$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa File: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (raw, json) Hash identifier: beyY00a00VBGERsYQlRNcF1U0dKVBEdyWazQu6YOtc8= Subject key identifier: B1:24:04:F5:5D:79:A9:A1:DE:49:1F:BA:FE:3F:5B:E6:4A:3D:1A:17 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 61834EC7A9BEA33DBF6679952751C0DFCAFD9187 Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa Signing time: Wed 01 May 2024 05:00:00 +0000 ROA not before: Wed 01 May 2024 04:55:00 +0000 ROA not after: Wed 30 Apr 2025 05:00:00 +0000 asID: 149883 IP address blocks: 103.189.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:83:4e:c7:a9:be:a3:3d:bf:66:79:95:27:51:c0:df:ca:fd:91:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: May 1 04:55:00 2024 GMT Not After : Apr 30 05:00:00 2025 GMT Subject: CN=B12404F55D79A9A1DE491FBAFE3F5BE64A3D1A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:a8:eb:8c:49:a8:d0:81:e6:bb:f2:11:ad: fc:05:a3:d3:5a:4f:20:9d:ae:c6:37:38:d4:70:43: 34:c6:46:79:ea:ce:40:e2:e1:b5:ab:e3:87:75:fa: e3:25:e0:4c:39:ac:76:be:4b:16:3d:db:c1:70:2e: 8c:fc:a0:46:51:fa:ca:17:11:ae:eb:c5:e4:33:db: f7:a1:41:6b:0c:93:b0:2f:6f:3a:8b:d7:5d:2f:01: 40:ef:ab:70:d3:b7:e4:71:7b:df:56:70:eb:e5:46: 95:0a:20:db:87:16:7c:80:ed:8e:cb:69:8f:17:c8: 5f:67:cc:b7:e7:90:1b:e9:5e:4a:ab:7a:17:22:6e: c0:59:a8:8f:df:35:23:6a:09:33:d1:a2:41:8e:cb: ba:ef:b8:0e:02:10:87:79:8d:ba:ff:2a:c3:76:94: ff:5d:69:0d:ab:e9:01:33:c8:c5:60:69:6b:a2:fc: bd:6b:79:ec:54:30:17:e9:10:41:96:5a:e0:8b:2e: f1:fe:4b:84:3f:e6:12:30:5b:af:bb:88:a7:cb:bb: 0f:f3:5e:d7:36:ae:8c:8e:d7:56:b5:2a:46:7a:43: d1:c8:dc:31:b4:8b:71:4f:99:95:5b:31:8f:fb:9f: 25:98:d3:e3:d9:c6:3d:a2:ca:e2:36:8c:00:65:a6: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:04:F5:5D:79:A9:A1:DE:49:1F:BA:FE:3F:5B:E6:4A:3D:1A:17 X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.118.0/24 Signature Algorithm: sha256WithRSAEncryption 90:5f:29:c2:a0:82:5b:f2:2d:95:43:c8:cc:cd:cb:4b:8e:7e: 79:32:18:51:7b:cc:c4:dc:59:27:f7:80:45:65:ef:77:33:ab: 78:55:53:ec:dc:a4:c7:73:82:f8:64:7f:bd:8a:9c:40:2f:52: e1:4d:2a:08:b3:7b:8a:f2:a7:2b:90:4b:b5:18:38:fd:be:d5: af:32:a3:bc:7a:00:60:a5:00:a5:ea:6d:8f:97:7b:10:89:87: f4:bc:83:9f:ce:ce:a2:89:fe:50:bd:cb:a4:b9:b0:03:d7:9a: ed:fb:b6:f5:73:7a:45:01:01:29:61:04:80:19:3f:81:8e:f1: 3e:f8:8d:8d:71:9c:c1:5e:6d:3d:a4:06:9e:3b:c6:47:7d:b4: de:bb:7a:4a:26:7b:31:0b:51:93:a7:cd:92:22:7b:53:e7:1b: 64:de:c5:f0:fc:d3:f1:ed:b4:e7:46:e7:16:1d:37:31:23:26: 41:07:6e:41:0a:09:13:71:4b:35:bf:86:1f:44:a7:30:a4:8b: 93:4f:4c:b0:91:26:ff:cc:36:e3:da:1f:9b:fc:27:70:c7:2e: 15:13:80:b8:f6:3c:50:98:91:6b:79:b5:f0:fc:14:37:02:83: ad:2f:0a:19:59:ec:2d:c4:34:1f:22:98:b7:37:2b:15:d8:71: 0d:5a:2e:f6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYYNOx6m+oz2/ZnmVJ1HA38r9kYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNDA1MDEwNDU1MDBaFw0yNTA0MzAwNTAwMDBaMDMxMTAvBgNV BAMTKEIxMjQwNEY1NUQ3OUE5QTFERTQ5MUZCQUZFM0Y1QkU2NEEzRDFBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCajrjEmo0IHmu/IRrfwFo9Na TyCdrsY3ONRwQzTGRnnqzkDi4bWr44d1+uMl4Ew5rHa+SxY928FwLoz8oEZR+soX Ea7rxeQz2/ehQWsMk7AvbzqL110vAUDvq3DTt+Rxe99WcOvlRpUKINuHFnyA7Y7L aY8XyF9nzLfnkBvpXkqrehcibsBZqI/fNSNqCTPRokGOy7rvuA4CEId5jbr/KsN2 lP9daQ2r6QEzyMVgaWui/L1reexUMBfpEEGWWuCLLvH+S4Q/5hIwW6+7iKfLuw/z Xtc2royO11a1KkZ6Q9HI3DG0i3FPmZVbMY/7nyWY0+PZxj2iyuI2jABlpmaRAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUsSQE9V15qaHeSR+6/j9b5ko9GhcwHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzYWQ1MjI2LTY1NmQtNDYxZC05 Y2ZmLWM4M2FjMDc0MmYyMC8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM4MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvXYwDQYJ KoZIhvcNAQELBQADggEBAJBfKcKgglvyLZVDyMzNy0uOfnkyGFF7zMTcWSf3gEVl 73czq3hVU+zcpMdzgvhkf72KnEAvUuFNKgize4rypyuQS7UYOP2+1a8yo7x6AGCl AKXqbY+XexCJh/S8g5/OzqKJ/lC9y6S5sAPXmu37tvVzekUBASlhBIAZP4GO8T74 jY1xnMFebT2kBp47xkd9tN67ekomezELUZOnzZIie1PnG2TexfD80/HttOdG5xYd NzEjJkEHbkEKCRNxSzW/hh9EpzCki5NPTLCRJv/MNuPaH5v8J3DHLhUTgLj2PFCY kWt5tfD8FDcCg60vChlZ7C3ENB8imLc3KxXYcQ1aLvY= -----END CERTIFICATE-----Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org