$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa File: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (raw, json) Hash identifier: pAEwhRYxV+IdN3IG0AqgmlSpqpDySaxKtO1akdQcPJk= Subject key identifier: 1C:79:0A:F9:D9:CB:F0:E1:EE:FD:67:75:76:39:EA:09:07:19:68:77 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 12A37D8F1D4A152131D760F8EF65296125711D6D Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa Signing time: Sat 15 Jun 2024 12:00:01 +0000 ROA not before: Sat 15 Jun 2024 11:55:01 +0000 ROA not after: Sat 14 Jun 2025 12:00:01 +0000 asID: 136820 IP address blocks: 103.98.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a3:7d:8f:1d:4a:15:21:31:d7:60:f8:ef:65:29:61:25:71:1d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Jun 15 11:55:01 2024 GMT Not After : Jun 14 12:00:01 2025 GMT Subject: CN=1C790AF9D9CBF0E1EEFD67757639EA0907196877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1a:c7:f4:31:67:f1:e9:62:81:85:8e:fc:93: 01:f8:2a:cd:c1:3c:4f:69:42:3e:da:5a:07:38:3f: 7e:f2:c6:9c:7d:96:12:d9:5d:ac:7a:81:6c:8f:f8: ac:37:4e:65:c6:93:8c:88:e6:83:32:00:5b:fb:f3: 16:c6:12:d8:cf:2f:14:8b:56:44:cc:df:44:77:51: 95:40:37:63:dd:80:4b:41:8b:44:3d:94:44:5c:3d: 68:31:38:e3:79:09:95:25:2c:8a:dc:69:f5:ed:8f: 9f:ea:09:2d:88:d4:23:9c:1c:16:0a:65:e4:8d:6d: 3e:fa:e1:c7:7b:80:88:56:3c:6b:3e:a9:97:39:1b: 21:6b:40:a4:53:95:c1:35:2c:1f:10:1e:99:bf:41: 54:59:93:55:d2:6e:aa:15:24:64:51:34:0b:f0:c1: e8:28:31:6a:84:58:07:13:c4:d3:09:d2:3b:06:de: 17:ed:67:bb:d1:f4:73:0f:2c:f4:72:7a:0a:c0:bb: d0:d5:8d:28:e5:53:76:d5:84:64:e2:e6:38:ee:93: 2c:7b:e9:d7:40:2f:c2:b1:48:aa:ff:76:7e:c0:12: 6b:73:a9:3a:7f:07:b7:bd:3b:84:4b:93:a5:19:d1: 03:78:07:f7:b0:f8:cd:f7:f5:d9:51:d5:ea:53:d9: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:79:0A:F9:D9:CB:F0:E1:EE:FD:67:75:76:39:EA:09:07:19:68:77 X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.116.0/24 Signature Algorithm: sha256WithRSAEncryption 75:be:ae:e9:cb:de:aa:6a:a3:f6:21:ab:4e:9e:11:7a:31:81: fd:e4:00:a3:34:bf:d8:ac:d5:e2:8f:ca:c4:5e:7a:74:7c:ae: 19:e7:85:36:2f:43:a5:29:83:4c:13:19:59:13:a2:bb:05:dc: f9:43:3b:90:3e:b5:0a:e9:11:b5:62:48:d2:93:17:ff:3f:67: 39:d9:da:ca:d6:ca:6e:50:b7:f6:a9:c0:6b:8b:4a:95:43:45: 77:21:ef:3a:47:74:37:99:89:71:be:30:bd:6e:41:48:c9:cb: 67:f2:aa:f9:8f:df:01:a2:b8:63:df:3b:74:97:69:f3:fa:5f: d4:e5:d8:35:ac:ea:1b:15:f3:25:6b:f4:7e:3e:6e:06:26:3f: e1:e4:ea:6a:5e:5d:eb:1c:82:ae:0e:22:4d:74:86:37:2b:af: 42:33:c9:1b:2a:d9:e4:86:aa:a6:67:97:93:9e:e4:83:67:67: 21:c3:8e:4b:35:4b:64:56:b5:8f:99:cc:12:b3:87:e9:71:2f: 5d:22:28:ae:4f:e3:62:4a:32:ed:d7:b3:3b:b3:99:b3:7d:d2: de:c3:48:1e:1a:97:08:ee:e1:ea:50:46:a9:6a:89:08:c4:6a: 2c:93:7c:71:85:f2:22:2e:1b:ec:1e:21:b4:ca:5b:63:a5:d8: a7:95:fd:62 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEqN9jx1KFSEx12D472UpYSVxHW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNDA2MTUxMTU1MDFaFw0yNTA2MTQxMjAwMDFaMDMxMTAvBgNV BAMTKDFDNzkwQUY5RDlDQkYwRTFFRUZENjc3NTc2MzlFQTA5MDcxOTY4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGGsf0MWfx6WKBhY78kwH4Ks3B PE9pQj7aWgc4P37yxpx9lhLZXax6gWyP+Kw3TmXGk4yI5oMyAFv78xbGEtjPLxSL VkTM30R3UZVAN2PdgEtBi0Q9lERcPWgxOON5CZUlLIrcafXtj5/qCS2I1COcHBYK ZeSNbT764cd7gIhWPGs+qZc5GyFrQKRTlcE1LB8QHpm/QVRZk1XSbqoVJGRRNAvw wegoMWqEWAcTxNMJ0jsG3hftZ7vR9HMPLPRyegrAu9DVjSjlU3bVhGTi5jjukyx7 6ddAL8KxSKr/dn7AEmtzqTp/B7e9O4RLk6UZ0QN4B/ew+M339dlR1epT2Zq5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUHHkK+dnL8OHu/Wd1djnqCQcZaHcwHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjZDUzOTQ4LWRkZjMtNDQ5YS1i ZjJiLWNmM2Y3YWUxNzZkMy8wLzMxMzAzMzJlMzkzODJlMzEzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2J0MA0GCSqG SIb3DQEBCwUAA4IBAQB1vq7py96qaqP2IatOnhF6MYH95ACjNL/YrNXij8rEXnp0 fK4Z54U2L0OlKYNMExlZE6K7Bdz5QzuQPrUK6RG1YkjSkxf/P2c52drK1spuULf2 qcBri0qVQ0V3Ie86R3Q3mYlxvjC9bkFIyctn8qr5j98Borhj3zt0l2nz+l/U5dg1 rOobFfMla/R+Pm4GJj/h5OpqXl3rHIKuDiJNdIY3K69CM8kbKtnkhqqmZ5eTnuSD Z2chw45LNUtkVrWPmcwSs4fpcS9dIiiuT+NiSjLt17M7s5mzfdLew0geGpcI7uHq UEapaokIxGosk3xxhfIiLhvsHiG0yltjpdinlf1i -----END CERTIFICATE-----Generated at Mon Nov 25 23:52:55 2024 by rpki-client on console-ams.rpki-client.org