$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa File: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (raw, json) Hash identifier: WABg6+jnoT1qTnV3WZS7hShFxGBieWXNbxreSqjsLyw= Subject key identifier: 9C:F6:36:6F:AC:B6:04:55:FB:83:E8:00:AD:9E:B5:00:17:B7:4E:F0 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 2E520F30F0A138344FD6750EED60AAA60B44170E Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa Signing time: Fri 19 Jan 2024 12:00:01 +0000 ROA not before: Fri 19 Jan 2024 11:55:01 +0000 ROA not after: Fri 17 Jan 2025 12:00:01 +0000 asID: 141055 IP address blocks: 103.149.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:52:0f:30:f0:a1:38:34:4f:d6:75:0e:ed:60:aa:a6:0b:44:17:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Jan 19 11:55:01 2024 GMT Not After : Jan 17 12:00:01 2025 GMT Subject: CN=9CF6366FACB60455FB83E800AD9EB50017B74EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:b5:89:b6:f7:89:32:7b:1b:18:34:dc:15: c6:46:b9:8f:ba:78:c3:a7:c4:a8:13:1f:bb:42:54: 66:07:73:b4:f9:06:b1:b9:6d:2b:ea:5a:2e:4d:95: 22:23:ad:e4:fa:34:4c:e7:d6:d8:11:cf:e5:05:cf: 1b:71:8b:e7:0d:6e:63:ef:c4:9c:db:94:05:db:df: 69:5d:30:df:30:b8:1e:43:2f:eb:c8:86:33:70:a9: 39:e8:f1:f2:79:cd:73:4f:6a:da:db:09:7d:94:9e: a8:d9:6b:b7:31:c2:cb:04:af:4e:0f:0f:de:bb:5a: ab:b3:e7:63:17:cf:4d:0a:9b:dc:c5:b7:b3:7e:69: ad:d8:e9:6c:92:5c:fb:48:d7:b1:64:86:3c:e2:ab: 88:5d:35:19:1d:fd:7c:65:53:30:70:71:c3:7b:8b: 01:ab:2d:94:c9:d4:e3:25:3d:9c:08:56:0b:8b:c6: e7:85:56:10:5b:2f:c5:15:de:89:bd:9a:fb:c2:8a: 45:61:4f:9a:04:14:ab:19:00:01:d9:1c:8f:7b:9c: c2:a0:0e:77:3a:8e:fa:ed:6c:cc:57:c7:6a:e2:91: 66:31:13:17:d2:8e:ca:49:41:b2:1e:0e:e9:f7:04: 6e:b0:0b:26:69:92:81:a9:17:af:44:41:46:5d:2b: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F6:36:6F:AC:B6:04:55:FB:83:E8:00:AD:9E:B5:00:17:B7:4E:F0 X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.118.0/23 Signature Algorithm: sha256WithRSAEncryption 75:92:3f:d2:21:b6:fa:dd:19:af:86:6f:42:80:09:c7:8d:55: a5:ec:44:31:a9:5e:d0:6a:18:d5:03:bd:ae:27:c7:db:4b:ad: 5e:e1:2b:ec:36:2b:62:c0:d8:21:65:de:00:8f:fc:e7:c7:4b: db:d7:e2:99:b5:dc:f8:f8:9c:6e:4b:46:6e:56:9a:8e:1d:73: ae:d2:43:6c:b3:df:6c:9f:33:6e:18:0b:1f:8f:96:20:4d:49: 13:9d:2c:71:2f:95:6c:c1:33:71:c4:9b:f7:ee:94:27:1b:78: 62:5c:8e:b4:95:6a:fb:73:73:5e:be:46:47:c4:5f:c3:b6:53: b3:70:66:d2:c4:e8:d5:e7:bc:6a:b2:11:46:3c:ec:d0:70:58: b1:27:f0:a9:2b:4d:78:30:ae:c4:e3:09:5e:75:bf:84:df:97: 78:ae:1c:59:3f:67:86:fc:96:61:97:a9:94:e4:48:9a:4a:79: af:39:b3:32:4f:5f:48:d2:93:e1:97:5c:85:e2:18:75:f3:d9: 99:df:98:c2:2b:40:6d:97:4a:e4:fb:b1:b1:ca:88:f4:7b:23: 09:87:5d:33:7c:88:30:7e:71:c1:44:ab:25:2c:b6:99:af:16: 1f:58:fa:eb:92:4f:11:e4:9a:13:de:2d:63:48:06:ad:65:fd: 7f:19:09:76 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULlIPMPChODRP1nUO7WCqpgtEFw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNDAxMTkxMTU1MDFaFw0yNTAxMTcxMjAwMDFaMDMxMTAvBgNV BAMTKDlDRjYzNjZGQUNCNjA0NTVGQjgzRTgwMEFEOUVCNTAwMTdCNzRFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GrWJtveJMnsbGDTcFcZGuY+6 eMOnxKgTH7tCVGYHc7T5BrG5bSvqWi5NlSIjreT6NEzn1tgRz+UFzxtxi+cNbmPv xJzblAXb32ldMN8wuB5DL+vIhjNwqTno8fJ5zXNPatrbCX2UnqjZa7cxwssEr04P D967Wquz52MXz00Km9zFt7N+aa3Y6WySXPtI17Fkhjziq4hdNRkd/XxlUzBwccN7 iwGrLZTJ1OMlPZwIVguLxueFVhBbL8UV3om9mvvCikVhT5oEFKsZAAHZHI97nMKg Dnc6jvrtbMxXx2rikWYxExfSjspJQbIeDun3BG6wCyZpkoGpF69EQUZdKxQVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUnPY2b6y2BFX7g+gArZ61ABe3TvAwHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjYzcwZjdkLTMzZmUtNGRmMi04 MWU1LWRjMGQ1NWFjNTE3MC8wLzMxMzAzMzJlMzEzNDM5MmUzMTMxMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM1MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlXYwDQYJ KoZIhvcNAQELBQADggEBAHWSP9IhtvrdGa+Gb0KACceNVaXsRDGpXtBqGNUDva4n x9tLrV7hK+w2K2LA2CFl3gCP/OfHS9vX4pm13Pj4nG5LRm5Wmo4dc67SQ2yz32yf M24YCx+PliBNSROdLHEvlWzBM3HEm/fulCcbeGJcjrSVavtzc16+RkfEX8O2U7Nw ZtLE6NXnvGqyEUY87NBwWLEn8KkrTXgwrsTjCV51v4Tfl3iuHFk/Z4b8lmGXqZTk SJpKea85szJPX0jSk+GXXIXiGHXz2ZnfmMIrQG2XSuT7sbHKiPR7IwmHXTN8iDB+ ccFEqyUstpmvFh9Y+uuSTxHkmhPeLWNIBq1l/X8ZCXY= -----END CERTIFICATE-----Generated at Fri Nov 22 05:48:03 2024 by rpki-client on console-fra.rpki-client.org