$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131382e302f32332d3234203d3e20313530323633.roa File: 3130332e33312e3131382e302f32332d3234203d3e20313530323633.roa (raw, json) Hash identifier: 9DtyQOYPh7GLf+XRfVmsdw0aXiZ8+Ri4mucHCX341ag= Subject key identifier: E1:A5:A1:3B:F1:BD:FD:CE:94:E2:D7:22:2D:E8:07:84:77:5F:84:48 Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 0AF7B86669C567910EEB28D5255A36AD9DEF3B8B Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131382e302f32332d3234203d3e20313530323633.roa Signing time: Thu 10 Oct 2024 02:00:01 +0000 ROA not before: Thu 10 Oct 2024 01:55:01 +0000 ROA not after: Thu 09 Oct 2025 02:00:01 +0000 asID: 150263 IP address blocks: 103.31.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f7:b8:66:69:c5:67:91:0e:eb:28:d5:25:5a:36:ad:9d:ef:3b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Oct 10 01:55:01 2024 GMT Not After : Oct 9 02:00:01 2025 GMT Subject: CN=E1A5A13BF1BDFDCE94E2D7222DE80784775F8448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:16:f5:a9:cb:9f:5b:ee:79:47:da:a0:2c: 04:0e:fe:42:37:7a:ad:2b:54:27:85:41:71:7c:3c: 2b:35:87:b0:ab:e4:46:97:2d:04:3f:c4:13:01:60: e6:cf:a9:a6:71:29:45:60:07:b8:81:6a:13:fa:03: c0:6c:44:7b:e4:0b:41:d1:b9:a0:de:72:ba:e3:af: fd:58:32:73:1f:d5:be:12:eb:64:c8:e3:c4:90:51: 21:69:66:ff:ac:f9:75:74:6c:66:73:cd:92:7f:d2: 97:e2:b8:1d:cb:a2:9f:c4:2f:b4:e6:0c:95:d6:00: 15:82:62:c3:9a:b3:24:dc:32:d3:95:f7:da:8b:68: 47:d2:ec:16:3e:1e:9a:73:c3:b4:92:f6:d3:62:5e: dd:5f:70:85:fe:fb:c2:3e:98:d9:0e:83:6e:05:81: d9:c6:07:f8:49:3c:8a:63:62:b7:37:63:be:c6:49: 13:9a:d7:c6:43:ed:89:3a:81:e2:04:cb:cc:12:8f: 97:5b:6e:3f:c1:e4:05:cc:ce:22:02:15:70:c1:3b: a2:8f:83:20:6a:47:9b:8c:64:2b:c4:b6:30:6d:05: a9:08:c9:73:89:26:9f:67:b1:cf:67:80:94:19:7d: 0f:df:a8:22:99:8c:b0:a6:7c:5e:35:da:58:c6:3d: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A5:A1:3B:F1:BD:FD:CE:94:E2:D7:22:2D:E8:07:84:77:5F:84:48 X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131382e302f32332d3234203d3e20313530323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.118.0/23 Signature Algorithm: sha256WithRSAEncryption 66:2c:8f:f5:d1:7c:fe:59:b3:b6:93:0c:09:85:11:9d:d5:a9: 88:97:21:ee:ee:6b:10:4f:df:aa:b5:85:02:de:77:f2:e9:74: 9f:9b:cb:d8:f9:e9:34:51:39:11:9f:79:b1:3c:5e:44:e8:1b: a7:25:6c:cf:84:cb:6f:99:92:65:6b:0e:92:1a:c5:48:79:eb: 7a:00:d3:4c:97:45:b1:7c:4b:5f:ad:a7:c7:2b:a1:2d:29:7c: f7:f7:bd:52:93:69:0c:70:b4:d6:b2:b2:b6:b7:91:11:b3:e9: 6d:19:e3:c5:29:eb:54:6b:f7:e1:2a:20:ea:a2:b3:b7:1c:a9: 46:75:9b:ff:f0:b9:84:2c:ce:50:69:5f:56:fa:4f:af:94:7a: 8f:fe:0d:4f:1e:cb:22:c7:f7:89:e8:e4:44:9d:00:0e:89:3a: 16:94:72:f8:b2:2f:64:5a:87:6a:1f:cd:69:b9:6f:65:84:6b: 3c:76:c7:c3:4f:d6:4f:ba:ce:43:10:a1:6e:fa:7c:f5:b1:51: 36:8a:d1:f3:0b:42:9b:e0:f8:c1:46:39:fb:32:d3:9b:e7:19: be:48:87:95:40:83:71:d6:e0:86:60:34:c7:00:c2:41:b8:54: c5:05:56:8f:63:f9:1a:f5:39:7b:24:26:4a:99:a2:1d:bc:71: c1:cf:f7:67 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCve4ZmnFZ5EO6yjVJVo2rZ3vO4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNDEwMTAwMTU1MDFaFw0yNTEwMDkwMjAwMDFaMDMxMTAvBgNV BAMTKEUxQTVBMTNCRjFCREZEQ0U5NEUyRDcyMjJERTgwNzg0Nzc1Rjg0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClKxb1qcufW+55R9qgLAQO/kI3 eq0rVCeFQXF8PCs1h7Cr5EaXLQQ/xBMBYObPqaZxKUVgB7iBahP6A8BsRHvkC0HR uaDecrrjr/1YMnMf1b4S62TI48SQUSFpZv+s+XV0bGZzzZJ/0pfiuB3Lop/EL7Tm DJXWABWCYsOasyTcMtOV99qLaEfS7BY+Hppzw7SS9tNiXt1fcIX++8I+mNkOg24F gdnGB/hJPIpjYrc3Y77GSROa18ZD7Yk6geIEy8wSj5dbbj/B5AXMziICFXDBO6KP gyBqR5uMZCvEtjBtBakIyXOJJp9nsc9ngJQZfQ/fqCKZjLCmfF412ljGPZUBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4aWhO/G9/c6U4tciLegHhHdfhEgwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2Zjc1MDIxLTgzNjgtNDQ4MS05 MjY5LTU5ODBkNmY3Mjk1ZS8wLzMxMzAzMzJlMzMzMTJlMzEzMTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZx92MA0GCSqG SIb3DQEBCwUAA4IBAQBmLI/10Xz+WbO2kwwJhRGd1amIlyHu7msQT9+qtYUC3nfy 6XSfm8vY+ek0UTkRn3mxPF5E6BunJWzPhMtvmZJlaw6SGsVIeet6ANNMl0WxfEtf rafHK6EtKXz3971Sk2kMcLTWsrK2t5ERs+ltGePFKetUa/fhKiDqorO3HKlGdZv/ 8LmELM5QaV9W+k+vlHqP/g1PHssix/eJ6OREnQAOiToWlHL4si9kWodqH81puW9l hGs8dsfDT9ZPus5DEKFu+nz1sVE2itHzC0Kb4PjBRjn7MtOb5xm+SIeVQINx1uCG YDTHAMJBuFTFBVaPY/ka9Tl7JCZKmaIdvHHBz/dn -----END CERTIFICATE-----Generated at Sun Nov 24 10:18:22 2024 by rpki-client on console-fra.rpki-client.org