$ rpki-client -vvf repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa File: 3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa (raw, json) Hash identifier: OIs7tePniZ6BGHOckHhvtTHBI0g3yl1uMnMmOig+9kU= Subject key identifier: 97:E8:01:CC:85:70:DE:CD:EE:F2:3D:2B:A3:6B:B5:0B:D9:13:9B:18 Certificate issuer: /CN=10B7822CA22013D1B3095AB974949FD98A76025C Certificate serial: 1EADF73DEE6E3FCC3C1B701A02D7A03E572AF2E6 Authority key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa Signing time: Wed 31 Jan 2024 07:17:51 +0000 ROA not before: Wed 31 Jan 2024 07:12:51 +0000 ROA not after: Wed 29 Jan 2025 07:17:51 +0000 asID: 139456 IP address blocks: 103.145.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ad:f7:3d:ee:6e:3f:cc:3c:1b:70:1a:02:d7:a0:3e:57:2a:f2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B7822CA22013D1B3095AB974949FD98A76025C Validity Not Before: Jan 31 07:12:51 2024 GMT Not After : Jan 29 07:17:51 2025 GMT Subject: CN=97E801CC8570DECDEEF23D2BA36BB50BD9139B18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:0e:02:72:c8:f2:86:5c:bf:74:0e:61:e2: 36:7c:62:99:25:26:46:75:03:7e:d0:18:30:f2:10: a7:4e:1f:22:53:dd:77:92:e9:74:14:7b:4b:cb:4d: ad:2c:69:34:35:cc:e6:2b:35:e1:89:2e:31:0a:46: 11:53:80:c6:9b:64:79:56:e9:e5:c1:47:d4:17:bf: 50:d2:15:22:fc:6d:3b:fc:6d:f4:54:64:32:1c:6e: da:e7:e0:bd:b1:86:73:aa:22:22:17:ff:c7:27:7f: bd:dd:b2:56:b7:b0:40:aa:62:39:4c:48:e5:40:1d: 90:32:54:bb:27:7e:5a:da:11:9e:5f:1d:ad:df:05: 70:47:43:ab:72:d2:ea:2b:7d:e6:cb:8c:5a:8b:f2: d2:4c:52:f3:e8:9a:c8:ae:eb:e3:78:a0:5d:bd:84: c7:2e:92:3a:05:40:52:33:7b:f6:db:cf:da:9d:0d: 34:a9:ee:c9:80:63:55:25:bd:eb:28:a3:16:3e:87: fd:15:d1:5a:fe:f2:a1:f6:f7:40:c5:b5:66:c1:bf: 86:ec:df:fb:53:b5:68:91:96:7f:05:42:a6:70:8d: 33:b2:b2:76:cb:51:3c:5c:b3:7a:b6:8e:39:02:0a: f5:23:4a:0b:60:ca:ea:a1:5c:08:aa:2d:84:68:fd: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E8:01:CC:85:70:DE:CD:EE:F2:3D:2B:A3:6B:B5:0B:D9:13:9B:18 X509v3 Authority Key Identifier: keyid:10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.226.0/24 Signature Algorithm: sha256WithRSAEncryption 51:f2:47:18:31:b7:16:5e:33:b2:fd:7e:eb:1e:12:0c:48:cc: fc:45:13:85:28:83:c4:eb:c8:b7:2a:53:6b:ea:dd:68:8f:92: 85:a3:29:a0:48:0d:35:e1:68:b3:5a:04:f1:1d:2d:6a:0f:a8: db:ff:f4:be:fa:b6:84:6f:72:6c:90:2e:a2:54:d8:b1:58:4d: 79:88:cc:73:6a:3b:5d:4a:ce:2b:0d:78:74:2f:55:0b:b1:dd: 72:ed:df:c0:6d:61:bd:1e:6a:29:83:ed:9d:4a:df:33:09:39: fb:1c:c6:74:f5:19:7c:8f:23:83:8a:7f:e4:48:c2:4f:ca:27: af:91:a4:f6:42:9b:cc:57:e1:03:98:c4:ef:35:de:8d:14:8a: a0:1c:49:56:fc:d2:39:bf:b4:f2:65:d2:1f:75:96:c3:39:f3: e1:78:2d:e2:2a:f5:00:37:d6:b1:de:30:18:24:1e:e1:e8:87: 28:02:98:1c:70:41:ae:40:94:38:ef:0c:39:68:73:e6:e3:3c: 28:ff:45:ba:d4:4e:49:e7:e8:02:19:ab:06:79:5c:00:39:10: 9e:3e:03:f9:b6:97:86:43:0c:d2:38:70:1f:62:fe:07:8e:64: 61:82:47:b8:89:b4:68:35:73:ff:18:da:32:75:a8:5e:47:cf: 4b:ce:7a:1a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHq33Pe5uP8w8G3AaAtegPlcq8uYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4 QTc2MDI1QzAeFw0yNDAxMzEwNzEyNTFaFw0yNTAxMjkwNzE3NTFaMDMxMTAvBgNV BAMTKDk3RTgwMUNDODU3MERFQ0RFRUYyM0QyQkEzNkJCNTBCRDkxMzlCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ug4Ccsjyhly/dA5h4jZ8Ypkl JkZ1A37QGDDyEKdOHyJT3XeS6XQUe0vLTa0saTQ1zOYrNeGJLjEKRhFTgMabZHlW 6eXBR9QXv1DSFSL8bTv8bfRUZDIcbtrn4L2xhnOqIiIX/8cnf73dsla3sECqYjlM SOVAHZAyVLsnflraEZ5fHa3fBXBHQ6ty0uorfebLjFqL8tJMUvPomsiu6+N4oF29 hMcukjoFQFIze/bbz9qdDTSp7smAY1UlvesooxY+h/0V0Vr+8qH290DFtWbBv4bs 3/tTtWiRln8FQqZwjTOysnbLUTxcs3q2jjkCCvUjSgtgyuqhXAiqLYRo/VsLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUl+gBzIVw3s3u8j0ro2u1C9kTmxgwHwYDVR0j BBgwFoAUELeCLKIgE9GzCVq5dJSf2Yp2AlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDAwMjljNy03NDJjLTRkYTgtYjJlZS1kNjI5YWU3OGJmMDEvMC8xMEI3ODIyQ0Ey MjAxM0QxQjMwOTVBQjk3NDk0OUZEOThBNzYwMjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4QTc2 MDI1Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0MDAyOWM3LTc0MmMtNGRhOC1i MmVlLWQ2MjlhZTc4YmYwMS8wLzMxMzAzMzJlMzEzNDM1MmUzMjMyMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkeIwDQYJ KoZIhvcNAQELBQADggEBAFHyRxgxtxZeM7L9fuseEgxIzPxFE4Uog8TryLcqU2vq 3WiPkoWjKaBIDTXhaLNaBPEdLWoPqNv/9L76toRvcmyQLqJU2LFYTXmIzHNqO11K zisNeHQvVQux3XLt38BtYb0eaimD7Z1K3zMJOfscxnT1GXyPI4OKf+RIwk/KJ6+R pPZCm8xX4QOYxO813o0UiqAcSVb80jm/tPJl0h91lsM58+F4LeIq9QA31rHeMBgk HuHohygCmBxwQa5AlDjvDDloc+bjPCj/RbrUTknn6AIZqwZ5XAA5EJ4+A/m2l4ZD DNI4cB9i/geOZGGCR7iJtGg1c/8Y2jJ1qF5Hz0vOeho= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org