$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e322e302f32342d3234203d3e203138303539.roa File: 3130332e342e322e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: 3dlYrpFyf6GzfXt372v6hvIa7PiT/VBChxJ5omlpRJ0= Subject key identifier: 2B:67:B3:C9:01:26:B2:A9:0E:B4:71:CA:8B:B3:D7:1E:DD:75:53:23 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 6360244B6B8A336D9F2C589A1BE6BDBF4C0E38E4 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e322e302f32342d3234203d3e203138303539.roa Signing time: Fri 25 Oct 2024 03:00:01 +0000 ROA not before: Fri 25 Oct 2024 02:55:01 +0000 ROA not after: Fri 24 Oct 2025 03:00:01 +0000 asID: 18059 IP address blocks: 103.4.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:60:24:4b:6b:8a:33:6d:9f:2c:58:9a:1b:e6:bd:bf:4c:0e:38:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Oct 25 02:55:01 2024 GMT Not After : Oct 24 03:00:01 2025 GMT Subject: CN=2B67B3C90126B2A90EB471CA8BB3D71EDD755323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:a3:6e:52:00:a2:02:f4:de:69:f8:d2:59: 18:06:e2:de:14:bd:de:39:20:9f:d3:86:54:7a:e1: e9:dd:1f:2a:79:4d:44:15:56:de:f9:80:70:16:b3: 26:57:53:a4:c8:cd:8e:5e:64:2b:6e:d7:e4:ae:ee: 27:9e:69:99:01:f9:a2:86:d9:29:11:ed:11:8a:9d: 78:37:f3:f6:07:d8:ff:07:d5:ad:7b:99:31:ff:69: af:a9:16:bc:bf:0a:b6:d6:4e:cc:ad:36:bd:b3:8a: 6d:69:93:1d:6b:32:e5:22:36:e1:82:6e:e9:c8:e0: c0:ad:d5:b8:ad:5f:57:78:ae:d4:c6:cb:b4:36:d4: 18:56:e1:62:5c:d7:57:03:3a:8b:eb:bd:7d:87:8e: 8c:c1:e9:47:01:9a:1e:8d:4e:5a:7f:8e:24:38:c4: 20:00:4f:16:b7:78:6a:0a:f4:03:c9:36:a3:5f:73: f5:59:6a:97:85:d5:f6:6a:16:b3:27:82:89:a1:f7: 4f:4b:e8:3b:67:5e:97:48:17:73:2c:fd:b8:da:1a: 9a:31:32:ac:f1:4a:b2:2b:0f:a7:80:58:4c:df:73: cd:ab:89:4b:14:a0:59:62:a1:75:9f:d6:38:6c:3b: 6e:cd:e3:07:f0:94:92:99:d9:65:fe:43:eb:29:88: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:67:B3:C9:01:26:B2:A9:0E:B4:71:CA:8B:B3:D7:1E:DD:75:53:23 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e322e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.2.0/24 Signature Algorithm: sha256WithRSAEncryption 04:40:a0:b7:f1:a9:5a:16:fd:8c:cb:8d:d1:31:88:18:0c:44: 2c:56:12:26:38:9d:c1:87:b0:9b:6d:1a:67:26:44:fc:fb:09: 3f:29:b5:03:61:46:72:ad:27:01:dc:e8:3a:1b:14:f4:e4:e6: 16:27:3f:ac:ab:d0:29:45:82:85:5b:cc:ae:49:4b:4d:6a:fa: a1:30:a4:db:51:68:2a:6c:3a:b0:a0:27:64:a4:cd:dd:08:9a: 10:f8:b5:f7:c0:c8:2e:75:e6:2f:3a:5a:5e:db:e5:e6:e0:3e: ab:63:73:10:cc:67:1b:cd:24:66:b8:6b:f1:e8:14:d3:9c:ea: f1:1e:70:ca:68:f9:be:bf:85:0d:c4:3a:97:fa:fa:1f:6d:08: 00:d0:ab:fa:83:8e:0d:fe:b3:7e:e8:cc:48:79:ce:c3:95:8a: f0:be:36:cf:c0:93:64:39:ee:4d:2d:f1:80:98:4a:ee:00:13: 43:eb:da:a6:4f:87:85:3a:91:8b:16:fa:ab:82:86:6c:51:8d: 83:3f:48:78:f6:7c:6e:8d:5a:96:36:1b:aa:30:d4:ed:23:66: 17:a1:76:e8:be:21:87:7d:a5:f3:c9:43:8d:c7:e9:9b:d5:2f: 0e:78:de:ef:02:ef:f7:b5:a4:2e:6f:80:22:8e:7c:e4:cf:11: 52:61:f2:40 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUY2AkS2uKM22fLFiaG+a9v0wOOOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNDEwMjUwMjU1MDFaFw0yNTEwMjQwMzAwMDFaMDMxMTAvBgNV BAMTKDJCNjdCM0M5MDEyNkIyQTkwRUI0NzFDQThCQjNENzFFREQ3NTUzMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylKNuUgCiAvTeafjSWRgG4t4U vd45IJ/ThlR64endHyp5TUQVVt75gHAWsyZXU6TIzY5eZCtu1+Su7ieeaZkB+aKG 2SkR7RGKnXg38/YH2P8H1a17mTH/aa+pFry/CrbWTsytNr2zim1pkx1rMuUiNuGC bunI4MCt1bitX1d4rtTGy7Q21BhW4WJc11cDOovrvX2HjozB6UcBmh6NTlp/jiQ4 xCAATxa3eGoK9APJNqNfc/VZapeF1fZqFrMngomh909L6DtnXpdIF3Ms/bjaGpox MqzxSrIrD6eAWEzfc82riUsUoFlioXWf1jhsO27N4wfwlJKZ2WX+Q+spiJGTAgMB AAGjggIrMIICJzAdBgNVHQ4EFgQUK2ezyQEmsqkOtHHKi7PXHt11UyMwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI4MzY3NjMtMTJiNi00ZDhmLWFk MGItNGNkNWI2MTk1OWVmLzAvMzEzMDMzMmUzNDJlMzIyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZwQCMA0GCSqGSIb3DQEBCwUA A4IBAQAEQKC38alaFv2My43RMYgYDEQsVhImOJ3Bh7CbbRpnJkT8+wk/KbUDYUZy rScB3Og6GxT05OYWJz+sq9ApRYKFW8yuSUtNavqhMKTbUWgqbDqwoCdkpM3dCJoQ +LX3wMgudeYvOlpe2+Xm4D6rY3MQzGcbzSRmuGvx6BTTnOrxHnDKaPm+v4UNxDqX +vofbQgA0Kv6g44N/rN+6MxIec7DlYrwvjbPwJNkOe5NLfGAmEruABND69qmT4eF OpGLFvqrgoZsUY2DP0h49nxujVqWNhuqMNTtI2YXoXboviGHfaXzyUONx+mb1S8O eN7vAu/3taQub4AijnzkzxFSYfJA -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org