$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa File: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (raw, json) Hash identifier: yRanOZGnih6RR4ZAoNL3Hr2Kj0Og2jieWRKzIVb/EXs= Subject key identifier: 33:6F:51:3E:93:26:51:15:DD:64:E7:67:79:96:88:6E:5C:83:AB:6B Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 612C0DA68970BA9F1F58C9216FAA000359EFF464 Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa Signing time: Thu 19 Sep 2024 20:00:00 +0000 ROA not before: Thu 19 Sep 2024 19:55:00 +0000 ROA not after: Thu 18 Sep 2025 20:00:00 +0000 asID: 138866 IP address blocks: 103.142.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:2c:0d:a6:89:70:ba:9f:1f:58:c9:21:6f:aa:00:03:59:ef:f4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Sep 19 19:55:00 2024 GMT Not After : Sep 18 20:00:00 2025 GMT Subject: CN=336F513E93265115DD64E7677996886E5C83AB6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:61:8c:68:a8:7f:15:3d:6e:4c:2f:86:27: 37:6d:6b:fc:ce:76:0b:3e:0c:24:04:46:92:8c:d1: ed:30:2c:cc:d4:30:fe:31:d6:59:3b:38:28:77:fe: b7:db:d5:a1:ae:17:a0:a0:91:43:6b:50:bb:dd:43: 68:f3:3f:22:e0:34:16:94:2c:10:69:83:2d:79:2e: 11:32:4b:8a:11:9a:64:ed:d7:32:d8:a4:d6:d7:c9: 90:23:f2:4f:2b:67:b5:e3:96:bc:5a:1c:88:27:bb: 48:b3:d7:e1:2f:4f:4b:24:be:e5:1b:91:6a:0b:a6: ed:b8:46:75:89:c4:ff:71:a9:09:f5:70:d3:bf:c8: df:da:49:11:4e:0d:65:d6:74:b9:b6:e6:d8:45:06: df:dc:ea:d5:54:ca:16:6a:b4:47:21:d4:e8:61:e3: 2c:cc:56:31:d1:8c:89:69:ef:36:26:38:5f:ea:7e: 72:96:81:ef:f6:9e:9f:fe:d1:48:f7:21:80:28:95: dd:dc:d3:31:75:d3:cd:00:2d:f2:53:24:96:41:18: 58:8b:83:1b:6c:ee:5d:6d:dd:e7:50:d8:9e:7b:79: 9c:ca:90:d3:2d:7c:9d:a5:6d:d4:9a:87:a2:42:a2: 09:f8:8d:7d:9c:87:be:ea:af:97:19:b4:f3:1e:e6: 42:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6F:51:3E:93:26:51:15:DD:64:E7:67:79:96:88:6E:5C:83:AB:6B X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.194.0/24 Signature Algorithm: sha256WithRSAEncryption 54:96:0e:3d:d0:2a:ca:d3:3c:a1:02:c1:2d:41:04:f3:65:c6: 97:e9:3b:2b:6b:a6:45:79:cc:39:3c:fe:66:00:7a:a4:de:ff: e5:7a:cf:69:61:7b:9b:d2:9f:05:17:e3:db:1f:0a:eb:e4:b0: 5c:1c:84:68:b9:a4:1f:d7:eb:d9:41:eb:0f:e5:29:20:c1:90: 1f:b1:17:56:7a:6a:f7:ef:30:72:02:75:98:32:6d:b1:fd:bb: 09:8f:f5:34:b4:ab:e3:80:ff:f4:c4:36:87:38:b9:00:c6:9c: 31:1b:a5:17:a7:d3:ea:56:2c:ba:1b:3b:05:73:9b:24:a3:c8: 0a:75:ed:39:f7:c9:f1:3a:0c:3c:b5:c5:2c:cc:4e:99:81:c3: d6:c2:e4:a0:69:5c:9b:b4:3c:b1:39:a4:b5:76:7f:b2:7c:2f: ea:20:f2:ab:a1:26:b6:8e:24:e8:99:31:7b:36:ba:d5:84:29: d8:d0:aa:a9:6d:23:ae:bf:95:e4:10:82:1f:c1:b8:c9:c3:a8: f9:a5:70:df:77:7b:f1:16:4e:87:6b:0d:d1:1e:d5:cb:a1:e7: 16:5c:1e:25:9e:37:82:1a:a4:a6:55:9b:38:55:e4:f6:6a:a5: 58:99:65:6c:2b:9d:c9:95:00:1c:ed:06:d7:53:fa:a0:1d:a5: 32:b8:6d:5c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYSwNpolwup8fWMkhb6oAA1nv9GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNDA5MTkxOTU1MDBaFw0yNTA5MTgyMDAwMDBaMDMxMTAvBgNV BAMTKDMzNkY1MTNFOTMyNjUxMTVERDY0RTc2Nzc5OTY4ODZFNUM4M0FCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDES2GMaKh/FT1uTC+GJzdta/zO dgs+DCQERpKM0e0wLMzUMP4x1lk7OCh3/rfb1aGuF6CgkUNrULvdQ2jzPyLgNBaU LBBpgy15LhEyS4oRmmTt1zLYpNbXyZAj8k8rZ7XjlrxaHIgnu0iz1+EvT0skvuUb kWoLpu24RnWJxP9xqQn1cNO/yN/aSRFODWXWdLm25thFBt/c6tVUyhZqtEch1Ohh 4yzMVjHRjIlp7zYmOF/qfnKWge/2np/+0Uj3IYAold3c0zF1080ALfJTJJZBGFiL gxts7l1t3edQ2J57eZzKkNMtfJ2lbdSah6JCogn4jX2ch77qr5cZtPMe5kKnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUM29RPpMmURXdZOdneZaIblyDq2swHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyYWEyZDEwLTNmYWEtNDI3Mi1i ZTFmLTgxMDI5NTdiNjVlNi8wLzMxMzAzMzJlMzEzNDMyMmUzMTM5MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjsIwDQYJ KoZIhvcNAQELBQADggEBAFSWDj3QKsrTPKECwS1BBPNlxpfpOytrpkV5zDk8/mYA eqTe/+V6z2lhe5vSnwUX49sfCuvksFwchGi5pB/X69lB6w/lKSDBkB+xF1Z6avfv MHICdZgybbH9uwmP9TS0q+OA//TENoc4uQDGnDEbpRen0+pWLLobOwVzmySjyAp1 7Tn3yfE6DDy1xSzMTpmBw9bC5KBpXJu0PLE5pLV2f7J8L+og8quhJraOJOiZMXs2 utWEKdjQqqltI66/leQQgh/BuMnDqPmlcN93e/EWTodrDdEe1cuh5xZcHiWeN4Ia pKZVmzhV5PZqpViZZWwrncmVABztBtdT+qAdpTK4bVw= -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:52 2024 by rpki-client on console-ams.rpki-client.org