$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa File: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (raw, json) Hash identifier: lCXTJ163mYE14JSOHwn/GLmazHYII7eBmEeCYKd7cs8= Subject key identifier: D0:E3:FD:AE:30:2D:86:4B:70:EB:2E:0B:88:E9:6F:CC:94:7F:2B:1C Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Certificate serial: 3C6B956CF8259CF78D9EC4EA5A5810CF33D72488 Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa Signing time: Thu 26 Sep 2024 16:00:00 +0000 ROA not before: Thu 26 Sep 2024 15:55:00 +0000 ROA not after: Thu 25 Sep 2025 16:00:00 +0000 asID: 140456 IP address blocks: 103.96.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6b:95:6c:f8:25:9c:f7:8d:9e:c4:ea:5a:58:10:cf:33:d7:24:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Validity Not Before: Sep 26 15:55:00 2024 GMT Not After : Sep 25 16:00:00 2025 GMT Subject: CN=D0E3FDAE302D864B70EB2E0B88E96FCC947F2B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:df:c7:2c:11:aa:b1:cd:eb:9b:8a:42:f9: d2:71:cf:d8:67:ab:d4:e9:ae:aa:8c:83:f0:2e:b9: fc:cf:22:11:4b:7b:ca:df:f7:e4:3c:54:e7:0a:5f: 56:63:b6:c9:cd:7a:8f:69:1d:03:28:f8:df:33:7b: 26:0d:a5:49:9d:1e:9d:fa:84:8a:ad:71:c4:f2:da: 76:a9:3f:55:8b:fd:c6:c6:b1:25:f0:9e:7e:48:70: 02:1e:d6:6a:59:51:f9:ce:cc:1d:2c:16:7f:50:10: c3:e4:e9:e7:2b:64:28:cf:ff:a3:0b:ec:c6:91:33: 92:da:01:07:8d:5b:13:92:8e:23:c8:cb:67:60:6e: 79:32:89:d8:1e:55:bc:2b:2c:fd:0a:27:7d:78:ec: 71:de:6e:70:51:63:5b:98:bc:b3:a2:7c:09:e0:06: 1b:ef:cc:78:a0:11:35:33:0e:60:8c:2b:a3:c5:ab: ea:7c:47:0f:6b:b1:ae:e3:ac:7e:9f:cd:6c:45:85: c1:3e:ae:84:12:eb:63:5e:51:6c:33:92:05:bc:f5: c0:e0:16:6c:0a:e6:f3:69:2f:21:d1:3b:77:5f:8b: 9b:8d:c9:44:9a:4e:d2:d5:dd:45:43:a3:0d:ec:0e: 17:ab:34:2b:a3:ed:dd:08:c9:0a:8c:80:8c:ec:e4: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E3:FD:AE:30:2D:86:4B:70:EB:2E:0B:88:E9:6F:CC:94:7F:2B:1C X509v3 Authority Key Identifier: keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.146.0/24 Signature Algorithm: sha256WithRSAEncryption a3:78:66:7b:1b:b1:8a:45:91:1c:0d:4f:c2:f0:cd:14:01:c5: d3:38:c0:6e:3c:13:99:2b:7d:59:e5:52:a5:90:87:6b:11:14: c4:86:b4:f4:cd:41:5e:eb:f2:a0:84:f6:21:5c:0b:90:c9:43: e5:ab:75:4c:10:fa:d4:78:4c:b1:77:cb:2e:53:44:6f:f1:20: d7:17:40:79:4b:86:1f:dd:df:be:e0:1b:7a:6f:ff:f5:97:f3: b2:d6:23:55:63:a7:32:17:6f:4f:a4:ee:39:c2:4d:7a:6b:f6: f5:bf:d0:0f:1d:d5:ae:e0:fd:17:33:35:32:8f:ee:85:74:c0: eb:fe:f0:69:ae:19:06:15:c9:68:49:1e:73:3d:39:22:9e:3e: 9e:98:38:aa:94:32:75:73:49:ec:24:ae:be:82:db:c0:42:d0: 0f:83:47:8c:92:f8:c4:f2:83:02:8d:6b:9e:80:80:0b:f3:1f: b6:1f:2d:ed:aa:34:b8:30:5f:82:74:50:27:ee:d8:ce:44:a2: 1c:1d:54:09:1b:7c:6b:3d:ea:9c:d1:56:40:88:94:e4:25:42: 2f:a4:49:31:d2:b2:0c:e1:28:e5:fb:45:35:b7:3b:80:87:b7: 85:4d:4b:1e:77:7a:42:5e:ba:42:62:7a:ab:94:66:39:f0:9c: f9:1f:84:ef -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPGuVbPglnPeNnsTqWlgQzzPXJIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZG QTJEQ0QwQTAeFw0yNDA5MjYxNTU1MDBaFw0yNTA5MjUxNjAwMDBaMDMxMTAvBgNV BAMTKEQwRTNGREFFMzAyRDg2NEI3MEVCMkUwQjg4RTk2RkNDOTQ3RjJCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Rd/HLBGqsc3rm4pC+dJxz9hn q9TprqqMg/AuufzPIhFLe8rf9+Q8VOcKX1ZjtsnNeo9pHQMo+N8zeyYNpUmdHp36 hIqtccTy2napP1WL/cbGsSXwnn5IcAIe1mpZUfnOzB0sFn9QEMPk6ecrZCjP/6ML 7MaRM5LaAQeNWxOSjiPIy2dgbnkyidgeVbwrLP0KJ3147HHebnBRY1uYvLOifAng BhvvzHigETUzDmCMK6PFq+p8Rw9rsa7jrH6fzWxFhcE+roQS62NeUWwzkgW89cDg FmwK5vNpLyHRO3dfi5uNyUSaTtLV3UVDow3sDherNCuj7d0IyQqMgIzs5BghAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0OP9rjAthktw6y4LiOlvzJR/KxwwHwYDVR0j BBgwFoAUgcIDz0WOSKj/NF+0pd2ExvotzQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMC84MUMyMDNDRjQ1 OEU0OEE4RkYzNDVGQjRBNUREODRDNkZBMkRDRDBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZGQTJE Q0QwQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhNDc0NmI3LTVmZjItNDU1Ni04 YTNlLTVhODZjYmNjODU5OC8wLzMxMzAzMzJlMzkzNjJlMzEzNDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2CSMA0GCSqG SIb3DQEBCwUAA4IBAQCjeGZ7G7GKRZEcDU/C8M0UAcXTOMBuPBOZK31Z5VKlkIdr ERTEhrT0zUFe6/KghPYhXAuQyUPlq3VMEPrUeEyxd8suU0Rv8SDXF0B5S4Yf3d++ 4Bt6b//1l/Oy1iNVY6cyF29PpO45wk16a/b1v9APHdWu4P0XMzUyj+6FdMDr/vBp rhkGFcloSR5zPTkinj6emDiqlDJ1c0nsJK6+gtvAQtAPg0eMkvjE8oMCjWuegIAL 8x+2Hy3tqjS4MF+CdFAn7tjORKIcHVQJG3xrPeqc0VZAiJTkJUIvpEkx0rIM4Sjl +0U1tzuAh7eFTUsed3pCXrpCYnqrlGY58Jz5H4Tv -----END CERTIFICATE-----Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org