$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa File: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (raw, json) Hash identifier: d/FCKrPQVsgurMvNGz2oQ2iPyKXsXoRnlEaxs4nJ5ko= Subject key identifier: 30:81:46:9B:CD:C9:1A:89:2A:47:5D:76:8B:38:8E:B0:9E:C8:4C:02 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 6848AB4E30B71D9E9A6DA7C4CE8BE7AC76C1761E Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa Signing time: Thu 14 Nov 2024 06:00:00 +0000 ROA not before: Thu 14 Nov 2024 05:55:00 +0000 ROA not after: Thu 13 Nov 2025 06:00:00 +0000 asID: 151526 IP address blocks: 103.249.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:48:ab:4e:30:b7:1d:9e:9a:6d:a7:c4:ce:8b:e7:ac:76:c1:76:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Nov 14 05:55:00 2024 GMT Not After : Nov 13 06:00:00 2025 GMT Subject: CN=3081469BCDC91A892A475D768B388EB09EC84C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:26:39:3b:76:d4:3b:b2:d0:ee:a9:92:a3: ca:c9:e7:cf:34:e9:0f:c0:bb:6a:e7:a6:95:2f:2c: bc:78:c5:8c:22:42:81:9c:54:d8:2a:da:ef:b2:b2: f3:77:6c:0c:3a:64:2c:fa:1e:bb:e7:10:73:1d:3f: fa:b1:1a:82:6f:b7:d9:b4:24:57:77:a0:cb:5e:d9: e3:df:18:0d:3a:65:29:69:89:c5:1c:5f:c0:e4:01: b6:d2:03:bc:d0:35:aa:c6:bf:03:64:d6:55:7b:97: a3:0c:9a:28:40:c5:05:42:80:f2:cf:78:54:ac:09: fd:33:d4:69:0e:24:8d:64:7c:68:68:a2:73:f7:74: 21:ce:12:f8:63:ae:4b:31:a6:b1:e2:db:24:53:c2: 8b:bd:f6:42:7a:a8:ad:8f:81:07:76:09:75:d3:0f: b8:f1:ac:ac:c8:57:0a:1b:4e:47:aa:ea:ec:a1:ab: 0c:28:b1:a0:11:c3:4d:af:40:af:21:a6:8d:2d:2b: 03:62:9e:d4:c6:64:a9:de:eb:bb:a6:e0:79:86:0d: 02:59:7c:3d:13:da:d6:fd:fa:aa:68:a8:68:52:bb: d6:38:e5:54:72:ab:4c:19:03:48:df:0f:8a:5d:dc: 01:e2:0a:63:99:5e:83:64:5f:31:d2:08:b7:29:be: 24:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:81:46:9B:CD:C9:1A:89:2A:47:5D:76:8B:38:8E:B0:9E:C8:4C:02 X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.249.226.0/24 Signature Algorithm: sha256WithRSAEncryption 07:4d:5d:2a:29:df:38:d9:9f:44:c7:e4:8c:83:dc:5d:89:5a: e3:52:01:46:ca:9e:66:f8:e5:3b:5a:a4:82:d5:88:09:14:bb: 75:38:df:54:26:8f:37:4a:f1:46:ab:6c:c7:e2:32:b1:cd:73: 84:41:dd:56:bf:7a:18:3d:c9:8f:41:bf:93:dc:87:80:67:11: ac:13:87:a4:be:5b:5b:82:a1:9a:a1:2c:67:d0:20:05:79:0c: 91:74:4a:78:fc:73:ff:e7:73:0c:94:09:30:53:80:66:01:a4: 78:b4:5d:7a:2b:88:93:6a:bf:c3:86:59:df:51:4b:72:fa:61: 49:7f:31:f2:22:41:2f:ba:ba:cf:cc:c9:9c:59:f9:ac:7a:b2: ac:5c:14:52:0f:2a:06:67:42:7f:d9:93:07:4d:9b:df:3c:4b: 58:fc:e1:d5:d0:2f:40:7b:8f:d7:af:db:81:bf:df:d5:7f:0b: 39:dd:e6:cf:3a:39:a5:03:79:28:72:71:0a:00:82:29:b2:c8: 49:a0:cb:66:9a:3f:7c:10:39:b4:53:c6:12:99:05:00:1e:3f: 0c:8d:4d:78:1d:9c:14:ef:48:fa:f5:88:b2:84:1c:d2:fe:d4: 0b:66:89:60:11:ae:9e:b9:23:c8:6d:4b:f7:41:d5:db:ef:59: 6c:93:ef:b2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUaEirTjC3HZ6abafEzovnrHbBdh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNDExMTQwNTU1MDBaFw0yNTExMTMwNjAwMDBaMDMxMTAvBgNV BAMTKDMwODE0NjlCQ0RDOTFBODkyQTQ3NUQ3NjhCMzg4RUIwOUVDODRDMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbMiY5O3bUO7LQ7qmSo8rJ5880 6Q/Au2rnppUvLLx4xYwiQoGcVNgq2u+ysvN3bAw6ZCz6HrvnEHMdP/qxGoJvt9m0 JFd3oMte2ePfGA06ZSlpicUcX8DkAbbSA7zQNarGvwNk1lV7l6MMmihAxQVCgPLP eFSsCf0z1GkOJI1kfGhoonP3dCHOEvhjrksxprHi2yRTwou99kJ6qK2PgQd2CXXT D7jxrKzIVwobTkeq6uyhqwwosaARw02vQK8hpo0tKwNintTGZKne67um4HmGDQJZ fD0T2tb9+qpoqGhSu9Y45VRyq0wZA0jfD4pd3AHiCmOZXoNkXzHSCLcpviRPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUMIFGm83JGokqR112iziOsJ7ITAIwHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3OGE4YjM5LTNhZTMtNGRlNy05 MzY2LTIxZjllYTA0MzI1YS8wLzMxMzAzMzJlMzIzNDM5MmUzMjMyMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTMyMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn+eIwDQYJ KoZIhvcNAQELBQADggEBAAdNXSop3zjZn0TH5IyD3F2JWuNSAUbKnmb45TtapILV iAkUu3U431QmjzdK8UarbMfiMrHNc4RB3Va/ehg9yY9Bv5Pch4BnEawTh6S+W1uC oZqhLGfQIAV5DJF0Snj8c//ncwyUCTBTgGYBpHi0XXoriJNqv8OGWd9RS3L6YUl/ MfIiQS+6us/MyZxZ+ax6sqxcFFIPKgZnQn/ZkwdNm988S1j84dXQL0B7j9ev24G/ 39V/Cznd5s86OaUDeShycQoAgimyyEmgy2aaP3wQObRTxhKZBQAePwyNTXgdnBTv SPr1iLKEHNL+1AtmiWARrp65I8htS/dB1dvvWWyT77I= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:35 2024 by rpki-client on console-ams.rpki-client.org