$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37382e302f32342d3234203d3e203438343635.roa File: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: 0Mft6SvavXvwnqk1PKha21h4HeVqqRzAsVGrT/hkxHM= Subject key identifier: E8:2F:2E:26:07:D3:C3:5D:1B:CA:22:9E:B1:4D:3E:3D:FA:7C:2F:6A Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 307ED0E2D0F95BC10451A250E689972051468D92 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37382e302f32342d3234203d3e203438343635.roa Signing time: Mon 15 Jul 2024 03:14:09 +0000 ROA not before: Mon 15 Jul 2024 03:09:09 +0000 ROA not after: Mon 14 Jul 2025 03:14:09 +0000 asID: 48465 IP address blocks: 103.140.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7e:d0:e2:d0:f9:5b:c1:04:51:a2:50:e6:89:97:20:51:46:8d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Jul 15 03:09:09 2024 GMT Not After : Jul 14 03:14:09 2025 GMT Subject: CN=E82F2E2607D3C35D1BCA229EB14D3E3DFA7C2F6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:78:bc:70:13:d9:26:a6:d7:ff:e6:19:c1: c9:31:dd:4f:4c:72:32:bc:b1:90:26:19:4d:18:91: f7:2b:79:5a:53:d4:45:95:ba:ec:ae:cc:2c:b6:38: f4:cc:7c:13:40:3f:96:3e:02:f5:38:52:b0:56:74: a1:cb:eb:5a:5b:6b:fd:10:da:21:14:97:b0:7f:2d: 49:26:e3:ec:c7:cf:b7:df:0b:eb:7c:5d:30:00:ac: 99:2c:e9:6a:2c:cb:54:9a:00:d8:5f:c7:d5:59:32: ec:79:43:f7:78:1b:96:f5:37:ca:69:2c:90:95:1e: bc:35:6f:a8:67:03:97:d9:02:81:de:d7:25:6b:b0: 9b:36:20:0a:90:b2:9c:01:6d:ec:19:48:b7:8b:68: 7b:39:8a:d0:23:e5:de:24:97:3f:b8:aa:fc:28:8c: b5:e7:be:2a:82:50:f6:d6:83:b0:42:e8:5e:82:36: e3:5e:bd:27:73:16:6c:94:c6:d3:e3:07:5c:e1:3b: 6d:b5:30:b1:4b:46:b2:e3:fd:e6:f8:17:06:5b:98: 85:d6:20:8d:5c:1f:d2:ac:4a:2a:91:62:79:4d:2b: 3e:25:d1:7b:47:14:ac:4f:63:48:56:ac:fa:78:bf: 06:d1:59:01:11:02:e5:45:b9:49:f3:37:5e:93:9f: c0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2F:2E:26:07:D3:C3:5D:1B:CA:22:9E:B1:4D:3E:3D:FA:7C:2F:6A X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/3130332e3134302e37382e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.78.0/24 Signature Algorithm: sha256WithRSAEncryption 68:78:35:e3:c2:9e:a7:e4:e9:90:c2:f7:54:e3:ec:6a:25:72: 1a:2f:50:a4:fd:38:c9:b7:e6:76:67:fc:a5:55:85:b3:22:60: dc:e9:dc:09:af:22:c6:30:03:95:10:8d:5d:74:12:d2:29:1b: 4e:69:1c:75:21:c9:3c:4e:64:61:66:07:25:ec:79:4e:89:70: 43:1f:95:61:91:1d:e3:34:cf:a3:07:c4:e4:be:cc:bb:73:cd: dd:da:0d:6b:72:8d:0e:dc:9c:ea:01:6f:7a:52:52:5a:c8:01: 24:1c:cb:b9:b9:d0:31:8c:73:0f:bb:c1:86:e9:bf:b3:6f:8f: a2:ef:17:ea:78:d7:68:04:ef:d9:3a:c2:fe:e2:79:77:d2:3c: 35:b6:4a:2b:bc:06:a2:0d:d0:ab:5f:c9:c3:86:c0:54:4d:63: 88:94:d2:e8:00:c8:4d:f3:ec:b0:54:ae:d2:96:84:3f:16:04: 9a:75:e3:ea:04:10:36:67:5a:96:0a:61:8c:50:f3:cb:6f:d7: 5e:d1:a9:8f:76:c1:8d:49:1a:71:08:a6:51:b6:76:1d:dc:f5: c0:01:1b:5f:3c:ce:2e:c8:57:65:2f:48:7b:08:39:d2:91:b9: c3:51:12:75:2b:ff:ff:b9:41:78:e6:3a:03:cc:5d:e2:b1:be: 1c:32:c3:e8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMH7Q4tD5W8EEUaJQ5omXIFFGjZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNDA3MTUwMzA5MDlaFw0yNTA3MTQwMzE0MDlaMDMxMTAvBgNV BAMTKEU4MkYyRTI2MDdEM0MzNUQxQkNBMjI5RUIxNEQzRTNERkE3QzJGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYwXi8cBPZJqbX/+YZwckx3U9M cjK8sZAmGU0YkfcreVpT1EWVuuyuzCy2OPTMfBNAP5Y+AvU4UrBWdKHL61pba/0Q 2iEUl7B/LUkm4+zHz7ffC+t8XTAArJks6Wosy1SaANhfx9VZMux5Q/d4G5b1N8pp LJCVHrw1b6hnA5fZAoHe1yVrsJs2IAqQspwBbewZSLeLaHs5itAj5d4klz+4qvwo jLXnviqCUPbWg7BC6F6CNuNevSdzFmyUxtPjB1zhO221MLFLRrLj/eb4FwZbmIXW II1cH9KsSiqRYnlNKz4l0XtHFKxPY0hWrPp4vwbRWQERAuVFuUnzN16Tn8DrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU6C8uJgfTw10byiKesU0+Pfp8L2owHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3M2FiNzlkLTAwZDUtNDljYi1h YzEwLTNiZDRmMjM4NmJjNi8wLzMxMzAzMzJlMzEzNDMwMmUzNzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeMTjANBgkqhkiG 9w0BAQsFAAOCAQEAaHg148Kep+TpkML3VOPsaiVyGi9QpP04ybfmdmf8pVWFsyJg 3OncCa8ixjADlRCNXXQS0ikbTmkcdSHJPE5kYWYHJex5TolwQx+VYZEd4zTPowfE 5L7Mu3PN3doNa3KNDtyc6gFvelJSWsgBJBzLubnQMYxzD7vBhum/s2+Pou8X6njX aATv2TrC/uJ5d9I8NbZKK7wGog3Qq1/Jw4bAVE1jiJTS6ADITfPssFSu0paEPxYE mnXj6gQQNmdalgphjFDzy2/XXtGpj3bBjUkacQimUbZ2Hdz1wAEbXzzOLshXZS9I ewg50pG5w1ESdSv//7lBeOY6A8xd4rG+HDLD6A== -----END CERTIFICATE-----Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org