$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa File: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (raw, json) Hash identifier: v0HVaWQj08W1Myr6GFwoDx3Lby4cEZzdthgzjRd7E9w= Subject key identifier: 68:F7:0B:F0:F2:17:F9:F4:C5:55:2A:79:E2:D8:D3:F5:42:DA:D9:89 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 649E57B413DB52E5CD7765DB8B01E7D17FF54310 Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa Signing time: Tue 30 Jul 2024 10:00:02 +0000 ROA not before: Tue 30 Jul 2024 09:55:02 +0000 ROA not after: Tue 29 Jul 2025 10:00:02 +0000 asID: 64024 IP address blocks: 103.210.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9e:57:b4:13:db:52:e5:cd:77:65:db:8b:01:e7:d1:7f:f5:43:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Jul 30 09:55:02 2024 GMT Not After : Jul 29 10:00:02 2025 GMT Subject: CN=68F70BF0F217F9F4C5552A79E2D8D3F542DAD989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:a8:fd:45:50:99:78:9f:38:2f:dd:1c:48: ce:92:88:ec:60:b5:0d:6c:99:13:8d:77:da:8b:ae: c3:d6:87:fc:a1:80:5e:f0:03:29:84:fc:47:9a:ea: 8c:84:d0:05:ca:f8:c3:ae:a0:7d:a2:e7:fc:cf:cb: 7d:c2:3c:42:50:8d:05:6d:23:fb:39:a6:ca:31:39: 12:7f:39:af:1e:ea:73:9d:20:14:1d:48:e9:30:54: 8c:d4:23:2e:59:db:6f:25:c4:d4:5e:57:16:df:57: 66:87:d7:67:12:fb:a5:47:e2:ea:8e:70:c7:5f:ba: 8e:14:eb:7e:76:52:85:d4:30:8f:49:b9:24:3b:54: f3:f2:65:35:64:0e:92:1e:46:a3:16:b6:8e:f0:3e: 3f:a6:7d:7b:4f:63:0c:fd:4e:30:50:87:bb:18:08: 29:86:97:e5:2c:de:a8:ea:0b:2c:f0:6a:f4:76:2e: 04:60:a2:a9:4e:8a:85:e9:f7:61:4d:f6:9e:8e:51: 75:62:19:36:f4:4a:61:d9:ca:49:7f:13:da:b4:b6: 51:8f:26:d0:f5:f7:b6:fc:49:22:9f:97:82:5e:fc: 21:f1:5c:59:d5:e5:7c:ef:aa:95:f4:39:53:f3:cd: 93:3b:6e:7a:e3:6a:03:8f:00:2a:c2:43:af:64:40: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F7:0B:F0:F2:17:F9:F4:C5:55:2A:79:E2:D8:D3:F5:42:DA:D9:89 X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.116.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:27:8f:79:47:0f:c3:92:98:fa:f5:5a:3c:bb:d3:5e:94:4e: 20:b0:75:79:bc:61:e3:d7:db:98:46:9d:c8:9c:3f:dc:90:6d: f0:73:3a:be:f7:23:a9:93:a9:cf:54:df:bb:6f:47:9b:21:ea: 93:9b:84:1c:87:04:cc:24:1a:5b:a5:56:ce:57:72:28:18:f0: ba:d9:cd:60:ce:ac:b1:81:32:43:f9:c4:e6:82:97:c1:12:93: 11:21:07:c4:0c:5b:3d:0b:6b:b6:f3:b8:53:4a:f0:05:fd:cd: cf:3d:4f:c5:25:73:7a:d7:81:23:eb:4c:a8:e6:bc:f3:c5:45: d2:a4:ce:0d:19:e9:e3:03:53:e7:e8:ef:4f:0b:7e:8b:a5:45: 17:94:ca:fe:46:bd:7c:96:5f:b3:a8:de:1c:50:3e:38:2f:7b: 74:47:90:f8:3a:7a:e3:83:2a:17:c6:7d:0b:45:60:1e:b5:01: 15:2b:c2:43:4e:8e:06:e2:53:14:97:8e:a0:02:e0:c0:41:58: 7b:c4:e1:e9:d0:28:93:6a:51:5b:83:fe:87:7c:86:cb:e8:21: 2e:27:5e:18:66:89:85:ad:37:62:ee:b7:ee:37:1d:bc:9e:8c: e8:5e:b8:86:c7:23:16:7d:ab:44:3c:91:db:b9:81:2d:f5:56: 61:31:38:02 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZJ5XtBPbUuXNd2XbiwHn0X/1QxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNDA3MzAwOTU1MDJaFw0yNTA3MjkxMDAwMDJaMDMxMTAvBgNV BAMTKDY4RjcwQkYwRjIxN0Y5RjRDNTU1MkE3OUUyRDhEM0Y1NDJEQUQ5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Raj9RVCZeJ84L90cSM6SiOxg tQ1smRONd9qLrsPWh/yhgF7wAymE/Eea6oyE0AXK+MOuoH2i5/zPy33CPEJQjQVt I/s5psoxORJ/Oa8e6nOdIBQdSOkwVIzUIy5Z228lxNReVxbfV2aH12cS+6VH4uqO cMdfuo4U6352UoXUMI9JuSQ7VPPyZTVkDpIeRqMWto7wPj+mfXtPYwz9TjBQh7sY CCmGl+Us3qjqCyzwavR2LgRgoqlOioXp92FN9p6OUXViGTb0SmHZykl/E9q0tlGP JtD197b8SSKfl4Je/CHxXFnV5XzvqpX0OVPzzZM7bnrjagOPACrCQ69kQNZ5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUaPcL8PIX+fTFVSp54tjT9ULa2YkwHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxZmQzNTFlLTJiZDctNDE5MS05 MTA2LTUzZjg3NTAxNmYwZS8wLzMxMzAzMzJlMzIzMTMwMmUzMTMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjM0MzAzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9J0MA0GCSqG SIb3DQEBCwUAA4IBAQBeJ495Rw/Dkpj69Vo8u9NelE4gsHV5vGHj19uYRp3InD/c kG3wczq+9yOpk6nPVN+7b0ebIeqTm4QchwTMJBpbpVbOV3IoGPC62c1gzqyxgTJD +cTmgpfBEpMRIQfEDFs9C2u287hTSvAF/c3PPU/FJXN614Ej60yo5rzzxUXSpM4N GenjA1Pn6O9PC36LpUUXlMr+Rr18ll+zqN4cUD44L3t0R5D4OnrjgyoXxn0LRWAe tQEVK8JDTo4G4lMUl46gAuDAQVh7xOHp0CiTalFbg/6HfIbL6CEuJ14YZomFrTdi 7rfuNx28nozoXriGxyMWfatEPJHbuYEt9VZhMTgC -----END CERTIFICATE-----Generated at Fri Nov 22 03:51:03 2024 by rpki-client on console-fra.rpki-client.org