$ rpki-client -vvf repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa File: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (raw, json) Hash identifier: XcGp7ypRIjCrrz2ZlpbT4Kw1Xg8DfR8gu9Z0oSXRJS8= Subject key identifier: 79:F2:4E:F9:1A:3F:FD:88:C8:C5:AA:0E:6F:AB:73:7B:74:6F:D4:20 Certificate issuer: /CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Certificate serial: 3480FD29034ECF947F210BEDAC81631A9C5F3DC5 Authority key identifier: 3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa Signing time: Tue 27 Aug 2024 08:00:00 +0000 ROA not before: Tue 27 Aug 2024 07:55:00 +0000 ROA not after: Tue 26 Aug 2025 08:00:00 +0000 asID: 150239 IP address blocks: 103.19.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:80:fd:29:03:4e:cf:94:7f:21:0b:ed:ac:81:63:1a:9c:5f:3d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDDCA40C3F0CF912B003BB19F9C03E48B43F727 Validity Not Before: Aug 27 07:55:00 2024 GMT Not After : Aug 26 08:00:00 2025 GMT Subject: CN=79F24EF91A3FFD88C8C5AA0E6FAB737B746FD420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:40:5c:23:2e:65:e7:3c:61:c3:a7:33:ca: 3a:60:bf:aa:3e:50:05:00:14:8a:90:1d:6c:e4:39: d5:a7:9d:52:ef:b7:79:8f:84:09:f4:08:2f:4a:ec: 6e:a9:a5:b9:19:31:d1:64:52:b9:3b:56:a5:89:a6: 92:94:f7:72:79:66:da:e6:ca:1f:c6:71:46:f9:fd: c7:a5:9d:f7:a1:a4:cd:03:c6:97:0b:85:70:3a:dd: a8:ae:65:2c:b9:75:74:2f:2f:b8:68:0d:44:1d:af: 63:dd:8f:79:5d:13:ac:1d:1f:64:31:65:8a:25:d5: 49:0b:9a:d7:e6:bf:bf:5b:8b:f8:68:a5:c7:e3:0a: c3:75:63:6d:e0:4c:52:02:7e:5b:63:7e:12:ee:71: f4:45:dc:8d:ee:87:b7:e0:a0:05:42:db:52:e9:2d: d0:94:d6:5a:79:b7:9a:81:11:26:6e:8b:21:3c:03: a1:1d:f0:16:29:26:b0:06:39:88:1c:ce:87:19:a1: 55:19:1a:d9:f0:96:80:9c:3c:bf:ba:6c:11:c6:71: 71:09:cd:61:2e:ec:29:78:c0:94:ac:e9:b1:1b:de: 2c:11:bc:21:5a:0b:0d:10:f6:94:40:65:25:05:b4: 34:65:af:57:c4:f4:e3:c0:6f:af:a5:b7:7c:49:da: f0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F2:4E:F9:1A:3F:FD:88:C8:C5:AA:0E:6F:AB:73:7B:74:6F:D4:20 X509v3 Authority Key Identifier: keyid:3E:DD:CA:40:C3:F0:CF:91:2B:00:3B:B1:9F:9C:03:E4:8B:43:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDDCA40C3F0CF912B003BB19F9C03E48B43F727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.158.0/23 Signature Algorithm: sha256WithRSAEncryption 45:66:05:86:06:0d:67:a4:2e:43:f1:eb:67:85:cc:f3:b0:e3: 09:8d:26:a9:ed:0b:c3:aa:a6:35:fa:a7:68:67:f1:77:ec:1a: 3f:32:ee:13:a2:1e:42:1c:43:c5:d8:62:bb:ee:d0:b9:eb:f0: 75:c9:7c:d4:d5:76:54:40:12:1c:1d:ba:34:18:0c:3b:56:22: 0e:72:2d:63:bf:27:d0:ea:7e:2a:a4:7f:f7:e5:d9:8b:bf:22: aa:64:03:36:02:46:1c:47:fd:6e:4f:8a:6b:68:ae:e8:2a:d7: 5d:16:0f:25:31:d9:99:b5:14:3c:01:d0:f9:ef:6c:36:09:6d: af:47:ba:b2:46:af:0a:4d:02:fa:37:06:67:e6:a7:16:5c:e0: 8b:08:b9:cc:e7:cd:ce:05:97:0d:17:58:cc:c1:9a:91:97:85: 2e:8d:40:c6:f7:e6:5a:7a:1e:7f:8c:1f:d6:c7:67:c6:40:a6: 01:a4:e6:b6:9c:f6:78:38:82:61:6a:41:71:30:67:4e:af:02: 3a:fc:7a:64:b4:c7:7b:61:c7:7a:37:96:73:f7:2f:56:5c:92: 30:40:68:f3:c5:12:99:84:29:33:58:fe:e8:47:78:3d:c2:bc: 6d:0c:99:5b:e4:81:b0:b1:41:38:0c:78:0b:1b:3a:84:6a:1c: a7:e7:b9:fc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNID9KQNOz5R/IQvtrIFjGpxfPcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4 QjQzRjcyNzAeFw0yNDA4MjcwNzU1MDBaFw0yNTA4MjYwODAwMDBaMDMxMTAvBgNV BAMTKDc5RjI0RUY5MUEzRkZEODhDOEM1QUEwRTZGQUI3MzdCNzQ2RkQ0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrkBcIy5l5zxhw6czyjpgv6o+ UAUAFIqQHWzkOdWnnVLvt3mPhAn0CC9K7G6ppbkZMdFkUrk7VqWJppKU93J5Ztrm yh/GcUb5/celnfehpM0DxpcLhXA63aiuZSy5dXQvL7hoDUQdr2Pdj3ldE6wdH2Qx ZYol1UkLmtfmv79bi/hopcfjCsN1Y23gTFICfltjfhLucfRF3I3uh7fgoAVC21Lp LdCU1lp5t5qBESZuiyE8A6Ed8BYpJrAGOYgczocZoVUZGtnwloCcPL+6bBHGcXEJ zWEu7Cl4wJSs6bEb3iwRvCFaCw0Q9pRAZSUFtDRlr1fE9OPAb6+lt3xJ2vCBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUefJO+Ro//YjIxaoOb6tze3Rv1CAwHwYDVR0j BBgwFoAUPt3KQMPwz5ErADuxn5wD5ItD9ycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2RlOGVjZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC8zRUREQ0E0MEMz RjBDRjkxMkIwMDNCQjE5RjlDMDNFNDhCNDNGNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VERENBNDBDM0YwQ0Y5MTJCMDAzQkIxOUY5QzAzRTQ4QjQz RjcyNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjZGU4ZWNlLTk3YTItNGIwZC1h MDY0LTE3Y2VhNjFmNDVjYy8wLzMxMzAzMzJlMzEzOTJlMzEzNTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxOeMA0GCSqG SIb3DQEBCwUAA4IBAQBFZgWGBg1npC5D8etnhczzsOMJjSap7QvDqqY1+qdoZ/F3 7Bo/Mu4Toh5CHEPF2GK77tC56/B1yXzU1XZUQBIcHbo0GAw7ViIOci1jvyfQ6n4q pH/35dmLvyKqZAM2AkYcR/1uT4praK7oKtddFg8lMdmZtRQ8AdD572w2CW2vR7qy Rq8KTQL6NwZn5qcWXOCLCLnM583OBZcNF1jMwZqRl4UujUDG9+Zaeh5/jB/Wx2fG QKYBpOa2nPZ4OIJhakFxMGdOrwI6/HpktMd7Ycd6N5Zz9y9WXJIwQGjzxRKZhCkz WP7oR3g9wrxtDJlb5IGwsUE4DHgLGzqEahyn57n8 -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org