$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa File: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (raw, json) Hash identifier: +CkBP7a3JLcny5uLFShLB7LGDdkJIdP2Mi1sS2D0nYk= Subject key identifier: 30:8F:1B:8D:B3:96:0D:5B:3E:28:A5:B0:BC:AD:30:AF:CF:47:44:9C Certificate issuer: /CN=1160709118182E564A6D9E250FF5000EFA5166A5 Certificate serial: 776B3DDF0957CAEEEE3A0E85F8EA90C11A61536D Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa Signing time: Tue 27 Feb 2024 03:00:02 +0000 ROA not before: Tue 27 Feb 2024 02:55:02 +0000 ROA not after: Tue 25 Feb 2025 03:00:02 +0000 asID: 150552 IP address blocks: 103.86.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6b:3d:df:09:57:ca:ee:ee:3a:0e:85:f8:ea:90:c1:1a:61:53:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5 Validity Not Before: Feb 27 02:55:02 2024 GMT Not After : Feb 25 03:00:02 2025 GMT Subject: CN=308F1B8DB3960D5B3E28A5B0BCAD30AFCF47449C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7e:e5:6d:6d:17:48:f3:70:17:0f:04:ae:4e: 96:ed:cf:36:6c:a3:79:2f:d1:f7:80:1a:bd:9a:77: b9:0c:80:e7:c1:71:e0:d2:82:31:76:1a:ed:12:52: 72:79:20:29:03:66:44:9b:7f:99:5f:d0:38:e8:f4: b3:1f:b8:8b:68:b2:8e:20:f1:97:f8:a8:08:01:e9: eb:9b:7a:2f:b7:fd:0c:86:8b:fb:e3:7d:e4:c8:86: 30:1d:9d:6a:23:d4:a2:cf:e4:a6:8c:ef:a8:96:65: 20:f3:0d:17:48:11:d3:26:26:bd:eb:d6:70:df:c9: 02:f9:04:e6:e7:f7:26:65:ac:26:23:fd:52:35:ea: cd:a8:a4:33:73:b2:fa:88:b1:70:13:46:d7:3a:24: 96:ab:e8:da:c6:a4:b3:fa:c1:f4:3d:90:55:c1:1e: a0:cb:90:92:ba:d2:ff:fb:c7:39:ed:27:24:85:d0: d4:22:85:6a:0a:0d:c5:08:fa:70:51:70:9b:f8:0d: f6:51:88:7d:65:d9:7d:f7:6f:99:f0:93:c7:f0:64: b4:fa:31:35:59:a5:ef:d3:55:5d:ef:ae:01:dc:92: cd:ea:9b:68:a0:b4:d6:54:27:bd:51:c7:18:83:c2: 25:5a:53:07:b6:67:25:4f:d3:9a:7d:00:3d:bd:10: a9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8F:1B:8D:B3:96:0D:5B:3E:28:A5:B0:BC:AD:30:AF:CF:47:44:9C X509v3 Authority Key Identifier: keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.116.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:b3:70:b0:c2:be:41:09:d7:2b:82:c9:93:60:d3:0f:50:13: 62:5b:7d:e7:87:7e:e9:d2:20:e2:5b:f8:2b:73:b6:20:41:4a: 70:f2:dc:8a:e9:82:7a:a3:89:65:e6:76:4d:9d:40:14:ae:43: 2e:7e:65:b9:15:71:31:f8:8a:81:08:4d:bd:76:5f:50:38:89: 2b:49:db:1b:b0:7d:1f:bd:2c:db:85:ea:45:7d:f8:8e:c4:a2: 29:44:c5:12:db:b0:5a:82:a3:fc:8f:ca:c4:a0:e3:be:8b:c0: 0b:86:a8:f0:dd:c5:9e:77:34:54:ac:8e:0a:42:ce:4b:e4:77: f4:0a:47:b3:e3:ba:03:f6:bf:e3:0d:66:a4:ff:e6:25:88:fa: 9b:ba:5f:82:ec:3c:7a:15:9c:4b:5d:6f:f0:d3:98:26:61:e0: 9b:25:44:b1:ff:47:c0:99:fc:33:56:af:ba:e3:6f:ca:b8:72: 12:d9:28:6e:95:29:b8:87:df:8b:3e:95:74:80:1c:32:db:f3: e5:38:6c:92:bc:d8:5b:6a:f8:dc:96:c5:60:af:fa:8e:25:76: a2:23:90:37:47:2e:aa:47:0e:91:0b:30:62:c6:6a:b7:8f:f6: 4a:40:55:81:6d:6f:35:9b:fa:80:0b:88:2b:a6:b9:67:24:19: 50:88:9f:59 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUd2s93wlXyu7uOg6F+OqQwRphU20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVG QTUxNjZBNTAeFw0yNDAyMjcwMjU1MDJaFw0yNTAyMjUwMzAwMDJaMDMxMTAvBgNV BAMTKDMwOEYxQjhEQjM5NjBENUIzRTI4QTVCMEJDQUQzMEFGQ0Y0NzQ0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfuVtbRdI83AXDwSuTpbtzzZs o3kv0feAGr2ad7kMgOfBceDSgjF2Gu0SUnJ5ICkDZkSbf5lf0Djo9LMfuItoso4g 8Zf4qAgB6eubei+3/QyGi/vjfeTIhjAdnWoj1KLP5KaM76iWZSDzDRdIEdMmJr3r 1nDfyQL5BObn9yZlrCYj/VI16s2opDNzsvqIsXATRtc6JJar6NrGpLP6wfQ9kFXB HqDLkJK60v/7xzntJySF0NQihWoKDcUI+nBRcJv4DfZRiH1l2X33b5nwk8fwZLT6 MTVZpe/TVV3vrgHcks3qm2igtNZUJ71RxxiDwiVaUwe2ZyVP05p9AD29EKk5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMI8bjbOWDVs+KKWwvK0wr89HRJwwHwYDVR0j BBgwFoAUEWBwkRgYLlZKbZ4lD/UADvpRZqUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTcxOGY2Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMC8xMTYwNzA5MTE4 MTgyRTU2NEE2RDlFMjUwRkY1MDAwRUZBNTE2NkE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVGQTUx NjZBNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5NzE4ZjZiLWI1MTYtNDNhZS1i NTg5LTgzYTI1ZmFhMzBiZS8wLzMxMzAzMzJlMzgzNjJlMzEzMTM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzUzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1Z0MA0GCSqG SIb3DQEBCwUAA4IBAQAts3Cwwr5BCdcrgsmTYNMPUBNiW33nh37p0iDiW/grc7Yg QUpw8tyK6YJ6o4ll5nZNnUAUrkMufmW5FXEx+IqBCE29dl9QOIkrSdsbsH0fvSzb hepFffiOxKIpRMUS27BagqP8j8rEoOO+i8ALhqjw3cWedzRUrI4KQs5L5Hf0Ckez 47oD9r/jDWak/+YliPqbul+C7Dx6FZxLXW/w05gmYeCbJUSx/0fAmfwzVq+642/K uHIS2ShulSm4h9+LPpV0gBwy2/PlOGySvNhbavjclsVgr/qOJXaiI5A3Ry6qRw6R CzBixmq3j/ZKQFWBbW81m/qAC4grprlnJBlQiJ9Z -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org