$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa File: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (raw, json) Hash identifier: +z4cRvyNT4QtWwPTkT8yZCGmj9VTYSFEsOdsS2JDhX8= Subject key identifier: 91:99:10:04:E9:EE:5E:74:30:30:FC:1B:AA:C4:B8:05:FF:80:6C:58 Certificate issuer: /CN=115880D133393FF2D96A5861679B5166AFDB1248 Certificate serial: 79F259918C13E593453E5D4117EABDBA6D369324 Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa Signing time: Fri 22 Nov 2024 12:00:01 +0000 ROA not before: Fri 22 Nov 2024 11:55:01 +0000 ROA not after: Fri 21 Nov 2025 12:00:01 +0000 asID: 150465 IP address blocks: 103.161.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f2:59:91:8c:13:e5:93:45:3e:5d:41:17:ea:bd:ba:6d:36:93:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248 Validity Not Before: Nov 22 11:55:01 2024 GMT Not After : Nov 21 12:00:01 2025 GMT Subject: CN=91991004E9EE5E743030FC1BAAC4B805FF806C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:7d:d5:3e:f0:bb:cc:6c:26:8c:c0:87:32: 7a:42:a5:0b:e1:a7:80:3a:18:7d:da:02:16:32:58: ad:a4:a7:c7:7f:98:a1:04:1e:08:1c:f1:ee:06:6a: 47:66:01:89:8a:df:d4:4f:d6:95:5e:18:89:05:f2: 7e:e9:c5:fa:47:11:f5:3d:d7:f9:0c:db:d0:d0:75: 9d:8b:3f:0c:43:d6:45:c6:83:42:2d:5f:e9:47:e3: e3:2f:cc:18:cf:a8:68:df:c7:74:0e:ac:f6:03:2e: e2:51:b5:47:8b:00:75:12:12:8a:b5:46:eb:8c:61: 30:a8:0a:77:57:82:e2:d8:63:20:90:d4:59:40:92: e2:b6:ec:d2:73:e8:74:30:3d:e2:1e:d0:36:26:1f: 36:62:e3:3f:9f:02:24:d0:dc:3c:46:13:55:50:e4: a1:80:8d:34:c6:36:29:f9:d5:79:5c:93:41:70:26: 8d:4b:e3:85:21:fd:da:81:c3:0d:0a:bf:20:5a:59: bd:18:47:84:be:c6:c2:38:b9:86:00:89:9e:ba:29: 84:0e:1c:68:f9:64:2c:aa:9b:f1:57:2a:91:ec:f6: 4e:4b:0c:f5:db:a4:e5:c0:7f:ad:34:68:9f:10:3f: 49:0b:fb:eb:a4:d6:c6:bc:d0:ad:6a:e5:a9:73:a3: d0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:99:10:04:E9:EE:5E:74:30:30:FC:1B:AA:C4:B8:05:FF:80:6C:58 X509v3 Authority Key Identifier: keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.134.0/24 Signature Algorithm: sha256WithRSAEncryption ab:3a:63:cd:f0:96:18:57:d0:64:bf:4e:98:10:1f:a5:f0:09: ae:96:08:5d:1e:24:f7:f3:06:3a:1d:b5:a6:6f:77:48:9d:0b: f9:66:f7:4d:36:14:95:65:23:19:6b:5d:8c:79:c1:a6:a5:5a: 56:fe:b8:c9:65:0d:c0:40:99:92:2c:7a:2d:b9:42:f6:a9:fa: 31:e7:5f:0d:13:dd:7f:ff:30:35:41:ad:cd:57:c0:cd:97:1c: 9f:46:89:51:c3:98:86:63:17:79:dd:86:52:96:f0:8b:f9:7e: db:0d:9c:e6:55:45:9e:2d:25:da:58:e8:45:4b:26:90:8e:84: f6:94:2c:d8:84:03:e0:dd:1e:60:03:f7:98:5c:69:ca:64:81: cd:8e:24:63:e7:bd:c3:d1:51:ac:3a:1c:f5:fb:27:e6:60:9d: 0e:67:af:42:df:8f:28:26:91:7f:51:00:5a:b5:d9:d0:84:c2: ed:2d:47:3f:fa:9c:f2:2c:b5:4a:e0:5e:ac:36:78:ed:37:70: 3f:74:ee:0a:66:34:d2:85:3c:7a:83:f4:5f:3f:e0:0f:d9:0b: ed:9b:d7:d0:dd:1a:b7:d9:f9:40:15:39:8c:92:8b:7b:d3:d0: 2a:1a:fe:11:84:e4:3f:2d:8d:68:ba:94:09:28:0b:b8:1e:6f: a7:fd:ae:12 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUefJZkYwT5ZNFPl1BF+q9um02kyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB RkRCMTI0ODAeFw0yNDExMjIxMTU1MDFaFw0yNTExMjExMjAwMDFaMDMxMTAvBgNV BAMTKDkxOTkxMDA0RTlFRTVFNzQzMDMwRkMxQkFBQzRCODA1RkY4MDZDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDON33VPvC7zGwmjMCHMnpCpQvh p4A6GH3aAhYyWK2kp8d/mKEEHggc8e4GakdmAYmK39RP1pVeGIkF8n7pxfpHEfU9 1/kM29DQdZ2LPwxD1kXGg0ItX+lH4+MvzBjPqGjfx3QOrPYDLuJRtUeLAHUSEoq1 RuuMYTCoCndXguLYYyCQ1FlAkuK27NJz6HQwPeIe0DYmHzZi4z+fAiTQ3DxGE1VQ 5KGAjTTGNin51Xlck0FwJo1L44Uh/dqBww0KvyBaWb0YR4S+xsI4uYYAiZ66KYQO HGj5ZCyqm/FXKpHs9k5LDPXbpOXAf600aJ8QP0kL++uk1sa80K1q5alzo9A5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUkZkQBOnuXnQwMPwbqsS4Bf+AbFgwHwYDVR0j BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC MTI0OC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNTY4MDFmLWE2N2ItNDNkZC04 ZjYyLWI3YjBkNjAzMTdhZi8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoYYwDQYJ KoZIhvcNAQELBQADggEBAKs6Y83wlhhX0GS/TpgQH6XwCa6WCF0eJPfzBjodtaZv d0idC/lm9002FJVlIxlrXYx5waalWlb+uMllDcBAmZIsei25Qvap+jHnXw0T3X// MDVBrc1XwM2XHJ9GiVHDmIZjF3ndhlKW8Iv5ftsNnOZVRZ4tJdpY6EVLJpCOhPaU LNiEA+DdHmAD95hcacpkgc2OJGPnvcPRUaw6HPX7J+ZgnQ5nr0LfjygmkX9RAFq1 2dCEwu0tRz/6nPIstUrgXqw2eO03cD907gpmNNKFPHqD9F8/4A/ZC+2b19DdGrfZ +UAVOYySi3vT0Coa/hGE5D8tjWi6lAkoC7geb6f9rhI= -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org