$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa File: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (raw, json) Hash identifier: 2ja7FKvmu0FlqkDf7LuG1Z7B59LI4ArGIpEzwSMjxRg= Subject key identifier: 5B:6F:08:2D:E4:8B:49:C5:99:8B:CA:C1:E6:ED:75:D9:02:29:14:15 Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 29A2E64F6E625FB748BD38E9A00FE2B59F70CE2C Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa Signing time: Sun 03 Nov 2024 08:00:52 +0000 ROA not before: Sun 03 Nov 2024 07:55:52 +0000 ROA not after: Sun 02 Nov 2025 08:00:52 +0000 asID: 149898 IP address blocks: 103.190.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a2:e6:4f:6e:62:5f:b7:48:bd:38:e9:a0:0f:e2:b5:9f:70:ce:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Nov 3 07:55:52 2024 GMT Not After : Nov 2 08:00:52 2025 GMT Subject: CN=5B6F082DE48B49C5998BCAC1E6ED75D902291415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:32:25:df:9c:e0:7b:84:ae:95:13:02:c0:51: 74:9c:59:ed:17:69:62:cf:89:07:d9:d3:a4:a0:00: 3d:38:c7:53:0b:8e:ab:d1:c3:cc:54:10:ab:f1:11: 8d:97:2d:5a:87:75:26:37:63:2a:51:4c:7d:fc:0b: a6:97:b1:55:d2:26:36:18:c9:18:66:98:43:dc:60: ea:59:21:30:28:73:f7:37:a7:ea:6b:e4:27:ec:f0: 73:ad:9f:a9:90:dd:3d:2e:52:e3:53:31:a0:85:3a: 82:43:ba:cc:68:ec:56:67:a1:48:df:15:d8:b4:5a: e0:9d:2b:d3:f1:13:01:b8:13:91:3f:3a:1a:a6:e8: 92:69:62:73:60:b5:c6:01:47:5b:40:ac:9d:ad:ce: ce:0a:5d:95:73:bc:8e:17:a9:aa:53:ba:a7:27:a8: cf:84:f6:61:c9:06:d1:e9:5e:b3:f3:4d:4d:6a:8c: 61:b1:68:3c:b4:47:c5:59:d5:3d:af:53:83:20:99: b1:80:a3:01:df:80:bc:20:ab:68:72:63:b5:b8:ec: aa:d5:8d:e4:fc:55:97:6a:85:79:04:40:20:3d:8d: d6:7d:ee:16:4e:8e:24:5c:24:76:a8:50:17:e9:d2: 10:76:85:24:21:d1:58:0c:b9:ed:df:af:d4:22:a2: a2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6F:08:2D:E4:8B:49:C5:99:8B:CA:C1:E6:ED:75:D9:02:29:14:15 X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.62.0/24 Signature Algorithm: sha256WithRSAEncryption a8:53:0d:2c:2c:b1:01:8b:51:b9:9c:6d:79:d6:fd:58:5e:50: dd:ad:50:3b:cd:52:88:cb:9f:0d:eb:d8:8d:6e:fe:55:94:e5: 63:83:02:03:b3:be:46:55:ae:5d:b4:cb:ab:e1:18:46:22:e5: 5d:58:bf:e4:da:98:3d:ae:11:6b:01:6c:45:14:1b:92:bb:c4: 58:fa:40:16:34:51:55:ee:4d:c3:8e:38:42:54:de:88:7d:1f: f7:d6:63:76:d9:bd:12:de:dc:91:72:9e:4b:b4:23:1c:3c:c6: 1b:5b:0e:fa:24:7a:76:ab:3c:64:9e:57:17:21:2c:b7:d4:f8: a3:0d:35:d3:ca:ec:e4:0c:a5:7c:70:3e:55:15:a1:50:05:fa: 46:c7:67:97:57:2e:8d:eb:38:00:d0:8e:41:78:a9:45:00:99: fe:c0:31:f1:82:4f:78:f2:94:df:86:40:62:a7:8a:96:29:aa: 39:b4:f4:d7:d3:cf:dc:8c:4d:02:33:fc:bd:b4:bb:fd:c2:57: 85:67:af:16:83:c0:24:27:9e:0a:ee:9e:ce:b0:48:ab:41:83: b8:a8:62:dd:27:8e:eb:90:fa:43:70:4a:e9:51:f8:39:72:51: f8:f3:95:65:4a:bd:c6:55:7b:c1:69:88:a7:6a:66:11:32:da: 90:de:56:7c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKaLmT25iX7dIvTjpoA/itZ9wziwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNDExMDMwNzU1NTJaFw0yNTExMDIwODAwNTJaMDMxMTAvBgNV BAMTKDVCNkYwODJERTQ4QjQ5QzU5OThCQ0FDMUU2RUQ3NUQ5MDIyOTE0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcMiXfnOB7hK6VEwLAUXScWe0X aWLPiQfZ06SgAD04x1MLjqvRw8xUEKvxEY2XLVqHdSY3YypRTH38C6aXsVXSJjYY yRhmmEPcYOpZITAoc/c3p+pr5Cfs8HOtn6mQ3T0uUuNTMaCFOoJDusxo7FZnoUjf Fdi0WuCdK9PxEwG4E5E/Ohqm6JJpYnNgtcYBR1tArJ2tzs4KXZVzvI4XqapTuqcn qM+E9mHJBtHpXrPzTU1qjGGxaDy0R8VZ1T2vU4MgmbGAowHfgLwgq2hyY7W47KrV jeT8VZdqhXkEQCA9jdZ97hZOjiRcJHaoUBfp0hB2hSQh0VgMue3fr9QioqIFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUW28ILeSLScWZi8rB5u112QIpFBUwHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2MjBiNDIzLWRkNWQtNDQ4Zi1i YmQzLTA0NTMwZWMxNzE1ZC8wLzMxMzAzMzJlMzEzOTMwMmUzNjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ74+MA0GCSqG SIb3DQEBCwUAA4IBAQCoUw0sLLEBi1G5nG151v1YXlDdrVA7zVKIy58N69iNbv5V lOVjgwIDs75GVa5dtMur4RhGIuVdWL/k2pg9rhFrAWxFFBuSu8RY+kAWNFFV7k3D jjhCVN6IfR/31mN22b0S3tyRcp5LtCMcPMYbWw76JHp2qzxknlcXISy31PijDTXT yuzkDKV8cD5VFaFQBfpGx2eXVy6N6zgA0I5BeKlFAJn+wDHxgk948pTfhkBip4qW Kao5tPTX08/cjE0CM/y9tLv9wleFZ68Wg8AkJ54K7p7OsEirQYO4qGLdJ47rkPpD cErpUfg5clH485VlSr3GVXvBaYinamYRMtqQ3lZ8 -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org