$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/3130332e37332e37322e302f32322d3234203d3e20313335343638.roa File: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (raw, json) Hash identifier: 3abyGt/vv/4zuDknJsyzDzCl6mRH4xhBGG4CS4rRnTg= Subject key identifier: C6:0C:8A:7A:60:1D:D5:38:F8:1E:FE:02:1E:A3:D0:61:35:76:86:06 Certificate issuer: /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Certificate serial: 333A99AC810A907BEC8CE7107616C285284BE704 Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/3130332e37332e37322e302f32322d3234203d3e20313335343638.roa Signing time: Tue 13 Aug 2024 07:01:19 +0000 ROA not before: Tue 13 Aug 2024 06:56:19 +0000 ROA not after: Tue 12 Aug 2025 07:01:19 +0000 asID: 135468 IP address blocks: 103.73.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3a:99:ac:81:0a:90:7b:ec:8c:e7:10:76:16:c2:85:28:4b:e7:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Validity Not Before: Aug 13 06:56:19 2024 GMT Not After : Aug 12 07:01:19 2025 GMT Subject: CN=C60C8A7A601DD538F81EFE021EA3D06135768606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:ae:44:41:98:61:74:60:3a:90:cf:fb:c8: 7b:04:f6:60:1d:1b:bb:e2:17:5e:7a:61:1d:e7:6b: 5a:7a:43:c2:f0:24:7b:fc:4e:9e:18:16:6b:0a:d9: 60:60:33:d1:5e:77:3f:79:87:01:f0:83:82:75:e6: 74:3a:75:84:d7:19:cd:d1:bc:fe:0c:cc:70:a5:a8: 67:99:4e:9c:ff:25:1d:56:4c:54:9d:70:d5:9a:cd: 9f:20:bf:5d:4e:74:d2:a1:da:7b:27:be:3b:98:3f: c2:94:ce:b9:32:3e:d1:25:0d:69:09:f7:2e:dc:15: e3:e6:6c:0e:d7:8c:a8:9a:21:34:7c:6d:4a:b7:79: b5:ef:83:8a:d6:73:a7:e8:a6:48:ce:d7:e3:04:01: 98:7a:5f:54:f7:c3:cb:5a:da:7e:f7:2b:0f:e4:85: fb:9c:46:f2:d2:09:68:bb:f6:ef:c7:b9:17:32:d4: 93:37:09:15:dc:09:20:ca:9d:b4:70:f4:f2:e9:79: 05:a1:ba:f0:0a:c0:23:76:56:14:6c:87:00:d5:f3: b4:96:d4:2b:d9:36:04:ea:98:a8:d8:bb:77:32:c3: 19:1c:a3:8c:42:8e:16:77:4e:1b:f9:ae:8a:7a:ef: 82:ca:3c:ec:7d:a1:29:12:23:27:5a:1c:e2:65:e6: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0C:8A:7A:60:1D:D5:38:F8:1E:FE:02:1E:A3:D0:61:35:76:86:06 X509v3 Authority Key Identifier: keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/3130332e37332e37322e302f32322d3234203d3e20313335343638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.72.0/22 Signature Algorithm: sha256WithRSAEncryption 21:e4:61:20:0d:98:f7:2c:49:07:05:bc:8f:ae:b7:05:be:ce: c5:3f:d5:bb:09:49:67:61:71:d8:50:a5:d7:82:a9:01:48:fa: 03:30:65:a7:94:a3:a1:5f:d5:76:67:90:f1:d5:94:16:84:4a: c7:60:7a:54:ad:6c:7c:a9:24:3d:99:fe:09:0c:92:e6:d3:7a: 7e:fa:3f:24:27:57:bc:1c:20:83:b5:19:39:5b:3f:4a:92:68: 7e:4e:36:14:1a:ca:89:8b:7d:66:a3:f1:a0:a5:90:4d:28:09: 49:0c:38:d0:db:28:ea:2c:18:85:00:9e:20:3a:e0:d7:4e:b9: f8:fe:8e:be:de:24:f4:e3:74:fd:7f:7e:6b:45:1f:3d:34:bf: d6:54:d9:64:06:2e:3b:a4:89:02:17:1e:5f:e9:dc:25:98:18: 8b:31:b9:ee:04:b3:07:3f:1e:ba:69:d9:20:36:88:d2:d8:a6: b4:95:d8:b9:82:52:06:67:f8:5f:dc:05:04:81:ed:3a:a5:c5: be:ef:eb:d1:14:92:95:a2:90:6b:8d:76:88:b8:b8:82:5f:63: 06:21:79:4b:09:d1:b8:4f:52:06:f7:68:5f:c0:a7:34:bc:84: 33:bc:0a:00:ce:03:ef:93:36:12:8c:e4:b5:5d:2f:4c:82:ee: 4e:a8:a8:d5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMzqZrIEKkHvsjOcQdhbChShL5wQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZD Qjk2NkJEMzAeFw0yNDA4MTMwNjU2MTlaFw0yNTA4MTIwNzAxMTlaMDMxMTAvBgNV BAMTKEM2MEM4QTdBNjAxREQ1MzhGODFFRkUwMjFFQTNEMDYxMzU3Njg2MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHa5EQZhhdGA6kM/7yHsE9mAd G7viF156YR3na1p6Q8LwJHv8Tp4YFmsK2WBgM9Fedz95hwHwg4J15nQ6dYTXGc3R vP4MzHClqGeZTpz/JR1WTFSdcNWazZ8gv11OdNKh2nsnvjuYP8KUzrkyPtElDWkJ 9y7cFePmbA7XjKiaITR8bUq3ebXvg4rWc6fopkjO1+MEAZh6X1T3w8ta2n73Kw/k hfucRvLSCWi79u/HuRcy1JM3CRXcCSDKnbRw9PLpeQWhuvAKwCN2VhRshwDV87SW 1CvZNgTqmKjYu3cywxkco4xCjhZ3Thv5rop674LKPOx9oSkSIydaHOJl5jA1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxgyKemAd1Tj4Hv4CHqPQYTV2hgYwHwYDVR0j BBgwFoAUVGHqvIYuTJCzJ5DbohzV/8uWa9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmVjYzcyYS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC81NDYxRUFCQzg2 MkU0QzkwQjMyNzkwREJBMjFDRDVGRkNCOTY2QkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZDQjk2 NkJEMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2ZWNjNzJhLWU5NTQtNDMwMi05 MmM0LWY0ZjIzMDcwYjk5Ny8wLzMxMzAzMzJlMzczMzJlMzczMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdJSDANBgkqhkiG 9w0BAQsFAAOCAQEAIeRhIA2Y9yxJBwW8j663Bb7OxT/VuwlJZ2Fx2FCl14KpAUj6 AzBlp5SjoV/VdmeQ8dWUFoRKx2B6VK1sfKkkPZn+CQyS5tN6fvo/JCdXvBwgg7UZ OVs/SpJofk42FBrKiYt9ZqPxoKWQTSgJSQw40Nso6iwYhQCeIDrg1065+P6Ovt4k 9ON0/X9+a0UfPTS/1lTZZAYuO6SJAhceX+ncJZgYizG57gSzBz8eumnZIDaI0tim tJXYuYJSBmf4X9wFBIHtOqXFvu/r0RSSlaKQa412iLi4gl9jBiF5SwnRuE9SBvdo X8CnNLyEM7wKAM4D75M2EozktV0vTILuTqio1Q== -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org