$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e203338313635.roa File: 3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (raw, json) Hash identifier: eQNIDRpBhyzoLVmUigotZSDbmAV9urZfwsuMtS5aY+Y= Subject key identifier: 71:27:DB:05:DD:B3:CE:5D:94:60:BE:35:BA:01:E1:2A:10:1A:32:8E Certificate issuer: /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053 Certificate serial: 0261EC59E2953FDC69B6F9EFDF2AE7B006420CE3 Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e203338313635.roa Signing time: Mon 26 Feb 2024 02:17:05 +0000 ROA not before: Mon 26 Feb 2024 02:12:05 +0000 ROA not after: Mon 24 Feb 2025 02:17:05 +0000 asID: 38165 IP address blocks: 103.247.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:61:ec:59:e2:95:3f:dc:69:b6:f9:ef:df:2a:e7:b0:06:42:0c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053 Validity Not Before: Feb 26 02:12:05 2024 GMT Not After : Feb 24 02:17:05 2025 GMT Subject: CN=7127DB05DDB3CE5D9460BE35BA01E12A101A328E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:32:e1:fa:df:ea:53:99:e3:bd:49:64:d7:47: 9a:f2:b3:24:dd:11:85:d5:9f:58:23:28:0f:67:8b: e3:bd:9a:41:3a:33:47:21:a0:d7:ee:01:45:72:61: 4b:39:48:8e:31:f8:13:18:05:b1:2f:5e:b5:45:3a: 24:61:b8:f7:89:24:d7:a6:db:6e:20:fc:8a:48:c3: a1:29:03:c9:21:4f:f4:dc:8f:47:d4:35:96:d2:48: cf:5a:1b:a3:5a:ec:72:b2:6f:a8:bc:16:5e:69:37: b6:d6:98:b0:f2:6f:4d:05:b1:0e:f3:bf:c4:c7:04: b9:8b:d4:05:12:b1:a3:1e:a2:0d:7c:14:3a:47:af: 7b:08:93:4a:47:e0:6d:9f:3f:b9:31:1a:c6:ed:79: 86:da:44:e9:ac:ed:1e:4f:76:76:0a:0c:c8:5e:6c: 1a:f0:fd:d5:7b:fc:ef:3b:93:07:7e:be:c7:c3:ba: f3:e5:ec:8c:de:bf:dd:c5:ce:21:cd:68:a2:91:e6: fd:98:6e:f8:f6:be:3e:36:fe:8a:a0:11:7d:b1:8a: 8e:d1:d7:98:73:ea:b9:8a:fc:b5:22:3e:59:42:da: 84:06:8c:5d:12:14:45:4f:ac:37:51:8f:2a:95:30: cb:64:2b:33:47:4c:a3:a0:70:24:80:24:f9:64:43: 66:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:27:DB:05:DD:B3:CE:5D:94:60:BE:35:BA:01:E1:2A:10:1A:32:8E X509v3 Authority Key Identifier: keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e203338313635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.16.0/24 Signature Algorithm: sha256WithRSAEncryption 21:d8:05:0a:a9:c0:9a:d8:02:b1:06:cc:a9:62:a7:c8:dc:33: af:e8:9e:7e:61:60:1c:c8:b3:83:29:f8:a9:54:84:33:d8:41: 02:91:48:ee:8d:b9:e2:49:4d:e4:f3:ef:63:b9:dc:85:23:f5: 75:61:22:3e:97:a3:a1:43:f6:5f:e9:5a:8b:ff:71:4d:c4:fa: 4f:31:51:d5:ee:fa:9b:5c:38:34:30:0b:85:10:62:2f:b3:26: 8a:87:2c:bd:7e:5d:ac:48:c7:4b:29:7e:ec:1a:bc:a7:79:30: d9:14:cd:e7:68:60:63:a9:b0:44:7d:21:1c:55:a2:12:a4:cc: 81:63:32:f8:80:62:54:52:17:3a:73:2c:ac:ef:7d:22:19:83: 89:e9:fe:bf:a8:39:28:af:be:61:9f:b4:48:c6:b3:ec:1b:03: 7f:38:34:45:c6:d9:fc:e0:1c:f9:ee:3b:bf:c5:6c:4e:11:d2: 71:1f:da:18:92:f4:87:fe:52:20:3b:fa:7c:e9:62:9a:64:a1: 58:32:83:4d:b1:94:ad:05:32:30:af:16:c7:ea:11:33:cd:bb: bb:a6:6b:d3:40:21:1a:4e:63:27:ce:ff:54:74:51:4a:b5:b7: 98:8c:4d:6f:37:40:20:00:44:f5:3c:76:28:87:a5:83:31:8b: ec:bc:fc:89 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAmHsWeKVP9xptvnv3yrnsAZCDOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5 NzlEMTA1MzAeFw0yNDAyMjYwMjEyMDVaFw0yNTAyMjQwMjE3MDVaMDMxMTAvBgNV BAMTKDcxMjdEQjA1RERCM0NFNUQ5NDYwQkUzNUJBMDFFMTJBMTAxQTMyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMuH63+pTmeO9SWTXR5rysyTd EYXVn1gjKA9ni+O9mkE6M0choNfuAUVyYUs5SI4x+BMYBbEvXrVFOiRhuPeJJNem 224g/IpIw6EpA8khT/Tcj0fUNZbSSM9aG6Na7HKyb6i8Fl5pN7bWmLDyb00FsQ7z v8THBLmL1AUSsaMeog18FDpHr3sIk0pH4G2fP7kxGsbteYbaROms7R5PdnYKDMhe bBrw/dV7/O87kwd+vsfDuvPl7Izev93FziHNaKKR5v2Ybvj2vj42/oqgEX2xio7R 15hz6rmK/LUiPllC2oQGjF0SFEVPrDdRjyqVMMtkKzNHTKOgcCSAJPlkQ2YhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUcSfbBd2zzl2UYL41ugHhKhAaMo4wHwYDVR0j BBgwFoAU8sIkFL8I/Aiwrr9E+vhahZedEFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQ0OGMxMS1mOGQzLTQ1N2QtOGUyMi04NDg4N2FiMjJhMzAvMC9GMkMyMjQxNEJG MDhGQzA4QjBBRUJGNDRGQUY4NUE4NTk3OUQxMDUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5NzlE MTA1My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04 ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzAzMzJlMzIzNDM3MmUzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3EDANBgkqhkiG 9w0BAQsFAAOCAQEAIdgFCqnAmtgCsQbMqWKnyNwzr+iefmFgHMizgyn4qVSEM9hB ApFI7o254klN5PPvY7nchSP1dWEiPpejoUP2X+lai/9xTcT6TzFR1e76m1w4NDAL hRBiL7MmiocsvX5drEjHSyl+7Bq8p3kw2RTN52hgY6mwRH0hHFWiEqTMgWMy+IBi VFIXOnMsrO99IhmDien+v6g5KK++YZ+0SMaz7BsDfzg0RcbZ/OAc+e47v8VsThHS cR/aGJL0h/5SIDv6fOlimmShWDKDTbGUrQUyMK8Wx+oRM827u6Zr00AhGk5jJ87/ VHRRSrW3mIxNbzdAIABE9Tx2KIelgzGL7Lz8iQ== -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org