$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa File: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (raw, json) Hash identifier: 0FUmX3o0RRvRLbhaXpUU620mkMGet183fROAANIvvIw= Subject key identifier: 20:72:B4:20:15:B7:80:24:25:18:D5:CA:7F:62:FB:08:3C:9E:95:07 Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Certificate serial: 4D0389C51EECA802AE293912406DF7E7C7B95553 Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa Signing time: Wed 12 Jun 2024 04:00:00 +0000 ROA not before: Wed 12 Jun 2024 03:55:00 +0000 ROA not after: Wed 11 Jun 2025 04:00:00 +0000 asID: 149901 IP address blocks: 103.190.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 13:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:03:89:c5:1e:ec:a8:02:ae:29:39:12:40:6d:f7:e7:c7:b9:55:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9 Validity Not Before: Jun 12 03:55:00 2024 GMT Not After : Jun 11 04:00:00 2025 GMT Subject: CN=2072B42015B780242518D5CA7F62FB083C9E9507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:f1:8b:99:8e:0e:d4:70:fe:f9:a8:2b:72: 41:d2:49:4f:30:4c:2f:69:0b:7e:85:b9:f0:92:2e: a0:cf:4f:aa:a3:e4:ad:82:0f:4c:db:b7:c1:76:a4: 0e:f6:9f:f2:93:de:e9:b0:27:10:d7:24:9d:fd:7c: 9b:46:a8:6d:35:36:7b:5d:c9:9d:c6:53:f4:ad:e7: 7a:7b:3c:e4:8e:bd:80:34:8d:7c:92:89:8b:3f:97: 46:53:9d:bc:82:58:12:02:41:9a:75:72:bb:12:60: d5:0f:d3:3d:97:4d:95:50:6b:00:f9:40:89:5f:c4: c3:87:0a:9e:33:8e:fa:44:5d:27:1a:80:c2:6b:57: cc:5c:e6:00:12:f8:88:40:af:3b:10:98:0e:e4:45: bd:19:12:ae:47:0d:21:2b:d1:ba:eb:77:b2:99:ec: 51:00:d7:57:00:2f:ce:57:94:b5:95:70:29:9a:e7: 05:77:6b:62:9c:12:10:f8:e2:04:b6:e3:43:31:74: e5:d2:2a:78:0e:f0:be:33:c7:c8:e8:07:bf:f3:c6: a4:73:5e:d1:c8:88:04:07:89:5e:d3:c2:6e:19:70: 66:d0:16:bb:0e:c0:22:d6:84:c6:f1:ba:ff:76:d4: c0:e6:bc:3f:72:92:35:10:5b:ab:39:f7:e5:5a:f6: 6b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:72:B4:20:15:B7:80:24:25:18:D5:CA:7F:62:FB:08:3C:9E:95:07 X509v3 Authority Key Identifier: keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.61.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:ea:ca:10:5b:3f:8f:cb:03:c9:5a:bc:e9:8c:4b:f7:ad:0f: 7c:65:2f:aa:7f:30:cf:2b:66:53:91:6c:96:dc:ad:a9:48:91: 15:e6:03:15:16:33:24:85:8b:d2:f3:52:bc:0b:e7:5c:04:8d: e1:d2:17:04:2c:b4:98:df:ea:58:e4:83:d0:9a:c4:5c:3b:7d: 8d:bb:5b:44:48:68:06:34:28:72:c4:cd:5f:75:4a:27:c2:99: 64:be:97:03:81:ca:58:9c:69:43:a6:a5:ad:aa:23:f2:5f:6d: a4:98:64:b6:57:f3:24:d9:5a:eb:a3:d1:96:99:a1:44:2f:c1: 7e:30:31:7b:02:7f:0c:1b:6c:1d:98:0f:0d:ab:82:5d:cb:7c: cf:3f:08:e2:63:17:93:a3:8e:25:38:c4:97:fc:14:00:9a:a1: 6d:a2:ea:63:97:ef:2f:44:ce:c0:76:3f:62:e3:1c:bc:35:18: 08:94:6e:3d:74:8e:ec:f6:3a:77:ab:c4:77:a7:3d:28:af:7c: f0:4c:89:7b:3f:40:e3:53:5d:92:48:76:bb:f8:98:50:16:e6: d6:4d:a5:2f:9e:e5:49:b2:0f:e5:89:55:28:23:b3:af:57:6b: a8:f4:ed:ef:55:b5:99:20:8a:91:96:aa:17:65:40:4c:7d:bc: 1d:d2:e6:54 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTQOJxR7sqAKuKTkSQG3358e5VVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy MkNCREVFOTAeFw0yNDA2MTIwMzU1MDBaFw0yNTA2MTEwNDAwMDBaMDMxMTAvBgNV BAMTKDIwNzJCNDIwMTVCNzgwMjQyNTE4RDVDQTdGNjJGQjA4M0M5RTk1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQfGLmY4O1HD++agrckHSSU8w TC9pC36FufCSLqDPT6qj5K2CD0zbt8F2pA72n/KT3umwJxDXJJ39fJtGqG01Nntd yZ3GU/St53p7POSOvYA0jXySiYs/l0ZTnbyCWBICQZp1crsSYNUP0z2XTZVQawD5 QIlfxMOHCp4zjvpEXScagMJrV8xc5gAS+IhArzsQmA7kRb0ZEq5HDSEr0brrd7KZ 7FEA11cAL85XlLWVcCma5wV3a2KcEhD44gS240MxdOXSKngO8L4zx8joB7/zxqRz XtHIiAQHiV7Twm4ZcGbQFrsOwCLWhMbxuv921MDmvD9ykjUQW6s59+Va9mvhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUIHK0IBW3gCQlGNXKf2L7CDyelQcwHwYDVR0j BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC REVFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlMzE0ODU4LWIzM2EtNGI2NS05 YTU1LWRjZTQxZTIyMzg3My8wLzMxMzAzMzJlMzEzOTMwMmUzNjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ749MA0GCSqG SIb3DQEBCwUAA4IBAQAf6soQWz+PywPJWrzpjEv3rQ98ZS+qfzDPK2ZTkWyW3K2p SJEV5gMVFjMkhYvS81K8C+dcBI3h0hcELLSY3+pY5IPQmsRcO32Nu1tESGgGNChy xM1fdUonwplkvpcDgcpYnGlDpqWtqiPyX22kmGS2V/Mk2Vrro9GWmaFEL8F+MDF7 An8MG2wdmA8Nq4Jdy3zPPwjiYxeTo44lOMSX/BQAmqFtoupjl+8vRM7Adj9i4xy8 NRgIlG49dI7s9jp3q8R3pz0or3zwTIl7P0DjU12SSHa7+JhQFubWTaUvnuVJsg/l iVUoI7OvV2uo9O3vVbWZIIqRlqoXZUBMfbwd0uZU -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:44 2024 by rpki-client on console-fra.rpki-client.org