$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa File: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (raw, json) Hash identifier: Ki8Cc+Gx70CC0XbilduGxfIZkadNxHy55sL/nnQhaSQ= Subject key identifier: D1:E0:23:24:C0:4B:96:20:16:A4:FA:26:CC:BB:D2:32:AE:54:26:86 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 74D2E7A2F2C0EE750290F144BD628D66B71959C8 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa Signing time: Mon 15 Jul 2024 02:44:09 +0000 ROA not before: Mon 15 Jul 2024 02:39:09 +0000 ROA not after: Mon 14 Jul 2025 02:44:09 +0000 asID: 48465 IP address blocks: 103.186.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d2:e7:a2:f2:c0:ee:75:02:90:f1:44:bd:62:8d:66:b7:19:59:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Jul 15 02:39:09 2024 GMT Not After : Jul 14 02:44:09 2025 GMT Subject: CN=D1E02324C04B962016A4FA26CCBBD232AE542686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:e0:fb:05:81:87:96:20:c4:e1:ee:2d:01: 45:e1:da:ba:e0:17:22:fa:f2:e2:90:4a:35:26:58: 99:6f:8a:da:9f:94:89:10:c0:fe:27:7a:8f:d0:02: 4f:21:98:4f:0a:45:44:e4:41:c3:a2:78:32:66:a8: 9d:c9:f8:e0:67:e6:b2:2b:22:da:19:21:9f:0a:c5: 99:d3:d6:f4:7a:cb:d0:50:f7:cd:c0:31:09:56:e1: c2:1b:e1:b0:28:b3:9f:c3:c2:85:66:be:ed:93:c4: be:81:a0:ce:fe:64:a7:c6:90:98:87:dd:92:a0:a2: 42:71:a8:d2:3e:31:d7:91:2c:9a:5c:ff:88:1e:54: 67:a2:39:75:9a:bd:7b:85:ee:a1:26:05:cf:03:e2: 2e:03:8f:da:a8:ed:d2:8f:60:27:2b:37:32:3e:9b: 14:9e:b7:64:86:4e:dc:be:a0:73:f4:7c:46:74:48: a5:ba:1a:36:9d:7d:eb:48:23:69:c1:52:d9:a4:5b: d5:41:9f:b5:77:57:a8:10:d5:4d:5d:e6:a2:46:7a: 36:9d:a2:87:37:01:f5:19:ba:2d:60:e7:ca:85:ce: 1a:ca:f5:c9:d6:20:a8:85:f8:94:72:b4:39:ba:56: f3:23:10:06:f5:e2:2e:00:c5:9f:7b:fd:bb:f6:57: 63:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E0:23:24:C0:4B:96:20:16:A4:FA:26:CC:BB:D2:32:AE:54:26:86 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.195.0/24 Signature Algorithm: sha256WithRSAEncryption 65:a8:6a:dc:bd:04:e0:01:d5:38:0a:e0:49:fc:98:96:f3:77: cf:d8:88:66:86:92:70:60:4f:fe:a1:47:98:c7:f6:12:3f:2b: ed:4f:d1:8b:6e:76:bd:18:ab:d9:a6:f1:24:b7:00:0b:1b:75: e7:4a:68:29:99:bb:61:ce:ac:59:a5:3f:e1:b9:07:94:47:11: f8:d5:b9:ec:92:70:6a:6f:a6:6e:81:c2:24:3c:3a:50:fb:f6: 28:80:f4:09:e9:c8:34:42:97:f2:5f:e7:65:fe:9b:f4:4f:37: 53:c6:c4:37:87:1c:9f:bd:4d:75:e0:d4:3f:28:84:a2:d1:da: 5c:3f:1e:d7:e6:e6:78:9e:2a:11:2d:1e:fb:54:00:b3:8a:d3: d5:64:e9:0b:4e:dc:b3:62:be:84:a7:84:e7:27:df:00:fd:f7: a2:66:e2:15:1a:b1:6f:1b:26:b5:87:8f:8a:88:8c:d5:d8:40: cf:87:00:47:f5:f4:19:f9:02:3a:43:b7:56:e8:40:cc:8f:92: 76:0b:08:62:21:b1:e8:d5:ff:f0:0e:c5:2e:bd:c8:45:12:81: b8:a5:68:d8:f9:07:f3:ef:cf:30:5e:2d:4a:cd:54:e5:52:f9: d1:cd:70:b4:cc:f4:33:5b:90:93:2c:d7:44:61:5e:85:7c:23: 5b:ee:c1:2b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdNLnovLA7nUCkPFEvWKNZrcZWcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNDA3MTUwMjM5MDlaFw0yNTA3MTQwMjQ0MDlaMDMxMTAvBgNV BAMTKEQxRTAyMzI0QzA0Qjk2MjAxNkE0RkEyNkNDQkJEMjMyQUU1NDI2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIeD7BYGHliDE4e4tAUXh2rrg FyL68uKQSjUmWJlvitqflIkQwP4neo/QAk8hmE8KRUTkQcOieDJmqJ3J+OBn5rIr ItoZIZ8KxZnT1vR6y9BQ983AMQlW4cIb4bAos5/DwoVmvu2TxL6BoM7+ZKfGkJiH 3ZKgokJxqNI+MdeRLJpc/4geVGeiOXWavXuF7qEmBc8D4i4Dj9qo7dKPYCcrNzI+ mxSet2SGTty+oHP0fEZ0SKW6GjadfetII2nBUtmkW9VBn7V3V6gQ1U1d5qJGejad ooc3AfUZui1g58qFzhrK9cnWIKiF+JRytDm6VvMjEAb14i4AxZ97/bv2V2NRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0eAjJMBLliAWpPomzLvSMq5UJoYwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyNTJlYWQzLWRjOGYtNGQ4Ni1h ZmNmLWExNDBlNWI4NzUzMi8wLzMxMzAzMzJlMzEzODM2MmUzMTM5MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7rDMA0GCSqG SIb3DQEBCwUAA4IBAQBlqGrcvQTgAdU4CuBJ/JiW83fP2IhmhpJwYE/+oUeYx/YS PyvtT9GLbna9GKvZpvEktwALG3XnSmgpmbthzqxZpT/huQeURxH41bnsknBqb6Zu gcIkPDpQ+/YogPQJ6cg0QpfyX+dl/pv0TzdTxsQ3hxyfvU114NQ/KISi0dpcPx7X 5uZ4nioRLR77VACzitPVZOkLTtyzYr6Ep4TnJ98A/feiZuIVGrFvGya1h4+KiIzV 2EDPhwBH9fQZ+QI6Q7dW6EDMj5J2CwhiIbHo1f/wDsUuvchFEoG4pWjY+Qfz788w Xi1KzVTlUvnRzXC0zPQzW5CTLNdEYV6FfCNb7sEr -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org