$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa File: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (raw, json) Hash identifier: 8WaehvbTOcF3pzR4s59v/gds3hIUxmrMCC7s3FSug0w= Subject key identifier: 63:3D:6C:AF:54:BE:25:76:96:5D:E7:87:E2:9E:9A:65:1A:F5:9E:D9 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 7437F837B687611431F15C307880738FB363966E Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa Signing time: Fri 26 Jul 2024 08:02:44 +0000 ROA not before: Fri 26 Jul 2024 07:57:44 +0000 ROA not after: Fri 25 Jul 2025 08:02:44 +0000 asID: 136111 IP address blocks: 103.94.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:37:f8:37:b6:87:61:14:31:f1:5c:30:78:80:73:8f:b3:63:96:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Jul 26 07:57:44 2024 GMT Not After : Jul 25 08:02:44 2025 GMT Subject: CN=633D6CAF54BE2576965DE787E29E9A651AF59ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:c3:07:33:36:c7:94:65:0c:ee:5f:bd:b0: 76:cf:20:f6:ed:a1:8d:7c:83:4c:66:b4:f8:17:eb: 2d:54:2b:e4:95:61:51:f9:ae:88:c7:19:c2:6b:9f: 08:2e:66:b5:c1:91:af:c4:62:f5:49:66:b1:f5:a6: 1e:f9:de:e5:35:be:b5:b2:63:64:0d:66:8c:71:54: 87:51:e4:2f:3f:db:ec:18:e7:0f:ee:0d:44:23:3d: 1c:5d:c7:b7:28:15:66:33:b8:f7:c3:ca:9d:46:64: 6b:b8:a4:41:40:42:43:13:4e:6b:e3:b7:08:3b:b0: 99:64:b7:98:86:60:28:dd:06:49:83:27:de:04:1d: 6e:6f:01:da:6e:e4:df:16:b5:52:f9:b2:d5:9b:1a: 2b:70:2b:b2:5b:03:70:e3:74:c6:07:8a:a7:ac:a7: 8e:5c:51:d6:52:f1:64:a5:6e:e1:37:49:c1:ca:5b: e7:b4:ae:86:4e:fd:a7:b8:d1:a6:9d:4d:af:54:1a: df:46:01:df:85:c2:b8:ef:7c:0e:af:b8:9c:d2:ef: c1:42:68:c6:91:30:24:7c:77:70:03:82:13:92:79: 1a:f6:ef:2e:86:73:ed:ac:d7:3d:16:0f:bc:a8:11: 8f:fd:2b:40:d8:1f:ff:e0:6b:a1:3b:44:4f:d2:0a: 07:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3D:6C:AF:54:BE:25:76:96:5D:E7:87:E2:9E:9A:65:1A:F5:9E:D9 X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.213.0/24 Signature Algorithm: sha256WithRSAEncryption aa:5d:6a:5b:55:80:3a:72:68:11:4e:0e:29:bf:fb:72:78:19: 47:bb:36:0f:26:05:6a:e0:28:e2:30:2d:ea:f3:29:e5:3b:46: 1c:7f:e4:f3:f7:96:a6:c5:ce:6a:c9:fc:23:03:9f:c0:ce:f2: 51:a9:85:fd:a7:a9:f9:cd:a8:75:f6:ec:b0:ad:9c:f0:4e:eb: 6c:9d:8d:b0:e7:55:0a:f6:7e:ab:64:7e:30:41:ee:be:e6:c3: 99:f7:0d:0f:04:b3:18:7b:34:2c:97:4f:65:9a:6c:e1:60:cd: a5:7b:ba:b0:9b:63:af:ff:4c:73:26:4e:fa:b4:78:3b:a9:66: 73:87:bb:96:c2:92:92:5e:47:fc:24:68:c6:49:af:25:1a:08: 53:29:59:6a:bf:a1:0c:de:25:f2:72:3a:23:26:16:79:a3:d7: 48:d4:ba:4f:00:ef:90:d4:6f:15:df:cb:eb:78:cc:0a:d4:43: 41:41:6c:c6:5b:2f:9b:70:95:20:c0:d8:f6:22:58:f1:3d:d5: 9f:1e:c1:a0:ac:bd:cc:91:2f:4e:a8:f4:39:77:76:07:0d:1a: 31:44:da:27:09:0a:db:7c:06:8e:8a:af:9e:2f:eb:63:a7:fe: 71:99:8c:1b:a0:57:d7:cf:15:63:27:83:7f:b1:07:f9:84:43: c1:20:ec:12 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdDf4N7aHYRQx8VwweIBzj7Njlm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNDA3MjYwNzU3NDRaFw0yNTA3MjUwODAyNDRaMDMxMTAvBgNV BAMTKDYzM0Q2Q0FGNTRCRTI1NzY5NjVERTc4N0UyOUU5QTY1MUFGNTlFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFcMHMzbHlGUM7l+9sHbPIPbt oY18g0xmtPgX6y1UK+SVYVH5rojHGcJrnwguZrXBka/EYvVJZrH1ph753uU1vrWy Y2QNZoxxVIdR5C8/2+wY5w/uDUQjPRxdx7coFWYzuPfDyp1GZGu4pEFAQkMTTmvj twg7sJlkt5iGYCjdBkmDJ94EHW5vAdpu5N8WtVL5stWbGitwK7JbA3DjdMYHiqes p45cUdZS8WSlbuE3ScHKW+e0roZO/ae40aadTa9UGt9GAd+FwrjvfA6vuJzS78FC aMaRMCR8d3ADghOSeRr27y6Gc+2s1z0WD7yoEY/9K0DYH//ga6E7RE/SCgehAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYz1sr1S+JXaWXeeH4p6aZRr1ntkwHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyZjI4ODc5LTQ4NDQtNDJkZS1i MmQ5LWE5NjY2ZGUyODJlYS8wLzMxMzAzMzJlMzkzNDJlMzIzMTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ17VMA0GCSqG SIb3DQEBCwUAA4IBAQCqXWpbVYA6cmgRTg4pv/tyeBlHuzYPJgVq4CjiMC3q8ynl O0Ycf+Tz95amxc5qyfwjA5/AzvJRqYX9p6n5zah19uywrZzwTutsnY2w51UK9n6r ZH4wQe6+5sOZ9w0PBLMYezQsl09lmmzhYM2le7qwm2Ov/0xzJk76tHg7qWZzh7uW wpKSXkf8JGjGSa8lGghTKVlqv6EM3iXycjojJhZ5o9dI1LpPAO+Q1G8V38vreMwK 1ENBQWzGWy+bcJUgwNj2IljxPdWfHsGgrL3MkS9OqPQ5d3YHDRoxRNonCQrbfAaO iq+eL+tjp/5xmYwboFfXzxVjJ4N/sQf5hEPBIOwS -----END CERTIFICATE-----Generated at Fri Nov 22 15:22:20 2024 by rpki-client on console-fra.rpki-client.org