$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa File: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (raw, json) Hash identifier: rY4tz9/kQego7cZpv2afdmhIw5rIucEsOqMDCxyUCMk= Subject key identifier: 62:B9:A4:BD:96:D2:9D:DC:BD:F6:FE:3A:22:DB:01:52:5E:00:6E:5B Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Certificate serial: 5E9A76911857D16F9DE9FDF03DF8195E4DD38EF1 Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa Signing time: Thu 14 Nov 2024 12:00:02 +0000 ROA not before: Thu 14 Nov 2024 11:55:02 +0000 ROA not after: Thu 13 Nov 2025 12:00:02 +0000 asID: 140389 IP address blocks: 103.179.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:9a:76:91:18:57:d1:6f:9d:e9:fd:f0:3d:f8:19:5e:4d:d3:8e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Validity Not Before: Nov 14 11:55:02 2024 GMT Not After : Nov 13 12:00:02 2025 GMT Subject: CN=62B9A4BD96D29DDCBDF6FE3A22DB01525E006E5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:9f:ac:85:3f:ed:19:d1:99:be:12:12:7b: 0c:36:a3:91:8a:b4:72:15:e1:1b:48:7a:27:45:3c: 42:4e:52:1a:fe:68:80:d6:53:6c:1f:f7:60:e1:cd: 14:33:d4:d2:96:80:0f:b5:64:ba:c4:da:30:bc:f3: 23:ab:d2:22:62:45:37:58:e8:7a:f8:a8:f6:17:00: 6c:90:34:ab:51:93:c7:62:67:13:0a:47:7b:f1:b3: 21:08:82:8f:c4:3c:5e:49:da:b9:a3:84:f0:93:e0: 41:78:00:bc:b4:ef:9f:75:ab:00:74:8c:8e:7f:f8: dc:fd:39:37:e4:e7:77:fe:d6:cf:87:57:1f:30:e3: 65:13:33:b8:08:02:9a:20:81:d5:e9:7c:45:50:5c: 35:3d:76:ea:80:8a:6c:08:68:d1:91:e6:45:25:a2: ec:51:91:09:0d:d0:be:0b:90:11:a7:55:61:da:35: ff:b4:4c:fb:5a:2f:7f:f9:56:b7:fe:84:50:58:bd: 38:ed:8d:53:69:17:c1:6e:13:71:5b:36:10:1e:0a: 1a:b6:f0:b9:01:1c:d9:14:1a:62:e6:2e:ea:9a:11: 7c:bd:0f:22:70:a1:b2:a9:c5:a4:3b:50:8f:0d:3b: 3e:33:a1:32:0b:fa:58:8f:4a:f8:f1:24:be:ed:73: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B9:A4:BD:96:D2:9D:DC:BD:F6:FE:3A:22:DB:01:52:5E:00:6E:5B X509v3 Authority Key Identifier: keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.86.0/23 Signature Algorithm: sha256WithRSAEncryption 92:c2:20:98:88:35:73:ad:fe:12:4f:14:db:66:72:5e:4e:57: 54:77:1d:1d:eb:35:01:10:bc:e3:d1:56:0d:11:63:0e:ec:bd: ce:99:0c:43:be:ed:31:49:eb:20:9a:f1:88:8b:c8:60:f6:39: 95:76:77:22:97:a0:05:3e:34:70:45:38:fe:80:98:87:aa:2b: dd:1d:b6:7b:29:20:59:34:4e:c0:d8:a6:a2:7d:e5:11:74:75: 7d:2e:0a:01:b2:c3:d8:e8:a7:23:d5:2f:27:fd:bb:59:07:fb: 3c:4e:41:34:ba:4e:7e:a3:b5:44:33:f8:db:89:91:21:07:4e: 90:d3:fb:a6:f6:e0:5e:62:41:e4:0d:4a:86:8e:b3:f3:7b:a2: 64:f5:cd:de:67:a0:44:6f:a9:00:c3:29:85:c4:c2:b6:af:20: 47:32:b8:ce:29:8a:1c:e8:20:80:b0:7a:fd:de:1b:dc:4f:f7: 9c:80:b2:99:a7:95:fc:4a:4e:d4:eb:3d:9c:95:a2:03:ca:be: 30:9a:29:04:ca:86:8e:22:49:40:5b:06:7e:46:70:c5:6c:22: ba:ab:91:e7:03:96:25:2b:f8:8a:5f:50:6e:f6:5c:22:80:44: f8:21:11:7d:56:70:dd:5d:83:d2:13:1a:28:bb:64:67:ff:ec: a8:8e:ac:74 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXpp2kRhX0W+d6f3wPfgZXk3TjvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE RTEyODQwMzAeFw0yNDExMTQxMTU1MDJaFw0yNTExMTMxMjAwMDJaMDMxMTAvBgNV BAMTKDYyQjlBNEJEOTZEMjlERENCREY2RkUzQTIyREIwMTUyNUUwMDZFNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzr5+shT/tGdGZvhISeww2o5GK tHIV4RtIeidFPEJOUhr+aIDWU2wf92DhzRQz1NKWgA+1ZLrE2jC88yOr0iJiRTdY 6Hr4qPYXAGyQNKtRk8diZxMKR3vxsyEIgo/EPF5J2rmjhPCT4EF4ALy07591qwB0 jI5/+Nz9OTfk53f+1s+HVx8w42UTM7gIApoggdXpfEVQXDU9duqAimwIaNGR5kUl ouxRkQkN0L4LkBGnVWHaNf+0TPtaL3/5Vrf+hFBYvTjtjVNpF8FuE3FbNhAeChq2 8LkBHNkUGmLmLuqaEXy9DyJwobKpxaQ7UI8NOz4zoTIL+liPSvjxJL7tc/MDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYrmkvZbSndy99v46ItsBUl4AblswHwYDVR0j BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy ODQwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA5YTg4ODk3LWMzODctNDczNS1h Y2Q4LTFkMWM1M2NkZTI2NC8wLzMxMzAzMzJlMzEzNzM5MmUzODM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMwMzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7NWMA0GCSqG SIb3DQEBCwUAA4IBAQCSwiCYiDVzrf4STxTbZnJeTldUdx0d6zUBELzj0VYNEWMO 7L3OmQxDvu0xSesgmvGIi8hg9jmVdncil6AFPjRwRTj+gJiHqivdHbZ7KSBZNE7A 2KaifeURdHV9LgoBssPY6Kcj1S8n/btZB/s8TkE0uk5+o7VEM/jbiZEhB06Q0/um 9uBeYkHkDUqGjrPze6Jk9c3eZ6BEb6kAwymFxMK2ryBHMrjOKYoc6CCAsHr93hvc T/ecgLKZp5X8Sk7U6z2claIDyr4wmikEyoaOIklAWwZ+RnDFbCK6q5HnA5YlK/iK X1Bu9lwigET4IRF9VnDdXYPSExoou2Rn/+yojqx0 -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org