$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa File: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (raw, json) Hash identifier: vFQZ6zJmin+go144K352IonoJjOf81LutMdjmKX7MCM= Subject key identifier: F5:61:48:AA:C3:0A:6B:FB:A7:50:FA:79:C0:39:6B:CF:3E:79:A0:F3 Certificate issuer: /CN=90EF20986B3061451D9F1178EB4D439522186281 Certificate serial: 33D397520ABF6F8892D3FA601B1DD67D91CAF26A Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa Signing time: Sat 12 Oct 2024 07:00:00 +0000 ROA not before: Sat 12 Oct 2024 06:55:00 +0000 ROA not after: Sat 11 Oct 2025 07:00:00 +0000 asID: 149319 IP address blocks: 103.178.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d3:97:52:0a:bf:6f:88:92:d3:fa:60:1b:1d:d6:7d:91:ca:f2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281 Validity Not Before: Oct 12 06:55:00 2024 GMT Not After : Oct 11 07:00:00 2025 GMT Subject: CN=F56148AAC30A6BFBA750FA79C0396BCF3E79A0F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8a:e0:73:4c:ed:ea:29:52:88:7c:a0:fe:9d: bd:5b:17:07:91:dc:a9:e8:6c:96:c4:7d:0c:31:e3: aa:13:de:3d:8f:10:52:05:10:94:a5:6d:bf:e8:d7: d9:c9:e1:c6:4b:f8:81:a9:31:2f:0d:e5:a5:48:2a: b3:59:a1:d9:3c:38:f5:c4:b4:dc:18:e5:cd:71:6d: 01:1b:5e:a7:60:c9:b6:39:a0:f1:31:5c:5b:93:6e: d4:53:d1:4c:db:ae:2d:2f:64:2d:f0:21:9f:98:49: fc:e9:e6:a9:7a:96:f9:6c:e7:e4:6e:26:d9:a7:45: 5f:0a:53:01:76:e3:b6:c1:94:88:54:01:5b:1c:70: 25:4c:29:c5:57:80:71:5b:15:f3:70:f3:69:11:1d: 40:90:d4:de:f5:56:18:5b:5d:0a:0a:9c:25:2e:bc: c8:17:cb:00:e8:36:c4:9f:96:d9:44:c6:3c:56:16: d6:14:39:97:9e:89:70:54:2a:7e:b3:1d:ca:db:50: e2:fe:2c:8d:fb:cc:51:c9:4a:72:a6:4e:96:79:41: ee:4e:bf:f3:43:0b:42:5b:5b:0f:f9:60:ab:01:55: a6:77:f2:48:e8:13:83:f4:7a:b0:67:6d:e1:a5:8b: b7:9e:91:1a:43:de:2c:65:56:da:45:18:fa:c5:89: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:61:48:AA:C3:0A:6B:FB:A7:50:FA:79:C0:39:6B:CF:3E:79:A0:F3 X509v3 Authority Key Identifier: keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.20.0/23 Signature Algorithm: sha256WithRSAEncryption b5:0b:8f:14:bd:75:41:2e:0d:8f:e5:65:94:20:06:37:c4:57: 63:a7:77:b7:36:fc:39:03:2f:1d:53:11:13:c3:7f:c5:bc:e7: dd:5f:43:2d:93:63:22:51:5c:c7:29:d9:1d:20:dc:7a:12:a9: da:b0:52:44:48:1e:6a:22:0c:3f:7a:b9:ff:96:21:7f:5a:af: 3e:89:0b:53:a0:5a:be:ac:da:a6:b5:ef:44:2f:bf:cc:30:ce: bf:88:91:1b:2b:2f:93:93:42:94:7f:70:1a:74:b0:26:ef:43: 31:8f:2b:11:ed:13:14:75:52:92:4a:47:5e:82:e5:98:28:87: 1a:fa:a7:55:9a:0d:73:9e:2f:cd:9e:69:35:00:3f:7a:de:d0: 91:ac:72:5a:b3:4f:a1:64:e2:c7:64:bd:ec:62:a6:5c:13:0f: d7:e2:52:78:6e:35:c3:0a:d6:08:f7:01:0f:e4:ae:3c:3f:c5: 38:10:67:9f:88:b3:6e:48:3a:46:96:31:95:61:a2:75:6a:86: 81:7c:53:a7:a6:e3:e1:fd:a8:77:15:fe:b6:ad:ac:3d:cc:c6: 2b:bb:34:2e:4f:36:8b:2e:6c:43:1c:e6:5a:23:3f:cb:84:08: 6b:dc:21:68:87:56:4d:31:41:ac:c7:3c:db:96:8d:ae:07:8f: 17:70:eb:d1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUM9OXUgq/b4iS0/pgGx3WfZHK8mowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUy MjE4NjI4MTAeFw0yNDEwMTIwNjU1MDBaFw0yNTEwMTEwNzAwMDBaMDMxMTAvBgNV BAMTKEY1NjE0OEFBQzMwQTZCRkJBNzUwRkE3OUMwMzk2QkNGM0U3OUEwRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDziuBzTO3qKVKIfKD+nb1bFweR 3KnobJbEfQwx46oT3j2PEFIFEJSlbb/o19nJ4cZL+IGpMS8N5aVIKrNZodk8OPXE tNwY5c1xbQEbXqdgybY5oPExXFuTbtRT0Uzbri0vZC3wIZ+YSfzp5ql6lvls5+Ru JtmnRV8KUwF247bBlIhUAVsccCVMKcVXgHFbFfNw82kRHUCQ1N71VhhbXQoKnCUu vMgXywDoNsSfltlExjxWFtYUOZeeiXBUKn6zHcrbUOL+LI37zFHJSnKmTpZ5Qe5O v/NDC0JbWw/5YKsBVaZ38kjoE4P0erBnbeGli7eekRpD3ixlVtpFGPrFiXJdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9WFIqsMKa/unUPp5wDlrzz55oPMwHwYDVR0j BBgwFoAUkO8gmGswYUUdnxF4601DlSIYYoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmZkOWE1OC1hOTA2LTQwMjktOTJlMi1hZGNiNTZhZTE4YmQvMC85MEVGMjA5ODZC MzA2MTQ1MUQ5RjExNzhFQjRENDM5NTIyMTg2MjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUyMjE4 NjI4MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2ZmQ5YTU4LWE5MDYtNDAyOS05 MmUyLWFkY2I1NmFlMThiZC8wLzMxMzAzMzJlMzEzNzM4MmUzMjMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzMzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7IUMA0GCSqG SIb3DQEBCwUAA4IBAQC1C48UvXVBLg2P5WWUIAY3xFdjp3e3Nvw5Ay8dUxETw3/F vOfdX0Mtk2MiUVzHKdkdINx6EqnasFJESB5qIgw/ern/liF/Wq8+iQtToFq+rNqm te9EL7/MMM6/iJEbKy+Tk0KUf3AadLAm70MxjysR7RMUdVKSSkdeguWYKIca+qdV mg1zni/Nnmk1AD963tCRrHJas0+hZOLHZL3sYqZcEw/X4lJ4bjXDCtYI9wEP5K48 P8U4EGefiLNuSDpGljGVYaJ1aoaBfFOnpuPh/ah3Ff62raw9zMYruzQuTzaLLmxD HOZaIz/LhAhr3CFoh1ZNMUGsxzzblo2uB48XcOvR -----END CERTIFICATE-----Generated at Fri Nov 22 03:50:41 2024 by rpki-client on console-fra.rpki-client.org