$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa File: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (raw, json) Hash identifier: 8H951OFYlZkzuvTNcIe0++EeO0XA156uuF4G5IFxI6E= Subject key identifier: 9D:1B:DD:12:6A:06:CF:D7:0A:91:0D:68:34:61:EB:91:CB:60:B2:11 Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 0F5DBF652FC758B7FA20E5BBFFC963D476906B76 Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa Signing time: Thu 19 Sep 2024 13:45:57 +0000 ROA not before: Thu 19 Sep 2024 13:40:57 +0000 ROA not after: Thu 18 Sep 2025 13:45:57 +0000 asID: 38149 IP address blocks: 103.3.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5d:bf:65:2f:c7:58:b7:fa:20:e5:bb:ff:c9:63:d4:76:90:6b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Sep 19 13:40:57 2024 GMT Not After : Sep 18 13:45:57 2025 GMT Subject: CN=9D1BDD126A06CFD70A910D683461EB91CB60B211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7f:70:f3:6b:5e:9d:40:0e:a2:1c:8c:c4:e3: cd:d6:3b:73:3d:93:c7:69:99:c8:0f:fa:37:13:10: ca:50:9a:61:eb:6e:ab:2b:fe:af:23:aa:3e:f9:69: 8e:fc:a1:82:95:85:d9:21:5f:92:64:6f:06:2e:f9: 54:4a:2b:30:cf:6d:2b:88:96:01:7d:ef:3b:80:e4: 23:06:bd:6d:ff:f2:8c:46:f1:5e:50:52:ef:20:ca: 80:bb:9c:c9:16:7a:52:9b:10:a2:c2:3a:6e:f7:62: b5:0f:ee:a4:92:68:e1:94:bf:34:19:64:6e:78:13: d4:d6:34:b3:17:b8:d6:fb:06:87:73:03:dc:c9:03: bb:64:b6:d2:90:64:49:d7:ca:30:10:d7:70:8c:1a: 3e:d4:3b:27:e5:2a:02:f3:be:2d:36:a8:c5:3d:69: ed:1d:c7:35:d7:ad:e5:fe:13:dd:91:28:5e:d2:bd: 73:cd:c6:eb:3a:1f:cd:18:41:d8:fc:29:90:b6:05: 5f:15:34:6f:83:c9:cc:a1:92:7b:c6:01:e2:e1:8b: 34:1e:6e:b8:d9:93:88:ab:cf:90:38:10:7a:d1:c0: 5e:ef:85:37:81:53:fb:f2:18:6d:9f:d5:58:ce:50: cf:ac:e5:af:f5:c0:1f:c4:7b:c6:22:f5:d2:4f:99: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1B:DD:12:6A:06:CF:D7:0A:91:0D:68:34:61:EB:91:CB:60:B2:11 X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.212.0/22 Signature Algorithm: sha256WithRSAEncryption 99:12:a7:ab:8b:78:ad:f8:e3:9a:a7:03:89:64:e1:e0:fe:9a: d8:06:21:8c:9c:e2:45:ad:74:8a:84:19:87:ee:9e:99:10:13: d9:c9:1c:0d:70:05:7e:56:17:7c:a4:05:5b:41:b4:1c:a4:8d: ad:20:c2:0b:3b:d6:5f:29:cb:57:56:0d:8f:d8:9c:8b:4f:41: df:f2:30:73:70:41:53:5f:47:9a:5a:a4:53:45:49:6f:0d:9b: b0:7d:5f:25:4b:11:7c:dc:40:af:8f:91:12:ac:e9:43:65:22: 93:0a:f5:b9:26:04:3b:ad:c1:dd:50:e2:a1:8a:05:e3:38:9e: 38:4b:cf:6a:fc:00:32:27:fa:3f:db:a3:de:22:9f:c9:fb:b0: 99:36:9a:24:5b:76:d4:7a:25:a3:2b:71:03:f2:25:f0:9b:8c: 0d:7a:91:99:75:36:c8:94:37:27:48:83:d9:f4:50:e7:2e:d5: 69:a1:ff:14:14:ef:ff:c3:08:67:7b:0b:38:e1:3d:9c:e8:2a: 07:64:b7:15:44:fd:0f:c4:4c:02:4d:7a:08:09:01:5a:e4:a0: 33:77:6e:24:6b:7f:a9:09:70:74:b3:7c:2b:73:69:dc:d5:d8: 72:32:47:5d:16:ec:41:41:9c:cf:01:27:31:0a:a1:96:2a:83: f3:48:eb:1f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUD12/ZS/HWLf6IOW7/8lj1HaQa3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNDA5MTkxMzQwNTdaFw0yNTA5MTgxMzQ1NTdaMDMxMTAvBgNV BAMTKDlEMUJERDEyNkEwNkNGRDcwQTkxMEQ2ODM0NjFFQjkxQ0I2MEIyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYf3Dza16dQA6iHIzE483WO3M9 k8dpmcgP+jcTEMpQmmHrbqsr/q8jqj75aY78oYKVhdkhX5JkbwYu+VRKKzDPbSuI lgF97zuA5CMGvW3/8oxG8V5QUu8gyoC7nMkWelKbEKLCOm73YrUP7qSSaOGUvzQZ ZG54E9TWNLMXuNb7BodzA9zJA7tkttKQZEnXyjAQ13CMGj7UOyflKgLzvi02qMU9 ae0dxzXXreX+E92RKF7SvXPNxus6H80YQdj8KZC2BV8VNG+DycyhknvGAeLhizQe brjZk4irz5A4EHrRwF7vhTeBU/vyGG2f1VjOUM+s5a/1wB/Ee8Yi9dJPmSZRAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUnRvdEmoGz9cKkQ1oNGHrkctgshEwHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzAzMzJlMzMyZTMyMzEzMjJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDMzMzgzMTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnA9QwDQYJKoZIhvcN AQELBQADggEBAJkSp6uLeK3445qnA4lk4eD+mtgGIYyc4kWtdIqEGYfunpkQE9nJ HA1wBX5WF3ykBVtBtBykja0gwgs71l8py1dWDY/YnItPQd/yMHNwQVNfR5papFNF SW8Nm7B9XyVLEXzcQK+PkRKs6UNlIpMK9bkmBDutwd1Q4qGKBeM4njhLz2r8ADIn +j/bo94in8n7sJk2miRbdtR6JaMrcQPyJfCbjA16kZl1NsiUNydIg9n0UOcu1Wmh /xQU7//DCGd7CzjhPZzoKgdktxVE/Q/ETAJNeggJAVrkoDN3biRrf6kJcHSzfCtz adzV2HIyR10W7EFBnM8BJzEKoZYqg/NI6x8= -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org