$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa File: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (raw, json) Hash identifier: MEZxJgd/hWxPnWbsHzQjzlGPCO/qxP9YMyi3V7a1p9c= Subject key identifier: CE:BC:75:02:EF:61:6B:98:5D:A2:0A:07:7B:1B:59:FD:92:8E:EF:A0 Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Certificate serial: 53F65F9484EA90012FB84B7D4AD3702515861C34 Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa Signing time: Wed 17 Jan 2024 15:00:02 +0000 ROA not before: Wed 17 Jan 2024 14:55:02 +0000 ROA not after: Wed 15 Jan 2025 15:00:02 +0000 asID: 149373 IP address blocks: 103.180.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f6:5f:94:84:ea:90:01:2f:b8:4b:7d:4a:d3:70:25:15:86:1c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Validity Not Before: Jan 17 14:55:02 2024 GMT Not After : Jan 15 15:00:02 2025 GMT Subject: CN=CEBC7502EF616B985DA20A077B1B59FD928EEFA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b6:bd:9a:44:a4:a8:0a:c1:be:6c:34:71:51: 2f:dd:ee:04:9d:f0:fc:ef:3a:4e:03:16:fc:2b:a3: f0:42:17:75:18:d7:f0:f3:47:6b:b7:d8:59:fd:17: 60:cf:17:1b:3c:27:7c:2d:c3:36:66:fd:a1:eb:09: 81:46:3c:b7:fc:8c:21:f3:08:4f:8f:a0:fd:64:21: 5c:fd:7f:38:21:9e:50:3c:6d:f8:a0:09:78:b8:f0: 7b:d8:82:5d:c6:c7:66:6f:07:63:f7:b2:a1:3d:dd: 3a:e6:9b:a0:0c:5f:50:88:c1:36:05:51:92:f4:86: 5b:fa:32:ae:b1:57:af:d3:a2:1b:9d:79:00:1d:8a: f8:3f:03:d9:b3:55:70:d3:e9:d5:b1:76:96:ca:20: c3:c6:55:78:f6:31:48:19:8e:96:ee:ca:06:06:29: 7b:1f:f4:92:ae:a9:01:e9:61:ca:27:6d:17:ad:c9: bc:8b:4b:db:b1:69:76:14:da:43:c1:5e:c2:a2:49: 43:d4:00:dd:bc:93:31:8c:da:d0:d2:d5:30:15:ed: de:bf:b3:51:a5:38:6e:65:12:c5:84:1c:4f:26:0d: 88:f5:73:5c:5f:58:d1:20:74:27:b1:1a:ec:41:b0: d2:a0:da:0f:14:56:97:c6:d2:09:5c:3e:59:77:06: 31:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BC:75:02:EF:61:6B:98:5D:A2:0A:07:7B:1B:59:FD:92:8E:EF:A0 X509v3 Authority Key Identifier: keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.250.0/24 Signature Algorithm: sha256WithRSAEncryption 66:c8:7d:e3:6f:bd:a5:60:73:50:1c:2c:0a:28:73:c1:4a:f6: a8:6a:51:8f:45:8e:3d:95:2b:00:2a:54:d7:60:f0:be:19:c4: 3a:a6:a5:be:cf:fd:3b:09:43:99:c3:ea:33:33:34:05:8d:72: 0e:73:cd:4b:57:41:d5:12:c2:a3:6b:1d:f4:a1:4f:a9:a5:4c: 3c:b5:b7:10:76:28:20:57:f5:bd:1b:08:2e:ba:b0:12:f8:6c: ca:44:64:77:ee:9e:73:06:f2:9f:72:56:a8:b5:6f:30:80:12: 12:37:f2:bd:ff:21:64:3a:81:ec:e6:fe:33:93:db:18:f6:0e: 53:d7:5a:04:88:58:cf:62:52:56:d6:9e:c4:31:ad:69:7e:38: 21:17:58:44:f9:26:f9:f6:91:55:5a:81:5e:f3:c1:c3:12:b8: b8:cd:ed:fe:9f:94:79:5a:d9:fb:fa:91:d8:d9:53:93:23:65: 74:3e:d0:d5:60:ab:d8:2f:c7:6f:dd:09:60:a1:80:f9:52:98: e7:9b:4d:4f:fd:b5:09:37:4f:c0:ed:93:8e:e4:21:0a:60:cf: b9:02:2b:1f:5c:bf:c0:9b:56:50:fc:bb:ad:c3:52:f0:cf:8e: 34:0b:d8:88:36:d2:66:91:a9:26:8f:c8:5c:5f:97:18:ab:fb: fa:52:b8:5a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUU/ZflITqkAEvuEt9StNwJRWGHDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB MTBBMUUyMDAeFw0yNDAxMTcxNDU1MDJaFw0yNTAxMTUxNTAwMDJaMDMxMTAvBgNV BAMTKENFQkM3NTAyRUY2MTZCOTg1REEyMEEwNzdCMUI1OUZEOTI4RUVGQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtr2aRKSoCsG+bDRxUS/d7gSd 8PzvOk4DFvwro/BCF3UY1/DzR2u32Fn9F2DPFxs8J3wtwzZm/aHrCYFGPLf8jCHz CE+PoP1kIVz9fzghnlA8bfigCXi48HvYgl3Gx2ZvB2P3sqE93Trmm6AMX1CIwTYF UZL0hlv6Mq6xV6/TohudeQAdivg/A9mzVXDT6dWxdpbKIMPGVXj2MUgZjpbuygYG KXsf9JKuqQHpYconbRetybyLS9uxaXYU2kPBXsKiSUPUAN28kzGM2tDS1TAV7d6/ s1GlOG5lEsWEHE8mDYj1c1xfWNEgdCexGuxBsNKg2g8UVpfG0glcPll3BjGXAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUzrx1Au9ha5hdogoHextZ/ZKO76AwHwYDVR0j BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB MUUyMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyNDlkMzg3LTcwY2YtNDBlOS04 NzU5LTliODZlMGM2NTEyOC8wLzMxMzAzMzJlMzEzODMwMmUzMjM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntPowDQYJ KoZIhvcNAQELBQADggEBAGbIfeNvvaVgc1AcLAooc8FK9qhqUY9Fjj2VKwAqVNdg 8L4ZxDqmpb7P/TsJQ5nD6jMzNAWNcg5zzUtXQdUSwqNrHfShT6mlTDy1txB2KCBX 9b0bCC66sBL4bMpEZHfunnMG8p9yVqi1bzCAEhI38r3/IWQ6gezm/jOT2xj2DlPX WgSIWM9iUlbWnsQxrWl+OCEXWET5Jvn2kVVagV7zwcMSuLjN7f6flHla2fv6kdjZ U5MjZXQ+0NVgq9gvx2/dCWChgPlSmOebTU/9tQk3T8Dtk47kIQpgz7kCKx9cv8Cb VlD8u63DUvDPjjQL2Ig20maRqSaPyFxflxir+/pSuFo= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:31 2024 by rpki-client on console-fra.rpki-client.org