:45:71:e3:d4:bc:a9:a6:c9:50: f3:0b:72:e7:c6:26:a9:94:d4:d4:91:4b:1c:74:d1: 66:63:1f:d2:14:3d:27:06:51:e3:64:89:96:8f:20: 49:ef:e8:56:e3:84:ec:73:e5:b7:d9:6a:57:55:b9: 94:2f:96:04:0d:4e:5b:29:5f:32:02:d3:6d:b7:55: 66:d6:01:f5:8b:54:fb:9d:03:a0:2e:30:2b:4f:6d: 43:fb:c9:c1:8c:23:82:d2:84:f7:37:e4:60:5e:bc: 49:5f:e8:52:f6:4c:b1:46:d3:8c:1d:53:0d:3c:a6: e5:b6:e6:e9:24:bc:da:f9:ec:67:3e:99:9e:bb:5d: 04:77:72:d2:b9:80:23:da:16:eb:c5:86:d8:42:8a: cf:88:05:4d:98:5a:15:01:f8:16:68:36:78:4f:1a: fa:f4:9c:77:77:92:83:69:05:90:24:0a:03:32:46: dd:54:33:d1:13:56:cc:d5:4d:7a:9a:2f:e2:ab:3a: 4a:4d:9b:63:35:e3:54:85:75:7b:5e:d7:a2:d7:4b: f3:0f:12:bb:67:b6:f1:21:70:c0:54:88:1f:e7:32: c3:fb:75:fb:1c:5d:7a:65:db:f8:aa:63:14:e5:68: 39:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B9:A4:84:78:A9:78:44:71:AE:32:E2:AB:1C:75:55:D1:53:B2:C3 X509v3 Authority Key Identifier: keyid:07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.19.0/24 Signature Algorithm: sha256WithRSAEncryption a6:27:73:e5:25:6e:12:26:ca:c2:cd:d5:12:d2:97:80:52:ce: 07:f2:52:8e:89:f4:54:d2:4e:06:2e:82:e1:9c:87:bc:81:6b: 2e:6b:48:c7:62:d1:5e:05:7d:67:26:15:6c:75:1e:ca:a2:bb: 29:27:c1:9d:43:9d:6f:24:dd:17:ee:b7:3f:ca:87:4c:51:1f: ed:ff:ad:c8:0f:a5:66:c6:b6:22:e0:eb:ca:3b:c2:90:25:88: d7:86:32:72:08:e2:b9:7b:6c:70:ef:0e:dc:0a:41:f6:7d:5f: 60:1d:04:c6:eb:6d:6a:e1:f5:37:61:02:a3:61:c0:99:bd:24: 7a:61:98:2e:26:aa:51:13:b2:08:50:47:9d:ba:e0:b8:51:bf: 31:76:44:8d:17:7c:cf:1c:a7:c6:dc:67:51:50:60:86:c2:de: 5e:e7:51:ed:d9:9a:da:e4:3f:40:c5:f6:eb:ba:8d:8d:97:e0: 42:57:02:00:62:36:0c:91:d2:56:11:d2:6a:ad:a8:e5:10:da: 63:02:59:0e:8c:92:be:35:76:de:28:ec:4a:07:11:0d:07:2b: 41:7e:b7:d1:d0:ff:5f:d5:d0:64:ff:23:11:27:86:c3:93:a1: 4f:cf:5f:55:73:4f:f2:ae:86:57:63:ee:db:44:d1:70:d2:b8: 95:08:90:ab -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfgD2LKIEwBlD+rpmuAPh6qYAmkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDc1NjBGNzdBMTY4NUI0QzE1NUUwMzdCQ0RCMjA3MzU5 RkE1MTBCNDAeFw0yNDA3MzEwNzU3NDJaFw0yNTA3MzAwODAyNDJaMDMxMTAvBgNV BAMTKDhCQjlBNDg0NzhBOTc4NDQ3MUFFMzJFMkFCMUM3NTU1RDE1M0IyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlGM6b5x7F7LMSsOFKETMNaVbh xUVx49S8qabJUPMLcufGJqmU1NSRSxx00WZjH9IUPScGUeNkiZaPIEnv6FbjhOxz 5bfZaldVuZQvlgQNTlspXzIC0223VWbWAfWLVPudA6AuMCtPbUP7ycGMI4LShPc3 5GBevElf6FL2TLFG04wdUw08puW25ukkvNr57Gc+mZ67XQR3ctK5gCPaFuvFhthC is+IBU2YWhUB+BZoNnhPGvr0nHd3koNpBZAkCgMyRt1UM9ETVszVTXqaL+KrOkpN m2M141SFdXte16LXS/MPErtntvEhcMBUiB/nMsP7dfscXXpl2/iqYxTlaDldAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUi7mkhHipeERxrjLiqxx1VdFTssMwHwYDVR0j BBgwFoAUB1YPd6FoW0wVXgN7zbIHNZ+lELQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDhjYzBiMy0yNTA4LTQ3N2YtOWYyNS02Njg0ZDY1NzJkZGEvMC8wNzU2MEY3N0Ex Njg1QjRDMTU1RTAzN0JDREIyMDczNTlGQTUxMEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDc1NjBGNzdBMTY4NUI0QzE1NUUwMzdCQ0RCMjA3MzU5RkE1 MTBCNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwOGNjMGIzLTI1MDgtNDc3Zi05 ZjI1LTY2ODRkNjU3MmRkYS8wLzMxMzAzMzJlMzEzNzMyMmUzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6wTMA0GCSqG SIb3DQEBCwUAA4IBAQCmJ3PlJW4SJsrCzdUS0peAUs4H8lKOifRU0k4GLoLhnIe8 gWsua0jHYtFeBX1nJhVsdR7KorspJ8GdQ51vJN0X7rc/yodMUR/t/63ID6VmxrYi 4OvKO8KQJYjXhjJyCOK5e2xw7w7cCkH2fV9gHQTG621q4fU3YQKjYcCZvSR6YZgu JqpRE7IIUEeduuC4Ub8xdkSNF3zPHKfG3GdRUGCGwt5e51Ht2Zra5D9Axfbruo2N l+BCVwIAYjYMkdJWEdJqrajlENpjAlkOjJK+NXbeKOxKBxENBytBfrfR0P9f1dBk /yMRJ4bDk6FPz19Vc0/yroZXY+7bRNFw0riVCJCr -----END CERTIFICATE-----Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org