$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa File: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (raw, json) Hash identifier: 8PoVgFfgdv0P+Y4Af6XkrWx9EOtSeERWvAdTwZHIcYM= Subject key identifier: DD:4E:2A:E1:C2:E5:62:21:45:6D:94:FE:6A:D3:7D:48:00:D4:5D:D0 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 4553085FA4A911615D59D906D2B0919D0FDAD8B1 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa Signing time: Fri 25 Oct 2024 11:00:01 +0000 ROA not before: Fri 25 Oct 2024 10:55:01 +0000 ROA not after: Fri 24 Oct 2025 11:00:01 +0000 asID: 147127 IP address blocks: 103.172.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:53:08:5f:a4:a9:11:61:5d:59:d9:06:d2:b0:91:9d:0f:da:d8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Oct 25 10:55:01 2024 GMT Not After : Oct 24 11:00:01 2025 GMT Subject: CN=DD4E2AE1C2E56221456D94FE6AD37D4800D45DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:a8:01:6b:8d:dd:c6:3c:c2:2f:be:e8:59: 11:f8:6b:b1:13:c9:a7:2d:eb:0f:a6:46:2e:92:1d: 91:e1:76:65:f6:30:f1:df:e9:a1:d7:02:05:2e:51: a6:3b:b5:49:63:32:76:e6:86:d8:39:55:b7:a0:b3: f3:d4:9b:e8:11:d4:12:a7:68:73:c1:6c:33:a6:8b: 6f:9f:31:e4:42:4d:35:06:2f:f3:82:b9:bc:38:fe: 9e:8b:a8:2d:eb:78:cd:07:8d:de:21:85:e1:02:9d: 4c:08:45:7f:a7:df:c1:37:90:c3:ee:2f:81:7e:f7: 98:c1:e7:a3:7c:52:b6:7f:1f:a5:5b:a9:1d:c2:4a: 9c:dd:35:a8:7b:ed:f8:87:8c:44:83:38:e4:d8:37: 10:5e:e2:5c:5d:e3:30:fb:67:cd:74:56:c0:0b:d5: ae:c5:92:ee:16:a6:64:d9:73:3d:3b:f7:30:e6:20: 4c:11:ad:82:23:a5:b1:e3:4e:44:f7:08:b4:b0:b0: 55:3b:19:93:5a:61:62:72:1d:cc:65:0e:e2:72:31: aa:ea:de:ba:52:93:fe:88:e1:c6:f6:45:84:7d:eb: 45:7b:22:0a:b4:8e:23:00:a0:0c:7e:32:7a:de:9d: 47:c6:29:4c:9d:65:d5:1c:4e:48:f6:46:c3:9a:f3: 80:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4E:2A:E1:C2:E5:62:21:45:6D:94:FE:6A:D3:7D:48:00:D4:5D:D0 X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.23.0/24 Signature Algorithm: sha256WithRSAEncryption 26:8a:9c:4f:6b:5e:9a:b7:96:69:bb:f9:64:08:26:05:a5:2e: c8:41:fb:83:40:17:92:cf:47:ed:ee:a2:5c:13:32:3b:f9:f5: de:90:03:b0:d7:f0:c8:0f:de:4d:c0:3a:c7:e0:ed:26:a1:d2: 3a:de:b8:4c:61:49:ca:70:bf:9c:23:87:d7:59:f2:7a:6c:66: 65:20:07:f0:69:17:82:01:03:02:80:4d:93:e9:10:39:ac:d2: 83:2a:34:8d:f8:0d:0f:b4:4b:37:23:b4:f2:db:f8:74:b1:d9: db:de:df:28:72:73:50:dd:44:82:2c:26:ef:1a:4c:2c:f4:e8: 70:ba:40:8f:90:b0:1c:97:22:62:09:14:4f:ee:f8:aa:4f:90: a5:6a:5d:9a:19:b2:2d:ac:cd:1f:fa:1e:5c:49:f6:18:ee:df: d8:bd:7d:ca:ec:5a:ad:b7:58:e2:34:1d:48:5d:ae:7a:bb:f4: fc:dc:da:c4:85:06:a7:97:25:f4:e1:3a:8d:0e:e1:64:b4:29: d6:2e:61:1f:f0:91:46:8c:c7:f6:96:79:0b:6a:b8:47:c1:61: 07:e0:d6:52:1b:cf:2b:48:de:95:6a:a7:4a:6e:af:d6:e0:f5: e7:c7:ac:2b:93:f4:9c:36:e5:7a:b6:4c:32:6d:88:99:48:d4: c0:6e:3a:3e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURVMIX6SpEWFdWdkG0rCRnQ/a2LEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNDEwMjUxMDU1MDFaFw0yNTEwMjQxMTAwMDFaMDMxMTAvBgNV BAMTKERENEUyQUUxQzJFNTYyMjE0NTZEOTRGRTZBRDM3RDQ4MDBENDVERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1agBa43dxjzCL77oWRH4a7ET yact6w+mRi6SHZHhdmX2MPHf6aHXAgUuUaY7tUljMnbmhtg5Vbegs/PUm+gR1BKn aHPBbDOmi2+fMeRCTTUGL/OCubw4/p6LqC3reM0Hjd4hheECnUwIRX+n38E3kMPu L4F+95jB56N8UrZ/H6VbqR3CSpzdNah77fiHjESDOOTYNxBe4lxd4zD7Z810VsAL 1a7Fku4WpmTZcz079zDmIEwRrYIjpbHjTkT3CLSwsFU7GZNaYWJyHcxlDuJyMarq 3rpSk/6I4cb2RYR960V7Igq0jiMAoAx+MnrenUfGKUydZdUcTkj2RsOa84BTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3U4q4cLlYiFFbZT+atN9SADUXdAwHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5ZGUwYzM5LTg0ZDUtNDQwNS05 NTRkLTRkM2Q3MTI2OTNjZS8wLzMxMzAzMzJlMzEzNzMyMmUzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6wXMA0GCSqG SIb3DQEBCwUAA4IBAQAmipxPa16at5Zpu/lkCCYFpS7IQfuDQBeSz0ft7qJcEzI7 +fXekAOw1/DID95NwDrH4O0modI63rhMYUnKcL+cI4fXWfJ6bGZlIAfwaReCAQMC gE2T6RA5rNKDKjSN+A0PtEs3I7Ty2/h0sdnb3t8ocnNQ3USCLCbvGkws9OhwukCP kLAclyJiCRRP7viqT5Clal2aGbItrM0f+h5cSfYY7t/YvX3K7Fqtt1jiNB1IXa56 u/T83NrEhQanlyX04TqNDuFktCnWLmEf8JFGjMf2lnkLarhHwWEH4NZSG88rSN6V aqdKbq/W4PXnx6wrk/ScNuV6tkwybYiZSNTAbjo+ -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org