$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa File: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (raw, json) Hash identifier: HQmVbfWutZ2fC074/Ux0lY+ph7dZIfvBgd/1Hm1UpCI= Subject key identifier: 7A:A4:2E:F4:FB:87:20:54:FA:E8:68:2B:0A:DF:76:A1:F9:BA:AE:98 Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 530B95C7415C9CB7428E044C9861C866EC88DFE7 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa Signing time: Thu 07 Nov 2024 11:00:45 +0000 ROA not before: Thu 07 Nov 2024 10:55:45 +0000 ROA not after: Thu 06 Nov 2025 11:00:45 +0000 asID: 151592 IP address blocks: 103.52.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0b:95:c7:41:5c:9c:b7:42:8e:04:4c:98:61:c8:66:ec:88:df:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Nov 7 10:55:45 2024 GMT Not After : Nov 6 11:00:45 2025 GMT Subject: CN=7AA42EF4FB872054FAE8682B0ADF76A1F9BAAE98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:70:be:0a:93:ce:c3:79:0c:5c:77:a2:f5: 1a:18:d3:ff:3e:b6:97:9f:e5:f9:24:28:8a:36:46: e3:2d:17:f1:a2:78:c8:16:e6:7c:c9:51:77:9e:85: 57:0c:1a:55:c2:4f:c8:35:b9:16:2e:ea:2f:dc:39: 8f:6d:d3:0c:a4:c6:b5:49:97:04:2a:10:38:6f:b0: 6a:ed:e4:cd:41:ba:54:7b:30:0d:7d:01:61:c4:c3: f3:a4:e4:33:8c:d9:eb:d4:34:01:83:0a:c5:0c:b6: 62:f6:7c:57:b0:21:15:ad:61:eb:e5:41:c6:9e:cb: cf:07:c1:03:ad:44:fc:50:07:8d:a8:76:04:a3:4e: 01:3b:99:de:29:3d:13:da:eb:7e:ce:18:72:21:56: 2d:9a:ad:d2:dc:25:a0:3c:82:60:dc:cd:1b:0e:03: 7a:f6:3b:9a:e9:ed:e2:31:b1:ea:75:b6:46:a3:ee: d3:2a:7d:82:06:0c:6c:d8:8c:63:f7:ec:7c:77:2c: 8a:66:6c:9c:56:76:36:1d:4b:cc:b8:26:d9:71:45: 7c:c0:af:10:d0:ce:ec:8e:96:96:14:77:aa:d7:4d: 16:86:a4:3c:0f:ec:a2:ec:cd:77:ef:55:27:45:fc: 86:f8:25:8d:f8:c0:80:0d:1a:39:cf:7e:07:ba:1b: 36:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A4:2E:F4:FB:87:20:54:FA:E8:68:2B:0A:DF:76:A1:F9:BA:AE:98 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.212.0/24 Signature Algorithm: sha256WithRSAEncryption b0:e8:71:79:ca:67:70:0f:01:1a:58:f6:4c:9b:65:d3:07:c0: f4:eb:0d:e4:8d:80:eb:48:53:3a:07:8e:1f:28:fb:37:d7:90: 27:7f:4c:e9:66:18:21:92:f8:00:1d:42:f7:65:53:04:6d:99: e9:36:87:5e:82:02:de:2c:b9:c4:7e:04:06:bd:3c:e7:3f:12: 2b:93:37:ec:58:e4:20:53:06:95:1c:ac:88:50:ce:d6:76:2a: 54:5c:59:ac:7e:7c:ed:8a:c0:35:45:47:db:17:15:a4:38:31: 2d:39:43:22:99:23:14:f4:2b:40:83:dc:96:87:40:0c:4f:6e: a4:13:ee:23:e3:ad:3f:df:c4:4f:5b:3a:82:ac:32:66:97:ff: ed:a8:50:d6:13:37:1e:c0:b8:3b:31:97:7c:f3:27:76:95:5c: 5a:a9:17:84:51:f0:3b:62:10:be:88:00:95:23:e7:5c:d7:53: ae:a9:e8:33:da:80:68:60:c1:66:27:99:2a:d6:1d:ab:27:d0: 1b:b7:22:33:81:bb:35:0d:d3:8e:65:91:e8:3c:ec:2d:1d:a4: 5a:25:58:5d:c2:c6:87:c6:93:9c:3e:ac:a9:a2:34:1e:d9:6c: 26:49:00:05:02:6d:24:23:1d:3f:a5:05:c4:e1:b3:fd:36:eb: f1:69:8a:51 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUwuVx0FcnLdCjgRMmGHIZuyI3+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNDExMDcxMDU1NDVaFw0yNTExMDYxMTAwNDVaMDMxMTAvBgNV BAMTKDdBQTQyRUY0RkI4NzIwNTRGQUU4NjgyQjBBREY3NkExRjlCQUFFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3HC+CpPOw3kMXHei9RoY0/8+ tpef5fkkKIo2RuMtF/GieMgW5nzJUXeehVcMGlXCT8g1uRYu6i/cOY9t0wykxrVJ lwQqEDhvsGrt5M1BulR7MA19AWHEw/Ok5DOM2evUNAGDCsUMtmL2fFewIRWtYevl Qcaey88HwQOtRPxQB42odgSjTgE7md4pPRPa637OGHIhVi2ardLcJaA8gmDczRsO A3r2O5rp7eIxsep1tkaj7tMqfYIGDGzYjGP37Hx3LIpmbJxWdjYdS8y4JtlxRXzA rxDQzuyOlpYUd6rXTRaGpDwP7KLszXfvVSdF/Ib4JY34wIANGjnPfge6GzbFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUeqQu9PuHIFT66GgrCt92ofm6rpgwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxZjdjMjViLTQxMGItNDgyYS05 NDM2LTIyMWFiMDc5ZDM2OC8wLzMxMzAzMzJlMzUzMjJlMzIzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzTUMA0GCSqG SIb3DQEBCwUAA4IBAQCw6HF5ymdwDwEaWPZMm2XTB8D06w3kjYDrSFM6B44fKPs3 15Anf0zpZhghkvgAHUL3ZVMEbZnpNodeggLeLLnEfgQGvTznPxIrkzfsWOQgUwaV HKyIUM7WdipUXFmsfnztisA1RUfbFxWkODEtOUMimSMU9CtAg9yWh0AMT26kE+4j 460/38RPWzqCrDJml//tqFDWEzcewLg7MZd88yd2lVxaqReEUfA7YhC+iACVI+dc 11Ouqegz2oBoYMFmJ5kq1h2rJ9AbtyIzgbs1DdOOZZHoPOwtHaRaJVhdwsaHxpOc PqypojQe2WwmSQAFAm0kIx0/pQXE4bP9NuvxaYpR -----END CERTIFICATE-----Generated at Wed Nov 20 12:07:51 2024 by rpki-client on console-fra.rpki-client.org