$ rpki-client -vvf repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa File: 3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (raw, json) Hash identifier: 8wbQikoaFVPcz3EhuJ2rjIc0e+XKhv89AMBb8aRt064= Subject key identifier: 0F:64:25:CD:97:22:4E:6C:56:74:AB:91:B7:CB:40:07:D7:DC:C9:05 Certificate issuer: /CN=A794160F8781ADF0A63CEECE52275B19F08F18D8 Certificate serial: 37222762FF77412A80265E791D1962794818508D Authority key identifier: A7:94:16:0F:87:81:AD:F0:A6:3C:EE:CE:52:27:5B:19:F0:8F:18:D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa Signing time: Thu 12 Sep 2024 11:00:00 +0000 ROA not before: Thu 12 Sep 2024 10:55:00 +0000 ROA not after: Thu 11 Sep 2025 11:00:00 +0000 asID: 151536 IP address blocks: 103.244.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.crl rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:22:27:62:ff:77:41:2a:80:26:5e:79:1d:19:62:79:48:18:50:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A794160F8781ADF0A63CEECE52275B19F08F18D8 Validity Not Before: Sep 12 10:55:00 2024 GMT Not After : Sep 11 11:00:00 2025 GMT Subject: CN=0F6425CD97224E6C5674AB91B7CB4007D7DCC905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0b:39:01:37:32:d7:65:ea:cd:6a:ef:be:29: 8a:d6:cf:71:e8:a1:83:34:55:1c:25:40:cf:8f:ca: 76:a2:ca:1f:e4:4e:af:7b:7c:fd:90:71:e3:7d:00: e7:70:81:69:57:54:fd:88:f3:15:c9:41:b3:3e:02: 3d:fb:65:96:64:62:a8:94:40:b2:68:5e:93:fc:4e: 28:c0:7c:8a:5e:f7:23:3a:ae:dd:80:da:93:1b:2b: 55:57:70:18:37:37:e3:8d:a3:2c:4c:8f:d6:13:95: 7b:08:53:67:50:3b:8f:17:e7:26:e5:a1:2c:5e:fc: aa:63:7f:6f:ea:f6:79:00:cc:a6:15:16:5a:9b:80: 2f:9f:08:eb:21:20:9e:b1:9d:cb:95:b6:d1:83:4a: ae:2f:67:ab:3d:86:5b:cd:82:55:6d:d5:9e:1d:32: c5:5e:c9:83:36:04:88:3d:8a:e1:3f:70:03:7b:78: 90:75:ff:f7:f3:5c:8b:23:c3:93:40:10:79:2f:0e: 95:5d:b1:53:77:b7:d8:a8:5a:3f:b6:88:0d:e9:f7: cf:b0:b4:86:be:24:9f:ca:ce:68:34:50:2d:23:e6: 7f:4f:c1:74:3e:6f:00:05:bc:82:94:61:17:5e:bd: 6a:0f:99:fd:0a:e6:ef:57:9b:5a:6b:3f:d1:2d:b5: b7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:64:25:CD:97:22:4E:6C:56:74:AB:91:B7:CB:40:07:D7:DC:C9:05 X509v3 Authority Key Identifier: keyid:A7:94:16:0F:87:81:AD:F0:A6:3C:EE:CE:52:27:5B:19:F0:8F:18:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.23.0/24 Signature Algorithm: sha256WithRSAEncryption 74:fc:42:f0:1b:17:b5:9e:92:1b:91:c7:c4:98:e3:57:d3:d7: c7:a4:fe:c5:df:7f:38:7c:9b:46:48:d0:d2:d4:1c:73:6e:db: 26:c4:79:aa:e9:20:71:19:6e:5d:da:c8:d0:36:cf:db:d4:24: 27:49:2b:44:bf:d3:59:78:40:30:07:15:38:95:0b:08:91:03: fe:c8:cf:2a:b3:19:33:25:ce:be:95:ae:36:4e:b3:e3:dd:ce: b8:db:71:b1:37:a0:09:27:56:88:de:4e:be:11:af:e4:2d:a2: fc:71:15:cf:e9:a3:17:67:f3:4a:9f:10:50:3e:3d:4d:3e:57: 52:c0:12:26:45:c3:9b:49:3f:fa:9f:fa:ca:4e:ec:1f:7d:89: 55:bd:dd:b7:69:4d:35:c6:84:59:74:51:b0:2a:b1:1f:76:ae: bb:fc:86:24:8f:b3:19:1a:6f:08:6a:fa:53:01:3d:e5:5b:75: cf:25:ef:ec:cc:90:74:44:a9:d6:f0:ec:26:86:1e:b1:c8:80: df:a7:3a:b3:35:8a:be:ba:a8:5f:8f:c5:3d:31:2f:a3:22:f1: c7:3b:18:ea:36:10:9d:2d:a1:85:c5:97:8d:49:0e:6b:22:4c: 03:bf:47:21:30:cd:b3:e3:75:9a:03:fa:2a:54:28:7f:15:5b: 8f:f7:6f:2a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNyInYv93QSqAJl55HRlieUgYUI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5NDE2MEY4NzgxQURGMEE2M0NFRUNFNTIyNzVCMTlG MDhGMThEODAeFw0yNDA5MTIxMDU1MDBaFw0yNTA5MTExMTAwMDBaMDMxMTAvBgNV BAMTKDBGNjQyNUNEOTcyMjRFNkM1Njc0QUI5MUI3Q0I0MDA3RDdEQ0M5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUCzkBNzLXZerNau++KYrWz3Ho oYM0VRwlQM+Pynaiyh/kTq97fP2QceN9AOdwgWlXVP2I8xXJQbM+Aj37ZZZkYqiU QLJoXpP8TijAfIpe9yM6rt2A2pMbK1VXcBg3N+ONoyxMj9YTlXsIU2dQO48X5ybl oSxe/Kpjf2/q9nkAzKYVFlqbgC+fCOshIJ6xncuVttGDSq4vZ6s9hlvNglVt1Z4d MsVeyYM2BIg9iuE/cAN7eJB1//fzXIsjw5NAEHkvDpVdsVN3t9ioWj+2iA3p98+w tIa+JJ/Kzmg0UC0j5n9PwXQ+bwAFvIKUYRdevWoPmf0K5u9Xm1prP9EttbcdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUD2QlzZciTmxWdKuRt8tAB9fcyQUwHwYDVR0j BBgwFoAUp5QWD4eBrfCmPO7OUidbGfCPGNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MGVhNTA1Ni0wZmJjLTQwMzItODY4MC0zZmE1NDQxZTRkNTUvMC9BNzk0MTYwRjg3 ODFBREYwQTYzQ0VFQ0U1MjI3NUIxOUYwOEYxOEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc5NDE2MEY4NzgxQURGMEE2M0NFRUNFNTIyNzVCMTlGMDhG MThEOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwZWE1MDU2LTBmYmMtNDAzMi04 NjgwLTNmYTU0NDFlNGQ1NS8wLzMxMzAzMzJlMzIzNDM0MmUzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/QXMA0GCSqG SIb3DQEBCwUAA4IBAQB0/ELwGxe1npIbkcfEmONX09fHpP7F3384fJtGSNDS1Bxz btsmxHmq6SBxGW5d2sjQNs/b1CQnSStEv9NZeEAwBxU4lQsIkQP+yM8qsxkzJc6+ la42TrPj3c6423GxN6AJJ1aI3k6+Ea/kLaL8cRXP6aMXZ/NKnxBQPj1NPldSwBIm RcObST/6n/rKTuwffYlVvd23aU01xoRZdFGwKrEfdq67/IYkj7MZGm8IavpTAT3l W3XPJe/szJB0RKnW8Owmhh6xyIDfpzqzNYq+uqhfj8U9MS+jIvHHOxjqNhCdLaGF xZeNSQ5rIkwDv0chMM2z43WaA/oqVCh/FVuP928q -----END CERTIFICATE-----Generated at Fri Nov 22 08:00:09 2024 by rpki-client on console-ams.rpki-client.org