$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa File: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (raw, json) Hash identifier: DFA3qBFACki/karT3fIlYISlkq7/i7wKwlvN+BCd6A4= Subject key identifier: 7E:36:04:43:1E:79:C3:A2:A6:30:6D:39:94:BB:27:3A:5D:65:BB:56 Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 353F05E9EFCF96E49C179496403738836F979E57 Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa Signing time: Wed 25 Sep 2024 04:00:00 +0000 ROA not before: Wed 25 Sep 2024 03:55:00 +0000 ROA not after: Wed 24 Sep 2025 04:00:00 +0000 asID: 140444 IP address blocks: 103.153.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 16:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3f:05:e9:ef:cf:96:e4:9c:17:94:96:40:37:38:83:6f:97:9e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Sep 25 03:55:00 2024 GMT Not After : Sep 24 04:00:00 2025 GMT Subject: CN=7E3604431E79C3A2A6306D3994BB273A5D65BB56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5f:ec:b9:70:58:75:eb:68:af:00:76:fe:41: e1:20:8a:c9:64:15:63:89:2c:ec:43:8b:81:0b:b8: 58:10:6c:dd:90:4f:2a:0c:39:ba:8c:85:7f:05:d5: 36:83:3c:3a:14:43:77:c9:64:25:3c:f0:72:09:cc: cb:b3:4a:b0:45:a5:a7:37:5a:ff:e7:95:cc:fc:ff: 9c:da:ef:6c:60:78:17:1a:1a:af:ed:ce:94:15:2d: fe:d1:b6:0b:ea:49:e9:73:63:b6:9e:e8:62:f7:87: 6b:26:00:d7:03:d5:2a:0f:b9:a5:fd:a4:39:20:ae: b3:c2:00:47:fa:dd:52:7b:b0:87:f0:04:ad:47:36: 3b:51:b7:68:a0:7d:cc:cd:9e:7e:28:78:99:de:ad: 50:a4:2a:fb:60:7d:e4:21:ea:92:fd:eb:4b:3d:a9: e2:31:fe:69:7f:85:56:d2:a3:2f:b1:9e:b5:03:52: 47:6d:79:98:a4:a6:b1:57:ff:19:a4:b0:c1:14:d6: dd:58:ee:0b:77:ee:24:7c:f3:3a:d4:11:76:eb:87: 72:2b:10:47:c7:bc:d8:bb:13:f1:b4:71:83:58:ef: b2:ec:40:d9:75:70:62:db:02:86:06:4c:ed:36:53: 23:7d:73:3c:ed:50:0c:48:bb:94:a6:9d:b1:0e:07: f4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:36:04:43:1E:79:C3:A2:A6:30:6D:39:94:BB:27:3A:5D:65:BB:56 X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.43.0/24 Signature Algorithm: sha256WithRSAEncryption 63:fd:7b:d2:4a:39:09:b3:87:8f:bd:5f:cd:b7:dd:1d:98:ea: e1:7c:61:30:03:b7:ec:7f:02:e8:12:f5:c5:e7:aa:59:6d:c4: 4c:70:33:ea:d8:0c:ad:49:4f:b6:b4:0b:f5:50:33:8f:d0:e7: f9:dc:85:69:ae:13:a7:e6:35:bb:2c:d1:53:4b:95:92:c6:a4: ed:95:c1:6f:8a:50:ad:e4:13:23:5e:1c:aa:9b:ce:65:81:ce: ab:52:48:cc:1e:c7:ed:b5:57:f4:c6:0f:d6:64:c7:a5:08:70: 3e:76:0f:fd:d6:8c:67:d7:dd:2c:19:99:83:02:26:73:04:e2: 14:76:9f:ac:fa:ce:18:4c:82:64:9a:d9:9b:aa:53:b8:5f:c2: 01:1e:e3:9b:8e:43:2b:8d:5c:d1:bd:e3:31:42:63:43:39:2a: 45:6a:9a:0c:4c:0a:4e:9d:87:28:ee:3e:a4:d0:50:ce:76:ea: 17:6e:28:10:e8:3b:dc:bf:56:20:5e:3f:6f:e1:3e:64:c5:ff: 22:4d:d3:75:3a:dc:f5:2a:24:ef:fa:cc:cb:9a:e4:85:12:aa: 77:22:56:b4:d7:33:5b:52:14:79:7c:6c:a2:f4:d0:79:95:12: b7:16:ff:b3:79:5c:3c:1c:7d:88:07:38:95:c7:5f:e1:63:26: 75:58:8f:4e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNT8F6e/PluScF5SWQDc4g2+XnlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNDA5MjUwMzU1MDBaFw0yNTA5MjQwNDAwMDBaMDMxMTAvBgNV BAMTKDdFMzYwNDQzMUU3OUMzQTJBNjMwNkQzOTk0QkIyNzNBNUQ2NUJCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3X+y5cFh162ivAHb+QeEgislk FWOJLOxDi4ELuFgQbN2QTyoMObqMhX8F1TaDPDoUQ3fJZCU88HIJzMuzSrBFpac3 Wv/nlcz8/5za72xgeBcaGq/tzpQVLf7RtgvqSelzY7ae6GL3h2smANcD1SoPuaX9 pDkgrrPCAEf63VJ7sIfwBK1HNjtRt2igfczNnn4oeJnerVCkKvtgfeQh6pL960s9 qeIx/ml/hVbSoy+xnrUDUkdteZikprFX/xmksMEU1t1Y7gt37iR88zrUEXbrh3Ir EEfHvNi7E/G0cYNY77LsQNl1cGLbAoYGTO02UyN9czztUAxIu5SmnbEOB/Q/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfjYEQx55w6KmMG05lLsnOl1lu1YwHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3MTE1NTllLWQ1ZWMtNGMxOS1i MzM1LWVlMjlkZGZiYjlkNS8wLzMxMzAzMzJlMzEzNTMzMmUzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5krMA0GCSqG SIb3DQEBCwUAA4IBAQBj/XvSSjkJs4ePvV/Nt90dmOrhfGEwA7fsfwLoEvXF56pZ bcRMcDPq2AytSU+2tAv1UDOP0Of53IVprhOn5jW7LNFTS5WSxqTtlcFvilCt5BMj Xhyqm85lgc6rUkjMHsfttVf0xg/WZMelCHA+dg/91oxn190sGZmDAiZzBOIUdp+s +s4YTIJkmtmbqlO4X8IBHuObjkMrjVzRveMxQmNDOSpFapoMTApOnYco7j6k0FDO duoXbigQ6Dvcv1YgXj9v4T5kxf8iTdN1Otz1KiTv+szLmuSFEqp3Ila01zNbUhR5 fGyi9NB5lRK3Fv+zeVw8HH2IBziVx1/hYyZ1WI9O -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org