$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa File: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (raw, json) Hash identifier: MBnVObk5rtYYwHlaUlSzw5T8+2QUD+ApGXh8c63UDdI= Subject key identifier: 34:23:0B:94:E1:18:A4:45:B0:6B:A6:58:7F:44:09:CD:A2:80:30:E6 Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 20D9711EA3B965EF34D59007EE23052218859C55 Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa Signing time: Mon 01 Jul 2024 01:00:36 +0000 ROA not before: Mon 01 Jul 2024 00:55:36 +0000 ROA not after: Mon 30 Jun 2025 01:00:36 +0000 asID: 139454 IP address blocks: 103.145.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d9:71:1e:a3:b9:65:ef:34:d5:90:07:ee:23:05:22:18:85:9c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Jul 1 00:55:36 2024 GMT Not After : Jun 30 01:00:36 2025 GMT Subject: CN=34230B94E118A445B06BA6587F4409CDA28030E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:14:16:cd:70:a9:a7:6b:f3:28:7f:bd:14: 3d:9d:d7:07:85:07:54:3d:64:d5:99:c7:d1:25:32: a6:ec:7e:08:63:ed:0f:81:32:8a:2b:21:24:21:fa: d6:b3:5e:93:4e:53:e7:4e:9d:22:42:0f:2a:23:69: 96:74:35:80:14:8e:99:29:24:3a:0c:40:c8:ee:55: 1a:f5:58:ff:6d:ea:3b:4a:ee:86:13:69:cf:23:e3: 0b:72:a1:7e:32:db:56:90:56:06:6c:94:6d:9d:ab: 6d:2b:5f:ff:e9:ac:66:b6:24:9e:92:8f:a4:69:4a: cc:ff:27:a4:b1:41:34:6e:4d:b0:98:80:7f:ac:0b: 6b:ec:35:f9:90:0d:78:ad:0b:37:e5:b5:00:54:7d: b3:97:2d:ca:bb:e8:5e:c8:e5:d8:11:ff:bd:9a:e6: a4:c5:18:dc:e4:62:16:73:cd:eb:1d:7b:92:9b:bf: 41:b5:df:b2:07:de:a3:46:18:6e:7a:8a:43:4f:3f: f5:ba:c9:87:f4:8f:c5:e5:2c:c6:a9:e8:63:04:1a: 26:80:cc:c9:26:49:81:8e:c6:1e:32:1a:67:81:38: 25:ab:5a:d3:c1:05:d6:3c:67:f7:1e:34:36:1f:6d: 4e:b2:ef:35:07:8a:4b:24:f0:ec:d2:7b:1d:be:72: e0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:23:0B:94:E1:18:A4:45:B0:6B:A6:58:7F:44:09:CD:A2:80:30:E6 X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.242.0/23 Signature Algorithm: sha256WithRSAEncryption 57:ed:18:da:34:af:4c:21:17:2a:5b:33:b2:cd:f5:84:8e:44: 86:ac:27:09:3f:11:69:80:b2:78:c3:41:84:0a:3d:03:1a:fe: f6:4e:bf:18:4c:26:db:70:87:77:f4:ea:7e:70:b2:da:e0:73: 0d:fb:f7:c3:96:16:e3:b8:79:e2:a0:f0:04:c8:74:25:29:0e: 7e:34:84:17:cf:d0:ad:d4:87:53:5e:d0:27:7f:13:5b:4e:2c: 54:df:19:a5:90:01:dd:ba:a6:11:15:ff:95:57:f9:52:1d:84: af:9f:61:bc:cb:89:83:e0:56:4d:be:fc:45:b7:d2:08:2d:0f: 38:1a:7d:5d:6a:25:be:40:b2:be:3e:d6:bd:a9:0f:0d:b3:2a: 2e:b8:50:76:61:6f:e2:dd:de:7f:38:09:8d:d5:81:ad:38:3d: 54:ce:e6:63:8b:8b:54:1a:23:8a:60:b9:c0:8f:d8:65:76:3e: 8d:6a:d0:a3:ab:ef:79:8b:7b:99:af:c7:2d:b4:46:da:92:8f: 97:5f:d6:b5:38:20:15:e8:fa:74:9d:4f:93:71:bf:ff:82:9e: 3d:30:67:d4:20:f5:73:ce:b8:20:35:cb:13:d4:f8:0e:da:da: 02:9d:01:b0:0a:3f:0f:74:b5:94:0a:31:73:1b:79:df:c3:fa: b9:2b:d9:dc -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUINlxHqO5Ze801ZAH7iMFIhiFnFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNDA3MDEwMDU1MzZaFw0yNTA2MzAwMTAwMzZaMDMxMTAvBgNV BAMTKDM0MjMwQjk0RTExOEE0NDVCMDZCQTY1ODdGNDQwOUNEQTI4MDMwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcnhQWzXCpp2vzKH+9FD2d1weF B1Q9ZNWZx9ElMqbsfghj7Q+BMoorISQh+tazXpNOU+dOnSJCDyojaZZ0NYAUjpkp JDoMQMjuVRr1WP9t6jtK7oYTac8j4wtyoX4y21aQVgZslG2dq20rX//prGa2JJ6S j6RpSsz/J6SxQTRuTbCYgH+sC2vsNfmQDXitCzfltQBUfbOXLcq76F7I5dgR/72a 5qTFGNzkYhZzzesde5Kbv0G137IH3qNGGG56ikNPP/W6yYf0j8XlLMap6GMEGiaA zMkmSYGOxh4yGmeBOCWrWtPBBdY8Z/ceNDYfbU6y7zUHiksk8OzSex2+cuDlAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNCMLlOEYpEWwa6ZYf0QJzaKAMOYwHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3NTBhNjUxLTFhMWEtNDUwMS1h OGJjLTk1OTFlMTEwOWEyNy8wLzMxMzAzMzJlMzEzNDM1MmUzMjM0MzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM1MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkfIwDQYJ KoZIhvcNAQELBQADggEBAFftGNo0r0whFypbM7LN9YSORIasJwk/EWmAsnjDQYQK PQMa/vZOvxhMJttwh3f06n5wstrgcw3798OWFuO4eeKg8ATIdCUpDn40hBfP0K3U h1Ne0Cd/E1tOLFTfGaWQAd26phEV/5VX+VIdhK+fYbzLiYPgVk2+/EW30ggtDzga fV1qJb5Asr4+1r2pDw2zKi64UHZhb+Ld3n84CY3Vga04PVTO5mOLi1QaI4pgucCP 2GV2Po1q0KOr73mLe5mvxy20RtqSj5df1rU4IBXo+nSdT5Nxv/+Cnj0wZ9Qg9XPO uCA1yxPU+A7a2gKdAbAKPw90tZQKMXMbed/D+rkr2dw= -----END CERTIFICATE-----Generated at Sun Nov 24 09:53:16 2024 by rpki-client on console-ams.rpki-client.org