$ rpki-client -vvf repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa File: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (raw, json) Hash identifier: mSrDIe1nZyY3D0kPgDEMFaoY9Cg4bd3ftAPPtaVMp6U= Subject key identifier: E8:40:F1:31:E7:1C:E3:28:A8:89:9D:7A:2C:FE:84:AE:C9:14:BF:EB Certificate issuer: /CN=032056FFABA06741112BA404900B315C87E35361 Certificate serial: 63B5209DE37F3E1899FD77472C2D91C995CEA5BE Authority key identifier: 03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa Signing time: Thu 19 Sep 2024 10:01:05 +0000 ROA not before: Thu 19 Sep 2024 09:56:05 +0000 ROA not after: Thu 18 Sep 2025 10:01:05 +0000 asID: 141592 IP address blocks: 103.160.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b5:20:9d:e3:7f:3e:18:99:fd:77:47:2c:2d:91:c9:95:ce:a5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032056FFABA06741112BA404900B315C87E35361 Validity Not Before: Sep 19 09:56:05 2024 GMT Not After : Sep 18 10:01:05 2025 GMT Subject: CN=E840F131E71CE328A8899D7A2CFE84AEC914BFEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:9e:3f:59:05:b7:44:1e:1c:74:16:89:40: d0:b7:ca:80:36:ab:f1:c6:d2:a0:4f:08:a0:be:52: 17:6d:2f:66:33:e9:cd:ba:04:da:97:e1:58:41:3c: d5:68:df:83:3b:44:5b:31:ed:6e:5b:d5:fa:e0:49: 8e:62:f2:51:08:d8:4a:e5:91:1b:b4:d7:66:9c:ac: 2f:60:e6:bf:46:22:76:eb:ab:6f:c7:1e:e5:81:21: 97:36:74:27:26:db:ad:13:ee:2d:20:01:90:88:a2: 11:0f:1c:3a:94:8b:cc:df:c7:9d:68:10:fe:9e:2d: 4f:e6:df:ff:58:28:21:bc:73:1f:9f:34:b0:29:e0: a0:04:c5:1c:4e:26:3c:4c:26:1c:04:be:c7:1b:87: d6:58:4a:94:97:70:8f:31:96:cb:24:86:89:1d:77: 42:ab:ee:dd:ba:11:e0:20:6b:5a:60:5f:24:f5:0a: 4c:6a:22:2a:fd:d5:64:e7:7a:8f:60:fd:35:90:dd: 73:2b:f9:5b:7a:03:56:a2:ff:d4:bc:19:0a:f6:d9: 06:49:4c:fd:4e:1c:f0:5e:28:cf:2b:55:f8:75:58: 8f:51:fc:74:49:94:dc:27:d6:ed:ae:46:88:05:d7: fa:7a:83:3c:28:20:54:aa:b8:8f:ec:06:00:78:7c: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:40:F1:31:E7:1C:E3:28:A8:89:9D:7A:2C:FE:84:AE:C9:14:BF:EB X509v3 Authority Key Identifier: keyid:03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.178.0/23 Signature Algorithm: sha256WithRSAEncryption 29:bc:f3:23:1d:97:cb:20:93:b1:06:87:c0:23:72:3a:ad:fd: 58:8e:14:44:52:b1:60:43:fd:8f:e6:7f:bf:24:ba:52:73:3c: 0c:dd:12:a0:ff:68:6e:0c:91:9b:99:f6:01:72:06:3d:81:7d: 12:6c:a0:33:0c:68:44:d5:c1:0d:e3:2f:54:ff:a7:40:96:f9: 5e:2b:bb:c4:74:57:78:d5:38:67:1b:ba:f3:5e:10:32:53:eb: 92:9f:a6:d1:f4:a9:0f:f3:1c:d7:cb:3b:92:9e:2c:b2:76:e3: 76:fd:94:85:a5:63:42:3a:22:84:56:b6:36:1a:1a:8d:df:7b: 91:ae:e1:54:a3:e9:dd:bc:9d:a9:83:1f:11:bd:aa:f2:7c:8a: 4e:18:31:9d:3e:7e:6f:00:3e:b8:7f:dc:c9:9d:57:c8:ac:a3: 73:e5:67:59:f0:72:f4:be:b8:4f:37:2e:1d:93:21:4e:45:3e: 0b:ff:62:1a:f5:30:34:03:36:fb:13:9a:68:89:8b:72:6b:0c: b5:ec:a1:53:bf:c0:f6:d0:67:8b:a4:10:09:20:4a:01:5b:3f: 32:a0:77:f0:71:dc:b6:a1:51:dc:d1:26:6b:c5:ed:1e:67:73: d9:3b:43:58:01:03:5d:24:0d:a8:f5:3b:52:62:8a:78:03:2d: 39:b3:93:ac -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUY7UgneN/PhiZ/XdHLC2RyZXOpb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4 N0UzNTM2MTAeFw0yNDA5MTkwOTU2MDVaFw0yNTA5MTgxMDAxMDVaMDMxMTAvBgNV BAMTKEU4NDBGMTMxRTcxQ0UzMjhBODg5OUQ3QTJDRkU4NEFFQzkxNEJGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGop4/WQW3RB4cdBaJQNC3yoA2 q/HG0qBPCKC+UhdtL2Yz6c26BNqX4VhBPNVo34M7RFsx7W5b1frgSY5i8lEI2Erl kRu012acrC9g5r9GInbrq2/HHuWBIZc2dCcm260T7i0gAZCIohEPHDqUi8zfx51o EP6eLU/m3/9YKCG8cx+fNLAp4KAExRxOJjxMJhwEvscbh9ZYSpSXcI8xlsskhokd d0Kr7t26EeAga1pgXyT1CkxqIir91WTneo9g/TWQ3XMr+Vt6A1ai/9S8GQr22QZJ TP1OHPBeKM8rVfh1WI9R/HRJlNwn1u2uRogF1/p6gzwoIFSquI/sBgB4fEtBAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU6EDxMecc4yioiZ16LP6ErskUv+swHwYDVR0j BBgwFoAUAyBW/6ugZ0ERK6QEkAsxXIfjU2EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE4MjBiNC04MmVmLTQ0MTItYmUyZS01ZDY5MTRiZDQ4NDQvMC8wMzIwNTZGRkFC QTA2NzQxMTEyQkE0MDQ5MDBCMzE1Qzg3RTM1MzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4N0Uz NTM2MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwYTgyMGI0LTgyZWYtNDQxMi1i ZTJlLTVkNjkxNGJkNDg0NC8wLzMxMzAzMzJlMzEzNjMwMmUzMTM3MzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoLIwDQYJ KoZIhvcNAQELBQADggEBACm88yMdl8sgk7EGh8Ajcjqt/ViOFERSsWBD/Y/mf78k ulJzPAzdEqD/aG4MkZuZ9gFyBj2BfRJsoDMMaETVwQ3jL1T/p0CW+V4ru8R0V3jV OGcbuvNeEDJT65KfptH0qQ/zHNfLO5KeLLJ243b9lIWlY0I6IoRWtjYaGo3fe5Gu 4VSj6d28namDHxG9qvJ8ik4YMZ0+fm8APrh/3MmdV8iso3PlZ1nwcvS+uE83Lh2T IU5FPgv/Yhr1MDQDNvsTmmiJi3JrDLXsoVO/wPbQZ4ukEAkgSgFbPzKgd/Bx3Lah UdzRJmvF7R5nc9k7Q1gBA10kDaj1O1JiingDLTmzk6w= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:47 2024 by rpki-client on console-fra.rpki-client.org