$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa File: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (raw, json) Hash identifier: Qa9xNMpYcP+9pVUvEHAtgK4Z1jgnm3adWlqql9bkWPc= Subject key identifier: 24:9C:F5:12:5A:F6:8A:25:CD:9C:DA:FD:20:98:AB:5D:4D:A7:07:50 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 452B0C57024D2313DB7CB310486B9C08AC4C035E Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa Signing time: Thu 14 Nov 2024 15:00:02 +0000 ROA not before: Thu 14 Nov 2024 14:55:02 +0000 ROA not after: Thu 13 Nov 2025 15:00:02 +0000 asID: 152057 IP address blocks: 103.164.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 21:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2b:0c:57:02:4d:23:13:db:7c:b3:10:48:6b:9c:08:ac:4c:03:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Nov 14 14:55:02 2024 GMT Not After : Nov 13 15:00:02 2025 GMT Subject: CN=249CF5125AF68A25CD9CDAFD2098AB5D4DA70750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:fc:3d:fc:63:82:01:2d:72:9b:da:86:23: 1b:0b:69:57:f2:39:3c:3b:4a:34:f0:03:b4:ee:94: ba:48:0d:cd:fa:cb:f7:b9:b4:89:3c:e8:e9:84:de: 76:c0:40:7d:bb:cc:50:5c:44:ae:22:72:65:6d:7a: 28:85:47:28:c8:8f:28:84:ef:40:90:a9:e4:cd:a0: 02:28:99:a9:2f:c1:06:ee:4d:d5:04:57:c8:e1:fe: 6d:c0:4a:58:21:f7:04:79:bc:a7:f5:5e:e7:c2:98: 3d:50:51:7c:2b:d6:4b:48:4f:93:d7:1f:4e:b5:d7: 6d:19:da:d7:a3:27:d5:4f:6a:8b:bc:dc:a2:2d:e2: a5:df:ba:e8:e6:eb:ce:20:5b:c8:47:ff:b2:c1:69: a2:8c:ae:22:d8:3f:c5:54:b4:b7:3b:e3:dc:92:0c: 0c:22:75:4a:c5:97:84:7c:4f:df:c1:fd:31:10:88: ac:0d:19:28:62:3f:30:12:23:8f:2d:fb:97:f3:b6: 27:dd:a4:2b:81:23:a6:ff:46:72:4b:87:0c:e3:5e: ba:9c:f2:c1:f5:85:73:ea:d7:14:0f:1f:6c:a8:c4: a4:04:4a:14:1b:57:69:a3:e0:6f:68:49:20:2a:27: f3:a0:15:4a:57:06:35:36:a0:55:03:36:69:c6:15: 2e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9C:F5:12:5A:F6:8A:25:CD:9C:DA:FD:20:98:AB:5D:4D:A7:07:50 X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.14.0/23 Signature Algorithm: sha256WithRSAEncryption 66:29:24:c0:bd:4e:08:16:17:a3:98:6d:31:c7:96:fd:72:4a: 22:21:72:17:73:73:79:fb:9d:db:1d:d5:90:95:b3:87:87:89: 49:86:19:25:96:9a:4d:3d:88:32:8f:0b:56:c0:db:ba:09:48: 30:b3:8f:41:a8:89:a5:a6:28:64:d0:b1:3f:99:1b:4a:07:60: 69:a1:ff:4b:fa:3d:ba:93:d3:2d:a5:ab:0c:7e:65:4c:7e:c8: 2b:45:47:5c:66:90:9b:36:9e:0a:62:fd:0f:27:07:bb:79:0e: 7b:5f:9a:c6:a4:6a:7d:1f:18:13:30:75:60:56:9f:00:4d:ea: 14:18:82:c3:1c:f4:04:81:75:57:ed:19:85:55:d1:71:45:43: 97:c2:f8:34:95:16:a4:91:4c:fb:91:28:d6:d4:29:ca:67:13: 19:a5:24:0e:56:0f:26:dd:f0:99:05:ca:7e:c9:5b:b2:65:f0: 7f:5f:8a:45:7a:e3:f2:b0:a3:ad:c8:e0:65:1a:ae:b7:bd:07: c6:7c:f6:51:64:a4:8a:17:e8:e6:ab:ac:33:a8:8a:f3:e8:d0: f5:a7:3e:26:47:49:ef:8c:ab:69:f5:09:34:07:69:17:ed:93: 15:a6:eb:fe:85:0e:7c:30:a9:60:ce:42:0a:a1:53:32:18:61: 47:41:40:b6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURSsMVwJNIxPbfLMQSGucCKxMA14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNDExMTQxNDU1MDJaFw0yNTExMTMxNTAwMDJaMDMxMTAvBgNV BAMTKDI0OUNGNTEyNUFGNjhBMjVDRDlDREFGRDIwOThBQjVENERBNzA3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8/w9/GOCAS1ym9qGIxsLaVfy OTw7SjTwA7TulLpIDc36y/e5tIk86OmE3nbAQH27zFBcRK4icmVteiiFRyjIjyiE 70CQqeTNoAIomakvwQbuTdUEV8jh/m3ASlgh9wR5vKf1XufCmD1QUXwr1ktIT5PX H061120Z2tejJ9VPaou83KIt4qXfuujm684gW8hH/7LBaaKMriLYP8VUtLc749yS DAwidUrFl4R8T9/B/TEQiKwNGShiPzASI48t+5fztifdpCuBI6b/RnJLhwzjXrqc 8sH1hXPq1xQPH2yoxKQEShQbV2mj4G9oSSAqJ/OgFUpXBjU2oFUDNmnGFS4xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJJz1Elr2iiXNnNr9IJirXU2nB1AwHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmN2FlODJmLTUzN2UtNDYyNi1i ZTllLTMzMzk0YTJkYzk2OS8wLzMxMzAzMzJlMzEzNjM0MmUzMTM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6QOMA0GCSqG SIb3DQEBCwUAA4IBAQBmKSTAvU4IFhejmG0xx5b9ckoiIXIXc3N5+53bHdWQlbOH h4lJhhkllppNPYgyjwtWwNu6CUgws49BqImlpihk0LE/mRtKB2Bpof9L+j26k9Mt pasMfmVMfsgrRUdcZpCbNp4KYv0PJwe7eQ57X5rGpGp9HxgTMHVgVp8ATeoUGILD HPQEgXVX7RmFVdFxRUOXwvg0lRakkUz7kSjW1CnKZxMZpSQOVg8m3fCZBcp+yVuy ZfB/X4pFeuPysKOtyOBlGq63vQfGfPZRZKSKF+jmq6wzqIrz6ND1pz4mR0nvjKtp 9Qk0B2kX7ZMVpuv+hQ58MKlgzkIKoVMyGGFHQUC2 -----END CERTIFICATE-----Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org