$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32332d3233203d3e20313331373137.roa File: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (raw, json) Hash identifier: sJb8leavmPnYQkhyoTizATUpn0Qf48YJaugxYyG/DSE= Subject key identifier: E1:47:A5:0C:65:88:E5:F3:49:65:93:13:5D:2E:CD:C8:0E:BF:06:15 Certificate issuer: /CN=882209E37356E0512FBE4E81B00E4F2481865087 Certificate serial: 79024F70934A8EAA134076D57C3157019E611B58 Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32332d3233203d3e20313331373137.roa Signing time: Mon 01 Jul 2024 01:02:44 +0000 ROA not before: Mon 01 Jul 2024 00:57:44 +0000 ROA not after: Mon 30 Jun 2025 01:02:44 +0000 asID: 131717 IP address blocks: 103.14.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:02:4f:70:93:4a:8e:aa:13:40:76:d5:7c:31:57:01:9e:61:1b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087 Validity Not Before: Jul 1 00:57:44 2024 GMT Not After : Jun 30 01:02:44 2025 GMT Subject: CN=E147A50C6588E5F3496593135D2ECDC80EBF0615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:28:ba:f5:33:bf:53:2b:0f:3a:f0:b1:8b: af:e3:9a:fe:db:35:27:4b:da:d4:de:ad:09:36:03: 4c:5a:18:04:dc:df:99:0b:36:11:0c:a0:30:95:03: 42:62:3b:16:96:60:e1:1d:7d:72:55:aa:87:ff:b7: 9f:97:70:70:ee:ef:82:45:24:6d:7a:80:b6:7b:6a: 18:ad:08:58:80:5c:80:86:9a:5e:c9:0b:cd:17:aa: 90:db:6a:96:15:b9:df:72:9f:08:6a:b3:23:29:f4: cd:5c:a3:db:fc:be:c2:c3:0c:89:6d:ef:e0:a3:cc: 1d:20:5a:06:32:6d:b2:3a:a3:1f:40:8e:bd:c9:f9: b6:b1:8c:73:c0:be:b2:26:80:2b:e3:a5:f1:81:12: 6a:31:32:49:49:e9:1d:ad:dd:f3:d2:c5:8e:b4:de: dc:ab:5c:ed:3e:e3:32:f7:78:a5:26:da:59:eb:e5: f0:67:7a:1c:43:bc:6a:46:46:cb:45:3c:99:c1:1a: e4:58:6b:de:78:81:1c:97:d4:82:48:33:03:ca:49: 0c:c5:95:18:ef:f1:66:c1:15:73:df:31:84:b4:1c: f7:75:3a:94:48:01:d9:6d:cf:9f:40:a5:da:8b:6f: d2:8f:33:bd:af:9d:b5:87:4a:24:5b:8e:d0:0e:3d: ca:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:47:A5:0C:65:88:E5:F3:49:65:93:13:5D:2E:CD:C8:0E:BF:06:15 X509v3 Authority Key Identifier: keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32332d3233203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.14.20.0/23 Signature Algorithm: sha256WithRSAEncryption 81:00:ef:a0:ff:01:0a:c0:05:46:51:8e:9f:68:1d:76:84:9f: 4b:e0:08:b6:53:79:de:de:1c:56:b5:75:e9:29:0f:4f:ce:7a: bc:b4:89:e5:e7:be:e8:08:0a:e5:66:35:ef:30:2a:58:80:45: ab:cf:1d:b6:64:91:ab:e7:6f:26:46:2b:93:11:0a:ea:fa:32: cf:9f:72:5c:b9:4b:66:e6:88:9c:7b:4a:60:92:3d:32:e7:b3: 59:2e:77:45:3f:77:b1:9e:bf:58:4d:38:d4:2d:b8:cd:6a:85: 8e:0c:70:3c:e7:62:bf:3f:c5:d5:09:08:85:f1:99:64:85:f4: 86:59:0b:99:59:0a:24:79:44:04:a6:91:81:38:98:ce:6b:c3: 4b:20:ea:79:1d:f4:a8:87:71:4c:17:07:2e:43:5f:76:66:96: df:64:18:f3:db:3d:c6:7e:86:63:aa:e6:28:49:18:ee:1d:94: eb:60:f8:11:88:d1:de:dd:cd:3d:63:1d:73:30:61:55:5a:14: e3:b2:67:38:26:28:3c:2b:9e:e2:27:3d:90:b2:e3:11:c8:89: 29:f1:32:ee:43:c8:2d:d0:ff:0b:5e:32:45:d0:03:a5:99:70: fb:48:2b:83:d9:2f:c1:5b:31:e2:9f:74:34:a3:79:2a:42:bb: 90:d2:16:37 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeQJPcJNKjqoTQHbVfDFXAZ5hG1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4 MTg2NTA4NzAeFw0yNDA3MDEwMDU3NDRaFw0yNTA2MzAwMTAyNDRaMDMxMTAvBgNV BAMTKEUxNDdBNTBDNjU4OEU1RjM0OTY1OTMxMzVEMkVDREM4MEVCRjA2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXyi69TO/UysPOvCxi6/jmv7b NSdL2tTerQk2A0xaGATc35kLNhEMoDCVA0JiOxaWYOEdfXJVqof/t5+XcHDu74JF JG16gLZ7ahitCFiAXICGml7JC80XqpDbapYVud9ynwhqsyMp9M1co9v8vsLDDIlt 7+CjzB0gWgYybbI6ox9Ajr3J+baxjHPAvrImgCvjpfGBEmoxMklJ6R2t3fPSxY60 3tyrXO0+4zL3eKUm2lnr5fBnehxDvGpGRstFPJnBGuRYa954gRyX1IJIMwPKSQzF lRjv8WbBFXPfMYS0HPd1OpRIAdltz59ApdqLb9KPM72vnbWHSiRbjtAOPcr7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU4UelDGWI5fNJZZMTXS7NyA6/BhUwHwYDVR0j BBgwFoAUiCIJ43NW4FEvvk6BsA5PJIGGUIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDc0NzFhMy1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC84ODIyMDlFMzcz NTZFMDUxMkZCRTRFODFCMDBFNEYyNDgxODY1MDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODgyMjA5RTM3MzU2RTA1MTJGQkU0RTgxQjAwRTRGMjQ4MTg2 NTA4Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05 ZjJkLWNmMTZiMWU0YTM1My8wLzMxMzAzMzJlMzEzNDJlMzIzMDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzMzMTM3MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcOFDANBgkqhkiG 9w0BAQsFAAOCAQEAgQDvoP8BCsAFRlGOn2gddoSfS+AItlN53t4cVrV16SkPT856 vLSJ5ee+6AgK5WY17zAqWIBFq88dtmSRq+dvJkYrkxEK6voyz59yXLlLZuaInHtK YJI9MuezWS53RT93sZ6/WE041C24zWqFjgxwPOdivz/F1QkIhfGZZIX0hlkLmVkK JHlEBKaRgTiYzmvDSyDqeR30qIdxTBcHLkNfdmaW32QY89s9xn6GY6rmKEkY7h2U 62D4EYjR3t3NPWMdczBhVVoU47JnOCYoPCue4ic9kLLjEciJKfEy7kPILdD/C14y RdADpZlw+0grg9kvwVsx4p90NKN5KkK7kNIWNw== -----END CERTIFICATE-----Generated at Fri Nov 22 15:22:20 2024 by rpki-client on console-fra.rpki-client.org