$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa File: 3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa (raw, json) Hash identifier: 3q/CQB6AAqmbKR7BJ9ieGoRqrYEVNBUK4VjLkCeS2sQ= Subject key identifier: C8:02:78:DA:FC:C8:A3:2F:22:FE:B2:64:54:67:92:5B:7D:82:64:F0 Certificate issuer: /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Certificate serial: 1E9FEB7A7CFE5772E9FD60F6F30317BCB061FFA0 Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa Signing time: Tue 25 Jun 2024 11:00:01 +0000 ROA not before: Tue 25 Jun 2024 10:55:01 +0000 ROA not after: Tue 24 Jun 2025 11:00:01 +0000 asID: 38524 IP address blocks: 103.191.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9f:eb:7a:7c:fe:57:72:e9:fd:60:f6:f3:03:17:bc:b0:61:ff:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47 Validity Not Before: Jun 25 10:55:01 2024 GMT Not After : Jun 24 11:00:01 2025 GMT Subject: CN=C80278DAFCC8A32F22FEB2645467925B7D8264F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:19:81:3e:80:8a:94:79:c3:27:ac:1f:13: 4f:c7:26:8f:03:34:67:b1:be:b9:6f:62:70:e5:f8: cd:12:7d:39:38:f3:9d:05:28:92:af:76:91:de:e5: af:97:8a:f6:27:18:a0:34:99:e4:ec:cd:cf:64:59: d5:66:1a:90:10:6e:29:b5:0c:f2:81:7d:a6:f8:85: 48:13:4e:dd:e7:89:c5:69:b3:de:71:1a:ef:43:ea: f0:1c:1f:6a:74:cf:ee:d0:3c:51:45:ea:bd:d2:4a: 0b:b6:90:30:23:86:e5:c5:49:14:38:10:cd:77:30: 89:ad:c0:de:04:2a:5a:ca:b3:cf:2f:de:29:77:d4: bd:22:27:51:38:39:06:72:ae:be:c6:03:d5:a3:b7: 4a:31:b8:9a:c0:32:84:a3:96:cb:26:8e:4e:76:30: 5d:97:8d:fb:31:db:db:cd:0d:a8:9d:44:18:f5:1e: d2:e4:af:82:c2:7c:f7:82:da:2c:36:2f:f3:02:22: 19:12:34:98:dc:68:63:4c:dc:e0:7c:09:18:64:1f: 16:6c:3a:09:b7:03:08:15:60:78:89:23:c8:85:95: 15:55:40:e1:8e:79:1d:5d:36:65:51:a5:5c:71:f3: 67:54:e1:12:94:4e:f0:e1:d7:55:f0:65:86:f3:57: 93:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:02:78:DA:FC:C8:A3:2F:22:FE:B2:64:54:67:92:5B:7D:82:64:F0 X509v3 Authority Key Identifier: keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.153.0/24 Signature Algorithm: sha256WithRSAEncryption 98:1f:4f:56:10:31:30:08:c0:4e:65:23:a0:cb:60:3a:c6:b1: a2:c2:b8:39:a7:f7:26:8d:d1:f3:41:ff:73:c8:a5:de:e8:6c: e1:39:24:0b:54:a0:56:d6:27:49:13:48:02:4f:11:85:01:44: 09:70:ea:d3:77:9f:07:09:f9:76:d1:12:c7:5c:8d:17:42:51: 2a:4d:4a:27:59:44:7b:be:88:9c:7b:08:b6:d3:fb:47:b6:3b: b3:ac:42:58:fd:a4:32:d7:ed:b2:3c:57:d8:bd:ba:67:11:f9: ed:67:ac:98:91:a2:6c:dc:48:24:76:48:10:1f:69:7b:f7:bd: 40:42:1f:fd:e8:ed:a3:e3:99:01:d7:52:8e:db:22:8c:11:27: 0f:c2:56:61:bb:ae:89:64:07:eb:ff:43:b6:ff:34:94:d0:eb: 05:5f:8b:f6:e5:53:90:77:ef:44:0b:4a:95:14:fc:55:ec:cb: fb:af:bb:b5:4e:35:f7:70:9d:a4:2c:02:23:fe:05:d0:bc:85: 32:02:01:89:f7:a6:fc:ea:4d:e6:87:35:67:23:3d:0e:77:65: ce:e7:b1:0e:68:cc:89:e4:a0:9e:29:be:76:d9:73:c6:0e:86: a6:e2:60:5f:58:6a:b7:2e:63:51:79:2f:2c:72:13:29:1e:5b: 7b:fb:15:e9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHp/renz+V3Lp/WD28wMXvLBh/6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0 MzFGMEY0NzAeFw0yNDA2MjUxMDU1MDFaFw0yNTA2MjQxMTAwMDFaMDMxMTAvBgNV BAMTKEM4MDI3OERBRkNDOEEzMkYyMkZFQjI2NDU0Njc5MjVCN0Q4MjY0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uBmBPoCKlHnDJ6wfE0/HJo8D NGexvrlvYnDl+M0SfTk4850FKJKvdpHe5a+XivYnGKA0meTszc9kWdVmGpAQbim1 DPKBfab4hUgTTt3nicVps95xGu9D6vAcH2p0z+7QPFFF6r3SSgu2kDAjhuXFSRQ4 EM13MImtwN4EKlrKs88v3il31L0iJ1E4OQZyrr7GA9Wjt0oxuJrAMoSjlssmjk52 MF2Xjfsx29vNDaidRBj1HtLkr4LCfPeC2iw2L/MCIhkSNJjcaGNM3OB8CRhkHxZs Ogm3AwgVYHiJI8iFlRVVQOGOeR1dNmVRpVxx82dU4RKUTvDh11XwZYbzV5N/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyAJ42vzIoy8i/rJkVGeSW32CZPAwHwYDVR0j BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG MEY0Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2YTZjYTEyLWIyODctNGFjNy04 N2I4LTZjZDczMzUzZTY3Zi8wLzMxMzAzMzJlMzEzOTMxMmUzMTM1MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7+ZMA0GCSqG SIb3DQEBCwUAA4IBAQCYH09WEDEwCMBOZSOgy2A6xrGiwrg5p/cmjdHzQf9zyKXe 6GzhOSQLVKBW1idJE0gCTxGFAUQJcOrTd58HCfl20RLHXI0XQlEqTUonWUR7voic ewi20/tHtjuzrEJY/aQy1+2yPFfYvbpnEfntZ6yYkaJs3EgkdkgQH2l7971AQh/9 6O2j45kB11KO2yKMEScPwlZhu66JZAfr/0O2/zSU0OsFX4v25VOQd+9EC0qVFPxV 7Mv7r7u1TjX3cJ2kLAIj/gXQvIUyAgGJ96b86k3mhzVnIz0Od2XO57EOaMyJ5KCe Kb522XPGDoam4mBfWGq3LmNReS8schMpHlt7+xXp -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org