$ rpki-client -vvf repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa File: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (raw, json) Hash identifier: 2i8HfdlFIHezHTi1m8fyUROS/IcCg2re+ftnVgBoAd4= Subject key identifier: 94:D6:72:0B:8F:6A:9A:F4:18:94:62:86:2E:CE:5D:7B:4D:FC:77:A7 Certificate issuer: /CN=5B558AD01277C8212C974318B6352FB28BF683AD Certificate serial: 3CE9EFC0E286A15029869DF0F904018EC573B4BA Authority key identifier: 5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa Signing time: Thu 31 Oct 2024 19:00:02 +0000 ROA not before: Thu 31 Oct 2024 18:55:02 +0000 ROA not after: Thu 30 Oct 2025 19:00:02 +0000 asID: 150200 IP address blocks: 103.196.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e9:ef:c0:e2:86:a1:50:29:86:9d:f0:f9:04:01:8e:c5:73:b4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B558AD01277C8212C974318B6352FB28BF683AD Validity Not Before: Oct 31 18:55:02 2024 GMT Not After : Oct 30 19:00:02 2025 GMT Subject: CN=94D6720B8F6A9AF4189462862ECE5D7B4DFC77A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:da:f6:5c:7f:99:0d:51:dd:b7:a9:51:c0: db:46:b2:bd:12:44:eb:a4:f8:3d:87:da:10:e9:7d: 0e:e3:40:ad:aa:cd:fa:f6:2c:36:85:4a:98:94:a7: f8:d2:c5:d5:0c:e2:33:28:43:41:14:48:08:c5:85: b5:42:65:f6:a1:d7:05:fb:34:2e:73:01:9b:dc:d4: 52:3d:08:07:e0:a7:06:17:86:aa:8c:93:7c:88:9f: 97:b9:f2:13:e4:df:5b:0b:c6:f1:53:4d:06:1b:fa: b3:b2:60:aa:14:6c:4a:42:cb:3b:84:85:25:c8:61: d1:c0:b8:74:6d:2e:e2:a9:4d:da:4c:b0:67:1d:df: 75:0b:da:33:46:b9:97:e3:4b:fc:07:fb:76:8b:db: 3b:c5:fe:0b:22:67:12:f5:d4:66:5e:06:8b:ef:12: f5:f8:31:62:d0:1d:a6:da:1b:fe:ac:ad:f4:10:4f: 6f:48:8c:19:51:58:c8:60:42:ec:02:f0:32:30:60: fd:f1:4a:e6:e1:0b:a7:49:17:4f:f4:34:a1:c7:4e: c6:4c:45:1d:76:37:e1:21:9a:5e:f1:ef:28:5d:ad: 31:95:dc:23:db:68:40:af:f4:6a:0f:ef:b3:41:3d: 4a:a1:44:77:00:c0:ac:44:15:c6:2f:aa:85:25:30: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D6:72:0B:8F:6A:9A:F4:18:94:62:86:2E:CE:5D:7B:4D:FC:77:A7 X509v3 Authority Key Identifier: keyid:5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.196.40.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:a9:c9:b4:34:22:02:4e:88:e7:14:27:28:1b:b7:6b:4d:c8: 2d:b6:3f:e8:9d:5f:1c:1e:7a:b9:88:5c:11:a1:1c:c4:38:bd: d2:c0:9c:e2:ef:03:6a:d6:64:89:9c:e0:92:01:f4:82:61:ba: f2:83:5a:6e:81:77:d5:8e:97:31:52:a5:02:65:fe:c3:31:12: 87:26:99:ad:2e:43:8a:fd:ba:04:33:9c:47:87:eb:0c:2e:e3: 71:ee:4e:02:2e:c6:c5:11:83:49:b5:7b:c0:d8:37:3e:b9:12: 91:6c:17:86:4c:e0:d2:7c:93:cd:6c:3f:98:af:34:53:92:22: 00:1e:2b:16:5e:36:b0:7f:f9:70:cf:f5:58:66:fb:e8:6d:57: 4a:64:b6:4b:f7:83:8c:9b:74:ff:7a:9c:e8:fe:ff:6d:a5:61: cb:ba:90:ef:5b:00:5e:a8:e9:4a:41:d6:3a:2d:2d:5c:9c:a5: 0c:07:9f:3b:b0:ca:b3:9e:16:fb:a7:ba:7f:71:76:34:b5:c1: 27:db:da:6e:67:6c:d5:47:c6:65:29:5e:77:7e:21:8c:ea:f3: 5e:49:ad:9c:e7:ec:67:50:9a:3f:de:4a:15:79:ee:f7:3b:8e: 18:b9:03:ea:b6:dd:12:ba:fb:71:94:20:ce:f4:e6:59:df:14: 2f:dc:a5:5a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPOnvwOKGoVAphp3w+QQBjsVztLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4 QkY2ODNBRDAeFw0yNDEwMzExODU1MDJaFw0yNTEwMzAxOTAwMDJaMDMxMTAvBgNV BAMTKDk0RDY3MjBCOEY2QTlBRjQxODk0NjI4NjJFQ0U1RDdCNERGQzc3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGl9r2XH+ZDVHdt6lRwNtGsr0S ROuk+D2H2hDpfQ7jQK2qzfr2LDaFSpiUp/jSxdUM4jMoQ0EUSAjFhbVCZfah1wX7 NC5zAZvc1FI9CAfgpwYXhqqMk3yIn5e58hPk31sLxvFTTQYb+rOyYKoUbEpCyzuE hSXIYdHAuHRtLuKpTdpMsGcd33UL2jNGuZfjS/wH+3aL2zvF/gsiZxL11GZeBovv EvX4MWLQHabaG/6srfQQT29IjBlRWMhgQuwC8DIwYP3xSubhC6dJF0/0NKHHTsZM RR12N+Ehml7x7yhdrTGV3CPbaECv9GoP77NBPUqhRHcAwKxEFcYvqoUlMFQ3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUlNZyC49qmvQYlGKGLs5de038d6cwHwYDVR0j BBgwFoAUW1WK0BJ3yCEsl0MYtjUvsov2g60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTViNGZhNC0zMjhjLTRjZjItYWRlMy1jODY4MTMxZDRlMGQvMC81QjU1OEFEMDEy NzdDODIxMkM5NzQzMThCNjM1MkZCMjhCRjY4M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4QkY2 ODNBRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhNWI0ZmE0LTMyOGMtNGNmMi1h ZGUzLWM4NjgxMzFkNGUwZC8wLzMxMzAzMzJlMzEzOTM2MmUzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8QoMA0GCSqG SIb3DQEBCwUAA4IBAQBMqcm0NCICTojnFCcoG7drTcgttj/onV8cHnq5iFwRoRzE OL3SwJzi7wNq1mSJnOCSAfSCYbryg1pugXfVjpcxUqUCZf7DMRKHJpmtLkOK/boE M5xHh+sMLuNx7k4CLsbFEYNJtXvA2Dc+uRKRbBeGTODSfJPNbD+YrzRTkiIAHisW Xjawf/lwz/VYZvvobVdKZLZL94OMm3T/epzo/v9tpWHLupDvWwBeqOlKQdY6LS1c nKUMB587sMqznhb7p7p/cXY0tcEn29puZ2zVR8ZlKV53fiGM6vNeSa2c5+xnUJo/ 3koVee73O44YuQPqtt0SuvtxlCDO9OZZ3xQv3KVa -----END CERTIFICATE-----Generated at Fri Nov 22 22:09:43 2024 by rpki-client on console-ams.rpki-client.org