$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa File: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (raw, json) Hash identifier: 4cVYZh3C8hXn171P/RUENb8aKuR+2otEfieTHKUhFd4= Subject key identifier: B2:53:F7:F0:4F:B3:D6:85:16:07:39:BC:73:D5:2A:1F:E2:61:E8:48 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: F80CF21A6ADCBCFDE64E43BD544DD3F8092A0C Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa Signing time: Tue 24 Sep 2024 17:12:06 +0000 ROA not before: Tue 24 Sep 2024 17:07:06 +0000 ROA not after: Tue 23 Sep 2025 17:12:06 +0000 asID: 133354 IP address blocks: 103.232.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 20:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f8:0c:f2:1a:6a:dc:bc:fd:e6:4e:43:bd:54:4d:d3:f8:09:2a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Sep 24 17:07:06 2024 GMT Not After : Sep 23 17:12:06 2025 GMT Subject: CN=B253F7F04FB3D685160739BC73D52A1FE261E848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:60:9c:22:36:58:02:9a:47:12:7e:b0:14: 39:97:23:2d:a0:85:69:dc:95:e0:da:a0:13:07:c4: a6:1b:26:b6:09:12:fc:c0:f3:89:44:1d:65:59:d9: 57:7c:f0:88:b9:d2:5d:0b:19:81:e4:a2:03:15:fe: 33:d9:3b:eb:c0:2e:47:87:5d:32:aa:f9:fa:8d:91: b2:25:96:e5:27:ed:ca:8c:25:d5:81:f9:3c:88:16: 21:75:d0:3b:9c:ea:61:54:0b:27:2d:a3:13:6b:76: 98:dd:e5:7a:70:03:a0:d1:17:8b:23:5d:fb:ca:b6: ff:aa:6f:26:6a:7e:9b:a9:9b:c8:5c:0d:4b:db:c9: d6:d4:8a:a2:60:21:9d:14:93:f5:4a:22:35:59:6f: a7:fa:f1:48:07:7f:b4:7f:4d:81:3b:6c:a4:f6:f9: c4:d1:9d:1f:ab:a1:65:67:ea:e0:f4:cf:62:8d:0d: 71:1b:fa:a6:2c:cf:fb:6c:42:5b:df:c5:5d:a4:99: dc:7c:37:d8:1a:22:16:a5:e9:55:ee:94:07:b7:7d: 72:95:97:3d:97:9d:c4:c3:41:c7:8f:94:d9:f1:7c: 4a:c8:d1:31:df:2c:7c:fb:0e:af:32:00:3a:68:1f: 6f:06:32:4f:bf:78:42:ca:a4:24:c4:5c:c6:e8:01: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:53:F7:F0:4F:B3:D6:85:16:07:39:BC:73:D5:2A:1F:E2:61:E8:48 X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.232.32.0/23 Signature Algorithm: sha256WithRSAEncryption b3:61:a5:24:46:a8:3d:28:10:99:f4:bf:ce:39:92:3d:45:61: d2:5c:46:dc:5a:9b:ab:25:1e:90:c2:c0:cd:01:80:dc:56:d1: 9b:13:df:8d:68:fc:ac:b6:3c:aa:0f:8d:b8:df:f3:d0:7e:2f: 59:ed:cc:d5:cf:af:b9:85:0d:b5:a6:c2:ba:6f:b0:47:92:88: f0:98:55:18:69:33:d4:db:af:cd:3c:54:5d:df:cd:ce:f9:9b: 2b:bb:e8:08:91:df:a3:d4:0f:5f:4a:68:bd:ea:21:3a:26:52: 2c:67:e3:55:7a:5d:3a:66:3f:04:1d:b1:8f:e6:9f:8b:d7:7f: 10:ac:07:a7:d4:9f:11:e2:14:90:7e:6e:a5:09:34:ca:47:14: d4:35:e7:80:7e:14:24:0e:cf:a4:95:3b:a1:9e:db:ff:ab:a3: bc:e9:cb:b2:ea:98:18:98:9e:cb:24:94:50:98:34:13:e8:16: c9:30:61:d4:8e:a9:b1:f9:4b:24:cf:e2:2c:ab:db:ec:2d:9a: 11:63:82:97:9f:a7:2c:eb:be:81:d0:3d:62:7d:f9:a7:9e:78: ce:a3:36:82:2b:69:11:e7:18:e4:17:36:6b:b5:85:c4:1f:5e: 07:33:90:1a:67:6b:77:a9:93:25:40:c5:4f:90:6e:bf:d8:44: 5a:ec:9c:d1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAPgM8hpq3Lz95k5DvVRN0/gJKgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNDA5MjQxNzA3MDZaFw0yNTA5MjMxNzEyMDZaMDMxMTAvBgNV BAMTKEIyNTNGN0YwNEZCM0Q2ODUxNjA3MzlCQzczRDUyQTFGRTI2MUU4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF32CcIjZYAppHEn6wFDmXIy2g hWncleDaoBMHxKYbJrYJEvzA84lEHWVZ2Vd88Ii50l0LGYHkogMV/jPZO+vALkeH XTKq+fqNkbIlluUn7cqMJdWB+TyIFiF10Duc6mFUCyctoxNrdpjd5XpwA6DRF4sj XfvKtv+qbyZqfpupm8hcDUvbydbUiqJgIZ0Uk/VKIjVZb6f68UgHf7R/TYE7bKT2 +cTRnR+roWVn6uD0z2KNDXEb+qYsz/tsQlvfxV2kmdx8N9gaIhal6VXulAe3fXKV lz2XncTDQcePlNnxfErI0THfLHz7Dq8yADpoH28GMk+/eELKpCTEXMboASBvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUslP38E+z1oUWBzm8c9UqH+Jh6EgwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzZTQ1MDM5LTZlZDAtNDgzZC1h MWI5LWM0ZjQ4NTRjNWNmNS8wLzMxMzAzMzJlMzIzMzMyMmUzMzMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzMzMzMzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+ggMA0GCSqG SIb3DQEBCwUAA4IBAQCzYaUkRqg9KBCZ9L/OOZI9RWHSXEbcWpurJR6QwsDNAYDc VtGbE9+NaPystjyqD4243/PQfi9Z7czVz6+5hQ21psK6b7BHkojwmFUYaTPU26/N PFRd383O+Zsru+gIkd+j1A9fSmi96iE6JlIsZ+NVel06Zj8EHbGP5p+L138QrAen 1J8R4hSQfm6lCTTKRxTUNeeAfhQkDs+klTuhntv/q6O86cuy6pgYmJ7LJJRQmDQT 6BbJMGHUjqmx+Uskz+Isq9vsLZoRY4KXn6cs676B0D1iffmnnnjOozaCK2kR5xjk FzZrtYXEH14HM5AaZ2t3qZMlQMVPkG6/2ERa7JzR -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org