$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa File: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (raw, json) Hash identifier: DQMgkZLGxyfq2p7h5h8ycprHe7KtMnWybg9FNlhcDtc= Subject key identifier: 44:42:2F:73:D7:62:5A:7B:C8:1B:19:EF:8F:FE:75:60:26:D1:2C:4E Certificate issuer: /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Certificate serial: 54415EFED3D0DFED5F632A3061F0D797B9FEEDB2 Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa Signing time: Sat 02 Mar 2024 03:00:43 +0000 ROA not before: Sat 02 Mar 2024 02:55:43 +0000 ROA not after: Sat 01 Mar 2025 03:00:43 +0000 asID: 137349 IP address blocks: 103.114.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:41:5e:fe:d3:d0:df:ed:5f:63:2a:30:61:f0:d7:97:b9:fe:ed:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Validity Not Before: Mar 2 02:55:43 2024 GMT Not After : Mar 1 03:00:43 2025 GMT Subject: CN=44422F73D7625A7BC81B19EF8FFE756026D12C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:90:93:f2:01:73:31:aa:29:e4:f7:c8:eb:33: 79:91:25:79:73:95:71:4f:34:e5:11:b9:2b:fa:1d: 69:10:1f:0a:ef:10:be:17:8b:45:d5:7e:b0:a5:1b: 41:88:b2:cf:62:69:8b:03:bc:8c:1d:e1:b1:4f:c4: 4a:0a:28:77:9f:a1:2f:ae:dd:39:6b:8b:23:3e:4d: f6:13:cf:d4:74:b3:a6:b0:f2:84:a6:a4:50:2f:cf: f6:46:98:6d:e8:da:43:ea:1d:0d:72:68:c7:29:88: 9f:be:79:21:b6:17:d6:f1:92:72:11:99:90:ff:64: ad:5b:d1:95:27:d7:c8:4e:d7:21:46:c5:04:59:4c: 01:80:4a:de:be:ab:00:ca:12:06:71:b0:2a:a0:26: a3:15:2d:ca:69:ad:c8:0e:cc:68:2a:1f:e8:9f:72: c8:76:d4:b5:b4:c4:b1:b4:78:68:b5:49:52:52:65: d8:64:b3:92:2f:a1:9e:eb:73:f1:c8:4a:3e:59:d5: 49:ff:16:7f:98:92:94:33:12:b9:8b:a0:36:bc:55: 82:f8:e9:14:57:5c:f3:2f:50:22:ce:59:af:11:f4: c9:d4:22:11:af:ef:a3:8f:08:16:a4:d8:39:94:67: 51:17:c1:ae:d1:8c:20:ba:96:ad:42:36:9d:b6:8c: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:42:2F:73:D7:62:5A:7B:C8:1B:19:EF:8F:FE:75:60:26:D1:2C:4E X509v3 Authority Key Identifier: keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.114.52.0/24 Signature Algorithm: sha256WithRSAEncryption b1:42:c2:e6:1c:71:f5:ea:aa:55:a9:ac:07:2d:83:b2:32:99: f0:31:32:16:1a:62:9b:78:fe:c4:82:0b:5a:1a:2a:cc:d2:de: e3:96:96:ef:39:7e:de:b3:21:ff:5d:d2:0b:85:66:a7:9c:11: 84:25:41:2c:8c:98:e6:a3:b7:70:8e:e1:df:79:42:44:2f:7e: 59:82:c8:d8:f9:b3:0c:05:aa:a8:84:ea:65:33:8e:2f:a6:a5: 26:2b:26:85:ba:c5:58:d4:92:d8:dc:a0:93:c6:48:f7:c5:31: fc:84:85:36:a7:43:f2:d6:8c:3c:86:a9:3b:a0:c6:0e:69:32: 10:ed:7d:d1:39:f6:dc:c9:75:d6:82:b6:a1:3c:08:16:5a:06: 98:d5:c3:52:fe:e3:81:25:0b:03:19:df:c0:51:36:a1:31:fe: b1:0e:df:00:ca:ea:54:1f:53:f3:b5:07:4c:46:55:7d:82:6d: d6:b9:99:40:27:bb:25:48:ae:78:11:cc:0d:0b:ff:05:22:38: d4:92:8d:be:80:a7:6a:97:be:d6:45:7a:39:fe:ef:8d:84:bb: de:d9:7c:fe:d4:f9:c7:3c:0a:4c:02:9b:0a:ff:91:3c:6e:80: ec:5c:f3:b4:08:c7:1f:b4:db:19:be:dc:fd:4f:70:a7:d7:5b: 6d:90:e3:0b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVEFe/tPQ3+1fYyowYfDXl7n+7bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VB RkE4QkQxMTAeFw0yNDAzMDIwMjU1NDNaFw0yNTAzMDEwMzAwNDNaMDMxMTAvBgNV BAMTKDQ0NDIyRjczRDc2MjVBN0JDODFCMTlFRjhGRkU3NTYwMjZEMTJDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkJPyAXMxqink98jrM3mRJXlz lXFPNOURuSv6HWkQHwrvEL4Xi0XVfrClG0GIss9iaYsDvIwd4bFPxEoKKHefoS+u 3TlriyM+TfYTz9R0s6aw8oSmpFAvz/ZGmG3o2kPqHQ1yaMcpiJ++eSG2F9bxknIR mZD/ZK1b0ZUn18hO1yFGxQRZTAGASt6+qwDKEgZxsCqgJqMVLcpprcgOzGgqH+if csh21LW0xLG0eGi1SVJSZdhks5IvoZ7rc/HISj5Z1Un/Fn+YkpQzErmLoDa8VYL4 6RRXXPMvUCLOWa8R9MnUIhGv76OPCBak2DmUZ1EXwa7RjCC6lq1CNp22jEyRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUREIvc9diWnvIGxnvj/51YCbRLE4wHwYDVR0j BBgwFoAU6toK7lHzkQtQoGXVfZRuPq+ovREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDk2MmM2ZS01OTVhLTQ3YzQtYWE3Yy1lZjhlNzdjYWU2NDIvMC9FQURBMEFFRTUx RjM5MTBCNTBBMDY1RDU3RDk0NkUzRUFGQThCRDExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VBRkE4 QkQxMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwOTYyYzZlLTU5NWEtNDdjNC1h YTdjLWVmOGU3N2NhZTY0Mi8wLzMxMzAzMzJlMzEzMTM0MmUzNTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3I0MA0GCSqG SIb3DQEBCwUAA4IBAQCxQsLmHHH16qpVqawHLYOyMpnwMTIWGmKbeP7EggtaGirM 0t7jlpbvOX7esyH/XdILhWannBGEJUEsjJjmo7dwjuHfeUJEL35ZgsjY+bMMBaqo hOplM44vpqUmKyaFusVY1JLY3KCTxkj3xTH8hIU2p0Py1ow8hqk7oMYOaTIQ7X3R OfbcyXXWgrahPAgWWgaY1cNS/uOBJQsDGd/AUTahMf6xDt8AyupUH1PztQdMRlV9 gm3WuZlAJ7slSK54EcwNC/8FIjjUko2+gKdql77WRXo5/u+NhLve2Xz+1PnHPApM ApsK/5E8boDsXPO0CMcftNsZvtz9T3Cn11ttkOML -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org