$ rpki-client -vvf repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa File: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (raw, json) Hash identifier: J4isEyK1ySJtCWVpvhGVyfTYrZDUM8aentftYxqK7KA= Subject key identifier: 7E:40:6B:AE:CB:84:2B:19:65:DC:64:89:3C:40:78:68:28:74:45:CC Certificate issuer: /CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Certificate serial: 25F00A328FC1A79A87A4EBDE86088A8B7D798288 Authority key identifier: 10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa Signing time: Sun 20 Oct 2024 04:47:32 +0000 ROA not before: Sun 20 Oct 2024 04:42:32 +0000 ROA not after: Sun 19 Oct 2025 04:47:32 +0000 asID: 142399 IP address blocks: 103.171.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f0:0a:32:8f:c1:a7:9a:87:a4:eb:de:86:08:8a:8b:7d:79:82:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B Validity Not Before: Oct 20 04:42:32 2024 GMT Not After : Oct 19 04:47:32 2025 GMT Subject: CN=7E406BAECB842B1965DC64893C407868287445CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:3c:95:8f:68:12:6a:00:ec:b4:6d:9c:2b: 89:ce:5e:46:77:2b:ec:24:cb:8b:59:86:ea:8f:ad: 74:84:20:f1:9c:c9:6a:3f:8f:99:3f:4d:bb:56:b2: ad:b4:28:0b:ea:a8:d4:67:f7:4f:c7:e5:73:4d:47: e0:75:22:3e:8a:5d:a5:26:ee:b3:21:b9:86:13:8e: 3c:11:b8:c2:08:84:c6:15:91:dc:19:3d:ff:15:b9: 62:57:a1:0d:62:ac:e9:1b:40:8b:eb:b0:c0:73:ef: b8:13:f3:17:cc:12:df:9f:a5:3d:01:2b:3a:85:68: a3:b7:27:e7:5d:18:5b:44:2d:58:7a:26:2d:f3:93: a6:2b:2d:5b:f9:f4:6f:8d:b2:53:1f:de:14:b8:0f: bb:f6:ab:9f:c9:0f:35:36:79:0f:e7:e3:4e:b4:27: 2c:4f:e1:65:54:4f:7a:48:a0:89:dd:34:3f:f6:f5: 61:d9:32:1b:1d:6e:b1:85:e9:a8:d0:0d:2f:ea:38: 25:f4:03:f9:b0:98:e6:ee:a9:67:b4:62:64:2e:c6: 60:0f:0e:10:2d:3f:aa:fa:26:30:ad:c1:1b:ea:7c: 80:81:9d:92:2c:b8:16:03:f4:36:94:6c:43:82:3c: f6:63:6d:be:71:b8:0e:a8:e1:32:5d:1d:7d:38:b7: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:40:6B:AE:CB:84:2B:19:65:DC:64:89:3C:40:78:68:28:74:45:CC X509v3 Authority Key Identifier: keyid:10:D3:53:6F:3D:0B:F7:F7:AC:CE:8A:68:50:5E:C0:31:4C:FA:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10D3536F3D0BF7F7ACCE8A68505EC0314CFA317B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.255.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:d7:01:2d:f3:7f:94:a1:70:31:c3:17:30:a2:68:e4:6b:83: cf:f4:14:7e:30:4e:94:2e:a1:f3:ca:6a:ba:0b:a3:b1:cf:67: 1d:f7:f0:ad:65:0f:53:b7:ca:8d:f0:d7:1f:f4:23:c1:9d:29: 99:d9:57:7b:c1:1e:79:73:e8:3c:98:0e:c2:70:ce:f6:b2:8d: 0a:64:c7:e3:9b:66:50:f9:d2:9c:78:08:fc:20:ab:81:92:fb: 03:86:de:4e:47:9b:ad:fc:04:8b:e6:80:51:94:0e:85:b3:3c: 2b:b2:bf:12:7e:fb:c6:66:86:d1:52:e2:12:56:3a:79:44:f2: aa:bd:29:a3:b8:2d:d8:55:69:9b:e0:99:7d:46:f3:5d:08:6f: 81:b1:8e:0a:25:f4:a7:4b:f7:31:63:56:ee:dd:c1:d5:d2:47: 8c:6c:3c:80:76:44:a9:0c:18:39:45:fc:dd:4c:1b:3b:20:ab: 1b:cb:65:e0:56:06:f7:e4:df:6b:e2:f9:24:f5:14:43:bb:a3: 56:ce:12:6f:ae:53:45:ba:d7:ed:fa:b9:10:99:65:9a:01:66: f3:15:1b:33:c4:9c:3f:4b:1b:7a:7b:f0:97:41:a1:ff:1b:01: 83:56:d3:7f:dc:2f:0a:12:2a:4f:0f:1b:cf:84:16:d9:3b:cb: 26:bd:88:5a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJfAKMo/Bp5qHpOvehgiKi315gogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0 Q0ZBMzE3QjAeFw0yNDEwMjAwNDQyMzJaFw0yNTEwMTkwNDQ3MzJaMDMxMTAvBgNV BAMTKDdFNDA2QkFFQ0I4NDJCMTk2NURDNjQ4OTNDNDA3ODY4Mjg3NDQ1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jTyVj2gSagDstG2cK4nOXkZ3 K+wky4tZhuqPrXSEIPGcyWo/j5k/TbtWsq20KAvqqNRn90/H5XNNR+B1Ij6KXaUm 7rMhuYYTjjwRuMIIhMYVkdwZPf8VuWJXoQ1irOkbQIvrsMBz77gT8xfMEt+fpT0B KzqFaKO3J+ddGFtELVh6Ji3zk6YrLVv59G+NslMf3hS4D7v2q5/JDzU2eQ/n4060 JyxP4WVUT3pIoIndND/29WHZMhsdbrGF6ajQDS/qOCX0A/mwmObuqWe0YmQuxmAP DhAtP6r6JjCtwRvqfICBnZIsuBYD9DaUbEOCPPZjbb5xuA6o4TJdHX04t4r/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUfkBrrsuEKxll3GSJPEB4aCh0RcwwHwYDVR0j BBgwFoAUENNTbz0L9/eszopoUF7AMUz6MXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjAxYzk2Ny05OWQwLTRjMjEtOTY0Mi04N2FkYTY3MTU1YzgvMC8xMEQzNTM2RjNE MEJGN0Y3QUNDRThBNjg1MDVFQzAzMTRDRkEzMTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBEMzUzNkYzRDBCRjdGN0FDQ0U4QTY4NTA1RUMwMzE0Q0ZB MzE3Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiMDFjOTY3LTk5ZDAtNGMyMS05 NjQyLTg3YWRhNjcxNTVjOC8wLzMxMzAzMzJlMzEzNzMxMmUzMjM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM5Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnq/8wDQYJ KoZIhvcNAQELBQADggEBAH7XAS3zf5ShcDHDFzCiaORrg8/0FH4wTpQuofPKaroL o7HPZx338K1lD1O3yo3w1x/0I8GdKZnZV3vBHnlz6DyYDsJwzvayjQpkx+ObZlD5 0px4CPwgq4GS+wOG3k5Hm638BIvmgFGUDoWzPCuyvxJ++8ZmhtFS4hJWOnlE8qq9 KaO4LdhVaZvgmX1G810Ib4Gxjgol9KdL9zFjVu7dwdXSR4xsPIB2RKkMGDlF/N1M GzsgqxvLZeBWBvfk32vi+ST1FEO7o1bOEm+uU0W61+36uRCZZZoBZvMVGzPEnD9L G3p78JdBof8bAYNW03/cLwoSKk8PG8+EFtk7yya9iFo= -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org