$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa File: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (raw, json) Hash identifier: 30B4AdAj2FQycfT5m8OR4FtBDZGYgBqx+ZROu9NJ2GI= Subject key identifier: 48:48:6A:5A:9C:D9:43:45:8C:3D:92:90:4E:3F:A0:99:DC:BB:3E:77 Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 33AA75F004A446FB4A885B78BC1E25735999E8C5 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa Signing time: Fri 15 Nov 2024 10:00:01 +0000 ROA not before: Fri 15 Nov 2024 09:55:01 +0000 ROA not after: Fri 14 Nov 2025 10:00:01 +0000 asID: 138087 IP address blocks: 103.125.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:aa:75:f0:04:a4:46:fb:4a:88:5b:78:bc:1e:25:73:59:99:e8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Nov 15 09:55:01 2024 GMT Not After : Nov 14 10:00:01 2025 GMT Subject: CN=48486A5A9CD943458C3D92904E3FA099DCBB3E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:ac:41:dd:31:98:f3:73:40:c6:c9:ea:f1: da:32:d9:ef:6d:58:5e:63:bf:ee:ef:32:fc:75:6c: 66:ff:cf:f6:1d:f7:5e:e1:3a:24:07:15:7a:f0:f9: cb:8e:07:b6:d0:30:3f:fe:7b:f3:ec:ac:43:10:42: ef:c0:2b:3f:59:e6:68:12:18:fe:11:69:e0:47:b2: 9c:29:02:e6:d9:ee:dd:91:01:68:81:16:79:2e:b6: 86:eb:bb:2b:9f:01:2f:3b:61:f5:97:90:63:dc:d7: fa:9e:ce:34:07:2c:06:35:d3:f0:40:b6:70:37:51: 4d:d0:f1:bb:02:55:2b:55:6b:b8:a5:f4:49:30:0e: 6b:d4:c1:0a:86:eb:8d:25:f2:79:75:61:89:98:d6: 0c:18:b3:78:a4:d2:3c:95:1a:ac:e4:ed:06:cb:71: 54:54:c4:14:27:25:0b:92:68:02:a8:88:a3:16:c3: 71:be:cc:12:48:e5:5a:20:8a:ea:c6:f2:3b:7b:17: 93:1e:25:ef:93:79:85:47:f0:da:80:2c:35:78:31: d7:f3:bf:24:b1:70:75:65:76:22:a4:8e:6a:7a:ec: 26:9a:89:56:21:22:3f:1a:6b:bd:62:b1:55:3b:3c: 3b:22:6a:74:7a:dd:9f:b0:96:d4:55:49:c4:8f:1c: b6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:48:6A:5A:9C:D9:43:45:8C:3D:92:90:4E:3F:A0:99:DC:BB:3E:77 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.19.0/24 Signature Algorithm: sha256WithRSAEncryption 95:ef:50:71:77:2f:1c:df:b8:b0:b5:7b:a0:5c:3d:41:f7:34: ec:46:16:23:76:a7:c4:fc:23:8d:2d:19:6d:2b:43:34:ce:4a: 75:d4:e9:17:44:b8:27:29:56:1e:69:5b:2f:3f:72:76:54:4f: 82:9c:8c:fe:ed:96:fb:9b:1e:de:bf:5f:f7:9b:4e:b1:78:4d: 56:c9:ae:14:27:c7:02:bb:94:00:3f:77:ac:e3:14:61:42:4a: 1e:20:4e:01:39:bf:35:fe:f4:28:65:07:a9:50:60:69:c5:e2: 89:45:40:64:49:a5:9d:c7:96:5e:bd:a6:40:14:1a:16:51:6a: f2:e7:d4:e6:bf:61:b0:08:2f:d6:4c:38:4a:fe:40:70:8f:12: f8:60:38:64:24:22:3b:c9:25:68:aa:89:42:5e:36:45:84:8d: c3:ad:20:ee:82:9a:da:c4:be:45:b7:0f:7c:b6:8f:f9:4a:7e: fa:12:4e:73:95:54:36:5b:ec:73:7e:ae:40:51:37:69:fa:b6: 6f:6e:24:85:08:6f:87:38:9c:66:87:a8:ac:39:66:20:72:7f: 0c:66:65:08:e6:c8:b2:e7:51:9a:ca:94:2c:98:99:58:7c:fb: 36:e2:88:0d:b7:67:17:37:c1:20:04:13:27:2a:d7:8c:29:d4: ce:13:e7:0e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUM6p18ASkRvtKiFt4vB4lc1mZ6MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNDExMTUwOTU1MDFaFw0yNTExMTQxMDAwMDFaMDMxMTAvBgNV BAMTKDQ4NDg2QTVBOUNEOTQzNDU4QzNEOTI5MDRFM0ZBMDk5RENCQjNFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQqxB3TGY83NAxsnq8doy2e9t WF5jv+7vMvx1bGb/z/Yd917hOiQHFXrw+cuOB7bQMD/+e/PsrEMQQu/AKz9Z5mgS GP4RaeBHspwpAubZ7t2RAWiBFnkutobruyufAS87YfWXkGPc1/qezjQHLAY10/BA tnA3UU3Q8bsCVStVa7il9EkwDmvUwQqG640l8nl1YYmY1gwYs3ik0jyVGqzk7QbL cVRUxBQnJQuSaAKoiKMWw3G+zBJI5VogiurG8jt7F5MeJe+TeYVH8NqALDV4Mdfz vySxcHVldiKkjmp67CaaiVYhIj8aa71isVU7PDsianR63Z+wltRVScSPHLarAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSEhqWpzZQ0WMPZKQTj+gmdy7PncwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1OGQ2ZGNhLTZkN2ItNDgxMS04 NjJiLTBkYzVkNTdmYTJkOS8wLzMxMzAzMzJlMzEzMjM1MmUzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ30TMA0GCSqG SIb3DQEBCwUAA4IBAQCV71Bxdy8c37iwtXugXD1B9zTsRhYjdqfE/CONLRltK0M0 zkp11OkXRLgnKVYeaVsvP3J2VE+CnIz+7Zb7mx7ev1/3m06xeE1Wya4UJ8cCu5QA P3es4xRhQkoeIE4BOb81/vQoZQepUGBpxeKJRUBkSaWdx5ZevaZAFBoWUWry59Tm v2GwCC/WTDhK/kBwjxL4YDhkJCI7ySVoqolCXjZFhI3DrSDugpraxL5Ftw98to/5 Sn76Ek5zlVQ2W+xzfq5AUTdp+rZvbiSFCG+HOJxmh6isOWYgcn8MZmUI5siy51Ga ypQsmJlYfPs24ogNt2cXN8EgBBMnKteMKdTOE+cO -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org