$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa File: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (raw, json) Hash identifier: LDrGtcJTq4OgY5/UX37tOI+FxWVDVhlk7fAC/6U0Evc= Subject key identifier: 43:B4:0C:6D:16:06:88:58:D1:C9:58:B2:3C:8A:33:62:0C:71:07:FF Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562 Certificate serial: 5D311F1E61202B8CAEE9FF16D3304D17DE043AB2 Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa Signing time: Thu 11 Jul 2024 05:42:07 +0000 ROA not before: Thu 11 Jul 2024 05:37:07 +0000 ROA not after: Thu 10 Jul 2025 05:42:07 +0000 asID: 150231 IP address blocks: 103.18.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:31:1f:1e:61:20:2b:8c:ae:e9:ff:16:d3:30:4d:17:de:04:3a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562 Validity Not Before: Jul 11 05:37:07 2024 GMT Not After : Jul 10 05:42:07 2025 GMT Subject: CN=43B40C6D16068858D1C958B23C8A33620C7107FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:ed:8f:02:d8:ad:3d:d8:ff:d8:32:88:45: 7e:83:df:0f:d6:35:73:4a:b8:4e:c3:cd:50:fe:36: f2:09:cc:42:df:94:51:0f:42:b5:ac:62:29:dc:10: c4:f4:0c:4f:90:95:23:04:e5:36:48:90:05:cf:b1: 72:3c:a1:89:d4:9c:e7:96:d6:62:4b:73:d7:9d:a2: 93:35:70:d6:9b:53:d6:57:de:b9:33:26:60:f2:cf: 8f:3b:48:9d:4d:d1:a3:b4:99:10:ad:95:32:72:3b: f0:a5:fc:61:b2:a3:df:4d:46:93:56:ad:ad:1e:35: 91:5b:aa:39:e6:91:80:a1:64:ed:77:b2:21:0d:f1: fe:17:e5:54:aa:f3:d4:11:c1:0f:57:3d:8e:dc:76: 6c:0a:96:79:3e:68:fd:fd:35:a9:71:e6:5b:0a:4d: be:5b:5e:e1:0d:28:95:d2:c2:09:bf:db:b3:bf:2b: 90:87:2b:65:9f:bd:74:c1:c5:15:1a:65:48:45:3e: 46:21:0f:da:15:dc:c1:50:0a:1e:46:f9:c2:3c:3f: 7c:49:69:0c:43:5d:8f:c9:7f:5f:16:44:0a:3a:17: 42:51:db:38:f0:b4:db:c7:05:38:65:b5:0d:db:2d: e7:3d:f6:8b:3e:9b:9c:e6:af:0a:37:78:ee:ea:2f: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B4:0C:6D:16:06:88:58:D1:C9:58:B2:3C:8A:33:62:0C:71:07:FF X509v3 Authority Key Identifier: keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.232.0/23 Signature Algorithm: sha256WithRSAEncryption 81:6f:05:06:42:e1:38:62:ce:08:18:b5:7d:f1:5c:4d:82:95: d7:66:26:4a:a8:a1:15:78:93:1c:a9:16:7c:c7:84:60:bb:99: cf:44:03:50:c8:c7:5f:63:33:76:59:4c:bd:93:0b:94:23:bb: 9f:7e:5d:c4:4d:b4:e3:ae:87:f5:03:81:13:d3:7f:45:99:1f: 83:85:33:96:7a:27:23:b7:cd:5d:fb:81:c0:23:7f:6f:7b:cd: 2e:4b:b1:f8:d3:0f:2e:a3:75:2c:52:bc:3c:99:0e:7a:33:ee: f7:a2:c6:eb:29:20:21:d9:8f:f1:ef:24:97:f2:e7:1e:11:a6: 14:0e:1d:30:68:11:88:d9:5a:38:db:67:4b:fb:cc:86:2c:a3: 44:3e:a4:ab:8d:3c:19:1b:08:66:1b:b6:a0:11:ee:04:50:16: 77:b9:6b:fa:4c:ee:b3:df:f5:34:0c:c0:04:f6:4b:f5:20:c7: 4d:65:6e:f3:e6:85:c7:1c:33:56:b3:89:15:ad:ea:15:fe:12: ea:67:46:86:0c:7f:97:6f:8c:b0:64:af:3c:0e:dc:90:fd:d6: 8b:bf:62:f4:d0:49:4a:05:92:3c:9c:2d:ae:9a:b2:63:2a:54: 62:f3:00:6e:fd:81:99:6f:a1:52:1e:ff:39:eb:31:49:a7:03: 3b:9f:99:25 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXTEfHmEgK4yu6f8W0zBNF94EOrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUx NjMxQjU2MjAeFw0yNDA3MTEwNTM3MDdaFw0yNTA3MTAwNTQyMDdaMDMxMTAvBgNV BAMTKDQzQjQwQzZEMTYwNjg4NThEMUM5NThCMjNDOEEzMzYyMEM3MTA3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqO2PAtitPdj/2DKIRX6D3w/W NXNKuE7DzVD+NvIJzELflFEPQrWsYincEMT0DE+QlSME5TZIkAXPsXI8oYnUnOeW 1mJLc9edopM1cNabU9ZX3rkzJmDyz487SJ1N0aO0mRCtlTJyO/Cl/GGyo99NRpNW ra0eNZFbqjnmkYChZO13siEN8f4X5VSq89QRwQ9XPY7cdmwKlnk+aP39Nalx5lsK Tb5bXuENKJXSwgm/27O/K5CHK2WfvXTBxRUaZUhFPkYhD9oV3MFQCh5G+cI8P3xJ aQxDXY/Jf18WRAo6F0JR2zjwtNvHBThltQ3bLec99os+m5zmrwo3eO7qL5o/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQ7QMbRYGiFjRyViyPIozYgxxB/8wHwYDVR0j BBgwFoAUmwOV6YlGXWk+OP9RQML6vhYxtWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIyNDE5MS1iZmYwLTQ4MTUtYmUwZS1hMmFhOGQzOGQ1YTAvMC85QjAzOTVFOTg5 NDY1RDY5M0UzOEZGNTE0MEMyRkFCRTE2MzFCNTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUxNjMx QjU2Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3MjI0MTkxLWJmZjAtNDgxNS1i ZTBlLWEyYWE4ZDM4ZDVhMC8wLzMxMzAzMzJlMzEzODJlMzIzMzMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxLoMA0GCSqG SIb3DQEBCwUAA4IBAQCBbwUGQuE4Ys4IGLV98VxNgpXXZiZKqKEVeJMcqRZ8x4Rg u5nPRANQyMdfYzN2WUy9kwuUI7uffl3ETbTjrof1A4ET039FmR+DhTOWeicjt81d +4HAI39ve80uS7H40w8uo3UsUrw8mQ56M+73osbrKSAh2Y/x7ySX8uceEaYUDh0w aBGI2Vo422dL+8yGLKNEPqSrjTwZGwhmG7agEe4EUBZ3uWv6TO6z3/U0DMAE9kv1 IMdNZW7z5oXHHDNWs4kVreoV/hLqZ0aGDH+Xb4ywZK88DtyQ/daLv2L00ElKBZI8 nC2umrJjKlRi8wBu/YGZb6FSHv856zFJpwM7n5kl -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org