$ rpki-client -vvf repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa File: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (raw, json) Hash identifier: mOeMNdSXIouJLXdg2H2KNR/lETkTVaMFt6gn5NaH74s= Subject key identifier: DB:DB:56:6D:03:2F:C9:28:82:EE:E9:8B:B1:0B:F2:77:D8:A9:65:42 Certificate issuer: /CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Certificate serial: 1DB070A15578B1DD987AC6025B0EE61BEBDB94B7 Authority key identifier: 58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa Signing time: Wed 21 Aug 2024 03:02:49 +0000 ROA not before: Wed 21 Aug 2024 02:57:49 +0000 ROA not after: Wed 20 Aug 2025 03:02:49 +0000 asID: 149883 IP address blocks: 103.184.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b0:70:a1:55:78:b1:dd:98:7a:c6:02:5b:0e:e6:1b:eb:db:94:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Validity Not Before: Aug 21 02:57:49 2024 GMT Not After : Aug 20 03:02:49 2025 GMT Subject: CN=DBDB566D032FC92882EEE98BB10BF277D8A96542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:e6:07:76:12:f8:63:04:bd:9d:72:bc:ed: ab:68:ac:15:96:a9:de:8b:3a:d1:d7:2d:da:d0:77: 0e:18:7e:fc:60:98:ac:9d:d2:ec:47:28:09:98:5c: f7:a1:39:8c:2b:ca:0e:f1:21:4c:8b:11:90:fb:5a: d0:16:25:c1:4e:49:77:41:bc:ad:9b:f9:12:ba:78: 54:b9:86:e2:83:a1:99:d0:23:90:96:a1:4b:82:52: 26:7d:00:f7:8e:f7:c3:56:82:87:27:19:f8:8a:4c: 3c:74:e1:0c:84:63:f5:11:71:d9:df:f8:ac:bc:ed: 05:e5:e2:bf:56:c1:fd:92:53:ad:95:f8:04:83:b2: 38:97:2c:c9:d1:d8:97:49:41:6c:41:d4:1d:67:5f: a7:03:d8:c6:ed:f2:3f:1f:57:35:38:b4:e5:db:62: 64:f1:a1:a5:0c:fe:ef:d7:30:d0:ea:70:f8:1f:00: 67:67:c8:07:4d:c7:de:53:71:29:49:56:88:fa:7d: 88:56:40:a4:e7:3f:85:a3:7d:59:3c:4f:f3:23:e0: bb:76:81:f4:9a:3f:22:6d:f6:ab:32:4d:50:97:00: 82:8e:24:3a:2a:b7:5a:7f:97:fc:b5:2c:8e:2a:c6: af:e7:ca:60:57:16:f2:a5:11:12:6f:2b:db:e8:05: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DB:56:6D:03:2F:C9:28:82:EE:E9:8B:B1:0B:F2:77:D8:A9:65:42 X509v3 Authority Key Identifier: keyid:58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.20.0/24 Signature Algorithm: sha256WithRSAEncryption 39:49:fa:8f:ec:a5:9a:99:ef:d0:16:98:37:5e:24:95:5d:ce: 82:ab:10:2b:99:fc:90:7b:60:33:80:8a:7d:ad:cd:15:93:b1: eb:67:5c:ad:0a:bb:92:74:67:e0:28:b6:ed:87:43:23:10:58: 79:d7:56:b5:00:96:36:20:da:a0:0a:9c:9a:74:dc:64:b2:a2: 2f:e2:8f:93:ad:30:99:22:00:11:f7:d1:fc:f4:e2:91:72:89: e7:aa:d5:b2:56:b1:1e:b8:39:5b:c2:cb:ae:1f:f6:b8:f9:4b: 32:6f:12:0a:9f:f5:dc:5d:44:0c:2a:5c:7e:ee:27:f2:5c:65: 43:a9:26:2a:82:69:72:c6:34:c5:a8:44:02:cb:3f:f5:ce:4a: c3:be:ca:57:81:db:34:eb:5c:cf:14:9c:21:e2:a4:12:48:08: 06:6e:65:a5:c6:3a:75:22:6a:8a:b7:20:2f:82:91:f8:c4:e4: 86:31:dc:13:3f:90:12:86:97:2b:6b:39:8b:26:04:54:6a:88: d6:42:7d:e1:f8:4f:d5:a0:fc:c5:42:5e:92:4f:e7:61:ca:03: 2c:44:85:1f:7b:54:ee:26:4b:e4:37:da:cb:93:9e:be:f3:8f: c7:9d:b0:4c:48:df:40:16:6a:96:94:8e:9d:7b:80:39:7f:a4: de:de:43:71 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHbBwoVV4sd2YesYCWw7mG+vblLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1 QTY5QzU5NjAeFw0yNDA4MjEwMjU3NDlaFw0yNTA4MjAwMzAyNDlaMDMxMTAvBgNV BAMTKERCREI1NjZEMDMyRkM5Mjg4MkVFRTk4QkIxMEJGMjc3RDhBOTY1NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc4uYHdhL4YwS9nXK87atorBWW qd6LOtHXLdrQdw4YfvxgmKyd0uxHKAmYXPehOYwryg7xIUyLEZD7WtAWJcFOSXdB vK2b+RK6eFS5huKDoZnQI5CWoUuCUiZ9APeO98NWgocnGfiKTDx04QyEY/URcdnf +Ky87QXl4r9Wwf2SU62V+ASDsjiXLMnR2JdJQWxB1B1nX6cD2Mbt8j8fVzU4tOXb YmTxoaUM/u/XMNDqcPgfAGdnyAdNx95TcSlJVoj6fYhWQKTnP4WjfVk8T/Mj4Lt2 gfSaPyJt9qsyTVCXAIKOJDoqt1p/l/y1LI4qxq/nymBXFvKlERJvK9voBaLVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU29tWbQMvySiC7umLsQvyd9ipZUIwHwYDVR0j BBgwFoAUWKcG6nRo3w0UyhgXx8xdvVppxZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmJmYWIwOS1jMWU5LTQ0ZDgtODE5ZS1mZGY2NTQ5YzZiM2YvMC81OEE3MDZFQTc0 NjhERjBEMTRDQTE4MTdDN0NDNURCRDVBNjlDNTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1QTY5 QzU5Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyYmZhYjA5LWMxZTktNDRkOC04 MTllLWZkZjY1NDljNmIzZi8wLzMxMzAzMzJlMzEzODM0MmUzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzgzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7gUMA0GCSqG SIb3DQEBCwUAA4IBAQA5SfqP7KWame/QFpg3XiSVXc6CqxArmfyQe2AzgIp9rc0V k7HrZ1ytCruSdGfgKLbth0MjEFh511a1AJY2INqgCpyadNxksqIv4o+TrTCZIgAR 99H89OKRconnqtWyVrEeuDlbwsuuH/a4+UsybxIKn/XcXUQMKlx+7ifyXGVDqSYq gmlyxjTFqEQCyz/1zkrDvspXgds061zPFJwh4qQSSAgGbmWlxjp1ImqKtyAvgpH4 xOSGMdwTP5AShpcrazmLJgRUaojWQn3h+E/VoPzFQl6ST+dhygMsRIUfe1TuJkvk N9rLk56+84/HnbBMSN9AFmqWlI6de4A5f6Te3kNx -----END CERTIFICATE-----Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org