$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa File: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (raw, json) Hash identifier: jR3Fixe166OMUTtP8mJKbsDEpASm2BgJ020ziz4iWic= Subject key identifier: 54:B8:CE:85:A0:27:C1:BF:F0:E9:B0:E6:31:5D:3E:DA:20:80:01:D0 Certificate issuer: /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Certificate serial: 196E7B26569EFE736D3BCB9B7C2AA74A894960FF Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa Signing time: Fri 18 Oct 2024 10:00:01 +0000 ROA not before: Fri 18 Oct 2024 09:55:01 +0000 ROA not after: Fri 17 Oct 2025 10:00:01 +0000 asID: 149881 IP address blocks: 103.189.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6e:7b:26:56:9e:fe:73:6d:3b:cb:9b:7c:2a:a7:4a:89:49:60:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Validity Not Before: Oct 18 09:55:01 2024 GMT Not After : Oct 17 10:00:01 2025 GMT Subject: CN=54B8CE85A027C1BFF0E9B0E6315D3EDA208001D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:04:27:ca:3e:42:42:6f:f2:f6:ee:d3:c2: 0d:0d:13:ee:8e:d2:b8:81:a1:f7:76:b9:35:9c:7b: a6:88:79:ee:e3:14:f3:aa:c9:57:10:89:68:20:80: 07:97:09:10:53:ae:e8:32:e4:dc:a6:f3:c8:a0:4f: b4:41:fe:ab:8f:1e:0e:16:5e:b8:3a:df:8c:cd:ee: f1:7d:e8:77:69:52:55:99:93:89:8f:2d:09:b6:54: bf:0e:fb:96:c5:b2:26:c5:36:32:41:ed:4c:e0:9f: f3:cf:a8:e8:c1:c9:a3:d4:f0:6f:38:d5:eb:47:b0: 6e:5e:fa:ee:3f:25:7e:85:cb:df:43:d7:10:54:6e: 1c:39:bb:99:db:f9:70:a5:96:6d:e2:c6:03:89:65: 9c:c4:b3:2b:44:86:f4:60:74:fa:b1:cf:1c:19:f8: 39:d8:a9:ad:4c:8a:06:ec:fd:f0:ce:fc:86:b9:2c: 21:f6:07:18:51:27:c3:d9:c7:ef:d0:35:9c:be:30: 76:c5:85:cd:11:1f:40:49:26:61:c7:95:67:17:75: 4d:a8:e2:4d:b3:4a:1e:03:26:92:12:d4:68:b5:91: 13:31:60:a9:cc:07:2c:72:2b:3a:31:63:b7:ac:c3: 65:30:2a:8b:a4:6a:bb:38:d4:16:4f:5f:5c:58:34: 69:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B8:CE:85:A0:27:C1:BF:F0:E9:B0:E6:31:5D:3E:DA:20:80:01:D0 X509v3 Authority Key Identifier: keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.222.0/24 Signature Algorithm: sha256WithRSAEncryption 78:b1:e7:6d:61:67:29:43:7d:b6:ce:d2:fd:c9:2c:16:1f:1c: 15:d5:ba:0e:b1:db:06:03:9e:71:89:b3:66:ea:fb:db:31:41: a8:2f:f7:81:63:7d:4e:1f:f4:ce:6b:6a:39:8a:8a:30:24:5c: 55:53:12:ce:7f:dd:6c:ee:2c:6d:ee:b9:93:8b:8e:28:67:46: d0:04:6e:34:9b:62:d1:68:7f:eb:c9:35:a1:1d:28:64:9a:a4: d2:24:8c:44:ed:36:77:b6:10:51:39:96:9a:c3:76:f7:26:0f: 0b:a5:cf:c3:63:a2:26:f3:a9:4a:e7:e3:3e:6f:e0:34:59:26: c9:07:02:b9:15:52:70:dc:39:38:e7:87:ef:c1:9c:03:4c:30: 2f:1e:79:12:25:75:40:e9:24:ee:b5:92:13:eb:f5:0b:3a:da: e7:da:1f:29:49:13:23:60:60:b2:44:67:71:4b:07:50:2d:f1: 0b:79:87:ab:4d:b3:0d:93:d3:c4:cd:46:e8:bb:ec:73:a7:a7: 3b:ff:96:e7:0b:a5:09:34:2c:d4:87:14:8d:cf:d2:a8:96:78: 22:25:30:7d:09:a2:33:43:dc:e1:d6:e8:85:a3:ae:29:19:29: 19:d4:d7:7b:a7:c1:11:49:f3:96:ac:92:ad:9b:ad:85:0b:59: d0:4c:ca:7d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGW57Jlae/nNtO8ubfCqnSolJYP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIz NEEwRjFCMjAeFw0yNDEwMTgwOTU1MDFaFw0yNTEwMTcxMDAwMDFaMDMxMTAvBgNV BAMTKDU0QjhDRTg1QTAyN0MxQkZGMEU5QjBFNjMxNUQzRURBMjA4MDAxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSgQnyj5CQm/y9u7Twg0NE+6O 0riBofd2uTWce6aIee7jFPOqyVcQiWgggAeXCRBTrugy5Nym88igT7RB/quPHg4W Xrg634zN7vF96HdpUlWZk4mPLQm2VL8O+5bFsibFNjJB7Uzgn/PPqOjByaPU8G84 1etHsG5e+u4/JX6Fy99D1xBUbhw5u5nb+XCllm3ixgOJZZzEsytEhvRgdPqxzxwZ +DnYqa1Migbs/fDO/Ia5LCH2BxhRJ8PZx+/QNZy+MHbFhc0RH0BJJmHHlWcXdU2o 4k2zSh4DJpIS1Gi1kRMxYKnMByxyKzoxY7esw2UwKoukars41BZPX1xYNGllAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUVLjOhaAnwb/w6bDmMV0+2iCAAdAwHwYDVR0j BBgwFoAU4f5po0IWwk0YcPXO06QwkjSg8bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMC9FMUZFNjlBMzQy MTZDMjREMTg3MEY1Q0VEM0E0MzA5MjM0QTBGMUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIzNEEw RjFCMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4OGUzYTE3LTFjOTEtNDc5My04 M2M0LTIxMWQ0MjEwYWVhOC8wLzMxMzAzMzJlMzEzODM5MmUzMjMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvd4wDQYJ KoZIhvcNAQELBQADggEBAHix521hZylDfbbO0v3JLBYfHBXVug6x2wYDnnGJs2bq +9sxQagv94FjfU4f9M5rajmKijAkXFVTEs5/3WzuLG3uuZOLjihnRtAEbjSbYtFo f+vJNaEdKGSapNIkjETtNne2EFE5lprDdvcmDwulz8NjoibzqUrn4z5v4DRZJskH ArkVUnDcOTjnh+/BnANMMC8eeRIldUDpJO61khPr9Qs62ufaHylJEyNgYLJEZ3FL B1At8Qt5h6tNsw2T08TNRui77HOnpzv/lucLpQk0LNSHFI3P0qiWeCIlMH0JojND 3OHW6IWjrikZKRnU13unwRFJ85askq2brYULWdBMyn0= -----END CERTIFICATE-----Generated at Mon Nov 25 09:00:38 2024 by rpki-client on console-fra.rpki-client.org