$ rpki-client -vvf repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa File: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (raw, json) Hash identifier: EfPoQqtxgLuobpoazcJOzehsaHb5tIneq6Zek5DzcaE= Subject key identifier: 49:99:0D:8C:82:22:CE:AC:C1:7F:E7:20:4A:C4:13:B6:36:8F:A7:31 Certificate issuer: /CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Certificate serial: 4253D8CB48E9B3B4A79F4E9818ACE31B1C22CCBE Authority key identifier: 10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa Signing time: Sun 20 Oct 2024 04:47:19 +0000 ROA not before: Sun 20 Oct 2024 04:42:19 +0000 ROA not after: Sun 19 Oct 2025 04:47:19 +0000 asID: 142399 IP address blocks: 103.171.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:53:d8:cb:48:e9:b3:b4:a7:9f:4e:98:18:ac:e3:1b:1c:22:cc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Validity Not Before: Oct 20 04:42:19 2024 GMT Not After : Oct 19 04:47:19 2025 GMT Subject: CN=49990D8C8222CEACC17FE7204AC413B6368FA731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:0f:31:43:3f:5a:96:64:0d:33:ef:b5:88: f6:11:62:9c:d9:04:38:2f:cb:77:94:e9:aa:bc:ce: d9:ed:2b:85:63:e9:74:48:71:1c:86:31:9a:41:0d: 2c:68:cb:7e:ed:49:63:37:1f:10:f8:36:c9:f1:b9: 3d:23:6c:e0:10:5d:9b:ec:d5:ea:4a:45:d4:31:0e: ec:ea:a5:c1:ab:bd:ce:38:a6:81:d1:9a:53:14:b6: 63:c4:a4:99:5b:91:14:a5:a9:c7:c1:56:b1:75:94: 30:b9:98:87:44:7e:05:91:ad:bd:64:b1:a4:78:3f: 93:8f:ab:bd:f8:80:9b:0f:a1:b8:7e:c5:86:06:fe: a7:c8:b3:6b:8b:45:df:be:e8:61:14:33:7e:c2:ea: f7:2f:b0:b4:63:34:48:04:d3:ca:ea:1f:72:0d:08: 21:06:8b:cd:8d:d3:a1:a9:d3:38:f6:1c:6b:60:5d: 9f:fb:a8:c4:16:c7:8d:71:50:ac:71:4f:40:65:a8: 35:c1:d1:5c:62:b2:c6:ae:5b:58:e9:51:a0:0c:d0: 29:d3:b5:af:85:a9:9a:16:88:5a:4c:7b:16:a0:a8: e8:06:85:f4:69:75:53:16:6d:54:15:38:06:33:be: b7:ff:89:19:23:c6:86:8a:b8:62:1e:60:b5:b4:f7: 3e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:99:0D:8C:82:22:CE:AC:C1:7F:E7:20:4A:C4:13:B6:36:8F:A7:31 X509v3 Authority Key Identifier: keyid:10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.254.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:16:df:61:7b:79:13:eb:a3:90:c7:86:db:dd:c5:fb:69:b7: d1:e0:f4:d8:a3:c6:c9:10:8a:20:01:9f:01:b0:86:e7:97:ff: 11:e7:2d:29:a0:79:ad:14:b6:e1:4f:38:74:63:12:1f:f7:82: fd:41:e2:a9:8f:84:ae:bf:8e:e1:37:16:e3:ab:19:eb:d8:31: 09:71:3b:d7:2e:a4:ab:c6:95:65:6b:ac:9f:cc:c8:ab:34:b8: 27:4e:68:a1:73:e1:fa:83:a7:1b:11:11:27:c2:a4:60:e6:9c: ca:c6:ac:46:f8:99:c2:50:c1:cd:9b:dc:ad:a8:a1:64:8f:3a: 8e:26:93:45:ae:80:c6:df:9a:e2:8b:dd:74:ad:ad:23:28:4e: 0c:ec:87:42:ea:a7:dd:23:1e:ea:99:3a:e6:ce:20:83:aa:c2: 6e:87:73:da:39:7f:ff:8f:2b:31:c3:2a:a6:1a:b6:dc:35:74: 2e:21:e1:5d:3c:60:c6:2b:50:13:49:24:9c:c9:98:17:6d:af: 2d:4d:a3:4c:0d:db:5a:52:a1:14:bf:db:4f:39:f2:3f:b7:cb: bb:de:ce:61:08:ca:fc:b1:5b:d3:01:83:39:05:92:38:b9:89: b0:2d:d9:d5:ea:f5:1e:38:36:46:81:46:0d:4c:a2:7d:82:76: bb:35:bd:63 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQlPYy0jps7Snn06YGKzjGxwizL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0 Q0ZBMzE3QjAeFw0yNDEwMjAwNDQyMTlaFw0yNTEwMTkwNDQ3MTlaMDMxMTAvBgNV BAMTKDQ5OTkwRDhDODIyMkNFQUNDMTdGRTcyMDRBQzQxM0I2MzY4RkE3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmQ8xQz9almQNM++1iPYRYpzZ BDgvy3eU6aq8ztntK4Vj6XRIcRyGMZpBDSxoy37tSWM3HxD4NsnxuT0jbOAQXZvs 1epKRdQxDuzqpcGrvc44poHRmlMUtmPEpJlbkRSlqcfBVrF1lDC5mIdEfgWRrb1k saR4P5OPq734gJsPobh+xYYG/qfIs2uLRd++6GEUM37C6vcvsLRjNEgE08rqH3IN CCEGi82N06Gp0zj2HGtgXZ/7qMQWx41xUKxxT0BlqDXB0VxissauW1jpUaAM0CnT ta+FqZoWiFpMexagqOgGhfRpdVMWbVQVOAYzvrf/iRkjxoaKuGIeYLW09z4ZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUSZkNjIIizqzBf+cgSsQTtjaPpzEwHwYDVR0j BBgwFoAUENNTbz0L9/eszopoUF7AMUz6MXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjAxYzk2Ny05OWQwLTRjMjEtOTY0Mi04N2FkYTY3MTU1YzgvMC8xMEQzNTM2RjNE MEJGN0Y3QUNDRThBNjg1MDVFQzAzMTRDRkEzMTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0Q0ZB MzE3Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiMDFjOTY3LTk5ZDAtNGMyMS05 NjQyLTg3YWRhNjcxNTVjOC8wLzMxMzAzMzJlMzEzNzMxMmUzMjM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM5Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnq/4wDQYJ KoZIhvcNAQELBQADggEBAIoW32F7eRPro5DHhtvdxftpt9Hg9NijxskQiiABnwGw hueX/xHnLSmgea0UtuFPOHRjEh/3gv1B4qmPhK6/juE3FuOrGevYMQlxO9cupKvG lWVrrJ/MyKs0uCdOaKFz4fqDpxsRESfCpGDmnMrGrEb4mcJQwc2b3K2ooWSPOo4m k0WugMbfmuKL3XStrSMoTgzsh0Lqp90jHuqZOubOIIOqwm6Hc9o5f/+PKzHDKqYa ttw1dC4h4V08YMYrUBNJJJzJmBdtry1No0wN21pSoRS/20858j+3y7vezmEIyvyx W9MBgzkFkji5ibAt2dXq9R44NkaBRg1Mon2Cdrs1vWM= -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org