$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa File: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (raw, json) Hash identifier: GQEbPwKJpVW7oTCm9reh0gTs9OsI1XVrJgYQoBr+vxw= Subject key identifier: 35:01:0D:7E:7E:EF:64:C8:A0:57:0D:B3:6E:8D:FA:CB:1C:06:EE:30 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 04E152CF793E3AA25FBA55C604AE028F99693920 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa Signing time: Thu 06 Jun 2024 04:00:01 +0000 ROA not before: Thu 06 Jun 2024 03:55:01 +0000 ROA not after: Thu 05 Jun 2025 04:00:01 +0000 asID: 149712 IP address blocks: 103.186.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e1:52:cf:79:3e:3a:a2:5f:ba:55:c6:04:ae:02:8f:99:69:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Jun 6 03:55:01 2024 GMT Not After : Jun 5 04:00:01 2025 GMT Subject: CN=35010D7E7EEF64C8A0570DB36E8DFACB1C06EE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:99:66:ba:b0:7b:01:4d:d2:ab:59:8d:41:28: aa:fa:56:b1:62:8b:ea:6a:c0:ba:a9:c7:53:ad:3d: 31:62:04:03:48:ec:66:9c:ab:c1:cc:72:93:ab:96: 20:3d:b9:eb:9a:3b:18:44:06:c0:82:6b:7d:5c:02: b2:17:18:1c:ba:78:36:e1:5d:28:e4:c6:ab:e9:86: c5:fc:88:78:6b:79:7d:5a:67:3a:7e:6a:1c:c2:16: 97:e4:cb:cc:b7:6e:85:27:c8:d9:b4:54:9d:9c:8f: 4e:2a:31:3c:b0:30:fe:c3:6f:53:61:a0:d0:d7:9e: 7e:d4:6c:cf:ac:a6:31:9d:f4:ed:e4:0c:42:94:8f: a7:ee:84:de:5e:06:ed:4a:08:d2:0a:e0:54:65:30: 48:73:f5:cd:a1:01:69:1d:1b:98:c6:6b:5b:02:86: 19:7f:42:6b:3f:fd:4e:77:e9:58:0f:99:59:b4:aa: be:dd:37:bd:24:98:cd:54:60:30:2d:88:15:63:87: cc:59:dd:f1:8d:62:c7:27:d3:6a:bb:24:6b:af:95: 0c:b4:00:51:27:b7:18:99:36:33:c6:45:9b:7d:be: 17:03:74:c7:13:d5:69:f1:cb:71:d7:c6:29:e2:38: 55:fc:c8:48:35:88:44:5c:61:a1:4b:bb:51:d7:85: ed:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:01:0D:7E:7E:EF:64:C8:A0:57:0D:B3:6E:8D:FA:CB:1C:06:EE:30 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.194.0/24 Signature Algorithm: sha256WithRSAEncryption 49:ce:6f:bc:af:db:0c:7a:be:96:54:cf:b3:98:38:92:3a:29: ec:bb:10:df:24:ae:00:d4:f0:a6:10:1d:28:63:8f:5f:db:6d: 61:7b:e8:46:ea:95:07:1c:14:fe:ce:87:a2:6a:64:00:e1:9e: 81:17:48:4d:57:0f:ad:60:9f:e3:ca:44:a9:34:ac:87:40:32: 6a:61:ab:23:e5:94:a6:a1:6e:17:d8:21:6f:99:d4:fc:df:d7: 67:10:77:d4:61:3d:a1:5c:be:6e:99:98:a3:22:ec:4c:43:28: a4:89:98:23:9c:92:a9:06:8b:6e:15:96:8c:8b:32:23:81:de: 39:d6:9e:7b:58:4f:0f:00:1e:bf:ea:66:9b:48:d3:2c:39:77: 73:01:bc:c7:9d:c7:6c:f0:de:a5:82:01:56:3f:41:fb:b5:73: 66:0e:f2:5b:73:37:35:e6:04:1f:0d:66:cd:37:80:eb:71:3a: 4a:ad:ae:9d:7f:83:46:73:9f:bd:02:79:92:00:c2:6d:c0:5f: ef:80:6c:37:c0:fb:e7:61:1e:c4:62:84:96:a2:d0:8d:4d:af: 2c:0c:15:ed:ff:1f:b3:ba:70:2c:d1:66:7e:9c:68:84:40:38: 97:d3:89:62:7e:01:89:1a:3c:76:c7:c0:b4:9f:5a:3a:82:4a: 1a:19:d1:36 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBOFSz3k+OqJfulXGBK4Cj5lpOSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNDA2MDYwMzU1MDFaFw0yNTA2MDUwNDAwMDFaMDMxMTAvBgNV BAMTKDM1MDEwRDdFN0VFRjY0QzhBMDU3MERCMzZFOERGQUNCMUMwNkVFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmmWa6sHsBTdKrWY1BKKr6VrFi i+pqwLqpx1OtPTFiBANI7Gacq8HMcpOrliA9ueuaOxhEBsCCa31cArIXGBy6eDbh XSjkxqvphsX8iHhreX1aZzp+ahzCFpfky8y3boUnyNm0VJ2cj04qMTywMP7Db1Nh oNDXnn7UbM+spjGd9O3kDEKUj6fuhN5eBu1KCNIK4FRlMEhz9c2hAWkdG5jGa1sC hhl/Qms//U536VgPmVm0qr7dN70kmM1UYDAtiBVjh8xZ3fGNYscn02q7JGuvlQy0 AFEntxiZNjPGRZt9vhcDdMcT1Wnxy3HXxiniOFX8yEg1iERcYaFLu1HXhe37AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNQENfn7vZMigVw2zbo36yxwG7jAwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyNTJlYWQzLWRjOGYtNGQ4Ni1h ZmNmLWExNDBlNWI4NzUzMi8wLzMxMzAzMzJlMzEzODM2MmUzMTM5MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnusIwDQYJ KoZIhvcNAQELBQADggEBAEnOb7yv2wx6vpZUz7OYOJI6Key7EN8krgDU8KYQHShj j1/bbWF76EbqlQccFP7Oh6JqZADhnoEXSE1XD61gn+PKRKk0rIdAMmphqyPllKah bhfYIW+Z1Pzf12cQd9RhPaFcvm6ZmKMi7ExDKKSJmCOckqkGi24VloyLMiOB3jnW nntYTw8AHr/qZptI0yw5d3MBvMedx2zw3qWCAVY/Qfu1c2YO8ltzNzXmBB8NZs03 gOtxOkqtrp1/g0Zzn70CeZIAwm3AX++AbDfA++dhHsRihJai0I1NrywMFe3/H7O6 cCzRZn6caIRAOJfTiWJ+AYkaPHbHwLSfWjqCShoZ0TY= -----END CERTIFICATE-----Generated at Sat Nov 23 18:47:51 2024 by rpki-client on console-fra.rpki-client.org