$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa File: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (raw, json) Hash identifier: M812Lv0X3Nes93FyydCNMviRm48nar6LmkckI2wrws8= Subject key identifier: B2:DB:57:29:77:81:E6:20:8A:F3:FC:2B:A4:65:5C:29:77:15:91:A5 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 13A06E59082C23EA2784AFF4C78A669B01927DBF Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa Signing time: Thu 23 May 2024 04:00:00 +0000 ROA not before: Thu 23 May 2024 03:55:00 +0000 ROA not after: Thu 22 May 2025 04:00:00 +0000 asID: 131111 IP address blocks: 103.158.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a0:6e:59:08:2c:23:ea:27:84:af:f4:c7:8a:66:9b:01:92:7d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: May 23 03:55:00 2024 GMT Not After : May 22 04:00:00 2025 GMT Subject: CN=B2DB57297781E6208AF3FC2BA4655C29771591A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:12:a1:8e:d7:55:fc:12:4b:91:3b:85:da: af:79:c2:40:a4:60:d8:a9:93:31:3f:8e:3d:53:e6: f7:a2:82:58:9f:9b:61:ea:0b:dd:82:e6:7f:d5:21: eb:70:9d:dd:af:6d:c5:e6:b6:61:aa:bf:3c:c0:0e: cd:f4:53:db:1e:99:87:2c:04:bb:09:12:7f:73:e3: fa:3e:a8:8f:40:22:46:2d:31:e9:46:56:06:4d:d8: a1:e2:8b:b4:c5:b9:01:0b:fd:ef:a3:10:f7:e3:30: ca:3a:fb:96:b7:5f:07:ba:5e:87:6a:7f:fa:1e:1c: 52:76:30:e0:17:db:5b:00:ae:56:af:7f:7b:ad:c9: 78:9f:cc:93:07:01:2b:a4:6b:23:ae:e9:55:9f:e2: 4d:d6:40:7b:8d:ad:fd:fe:15:04:a6:a6:f7:c6:d6: c6:28:82:65:8b:1a:42:83:7e:52:b5:2f:8d:a2:64: 97:1f:1c:b8:b9:8f:90:4f:e7:73:50:e2:6d:85:a4: ac:44:56:39:c8:e4:32:7b:b3:7f:32:89:49:14:39: 70:97:7f:3a:3b:4d:0f:54:cc:60:cb:42:a1:a6:c8: 30:b8:23:b4:b9:d7:b5:c0:b7:62:bd:c9:dc:8c:02: cf:e1:c0:c2:35:d9:c7:aa:4b:bb:64:a7:c5:d6:60: 08:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DB:57:29:77:81:E6:20:8A:F3:FC:2B:A4:65:5C:29:77:15:91:A5 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.195.0/24 Signature Algorithm: sha256WithRSAEncryption 50:7c:2b:d4:cd:e3:9a:df:2c:a9:be:11:14:59:c7:c3:bd:85: 6f:74:f9:90:b3:1a:58:56:3d:40:04:df:1f:95:58:03:6f:23: 2a:0e:24:8a:0c:1e:22:62:19:9c:7a:36:70:56:d4:e3:29:cd: 90:d5:45:87:8e:14:1a:d7:e6:86:00:34:63:d5:03:c7:b0:f8: 2b:6f:9a:07:37:7c:48:0b:ac:e2:7d:0c:dd:9a:f0:f3:9f:cb: ef:8c:1b:af:b9:74:14:e6:1a:c4:c8:8d:1d:e4:dc:83:2c:1e: 8e:99:28:0f:aa:72:62:c4:7c:41:9d:48:65:39:67:84:08:3f: a8:4a:a9:cc:23:c0:b3:f4:9f:b6:e6:4a:b6:9d:42:88:bb:a6: 94:a6:aa:d2:0d:75:94:76:b9:c3:d0:ce:e8:57:af:d7:67:b1: b3:93:c1:4d:0c:0c:0b:4e:2d:fe:13:d5:a0:3f:94:48:a8:7e: 7a:4c:32:43:e8:f7:62:20:ac:e4:45:1e:87:83:16:2e:36:38: 99:b3:c5:d3:cf:c2:b3:35:9d:0d:92:04:2b:79:90:1b:a4:58: e8:1e:4d:f1:3b:f7:28:60:e7:a4:17:bf:85:bc:65:00:76:bc: 1c:0d:7e:60:bf:2d:25:4c:d2:cb:57:c3:9a:e8:13:78:ad:5e: c1:72:8f:94 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUE6BuWQgsI+onhK/0x4pmmwGSfb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNDA1MjMwMzU1MDBaFw0yNTA1MjIwNDAwMDBaMDMxMTAvBgNV BAMTKEIyREI1NzI5Nzc4MUU2MjA4QUYzRkMyQkE0NjU1QzI5NzcxNTkxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdxKhjtdV/BJLkTuF2q95wkCk YNipkzE/jj1T5veiglifm2HqC92C5n/VIetwnd2vbcXmtmGqvzzADs30U9semYcs BLsJEn9z4/o+qI9AIkYtMelGVgZN2KHii7TFuQEL/e+jEPfjMMo6+5a3Xwe6Xodq f/oeHFJ2MOAX21sArlavf3utyXifzJMHASukayOu6VWf4k3WQHuNrf3+FQSmpvfG 1sYogmWLGkKDflK1L42iZJcfHLi5j5BP53NQ4m2FpKxEVjnI5DJ7s38yiUkUOXCX fzo7TQ9UzGDLQqGmyDC4I7S517XAt2K9ydyMAs/hwMI12ceqS7tkp8XWYAivAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUsttXKXeB5iCK8/wrpGVcKXcVkaUwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNDZiZGFkLWYxMzAtNDhhOS04 NTM0LTU0YmEzZThlZDYxZi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM5MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnsMwDQYJ KoZIhvcNAQELBQADggEBAFB8K9TN45rfLKm+ERRZx8O9hW90+ZCzGlhWPUAE3x+V WANvIyoOJIoMHiJiGZx6NnBW1OMpzZDVRYeOFBrX5oYANGPVA8ew+Ctvmgc3fEgL rOJ9DN2a8POfy++MG6+5dBTmGsTIjR3k3IMsHo6ZKA+qcmLEfEGdSGU5Z4QIP6hK qcwjwLP0n7bmSradQoi7ppSmqtINdZR2ucPQzuhXr9dnsbOTwU0MDAtOLf4T1aA/ lEiofnpMMkPo92IgrORFHoeDFi42OJmzxdPPwrM1nQ2SBCt5kBukWOgeTfE79yhg 56QXv4W8ZQB2vBwNfmC/LSVM0stXw5roE3itXsFyj5Q= -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:19 2024 by rpki-client on console-fra.rpki-client.org