$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa File: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (raw, json) Hash identifier: XryYMjwftZwDC+LgOaBl7zvXHmw5st0pLH58FXRxB9M= Subject key identifier: 34:BA:81:7F:7B:6C:9A:73:B0:E7:83:39:FB:E5:4B:CF:CD:F6:8E:1B Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 719EF46F1F1795CF789C47E7154B966C3812238C Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa Signing time: Fri 07 Jun 2024 09:02:08 +0000 ROA not before: Fri 07 Jun 2024 08:57:08 +0000 ROA not after: Fri 06 Jun 2025 09:02:08 +0000 asID: 149318 IP address blocks: 103.178.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9e:f4:6f:1f:17:95:cf:78:9c:47:e7:15:4b:96:6c:38:12:23:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Jun 7 08:57:08 2024 GMT Not After : Jun 6 09:02:08 2025 GMT Subject: CN=34BA817F7B6C9A73B0E78339FBE54BCFCDF68E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:b7:f2:03:8a:f1:a7:5c:0b:f7:21:61:63: 5d:a9:9b:91:28:0f:41:ef:f0:42:c2:3c:f8:de:17: a2:20:bd:17:64:30:01:a1:cf:57:5c:36:bd:a4:3f: af:60:a4:a0:02:59:85:1f:a2:c3:0f:e8:21:8c:ed: a1:41:fe:a8:da:e2:c7:57:14:12:ab:64:f8:36:2e: 2f:15:4d:2b:a1:c8:8d:a4:f7:96:94:e4:4f:82:47: ec:b0:e0:49:23:66:47:64:89:cf:ec:5a:19:fc:ad: ed:be:80:eb:d0:e2:ba:f2:5f:67:6c:45:f4:1b:b5: b0:00:6e:16:19:e5:50:90:b3:b7:ec:b8:04:a4:86: d0:89:ed:c6:27:9b:c1:99:7f:e8:5c:de:3f:e4:93: f7:7d:dc:5d:00:3d:c2:f3:b8:db:8b:5b:54:b0:6a: 95:dd:46:16:f1:04:38:1c:0c:9b:fa:21:27:51:a3: 42:46:8f:9a:48:08:40:ec:c6:fc:ac:0d:61:84:5c: 30:aa:fc:45:4e:a3:17:94:49:71:3a:60:a1:46:cd: d2:a6:83:1e:ea:ad:21:16:5e:5f:a3:cc:90:c5:ae: 6a:56:d5:49:a7:0c:8f:67:46:04:29:36:4a:a9:0d: 2d:39:89:93:1c:69:56:03:29:03:20:db:34:89:46: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BA:81:7F:7B:6C:9A:73:B0:E7:83:39:FB:E5:4B:CF:CD:F6:8E:1B X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.84.0/24 Signature Algorithm: sha256WithRSAEncryption b4:dc:c8:81:52:b8:af:c6:a5:d6:0e:6e:45:b9:14:f5:3c:33: 40:fb:a1:12:e7:19:93:c4:55:0c:b0:c6:8a:d2:5a:eb:17:29: 39:b4:3d:2c:4a:2f:cc:ef:1b:d3:00:4e:0f:cc:6e:0d:bd:bc: 9d:b3:db:da:22:b9:e0:51:79:f9:3a:c1:96:30:82:d1:4a:2d: 67:a8:40:98:04:73:77:d2:c5:21:ec:d6:93:f7:3c:e9:88:68: 30:7a:13:b4:9b:28:30:03:a8:c3:fe:c9:0c:bd:cd:2c:da:67: 9c:99:2f:52:25:4f:c8:2a:43:0d:dc:4d:9b:97:05:52:55:09: 20:2c:bb:39:07:0c:9a:65:f7:bb:78:0d:6a:f1:40:8a:51:67: 0e:c5:9c:e0:6d:fe:ba:ca:ec:25:8b:a1:f8:b7:bc:c6:16:15: c4:69:df:6c:59:98:ce:43:b8:d9:21:0b:7c:f2:fb:ed:59:59: b3:5a:40:ee:91:01:42:83:f1:1d:8b:6e:4a:8d:df:26:00:25: ab:ed:c9:3c:cd:76:d8:ad:58:e6:9e:1e:37:aa:da:2e:4f:29: 09:e1:cc:80:66:b1:c6:1a:c4:0a:9c:26:60:4e:39:9f:ae:cb: e4:4c:3d:ff:ae:53:a5:14:0e:d9:b5:1a:06:e0:2b:f8:f8:4f: 3f:39:da:8e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcZ70bx8Xlc94nEfnFUuWbDgSI4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNDA2MDcwODU3MDhaFw0yNTA2MDYwOTAyMDhaMDMxMTAvBgNV BAMTKDM0QkE4MTdGN0I2QzlBNzNCMEU3ODMzOUZCRTU0QkNGQ0RGNjhFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRLfyA4rxp1wL9yFhY12pm5Eo D0Hv8ELCPPjeF6IgvRdkMAGhz1dcNr2kP69gpKACWYUfosMP6CGM7aFB/qja4sdX FBKrZPg2Li8VTSuhyI2k95aU5E+CR+yw4EkjZkdkic/sWhn8re2+gOvQ4rryX2ds RfQbtbAAbhYZ5VCQs7fsuASkhtCJ7cYnm8GZf+hc3j/kk/d93F0APcLzuNuLW1Sw apXdRhbxBDgcDJv6ISdRo0JGj5pICEDsxvysDWGEXDCq/EVOoxeUSXE6YKFGzdKm gx7qrSEWXl+jzJDFrmpW1UmnDI9nRgQpNkqpDS05iZMcaVYDKQMg2zSJRghBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUNLqBf3tsmnOw54M5++VLz832jhswHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjMDc1ZWY2LWEyNTEtNDdkZC04 ZGRhLWNhZGZmNDk3YTdlNS8wLzMxMzAzMzJlMzEzNzM4MmUzODM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7JUMA0GCSqG SIb3DQEBCwUAA4IBAQC03MiBUrivxqXWDm5FuRT1PDNA+6ES5xmTxFUMsMaK0lrr Fyk5tD0sSi/M7xvTAE4PzG4Nvbyds9vaIrngUXn5OsGWMILRSi1nqECYBHN30sUh 7NaT9zzpiGgwehO0mygwA6jD/skMvc0s2mecmS9SJU/IKkMN3E2blwVSVQkgLLs5 BwyaZfe7eA1q8UCKUWcOxZzgbf66yuwli6H4t7zGFhXEad9sWZjOQ7jZIQt88vvt WVmzWkDukQFCg/Edi25Kjd8mACWr7ck8zXbYrVjmnh43qtouTykJ4cyAZrHGGsQK nCZgTjmfrsvkTD3/rlOlFA7ZtRoG4Cv4+E8/OdqO -----END CERTIFICATE-----Generated at Sun Nov 24 17:17:42 2024 by rpki-client on console-fra.rpki-client.org