$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa File: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (raw, json) Hash identifier: QH7Y9dSNNwVfjFATImLxIsLTzx63Mso63M02HNkYnI0= Subject key identifier: 7F:50:49:70:36:5A:E5:1B:D0:D0:B8:6E:39:85:43:BF:8D:F5:0D:D1 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 63927AF369C680AB49BB000A0837957A9DFC4A2B Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa Signing time: Mon 15 Apr 2024 10:00:01 +0000 ROA not before: Mon 15 Apr 2024 09:55:01 +0000 ROA not after: Mon 14 Apr 2025 10:00:01 +0000 asID: 149383 IP address blocks: 103.181.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:92:7a:f3:69:c6:80:ab:49:bb:00:0a:08:37:95:7a:9d:fc:4a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Apr 15 09:55:01 2024 GMT Not After : Apr 14 10:00:01 2025 GMT Subject: CN=7F504970365AE51BD0D0B86E398543BF8DF50DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:97:10:c8:ad:71:9d:f7:76:61:32:bd:4c: 86:91:76:71:80:8f:74:9a:24:08:38:1e:c0:59:ec: f6:94:8e:a3:84:fd:2c:5c:ad:42:f2:70:7d:c0:f0: 28:09:ff:98:d1:10:73:2e:74:5d:c6:76:f3:8d:30: 7c:25:85:00:e1:0a:6e:d9:f3:4f:bd:46:62:f2:34: a9:b9:7d:ff:a0:9e:77:da:27:88:20:6a:84:39:95: 40:e1:87:ad:1e:30:de:bc:68:e3:e2:e2:92:2c:71: 7f:94:2e:93:13:c9:75:3b:b9:b0:e7:0b:85:81:86: 2f:7c:7c:17:43:5d:0c:ca:26:5b:df:e7:3e:be:cf: d8:c4:27:d1:16:1b:f7:56:3a:99:ed:55:ff:57:ef: 92:1d:60:5a:37:52:ea:84:52:0d:26:5f:27:59:f1: d3:8b:93:ea:b9:4f:81:de:e0:54:ad:34:62:2e:e2: 12:93:36:6a:fc:de:72:27:ef:25:7f:11:95:75:b5: 26:a1:27:f2:7e:af:db:ef:b0:d4:8f:61:cc:bd:77: b3:7d:a2:f4:fa:70:c9:a3:f5:9d:82:d2:6d:e5:63: ce:95:af:82:54:80:4c:1a:ec:9f:69:ac:e9:dc:44: 74:0d:f2:d9:7e:ab:00:9b:10:43:74:8f:8e:e9:6c: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:50:49:70:36:5A:E5:1B:D0:D0:B8:6E:39:85:43:BF:8D:F5:0D:D1 X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.138.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:ac:ac:99:89:57:17:26:05:ba:5d:3e:09:b6:81:fb:d3:eb: b5:c2:ca:b8:51:31:00:a2:05:8e:22:c9:4e:3c:82:9b:54:25: d9:dd:72:18:ee:1f:be:d3:94:29:61:76:1f:82:71:d1:08:a0: 05:54:59:7e:25:9e:a1:3d:1d:e2:2f:53:1a:dd:38:a7:1e:7f: 61:58:97:7b:af:29:2e:eb:d6:bd:79:9d:ff:b6:aa:c1:02:98: a3:fb:3b:76:38:fd:b8:6a:16:05:64:ef:0f:b5:0b:41:05:ad: a8:d0:cb:35:06:b2:2d:7e:a5:d6:61:46:20:55:e5:f7:28:20: bb:0a:f2:42:dd:00:d9:4e:19:df:d6:2e:69:d9:53:fa:c8:d0: 63:8e:8c:60:c7:dd:d3:1e:37:f2:b1:8f:56:4c:2f:93:e9:08: d5:c6:0b:1c:1f:fe:3d:fd:7a:1b:ea:b6:df:34:68:f1:02:0a: a8:43:26:24:a9:91:5a:35:e0:9e:da:4a:40:e4:77:e4:bc:97: 0b:e4:af:be:bd:df:2b:d4:8c:a7:05:b6:ab:81:b9:25:fa:25: 18:ed:2e:d2:74:19:29:db:1c:e0:cc:54:b1:46:13:6a:13:d9: b4:44:3f:69:94:19:3d:14:12:9b:56:d7:f3:24:1e:9a:69:11: 62:37:d0:96 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUY5J682nGgKtJuwAKCDeVep38SiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNDA0MTUwOTU1MDFaFw0yNTA0MTQxMDAwMDFaMDMxMTAvBgNV BAMTKDdGNTA0OTcwMzY1QUU1MUJEMEQwQjg2RTM5ODU0M0JGOERGNTBERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGpcQyK1xnfd2YTK9TIaRdnGA j3SaJAg4HsBZ7PaUjqOE/SxcrULycH3A8CgJ/5jREHMudF3GdvONMHwlhQDhCm7Z 80+9RmLyNKm5ff+gnnfaJ4ggaoQ5lUDhh60eMN68aOPi4pIscX+ULpMTyXU7ubDn C4WBhi98fBdDXQzKJlvf5z6+z9jEJ9EWG/dWOpntVf9X75IdYFo3UuqEUg0mXydZ 8dOLk+q5T4He4FStNGIu4hKTNmr83nIn7yV/EZV1tSahJ/J+r9vvsNSPYcy9d7N9 ovT6cMmj9Z2C0m3lY86Vr4JUgEwa7J9prOncRHQN8tl+qwCbEEN0j47pbJ95AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUf1BJcDZa5RvQ0LhuOYVDv431DdEwHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3YTExMGU4LWI4YzItNDI3Ny1i ZWIzLTkyYWE1YjM2OTBmMC8wLzMxMzAzMzJlMzEzODMxMmUzMTMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM4MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntYowDQYJ KoZIhvcNAQELBQADggEBAB2srJmJVxcmBbpdPgm2gfvT67XCyrhRMQCiBY4iyU48 gptUJdndchjuH77TlClhdh+CcdEIoAVUWX4lnqE9HeIvUxrdOKcef2FYl3uvKS7r 1r15nf+2qsECmKP7O3Y4/bhqFgVk7w+1C0EFrajQyzUGsi1+pdZhRiBV5fcoILsK 8kLdANlOGd/WLmnZU/rI0GOOjGDH3dMeN/Kxj1ZML5PpCNXGCxwf/j39ehvqtt80 aPECCqhDJiSpkVo14J7aSkDkd+S8lwvkr7693yvUjKcFtquBuSX6JRjtLtJ0GSnb HODMVLFGE2oT2bREP2mUGT0UEptW1/MkHpppEWI30JY= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org