$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa File: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (raw, json) Hash identifier: eciHTxkZmTtOd0DLtjuphtrljkeLG17SRYT7S2YuKMk= Subject key identifier: 0C:B5:71:F0:C6:89:55:6A:9F:AC:C6:3A:BF:DB:03:D2:8F:A8:9E:F1 Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 3DF924B64BD6CF77C2E88FFE5E2CBC626A1A2B9B Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa Signing time: Sat 23 Nov 2024 14:00:00 +0000 ROA not before: Sat 23 Nov 2024 13:55:00 +0000 ROA not after: Sat 22 Nov 2025 14:00:00 +0000 asID: 142392 IP address blocks: 103.171.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f9:24:b6:4b:d6:cf:77:c2:e8:8f:fe:5e:2c:bc:62:6a:1a:2b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Nov 23 13:55:00 2024 GMT Not After : Nov 22 14:00:00 2025 GMT Subject: CN=0CB571F0C689556A9FACC63ABFDB03D28FA89EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cf:ff:8c:6c:1b:10:12:b9:55:9f:32:26:40: eb:b3:66:fa:7c:cb:81:87:0d:29:0f:39:57:cf:dc: d6:a7:f9:c9:68:49:9c:9b:b3:8e:c7:19:75:8a:a2: 8a:61:77:2c:95:38:c0:6f:9a:af:a5:1a:39:79:c8: 9c:e3:73:48:18:be:3c:23:01:b5:ec:a3:fc:46:68: 0e:fe:e9:26:93:20:7d:6c:03:ca:3b:85:22:b8:ae: 79:bb:7f:c0:0c:b3:88:ba:66:94:30:85:f0:f7:87: bf:45:2c:8e:e5:83:9b:2e:90:10:b5:f0:f5:e6:ff: f5:2f:a9:7a:ff:0c:b5:ed:5d:d0:09:a6:ee:94:1f: 69:34:be:30:76:19:e4:ed:41:b3:1b:7c:75:4f:b8: fd:bb:c6:62:46:4d:61:51:a7:5e:a2:92:d6:0c:a1: ce:59:c4:2f:fc:95:cd:11:74:11:39:84:09:49:fc: a5:4c:a0:08:9a:6c:e5:12:67:2f:30:4c:7b:c5:86: 27:41:1c:5a:d6:c5:c8:13:fc:f7:cd:d6:bd:fe:ef: ad:ed:62:5c:92:ee:12:5e:63:96:1f:2f:ab:71:59: c5:ee:11:c0:e4:2f:93:d9:6e:7a:55:62:3b:aa:d3: 87:59:a1:e7:da:f6:5a:0f:b7:4f:cf:70:f2:a5:27: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B5:71:F0:C6:89:55:6A:9F:AC:C6:3A:BF:DB:03:D2:8F:A8:9E:F1 X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.79.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:32:3c:66:cf:83:a9:38:d7:6e:2a:5e:ba:b0:a3:9f:d9:82: 46:15:87:f4:22:52:4f:4f:24:de:53:d6:2c:2f:6b:b0:ea:cb: 6b:c3:c5:ef:29:f0:27:b7:22:08:eb:89:6f:1b:0a:85:9b:82: 92:bf:9c:3d:b1:c1:2d:be:0e:1a:6a:1b:aa:8d:4a:f6:57:30: 9f:ac:50:0c:38:71:5f:a7:a1:1a:a1:d6:4c:81:f1:aa:bd:60: 16:36:fa:1b:94:9a:36:5d:9c:6b:0a:50:f1:53:6b:7b:3f:69: 0f:8c:1b:f4:fe:98:8a:1c:93:4c:56:65:cd:6a:b8:a2:b9:b3: 38:d2:67:aa:1c:ec:8a:60:70:33:6e:bb:b3:e1:95:ba:0b:62: 22:a0:b4:8a:bc:97:89:52:2f:23:ec:72:a9:fb:49:64:e9:42: de:2a:aa:11:8a:49:49:56:2a:15:aa:1b:32:ad:f9:77:c6:c9: 27:c0:da:2f:8e:ab:34:c1:1c:31:e3:88:2e:0f:20:df:fe:d1: e2:ed:0f:fb:60:c5:26:c4:eb:e4:41:87:98:2d:60:7e:73:eb: eb:da:a9:a3:5d:a0:34:70:a5:49:41:ec:9d:8e:25:28:a3:72: 47:bd:57:b4:0f:cc:71:10:b4:2f:6e:5a:f7:95:b8:96:17:ee: e7:15:39:91 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPfkktkvWz3fC6I/+Xiy8YmoaK5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNDExMjMxMzU1MDBaFw0yNTExMjIxNDAwMDBaMDMxMTAvBgNV BAMTKDBDQjU3MUYwQzY4OTU1NkE5RkFDQzYzQUJGREIwM0QyOEZBODlFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtz/+MbBsQErlVnzImQOuzZvp8 y4GHDSkPOVfP3Nan+cloSZybs47HGXWKoophdyyVOMBvmq+lGjl5yJzjc0gYvjwj AbXso/xGaA7+6SaTIH1sA8o7hSK4rnm7f8AMs4i6ZpQwhfD3h79FLI7lg5sukBC1 8PXm//UvqXr/DLXtXdAJpu6UH2k0vjB2GeTtQbMbfHVPuP27xmJGTWFRp16iktYM oc5ZxC/8lc0RdBE5hAlJ/KVMoAiabOUSZy8wTHvFhidBHFrWxcgT/PfN1r3+763t YlyS7hJeY5YfL6txWcXuEcDkL5PZbnpVYjuq04dZoefa9loPt0/PcPKlJ0I3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUDLVx8MaJVWqfrMY6v9sD0o+onvEwHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzYjhjZWFiLWZiNWMtNDBhOS1i ODg5LTJkMTg4OWE1MDA0Yi8wLzMxMzAzMzJlMzEzNzMxMmUzNzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6tPMA0GCSqG SIb3DQEBCwUAA4IBAQAtMjxmz4OpONduKl66sKOf2YJGFYf0IlJPTyTeU9YsL2uw 6strw8XvKfAntyII64lvGwqFm4KSv5w9scEtvg4aahuqjUr2VzCfrFAMOHFfp6Ea odZMgfGqvWAWNvoblJo2XZxrClDxU2t7P2kPjBv0/piKHJNMVmXNariiubM40meq HOyKYHAzbruz4ZW6C2IioLSKvJeJUi8j7HKp+0lk6ULeKqoRiklJVioVqhsyrfl3 xsknwNovjqs0wRwx44guDyDf/tHi7Q/7YMUmxOvkQYeYLWB+c+vr2qmjXaA0cKVJ QeydjiUoo3JHvVe0D8xxELQvblr3lbiWF+7nFTmR -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:45 2025 by rpki-client on console.sobornost.net