$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa File: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (raw, json) Hash identifier: JkbWHivPhJsD3g1oehsQXHSkUe1IApwcb1eZRN7L4oQ= Subject key identifier: 68:BB:F9:41:EA:30:83:81:26:D6:05:FA:AF:BB:89:59:D8:4A:07:51 Certificate issuer: /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Certificate serial: 036275FFA5C66C610078C619ECBB8186960DDF59 Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa Signing time: Fri 22 Nov 2024 18:00:01 +0000 ROA not before: Fri 22 Nov 2024 17:55:01 +0000 ROA not after: Fri 21 Nov 2025 18:00:01 +0000 asID: 149335 IP address blocks: 103.179.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:62:75:ff:a5:c6:6c:61:00:78:c6:19:ec:bb:81:86:96:0d:df:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Validity Not Before: Nov 22 17:55:01 2024 GMT Not After : Nov 21 18:00:01 2025 GMT Subject: CN=68BBF941EA30838126D605FAAFBB8959D84A0751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:30:d9:c6:e8:16:90:4b:be:42:f2:6e:5e:91: 82:db:66:bf:10:5f:74:b6:7f:ab:d6:8d:04:6d:0c: fd:16:46:a0:42:92:66:c2:33:2b:d3:42:e5:57:e9: 4e:7f:2f:6a:c0:e0:3d:75:6a:3d:fe:55:e5:3a:d9: 79:da:92:0f:44:76:05:4a:f2:fa:f9:f1:e4:5f:38: 30:ef:02:7a:64:18:a9:3e:dd:7c:ca:33:29:22:70: 6e:e0:7f:1f:f3:57:c6:ed:60:e2:5f:20:95:6f:02: a0:a7:94:7a:ba:45:13:72:0e:79:a7:af:bc:2a:27: 68:75:b9:c5:bc:ba:f5:6a:2f:e4:bb:02:67:f3:f4: 4c:bc:2f:34:50:f0:08:cf:4b:05:f6:c0:84:d6:fa: 4b:97:ec:40:67:43:0a:73:a9:6b:bc:1d:d9:b4:4c: 01:89:58:6b:2c:41:83:69:c9:df:5e:77:2b:da:a6: 0f:b1:10:8b:93:89:6b:c7:44:cc:b3:c6:cd:55:a8: 38:7a:25:cd:24:5c:16:16:56:c7:03:09:e1:4e:10: 98:a2:3d:21:57:55:0b:10:84:5b:fd:8d:26:dd:28: a8:95:73:a5:84:96:3d:60:bf:f4:50:9b:74:21:89: 2a:1d:67:83:7a:7a:f9:2c:13:ac:f7:b9:1f:1d:fb: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BB:F9:41:EA:30:83:81:26:D6:05:FA:AF:BB:89:59:D8:4A:07:51 X509v3 Authority Key Identifier: keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.65.0/24 Signature Algorithm: sha256WithRSAEncryption c2:5c:37:af:6b:7f:a6:ef:6f:68:2b:14:c1:cc:7b:6c:19:4e: 0e:27:79:d2:29:35:e0:a5:15:32:e8:15:c1:0d:8b:c0:2e:47: 15:3f:94:b2:4f:c3:32:17:34:d0:23:d0:e7:f8:9b:ca:d7:5d: fe:fb:c9:f5:17:5c:40:10:7c:bd:5f:f6:be:ee:d0:3f:69:4b: 7d:d6:4a:31:bb:d9:12:5c:50:ff:57:5b:4b:6d:cf:58:e4:19: ef:74:77:46:6b:b7:82:37:c7:33:4c:06:9a:24:4c:f2:d9:c0: 69:83:51:25:1e:bd:01:35:2d:8b:fb:18:98:1d:14:62:94:a0: 21:34:7c:55:5b:bb:0e:5d:40:4c:44:bc:6f:be:8c:e1:26:35: da:01:6b:ef:1d:8f:5d:88:07:ec:53:da:d3:77:75:02:81:b9: 58:9e:ad:03:53:0e:ed:ee:fc:a6:79:2a:17:50:5b:42:97:39: 69:0c:bc:03:52:90:b6:b7:37:1e:b9:c1:a4:76:fe:b7:c3:a3: c1:6a:98:b6:04:ed:84:f1:43:da:f0:4c:7d:57:d4:5c:6e:81: f2:cf:4d:f8:29:ab:14:01:0e:99:1e:d0:e0:19:76:d1:b3:ba: b8:d4:31:4d:4c:34:d8:aa:41:03:9f:fa:a6:13:2b:ca:ad:85: ac:69:25:6c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUA2J1/6XGbGEAeMYZ7LuBhpYN31kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5 RTA5MDIwNTAeFw0yNDExMjIxNzU1MDFaFw0yNTExMjExODAwMDFaMDMxMTAvBgNV BAMTKDY4QkJGOTQxRUEzMDgzODEyNkQ2MDVGQUFGQkI4OTU5RDg0QTA3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzMNnG6BaQS75C8m5ekYLbZr8Q X3S2f6vWjQRtDP0WRqBCkmbCMyvTQuVX6U5/L2rA4D11aj3+VeU62Xnakg9EdgVK 8vr58eRfODDvAnpkGKk+3XzKMykicG7gfx/zV8btYOJfIJVvAqCnlHq6RRNyDnmn r7wqJ2h1ucW8uvVqL+S7Amfz9Ey8LzRQ8AjPSwX2wITW+kuX7EBnQwpzqWu8Hdm0 TAGJWGssQYNpyd9edyvapg+xEIuTiWvHRMyzxs1VqDh6Jc0kXBYWVscDCeFOEJii PSFXVQsQhFv9jSbdKKiVc6WElj1gv/RQm3QhiSodZ4N6evksE6z3uR8d+xHtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUaLv5Qeowg4Em1gX6r7uJWdhKB1EwHwYDVR0j BBgwFoAUSzXCCtMIXPG5+uoEmtdCU54JAgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzdkZTAxMy05YjU2LTQ5ZmYtOGI3OS0zNjY3YTM0NWNiOGQvMC80QjM1QzIwQUQz MDg1Q0YxQjlGQUVBMDQ5QUQ3NDI1MzlFMDkwMjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5RTA5 MDIwNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3N2RlMDEzLTliNTYtNDlmZi04 Yjc5LTM2NjdhMzQ1Y2I4ZC8wLzMxMzAzMzJlMzEzNzM5MmUzNjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7NBMA0GCSqG SIb3DQEBCwUAA4IBAQDCXDeva3+m729oKxTBzHtsGU4OJ3nSKTXgpRUy6BXBDYvA LkcVP5SyT8MyFzTQI9Dn+JvK113++8n1F1xAEHy9X/a+7tA/aUt91koxu9kSXFD/ V1tLbc9Y5BnvdHdGa7eCN8czTAaaJEzy2cBpg1ElHr0BNS2L+xiYHRRilKAhNHxV W7sOXUBMRLxvvozhJjXaAWvvHY9diAfsU9rTd3UCgblYnq0DUw7t7vymeSoXUFtC lzlpDLwDUpC2tzceucGkdv63w6PBapi2BO2E8UPa8Ex9V9RcboHyz034KasUAQ6Z HtDgGXbRs7q41DFNTDTYqkEDn/qmEyvKrYWsaSVs -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:51 2024 by rpki-client on console-ams.rpki-client.org