$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa File: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (raw, json) Hash identifier: yttYdHg/TfpYZlj9ynVljAnQiXBLtc70VHSDBXgC8KQ= Subject key identifier: AD:A9:B4:05:1D:57:2D:BB:51:65:DF:B9:71:D9:00:5A:CE:B8:92:73 Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Certificate serial: 47B2FE0C0770DD665763EC2131649C06BBD8DFD2 Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa Signing time: Wed 28 Aug 2024 07:01:10 +0000 ROA not before: Wed 28 Aug 2024 06:56:10 +0000 ROA not after: Wed 27 Aug 2025 07:01:10 +0000 asID: 150230 IP address blocks: 103.18.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b2:fe:0c:07:70:dd:66:57:63:ec:21:31:64:9c:06:bb:d8:df:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Validity Not Before: Aug 28 06:56:10 2024 GMT Not After : Aug 27 07:01:10 2025 GMT Subject: CN=ADA9B4051D572DBB5165DFB971D9005ACEB89273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:8e:a0:ac:c4:00:bf:f6:ed:14:c4:d3:9a: 47:24:8c:fb:52:1e:f7:7d:46:28:80:53:a0:ab:84: 28:02:d5:8c:b5:db:08:b4:9d:7c:6d:f0:dd:ee:42: 43:13:3a:a6:1f:b2:80:4b:10:ab:b9:f8:32:67:b5: b6:b0:1f:54:be:f3:fb:ef:78:d1:c3:09:8b:a8:65: e4:6d:09:16:05:ad:37:92:ca:f0:2f:4a:d7:f3:f2: ef:c0:af:5a:42:93:86:db:34:42:d1:5b:6d:87:32: d9:45:a5:55:12:36:01:7c:0a:ef:68:22:55:1b:29: e6:37:f8:30:2f:75:37:fa:7e:12:db:92:e0:14:d8: 4f:60:41:f1:17:e6:fe:d5:a2:10:7d:d4:4f:66:db: 6b:49:b3:34:ea:be:17:26:34:8d:0b:b3:85:be:38: d6:dc:0a:c7:45:f2:93:e5:b6:90:fc:20:fc:1c:4e: 18:ed:17:ff:d2:3b:e7:82:18:e5:98:c7:4c:42:f5: 98:ba:3c:07:63:2b:54:4f:f5:19:d5:ef:a0:b7:ee: e0:c9:4c:ed:10:fc:d1:18:49:f9:0f:ec:10:cc:40: 5f:b4:3c:75:87:6c:ef:3e:b3:53:02:a8:88:ba:17: 2a:f4:16:44:ad:11:0d:cb:1a:35:15:f5:a1:ca:31: 70:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A9:B4:05:1D:57:2D:BB:51:65:DF:B9:71:D9:00:5A:CE:B8:92:73 X509v3 Authority Key Identifier: keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.184.0/23 Signature Algorithm: sha256WithRSAEncryption 88:e3:83:67:98:3a:d2:70:16:f2:5a:18:f6:30:0c:d3:fd:26: 72:32:3b:76:e8:29:31:83:be:0b:79:e7:68:cb:b1:99:d1:02: 1c:3a:b5:4d:96:14:6b:20:b7:10:2b:98:82:76:ab:e3:0f:32: 93:e8:6b:a2:e4:0e:83:20:59:8f:3f:6e:b6:e4:8b:ad:3e:ef: 52:31:b1:85:54:01:2d:fc:d4:25:35:cc:0d:c1:cf:9d:ea:1b: ce:66:82:5a:74:42:77:86:f0:e4:a3:76:9d:4c:74:b7:7c:1d: d9:93:f2:dc:b3:7b:0c:59:21:e6:e5:e9:82:52:bd:c4:9c:13: 67:c7:af:b2:2c:a9:1f:5e:5e:4f:af:8c:4f:77:71:de:bd:2a: 68:b6:b9:40:0e:50:fd:14:14:6d:74:77:fb:2e:b1:16:af:4b: fe:b0:1f:5c:8f:e9:e9:b1:58:95:e1:9a:9b:37:6b:b2:17:02: 73:15:6a:a6:eb:c6:6b:09:cd:3b:7d:b7:33:44:e3:1d:fb:98: c2:63:34:fc:d6:71:dd:bb:22:c5:6a:d9:72:dc:f5:3f:c9:05: d7:60:69:ac:3f:e1:b4:35:44:be:53:12:6f:4d:cf:6b:04:a5: 67:f4:3a:ca:fb:5f:63:5c:b6:02:ff:e7:e4:bf:47:ec:09:9f: c0:06:fa:cd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUR7L+DAdw3WZXY+whMWScBrvY39IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVF QkREMDY0NDAeFw0yNDA4MjgwNjU2MTBaFw0yNTA4MjcwNzAxMTBaMDMxMTAvBgNV BAMTKEFEQTlCNDA1MUQ1NzJEQkI1MTY1REZCOTcxRDkwMDVBQ0VCODkyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPv46grMQAv/btFMTTmkckjPtS Hvd9RiiAU6CrhCgC1Yy12wi0nXxt8N3uQkMTOqYfsoBLEKu5+DJntbawH1S+8/vv eNHDCYuoZeRtCRYFrTeSyvAvStfz8u/Ar1pCk4bbNELRW22HMtlFpVUSNgF8Cu9o IlUbKeY3+DAvdTf6fhLbkuAU2E9gQfEX5v7VohB91E9m22tJszTqvhcmNI0Ls4W+ ONbcCsdF8pPltpD8IPwcThjtF//SO+eCGOWYx0xC9Zi6PAdjK1RP9RnV76C37uDJ TO0Q/NEYSfkP7BDMQF+0PHWHbO8+s1MCqIi6Fyr0FkStEQ3LGjUV9aHKMXC/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUram0BR1XLbtRZd+5cdkAWs64knMwHwYDVR0j BBgwFoAUZ31KpmkkTaZdl2ZR210FHuvdBkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMwY2Q1ZC1kMDg1LTRlMmYtYjIzMC03YjdlNjZkMTM5M2YvMC82NzdENEFBNjY5 MjQ0REE2NUQ5NzY2NTFEQjVEMDUxRUVCREQwNjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVFQkRE MDY0NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YzBjZDVkLWQwODUtNGUyZi1i MjMwLTdiN2U2NmQxMzkzZi8wLzMxMzAzMzJlMzEzODJlMzEzODM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxK4MA0GCSqG SIb3DQEBCwUAA4IBAQCI44NnmDrScBbyWhj2MAzT/SZyMjt26Ckxg74Leedoy7GZ 0QIcOrVNlhRrILcQK5iCdqvjDzKT6Gui5A6DIFmPP2625IutPu9SMbGFVAEt/NQl NcwNwc+d6hvOZoJadEJ3hvDko3adTHS3fB3Zk/Lcs3sMWSHm5emCUr3EnBNnx6+y LKkfXl5Pr4xPd3HevSpotrlADlD9FBRtdHf7LrEWr0v+sB9cj+npsViV4ZqbN2uy FwJzFWqm68ZrCc07fbczROMd+5jCYzT81nHduyLFatly3PU/yQXXYGmsP+G0NUS+ UxJvTc9rBKVn9DrK+19jXLYC/+fkv0fsCZ/ABvrN -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org