$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa File: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (raw, json) Hash identifier: Y9XARniDJgg4OUqj6GjFvuZ0EXuuYtQJNDhXyplaxBY= Subject key identifier: 47:07:76:F9:AD:BA:6E:25:E4:D7:2C:BE:57:6F:16:61:6A:EE:A4:1D Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 77FA361D272B904CC900D1F6D03BC48C086E5B30 Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa Signing time: Fri 15 Nov 2024 13:00:02 +0000 ROA not before: Fri 15 Nov 2024 12:55:02 +0000 ROA not after: Fri 14 Nov 2025 13:00:02 +0000 asID: 142387 IP address blocks: 103.172.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:fa:36:1d:27:2b:90:4c:c9:00:d1:f6:d0:3b:c4:8c:08:6e:5b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Nov 15 12:55:02 2024 GMT Not After : Nov 14 13:00:02 2025 GMT Subject: CN=470776F9ADBA6E25E4D72CBE576F16616AEEA41D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:82:c2:4a:40:ca:1a:35:2e:b3:59:57:23: 8a:c2:91:ef:dd:75:79:bb:86:31:16:d4:4d:f7:d8: b9:f0:f4:ab:88:de:54:67:ec:86:c7:0f:e8:6c:bc: 6e:6c:5f:7f:ce:91:87:b5:28:c2:78:88:1c:b9:b4: 20:b3:f6:40:b5:09:b8:d8:b1:1b:6f:e2:d1:e8:bc: 1c:22:b3:7e:9c:49:a5:9f:62:3d:e9:4d:08:93:f5: ac:6c:f9:cc:b3:b2:f0:6f:65:47:a7:7e:02:a3:dd: 18:e1:f6:35:6d:11:8e:40:76:05:43:63:e1:c2:6d: 05:6e:0c:df:62:47:4c:bb:63:71:51:f7:99:ee:56: 9c:e5:db:f4:34:59:65:c7:11:11:f1:f9:c2:ec:1a: a2:2c:7c:99:9b:ee:8f:88:50:a4:5f:94:ce:cb:2c: 6e:15:0c:47:69:6d:94:ec:85:3a:1b:ec:4c:6e:59: a0:1b:a5:b9:ed:9b:b0:73:36:a9:22:16:52:95:2d: 54:e4:fb:59:56:0e:e5:49:31:54:2e:72:ac:1d:41: 6e:ff:9d:b5:9a:3b:80:a0:c5:06:5d:c9:da:5d:75: d1:0d:b4:ad:75:30:69:42:a3:e1:8b:96:dc:c7:a1: 16:6d:4a:b2:e5:d9:0d:1e:48:fc:43:a9:bb:3a:6a: f4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:07:76:F9:AD:BA:6E:25:E4:D7:2C:BE:57:6F:16:61:6A:EE:A4:1D X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.24.0/24 Signature Algorithm: sha256WithRSAEncryption 96:e4:ef:7e:19:e3:2f:62:e5:ba:7b:42:79:70:ab:62:a7:be: bb:e6:c2:04:af:60:a3:66:97:73:ac:51:3d:4a:43:5f:41:38: 1b:73:bc:d6:24:05:d4:86:82:87:05:19:55:1d:de:2d:59:ca: bf:35:85:96:01:e6:a2:e3:43:8e:da:6d:ea:4b:a4:38:cc:cd: 6d:c6:cd:6b:73:89:e2:39:3d:19:02:d6:dd:62:06:dd:59:42: 6a:fb:53:b3:bc:8e:d8:96:34:08:69:3c:94:13:e0:20:60:4b: f9:62:a5:36:13:12:b6:22:fa:49:d0:2c:30:20:6d:82:d0:f8: 4c:0b:eb:7b:e7:f1:34:fb:57:f3:99:36:13:85:b3:b5:70:c9: 64:07:81:b3:1c:93:95:8d:b4:81:d5:8e:11:2d:73:a2:af:f1: 6d:e9:52:56:97:0b:42:c7:ab:15:f5:be:7b:76:e7:c5:f7:bd: fb:22:3d:1e:57:80:a4:46:b1:09:82:67:7a:d4:0e:a7:d9:b3: ae:a5:02:73:15:ba:3c:7d:90:01:d0:7b:d9:19:51:a3:9b:03: 77:8c:b8:0b:91:01:41:79:4e:98:db:86:b6:54:25:da:30:dd: 47:e4:aa:76:ec:02:6b:68:6c:fe:fd:f8:a1:b8:93:52:2c:70: 0e:d0:e6:a6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUd/o2HScrkEzJANH20DvEjAhuWzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNDExMTUxMjU1MDJaFw0yNTExMTQxMzAwMDJaMDMxMTAvBgNV BAMTKDQ3MDc3NkY5QURCQTZFMjVFNEQ3MkNCRTU3NkYxNjYxNkFFRUE0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+i4LCSkDKGjUus1lXI4rCke/d dXm7hjEW1E332Lnw9KuI3lRn7IbHD+hsvG5sX3/OkYe1KMJ4iBy5tCCz9kC1CbjY sRtv4tHovBwis36cSaWfYj3pTQiT9axs+cyzsvBvZUenfgKj3Rjh9jVtEY5AdgVD Y+HCbQVuDN9iR0y7Y3FR95nuVpzl2/Q0WWXHERHx+cLsGqIsfJmb7o+IUKRflM7L LG4VDEdpbZTshTob7ExuWaAbpbntm7BzNqkiFlKVLVTk+1lWDuVJMVQucqwdQW7/ nbWaO4CgxQZdydpdddENtK11MGlCo+GLltzHoRZtSrLl2Q0eSPxDqbs6avRnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURwd2+a26biXk1yy+V28WYWrupB0wHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmMGJhMWU3LWQxNDItNDdjZC04 ZDhmLTJhMzcyYjkyMjIyMy8wLzMxMzAzMzJlMzEzNzMyMmUzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6wYMA0GCSqG SIb3DQEBCwUAA4IBAQCW5O9+GeMvYuW6e0J5cKtip7675sIEr2CjZpdzrFE9SkNf QTgbc7zWJAXUhoKHBRlVHd4tWcq/NYWWAeai40OO2m3qS6Q4zM1txs1rc4niOT0Z AtbdYgbdWUJq+1OzvI7YljQIaTyUE+AgYEv5YqU2ExK2IvpJ0CwwIG2C0PhMC+t7 5/E0+1fzmTYThbO1cMlkB4GzHJOVjbSB1Y4RLXOir/Ft6VJWlwtCx6sV9b57dufF 9737Ij0eV4CkRrEJgmd61A6n2bOupQJzFbo8fZAB0HvZGVGjmwN3jLgLkQFBeU6Y 24a2VCXaMN1H5Kp27AJraGz+/fihuJNSLHAO0Oam -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:39 2024 by rpki-client on console-ams.rpki-client.org