$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32332d3233203d3e203436303233.roa File: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (raw, json) Hash identifier: cL7ZL6RvGqaM5lLXVnNe5p70LEzT1elnw9tJI0VweII= Subject key identifier: 6A:43:F2:33:FF:63:92:8F:75:64:BF:E1:AC:5F:EE:91:AC:EB:96:10 Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 1F574F13C0445AE889CD9945A3AFC0490D11E0D5 Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32332d3233203d3e203436303233.roa Signing time: Tue 05 Nov 2024 08:31:46 +0000 ROA not before: Tue 05 Nov 2024 08:26:46 +0000 ROA not after: Tue 04 Nov 2025 08:31:46 +0000 asID: 46023 IP address blocks: 103.106.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 04:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:57:4f:13:c0:44:5a:e8:89:cd:99:45:a3:af:c0:49:0d:11:e0:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Nov 5 08:26:46 2024 GMT Not After : Nov 4 08:31:46 2025 GMT Subject: CN=6A43F233FF63928F7564BFE1AC5FEE91ACEB9610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:31:9d:1a:92:87:0d:bf:a2:a1:b5:0d:66: 19:8c:b6:70:1b:f1:8a:64:ed:c8:5b:57:9c:37:f2: 42:48:23:b6:ef:89:f0:65:a1:f6:bf:6d:f4:31:e3: 31:40:27:84:07:04:68:9c:a4:e0:5a:aa:fb:cc:be: 83:40:f3:21:c3:8b:1c:69:28:fc:1e:0e:a0:67:3e: 48:68:0e:d4:ce:66:dd:20:af:27:80:4c:9a:62:35: ff:f3:e3:c9:16:5a:dd:da:2a:f8:d3:5e:3b:23:48: 41:35:1a:72:eb:45:08:25:9b:07:f6:1f:44:3b:2b: 02:dc:54:5b:bc:fc:87:54:c5:66:03:d4:59:ee:80: f1:b1:d9:3e:40:4a:d9:0d:2d:eb:3c:0a:23:7e:15: aa:47:39:63:11:77:52:3a:46:41:bd:16:36:16:d3: cb:2d:06:92:ef:ca:18:c3:ea:7a:b5:da:34:52:87: 6c:48:5f:4d:bc:46:12:e7:c7:6b:c8:c7:6b:55:c8: e3:2b:c9:ab:f9:d0:e4:f1:d5:0a:df:b7:bc:63:f0: 35:cb:bf:8d:98:ac:71:5e:6f:93:9f:88:c5:7b:b8: ac:f1:da:1a:76:3a:c2:74:c6:34:58:19:dc:4c:16: 1f:c4:5b:f9:24:c0:57:da:12:b3:b2:88:13:bf:fb: 16:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:43:F2:33:FF:63:92:8F:75:64:BF:E1:AC:5F:EE:91:AC:EB:96:10 X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32332d3233203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.76.0/23 Signature Algorithm: sha256WithRSAEncryption aa:6c:ee:c7:1a:9a:63:1a:6a:34:47:4e:dc:a2:24:af:0e:88: 7c:55:b8:4f:7a:6d:4f:65:78:f1:ab:2e:bb:5c:30:53:37:15: cd:54:3f:8e:15:d9:92:b7:fd:7e:93:23:b1:b9:1d:23:44:f5: 6b:45:5b:65:5d:1d:0f:b5:e7:cc:82:31:55:e3:99:ab:2c:68: fd:c9:8f:32:a4:3d:7e:57:b8:70:8a:b6:c7:5c:8e:3f:f7:02: 2b:8c:10:02:40:24:00:cc:bc:7d:67:23:b5:f5:47:57:d3:10: 17:dc:8c:a7:0e:0b:a5:b2:e9:f7:cf:ce:7c:d3:ad:64:14:f1: 31:90:00:5a:a0:c4:c3:d5:3e:62:fc:fb:5a:a2:51:89:1c:5f: c6:69:90:cc:b9:b7:ed:56:bb:8e:d4:ed:67:ee:ee:3d:d0:40: a0:4b:db:bc:75:42:7c:b7:a4:bc:a8:59:f9:1b:20:27:3a:64: 02:c6:99:85:e7:a6:c5:4b:1a:24:f3:84:0c:3c:01:54:25:5e: 70:2e:34:ca:4f:9d:06:fb:2a:21:8a:0f:f8:b9:72:c9:af:3d: 9e:ae:01:72:28:2b:7f:bd:71:d4:60:44:08:71:dd:bb:b4:6b: f7:d5:c3:5c:df:92:1f:d4:1c:3f:b3:71:71:c7:3d:48:14:8a: a0:58:97:38 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUH1dPE8BEWuiJzZlFo6/ASQ0R4NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNDExMDUwODI2NDZaFw0yNTExMDQwODMxNDZaMDMxMTAvBgNV BAMTKDZBNDNGMjMzRkY2MzkyOEY3NTY0QkZFMUFDNUZFRTkxQUNFQjk2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYTGdGpKHDb+iobUNZhmMtnAb 8Ypk7chbV5w38kJII7bvifBlofa/bfQx4zFAJ4QHBGicpOBaqvvMvoNA8yHDixxp KPweDqBnPkhoDtTOZt0gryeATJpiNf/z48kWWt3aKvjTXjsjSEE1GnLrRQglmwf2 H0Q7KwLcVFu8/IdUxWYD1FnugPGx2T5AStkNLes8CiN+FapHOWMRd1I6RkG9FjYW 08stBpLvyhjD6nq12jRSh2xIX028RhLnx2vIx2tVyOMryav50OTx1Qrft7xj8DXL v42YrHFeb5OfiMV7uKzx2hp2OsJ0xjRYGdxMFh/EW/kkwFfaErOyiBO/+xbPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUakPyM/9jko91ZL/hrF/ukazrlhAwHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZGQ2MTM1LTU0OGMtNDg4MS1h Zjc4LTkzYWY5ZjJhMjUxNi8wLzMxMzAzMzJlMzEzMDM2MmUzNzM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdqTDANBgkqhkiG 9w0BAQsFAAOCAQEAqmzuxxqaYxpqNEdO3KIkrw6IfFW4T3ptT2V48asuu1wwUzcV zVQ/jhXZkrf9fpMjsbkdI0T1a0VbZV0dD7XnzIIxVeOZqyxo/cmPMqQ9fle4cIq2 x1yOP/cCK4wQAkAkAMy8fWcjtfVHV9MQF9yMpw4LpbLp98/OfNOtZBTxMZAAWqDE w9U+Yvz7WqJRiRxfxmmQzLm37Va7jtTtZ+7uPdBAoEvbvHVCfLekvKhZ+RsgJzpk AsaZheemxUsaJPOEDDwBVCVecC40yk+dBvsqIYoP+Llyya89nq4Bcigrf71x1GBE CHHdu7Rr99XDXN+SH9QcP7Nxccc9SBSKoFiXOA== -----END CERTIFICATE-----Generated at Sat Nov 23 01:25:27 2024 by rpki-client on console-ams.rpki-client.org