$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa File: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (raw, json) Hash identifier: gJZ1sW5BxaKi4OlH0Ko1+AD9dXMVkojyx6OKsnKZ2JU= Subject key identifier: D6:40:F6:FC:0F:F2:FE:EC:41:AE:BF:B9:82:EC:C0:C5:61:58:E8:BE Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Certificate serial: 139B2A8F8756204DEAB811E14DC1D143325CF76C Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa Signing time: Fri 15 Nov 2024 08:00:00 +0000 ROA not before: Fri 15 Nov 2024 07:55:00 +0000 ROA not after: Fri 14 Nov 2025 08:00:00 +0000 asID: 131738 IP address blocks: 103.21.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9b:2a:8f:87:56:20:4d:ea:b8:11:e1:4d:c1:d1:43:32:5c:f7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Validity Not Before: Nov 15 07:55:00 2024 GMT Not After : Nov 14 08:00:00 2025 GMT Subject: CN=D640F6FC0FF2FEEC41AEBFB982ECC0C56158E8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:79:d8:eb:1d:0d:53:ad:11:aa:78:ab:ab: 05:fd:36:54:75:81:6c:f0:4c:3a:c2:a4:31:fc:a1: 17:76:d4:a7:ba:2d:25:e2:ad:52:ea:da:3a:38:ea: ce:eb:e1:aa:40:76:a3:20:a4:6b:95:4e:10:47:da: ab:8c:a8:a5:99:32:ed:b4:12:3f:fb:1e:85:03:1b: bc:c8:52:a9:32:e5:22:9c:21:e7:38:1d:d5:b2:14: 84:98:28:b2:94:9a:48:3c:0b:0c:03:01:6f:db:56: ce:35:bf:2b:82:d3:b0:c3:94:dc:53:bb:ae:57:c0: 1a:10:d1:76:52:36:96:f9:47:b1:7e:60:43:44:c9: fd:f2:1c:92:e5:14:c5:bb:aa:38:d2:d5:61:97:f1: cf:f2:98:3a:ba:b9:eb:cc:f9:e1:e4:19:8a:53:a5: a4:b4:28:6e:03:6e:8d:d5:db:2d:1f:96:44:71:12: e7:0f:ba:f0:01:85:39:67:3e:81:73:92:44:51:75: 4d:91:d1:b5:78:9f:72:b9:a2:6b:0d:03:4f:f1:85: f3:a2:34:e5:f3:18:d4:04:5a:ce:f4:ba:d4:b3:6f: ad:b4:f9:4c:25:6e:2a:46:89:24:c2:21:62:f0:c4: 6e:99:6c:85:db:f9:4f:82:7f:f4:77:85:86:81:41: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:40:F6:FC:0F:F2:FE:EC:41:AE:BF:B9:82:EC:C0:C5:61:58:E8:BE X509v3 Authority Key Identifier: keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.93.0/24 Signature Algorithm: sha256WithRSAEncryption 33:24:3a:03:99:04:f0:a7:79:12:33:f3:ea:da:92:81:0d:8a: cc:7a:ca:f9:96:a6:36:64:42:61:37:19:9c:10:2b:30:19:b0: 3f:9c:a1:42:69:65:d7:4b:41:4d:71:a9:77:f4:4a:b9:fe:b1: 5f:1c:4f:3a:1d:a3:47:8b:f9:dd:25:8c:ec:49:df:f6:a9:e5: 94:6a:d6:9f:44:49:84:f5:6d:d8:70:ab:ce:f6:ba:5e:78:aa: 06:94:fb:67:a9:ee:56:c0:5f:8b:97:58:1e:c8:7e:8c:03:20: 8c:58:94:ad:d2:55:5a:fe:c0:16:e3:5d:9e:7f:f4:48:c4:15: f7:59:50:f5:fc:76:63:fe:a5:2f:59:6b:67:fb:1f:c3:78:a3: 8c:2b:30:bc:14:09:17:1e:4e:26:d0:01:f0:17:2a:6f:e2:df: 77:fc:9e:a7:38:ff:e9:b3:e4:c6:80:5c:44:21:cd:8b:87:c8: da:ad:f9:9a:8c:b6:45:30:bd:f8:c9:6a:7a:c4:f6:39:5a:70: d4:1b:b7:d4:59:40:05:71:76:bd:5c:a0:59:cc:ca:e9:68:30: c8:2b:fb:a8:28:fe:8f:3c:04:c2:91:6a:9a:bf:ea:1b:b8:c7: 02:5c:69:6d:4c:33:0e:59:df:f9:81:41:51:9b:d8:02:d1:15: c5:90:54:60 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUE5sqj4dWIE3quBHhTcHRQzJc92wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2 QkNDMjhFNTAeFw0yNDExMTUwNzU1MDBaFw0yNTExMTQwODAwMDBaMDMxMTAvBgNV BAMTKEQ2NDBGNkZDMEZGMkZFRUM0MUFFQkZCOTgyRUNDMEM1NjE1OEU4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQXnY6x0NU60RqnirqwX9NlR1 gWzwTDrCpDH8oRd21Ke6LSXirVLq2jo46s7r4apAdqMgpGuVThBH2quMqKWZMu20 Ej/7HoUDG7zIUqky5SKcIec4HdWyFISYKLKUmkg8CwwDAW/bVs41vyuC07DDlNxT u65XwBoQ0XZSNpb5R7F+YENEyf3yHJLlFMW7qjjS1WGX8c/ymDq6uevM+eHkGYpT paS0KG4Dbo3V2y0flkRxEucPuvABhTlnPoFzkkRRdU2R0bV4n3K5omsNA0/xhfOi NOXzGNQEWs70utSzb620+UwlbipGiSTCIWLwxG6ZbIXb+U+Cf/R3hYaBQfCZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU1kD2/A/y/uxBrr+5guzAxWFY6L4wHwYDVR0j BBgwFoAUghBJu9IsM1pQhQ8WqxWcDGvMKOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4ZTE4ZC1hMDQ3LTQ1OTAtOWU1Ni00NjRhNzNlMjNjNmMvMC84MjEwNDlCQkQy MkMzMzVBNTA4NTBGMTZBQjE1OUMwQzZCQ0MyOEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2QkND MjhFNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkZThlMThkLWEwNDctNDU5MC05 ZTU2LTQ2NGE3M2UyM2M2Yy8wLzMxMzAzMzJlMzIzMTJlMzkzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMTM3MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcVXTANBgkqhkiG 9w0BAQsFAAOCAQEAMyQ6A5kE8Kd5EjPz6tqSgQ2KzHrK+ZamNmRCYTcZnBArMBmw P5yhQmll10tBTXGpd/RKuf6xXxxPOh2jR4v53SWM7Enf9qnllGrWn0RJhPVt2HCr zva6XniqBpT7Z6nuVsBfi5dYHsh+jAMgjFiUrdJVWv7AFuNdnn/0SMQV91lQ9fx2 Y/6lL1lrZ/sfw3ijjCswvBQJFx5OJtAB8Bcqb+Lfd/yepzj/6bPkxoBcRCHNi4fI 2q35moy2RTC9+MlqesT2OVpw1Bu31FlABXF2vVygWczK6WgwyCv7qCj+jzwEwpFq mr/qG7jHAlxpbUwzDlnf+YFBUZvYAtEVxZBUYA== -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:04 2024 by rpki-client on console-fra.rpki-client.org