$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa File: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (raw, json) Hash identifier: 7M6efsLhqxjG1H0m8nrpYOTdTc1BnME2E5kel00NXYw= Subject key identifier: DE:0D:36:04:7E:13:FB:A9:A1:F8:6F:B2:7A:DD:F9:0A:9F:AE:2B:EE Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 4F60FD77B5551945E0A652451A0F8A224A93EEC1 Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa Signing time: Fri 05 Jul 2024 20:00:01 +0000 ROA not before: Fri 05 Jul 2024 19:55:01 +0000 ROA not after: Fri 04 Jul 2025 20:00:01 +0000 asID: 139427 IP address blocks: 103.31.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 17:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:60:fd:77:b5:55:19:45:e0:a6:52:45:1a:0f:8a:22:4a:93:ee:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Jul 5 19:55:01 2024 GMT Not After : Jul 4 20:00:01 2025 GMT Subject: CN=DE0D36047E13FBA9A1F86FB27ADDF90A9FAE2BEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:5f:68:2a:a1:5f:db:75:d7:84:cd:65:ea: 98:2c:d3:82:f5:29:85:7c:7b:b3:39:0c:13:01:e2: 09:06:bf:3d:62:26:98:05:3f:fb:69:30:d7:4e:15: 2e:c5:82:e1:76:bf:1c:2a:f9:83:98:0e:7a:88:4b: 68:bb:17:16:fd:a0:8f:9b:f6:16:61:3b:21:15:5d: bb:54:44:b7:3a:b8:45:be:11:e9:50:94:57:25:e3: 38:8a:eb:ce:b8:12:92:d8:0e:5c:85:b2:92:26:54: 02:b9:67:b3:e0:b8:16:b8:cb:40:b3:6b:ea:42:20: 47:41:75:2c:af:4b:b9:24:29:e0:94:22:23:00:84: eb:9c:9e:ae:f0:c5:63:9f:ce:c4:e2:4a:e3:4d:45: 94:19:c1:6c:44:e8:74:08:59:fb:19:b0:bf:1f:22: e3:67:15:c8:20:04:f7:cd:08:dc:ed:54:14:60:3e: a9:e8:42:44:8a:75:03:4d:6b:1b:5e:a6:44:57:19: 0d:60:52:db:23:df:b6:0a:15:36:b2:3c:59:0b:6c: e5:6d:2f:22:96:ee:1b:58:03:2e:8d:da:3d:2c:89: e5:43:1c:0a:d1:30:43:1c:6d:09:7a:ec:09:c6:cc: 89:3d:67:08:a5:0a:1f:9f:07:93:da:b2:2b:7d:fa: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0D:36:04:7E:13:FB:A9:A1:F8:6F:B2:7A:DD:F9:0A:9F:AE:2B:EE X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.248.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:21:19:8f:ac:f7:62:b5:95:e4:c3:9b:0b:48:72:fb:b8:96: 39:08:39:50:ee:19:5e:63:86:7b:80:3a:65:4e:28:54:a0:ef: 84:f9:16:b4:c9:eb:2e:49:d0:a5:d6:77:98:11:a9:96:b0:7a: f1:a4:65:4b:55:39:72:c8:82:ad:27:15:6e:da:30:1b:f1:79: 69:9d:2b:f4:cc:c6:c4:0a:d2:3e:33:9f:a1:4d:2a:d3:90:af: ff:50:06:96:47:87:fc:04:87:04:62:ba:49:fa:8f:47:09:22: d7:c8:d4:ca:ed:00:83:b0:aa:2f:9e:8f:68:c4:d9:e5:41:4d: cc:53:d5:24:22:de:6d:66:15:2e:21:6f:89:bf:b4:50:b1:01: aa:5a:b5:f2:ed:f6:80:cf:37:65:a0:4d:f2:65:8f:58:af:95: 3d:bd:e1:65:2d:c8:04:ea:54:0b:6c:e1:7b:70:c7:aa:99:cc: 7e:cd:ff:91:b5:ea:6d:ef:42:6d:28:43:44:f8:1f:c4:96:23: 7d:b2:c9:d0:14:c2:de:f6:56:04:5f:21:22:39:24:9a:54:ca: ce:29:bf:4b:be:cd:c0:6f:b7:04:d7:ea:e7:5a:12:f4:5f:c8: a0:dd:6b:24:da:e7:72:81:7b:5f:4e:2b:dd:f0:fe:08:6d:e8: 91:75:4d:56 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUT2D9d7VVGUXgplJFGg+KIkqT7sEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNDA3MDUxOTU1MDFaFw0yNTA3MDQyMDAwMDFaMDMxMTAvBgNV BAMTKERFMEQzNjA0N0UxM0ZCQTlBMUY4NkZCMjdBRERGOTBBOUZBRTJCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHqF9oKqFf23XXhM1l6pgs04L1 KYV8e7M5DBMB4gkGvz1iJpgFP/tpMNdOFS7FguF2vxwq+YOYDnqIS2i7Fxb9oI+b 9hZhOyEVXbtURLc6uEW+EelQlFcl4ziK6864EpLYDlyFspImVAK5Z7PguBa4y0Cz a+pCIEdBdSyvS7kkKeCUIiMAhOucnq7wxWOfzsTiSuNNRZQZwWxE6HQIWfsZsL8f IuNnFcggBPfNCNztVBRgPqnoQkSKdQNNaxtepkRXGQ1gUtsj37YKFTayPFkLbOVt LyKW7htYAy6N2j0sieVDHArRMEMcbQl67AnGzIk9ZwilCh+fB5Pasit9+qIDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3g02BH4T+6mh+G+yet35Cp+uK+4wHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2MWI4Y2NjLTZjMjItNDI0ZS05 NjE0LThhYjhhZDI4ODQ5Yy8wLzMxMzAzMzJlMzMzMTJlMzIzNDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx/4MA0GCSqG SIb3DQEBCwUAA4IBAQBfIRmPrPditZXkw5sLSHL7uJY5CDlQ7hleY4Z7gDplTihU oO+E+Ra0yesuSdCl1neYEamWsHrxpGVLVTlyyIKtJxVu2jAb8XlpnSv0zMbECtI+ M5+hTSrTkK//UAaWR4f8BIcEYrpJ+o9HCSLXyNTK7QCDsKovno9oxNnlQU3MU9Uk It5tZhUuIW+Jv7RQsQGqWrXy7faAzzdloE3yZY9Yr5U9veFlLcgE6lQLbOF7cMeq mcx+zf+Rtept70JtKENE+B/EliN9ssnQFMLe9lYEXyEiOSSaVMrOKb9Lvs3Ab7cE 1+rnWhL0X8ig3Wsk2udygXtfTivd8P4IbeiRdU1W -----END CERTIFICATE-----Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org