$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa File: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (raw, json) Hash identifier: OQRs+DvdssfbxLcADcws53iRv33QqeJjAKKK3zO8V5k= Subject key identifier: 08:9C:D4:48:A8:31:E6:0D:BF:E3:B8:20:D8:B4:8A:95:AB:08:D6:37 Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD Certificate serial: 60C12DDA53B0A8C852BC214358C43D17E11FF4D2 Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa Signing time: Tue 12 Nov 2024 02:00:03 +0000 ROA not before: Tue 12 Nov 2024 01:55:03 +0000 ROA not after: Tue 11 Nov 2025 02:00:03 +0000 asID: 141957 IP address blocks: 103.166.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 06:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c1:2d:da:53:b0:a8:c8:52:bc:21:43:58:c4:3d:17:e1:1f:f4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD Validity Not Before: Nov 12 01:55:03 2024 GMT Not After : Nov 11 02:00:03 2025 GMT Subject: CN=089CD448A831E60DBFE3B820D8B48A95AB08D637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:22:c3:b6:8d:fc:51:30:78:4e:06:42:61: 03:ac:b9:cd:a8:ca:0e:e6:b4:16:fc:29:47:14:4d: b3:6b:33:d2:5b:0a:b4:f3:31:52:d7:4b:61:74:36: ec:ec:c5:07:87:53:69:ae:86:1a:25:55:35:1f:38: 5c:94:89:bc:1d:ae:d2:68:28:f3:95:59:c4:49:cb: f5:ac:2a:13:c6:36:e4:ac:ef:65:b3:9c:d1:5d:7a: 07:9d:7f:3c:90:17:e2:1d:95:d1:c1:52:de:90:86: 8c:25:55:51:46:0e:13:c6:0b:4d:0e:61:a8:90:5b: 2a:31:18:1b:78:e7:73:45:fb:62:51:b4:fa:03:c3: 79:33:59:a0:3e:50:05:03:c5:e6:f3:e6:28:92:98: f2:c5:02:2c:3b:6e:89:9c:2c:83:81:14:19:0d:81: 21:eb:4b:4b:7f:b5:a2:9d:f3:41:ee:62:54:59:de: dc:23:7b:83:f0:1d:2f:a8:cf:82:79:5d:a3:fa:55: 5a:68:31:fd:fa:7a:4f:e2:9c:fe:f5:dd:77:dc:0d: 12:29:ff:17:d1:9d:b5:52:87:39:65:b4:10:08:b6: 7f:07:28:86:f8:58:53:ed:9e:01:77:99:36:2e:2e: dd:bd:c8:86:0b:7a:9b:ed:ef:af:19:23:14:65:fe: 21:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9C:D4:48:A8:31:E6:0D:BF:E3:B8:20:D8:B4:8A:95:AB:08:D6:37 X509v3 Authority Key Identifier: keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.213.0/24 Signature Algorithm: sha256WithRSAEncryption 85:08:45:63:7b:9a:c1:01:70:18:01:09:76:97:7e:a6:13:fe: a5:19:b2:28:c9:91:99:c9:40:33:0f:ce:b3:ae:c7:4b:10:28: 9a:b8:71:02:ee:f8:79:df:0a:7e:76:95:e9:20:e2:93:31:d2: 0d:f0:41:a5:35:b8:96:8c:b5:d9:07:68:7a:fb:8a:a6:9f:81: 25:c0:2d:4b:38:02:d0:d7:92:d2:17:25:a5:2c:f1:11:ef:86: 15:6b:2a:84:ab:5f:c6:44:9e:99:f3:3b:92:1e:8a:a9:11:c1: cb:b3:fb:6a:65:e7:cd:9b:e4:13:51:74:32:c7:e1:d2:77:a6: 8a:70:a5:e1:c9:a0:4d:ff:47:a2:b9:1d:42:6f:fa:54:9a:12: ac:4b:f6:76:cd:4c:87:77:06:b7:04:fe:ac:cc:9b:5a:fc:a5: ed:38:cb:af:4e:4f:58:54:24:92:94:17:71:d7:0e:4a:17:9e: 3d:35:50:d8:a9:a9:04:97:f2:01:54:24:3e:af:32:cd:68:32: 4f:2c:3a:d2:44:7c:8c:fc:57:ad:a2:fe:13:99:b9:20:80:67: b3:9c:51:bc:02:2f:69:2b:af:5b:46:97:a6:d3:cb:24:5c:48: 3a:9a:aa:6e:69:d9:45:03:dd:65:cb:58:b6:d9:d3:a1:77:7b: f1:86:4f:49 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYMEt2lOwqMhSvCFDWMQ9F+Ef9NIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5 RUIzRDdGRDAeFw0yNDExMTIwMTU1MDNaFw0yNTExMTEwMjAwMDNaMDMxMTAvBgNV BAMTKDA4OUNENDQ4QTgzMUU2MERCRkUzQjgyMEQ4QjQ4QTk1QUIwOEQ2MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wSLDto38UTB4TgZCYQOsuc2o yg7mtBb8KUcUTbNrM9JbCrTzMVLXS2F0NuzsxQeHU2muhholVTUfOFyUibwdrtJo KPOVWcRJy/WsKhPGNuSs72WznNFdegedfzyQF+IdldHBUt6QhowlVVFGDhPGC00O YaiQWyoxGBt453NF+2JRtPoDw3kzWaA+UAUDxebz5iiSmPLFAiw7bomcLIOBFBkN gSHrS0t/taKd80HuYlRZ3twje4PwHS+oz4J5XaP6VVpoMf36ek/inP713XfcDRIp /xfRnbVShzlltBAItn8HKIb4WFPtngF3mTYuLt29yIYLepvt768ZIxRl/iE9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUCJzUSKgx5g2/47gg2LSKlasI1jcwHwYDVR0j BBgwFoAUIwk7DlggHTOeqjmDZUKXcp6z1/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTk1YjdkNC0zYWFiLTRiODMtOTRiMi1jNDI2N2IyYWUwYTAvMC8yMzA5M0IwRTU4 MjAxRDMzOUVBQTM5ODM2NTQyOTc3MjlFQjNEN0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwOTNCMEU1ODIwMUQzMzlFQUEzOTgzNjU0Mjk3NzI5RUIz RDdGRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1OTViN2Q0LTNhYWItNGI4My05 NGIyLWM0MjY3YjJhZTBhMC8wLzMxMzAzMzJlMzEzNjM2MmUzMjMxMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM1Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnptUwDQYJ KoZIhvcNAQELBQADggEBAIUIRWN7msEBcBgBCXaXfqYT/qUZsijJkZnJQDMPzrOu x0sQKJq4cQLu+HnfCn52lekg4pMx0g3wQaU1uJaMtdkHaHr7iqafgSXALUs4AtDX ktIXJaUs8RHvhhVrKoSrX8ZEnpnzO5IeiqkRwcuz+2pl582b5BNRdDLH4dJ3popw peHJoE3/R6K5HUJv+lSaEqxL9nbNTId3BrcE/qzMm1r8pe04y69OT1hUJJKUF3HX DkoXnj01UNipqQSX8gFUJD6vMs1oMk8sOtJEfIz8V62i/hOZuSCAZ7OcUbwCL2kr r1tGl6bTyyRcSDqaqm5p2UUD3WXLWLbZ06F3e/GGT0k= -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:18 2024 by rpki-client on console-ams.rpki-client.org