$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa File: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (raw, json) Hash identifier: 1TOBRX5MwL8nChJl6awL2w3BUZFHaDBm1061l2puz4s= Subject key identifier: D0:F1:3D:E3:A0:6F:B2:94:DB:DE:0E:5B:CC:90:B2:0B:2F:00:67:A7 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 4CA238E8C668AEFD5E35A5FCF90CC06946C30AE2 Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa Signing time: Sun 22 Sep 2024 13:00:01 +0000 ROA not before: Sun 22 Sep 2024 12:55:01 +0000 ROA not after: Sun 21 Sep 2025 13:00:01 +0000 asID: 140470 IP address blocks: 103.207.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 09:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a2:38:e8:c6:68:ae:fd:5e:35:a5:fc:f9:0c:c0:69:46:c3:0a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Sep 22 12:55:01 2024 GMT Not After : Sep 21 13:00:01 2025 GMT Subject: CN=D0F13DE3A06FB294DBDE0E5BCC90B20B2F0067A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:01:8a:c5:1f:7a:38:54:e3:0a:ca:3f:07: 52:50:43:18:b4:38:e6:9e:b5:d9:07:5b:12:cf:aa: 6d:92:a1:de:b6:c0:5e:7b:0a:21:d4:28:3e:81:29: 25:94:6d:cd:82:90:67:3c:0f:34:67:77:1a:31:53: 8b:e9:92:00:21:1f:99:f0:47:e8:c8:ab:3c:bd:cb: ad:a6:a9:1b:5f:0b:eb:ff:81:8e:33:48:41:2b:21: 3d:cc:71:da:80:4c:93:3d:95:96:54:e8:19:43:d2: 0e:bc:a7:d1:29:f5:dc:e4:9e:5b:47:cb:10:23:a8: f7:3e:0a:d1:32:76:40:46:14:02:da:f1:62:79:48: 12:38:69:3c:37:0b:78:a1:2a:61:78:24:f6:26:62: e3:2a:a4:c3:24:2f:50:12:86:01:90:cf:46:41:72: 51:62:77:e3:e2:cc:78:7c:02:3e:23:c2:13:72:e7: 6e:9a:19:60:f5:bc:40:44:cf:9a:b8:ae:d7:be:77: 68:1d:7c:43:89:e9:a9:5d:56:98:bc:a5:ef:69:16: 8e:03:b2:b2:65:bc:32:2e:53:76:30:3b:e7:b6:1d: 35:68:57:73:cd:a1:bc:58:7b:3e:05:4d:53:7d:51: 47:34:a0:48:fd:c2:ce:95:64:37:cb:7f:b2:ae:b8: 14:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F1:3D:E3:A0:6F:B2:94:DB:DE:0E:5B:CC:90:B2:0B:2F:00:67:A7 X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.207.96.0/22 Signature Algorithm: sha256WithRSAEncryption 04:50:c8:a7:fb:da:83:27:6b:bc:03:fb:f7:b5:20:a5:da:56: 47:d6:fe:ec:22:93:c4:12:bb:62:0a:9e:0e:38:2a:44:31:e0: 49:4b:ad:2a:f1:27:02:bc:e5:4c:a4:f3:0c:da:da:e5:0c:d5: 56:97:8e:fe:10:56:96:f7:e9:1f:8b:a8:08:81:46:c9:b6:5a: f4:88:b1:cb:12:f9:b6:1c:98:14:8b:b2:64:f3:b7:5b:41:fe: d7:bc:b4:a1:d6:c0:2d:9d:80:e4:c9:9e:4b:f1:80:65:12:3d: 3a:de:85:10:c3:2f:30:6b:7e:35:47:5b:37:ce:e4:8c:34:fa: fe:f1:f3:de:c7:1d:1c:70:13:52:e1:87:5c:86:60:11:4f:00: 83:7a:66:a9:c7:fa:74:dd:bd:7f:a0:79:49:ac:97:6a:1e:c3: f2:5f:c4:25:27:ad:02:3e:1d:24:2b:98:62:ce:82:32:98:2b: 22:e7:4b:74:e3:fc:46:ec:a2:bb:94:24:0f:5f:bc:5d:81:19: 86:74:fd:20:dd:c0:12:8b:5d:24:eb:e3:f1:f0:55:d8:1e:87: 04:85:51:36:aa:3c:f3:2c:7c:84:e1:f6:92:64:ca:d4:bf:2c: 2b:00:f4:da:af:df:8e:02:0c:55:57:de:38:e6:21:80:2f:02: bc:bd:6b:44 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTKI46MZorv1eNaX8+QzAaUbDCuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNDA5MjIxMjU1MDFaFw0yNTA5MjExMzAwMDFaMDMxMTAvBgNV BAMTKEQwRjEzREUzQTA2RkIyOTREQkRFMEU1QkNDOTBCMjBCMkYwMDY3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj4AGKxR96OFTjCso/B1JQQxi0 OOaetdkHWxLPqm2Sod62wF57CiHUKD6BKSWUbc2CkGc8DzRndxoxU4vpkgAhH5nw R+jIqzy9y62mqRtfC+v/gY4zSEErIT3McdqATJM9lZZU6BlD0g68p9Ep9dzknltH yxAjqPc+CtEydkBGFALa8WJ5SBI4aTw3C3ihKmF4JPYmYuMqpMMkL1AShgGQz0ZB clFid+PizHh8Aj4jwhNy526aGWD1vEBEz5q4rte+d2gdfEOJ6aldVpi8pe9pFo4D srJlvDIuU3YwO+e2HTVoV3PNobxYez4FTVN9UUc0oEj9ws6VZDfLf7KuuBS1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0PE946BvspTb3g5bzJCyCy8AZ6cwHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNmU0NTY0LTQ4ZjItNDNiNS04 NTA1LTkzYjQ5OGU3ZDhhYi8wLzMxMzAzMzJlMzIzMDM3MmUzOTM2MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ89gMA0GCSqG SIb3DQEBCwUAA4IBAQAEUMin+9qDJ2u8A/v3tSCl2lZH1v7sIpPEErtiCp4OOCpE MeBJS60q8ScCvOVMpPMM2trlDNVWl47+EFaW9+kfi6gIgUbJtlr0iLHLEvm2HJgU i7Jk87dbQf7XvLSh1sAtnYDkyZ5L8YBlEj063oUQwy8wa341R1s3zuSMNPr+8fPe xx0ccBNS4YdchmARTwCDemapx/p03b1/oHlJrJdqHsPyX8QlJ60CPh0kK5hizoIy mCsi50t04/xG7KK7lCQPX7xdgRmGdP0g3cASi10k6+Px8FXYHocEhVE2qjzzLHyE 4faSZMrUvywrAPTar9+OAgxVV9445iGALwK8vWtE -----END CERTIFICATE-----Generated at Fri Nov 22 03:51:03 2024 by rpki-client on console-fra.rpki-client.org