$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa File: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (raw, json) Hash identifier: fygin3I1xgjjFUHRJ4EiAgM+R/8we3DGnULcJ+28xQo= Subject key identifier: 1B:CD:BA:D2:C7:B0:47:E9:22:A0:89:E6:5B:C7:DE:F6:97:20:66:71 Certificate issuer: /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Certificate serial: 2DB61E220FDFF6C36078FAFA6967F191B82E99B1 Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa Signing time: Thu 31 Oct 2024 03:57:51 +0000 ROA not before: Thu 31 Oct 2024 03:52:51 +0000 ROA not after: Thu 30 Oct 2025 03:57:51 +0000 asID: 136085 IP address blocks: 103.87.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 16:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b6:1e:22:0f:df:f6:c3:60:78:fa:fa:69:67:f1:91:b8:2e:99:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Validity Not Before: Oct 31 03:52:51 2024 GMT Not After : Oct 30 03:57:51 2025 GMT Subject: CN=1BCDBAD2C7B047E922A089E65BC7DEF697206671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:c3:e3:66:90:8e:ec:ed:f9:71:96:32:57: 98:1c:1f:73:52:24:e7:81:dc:df:9a:de:b4:e4:e0: 64:54:14:e1:a1:b2:1d:bc:b4:68:14:ec:57:78:54: 6e:3e:8f:a4:a1:03:d4:cf:60:d7:28:29:d1:91:34: e1:7a:85:bb:1b:65:20:78:ab:c3:a5:4b:84:36:87: 28:95:cc:2a:10:70:b9:a4:00:f6:66:7e:44:38:57: 09:b6:97:97:76:39:0a:fe:12:c3:17:45:4c:87:4e: 7c:dc:a2:d2:1c:db:7b:56:ca:3f:38:95:ed:58:95: 19:00:d8:76:3f:a5:7e:44:df:97:ea:3e:1c:12:84: ed:27:c9:4e:e5:1f:3f:d0:c1:34:72:d7:61:06:1a: 5b:aa:f1:96:20:81:c2:a1:71:d7:bf:f3:cd:36:5a: 3e:fa:25:b8:0e:74:5a:55:b9:cf:73:05:08:26:8f: 27:38:13:71:4b:a6:46:03:e1:c8:9a:37:38:b8:8d: d4:47:78:34:70:1a:11:da:36:8f:eb:33:2f:98:fb: dc:88:4e:5a:71:22:e7:63:43:cb:9f:e8:c2:b8:9e: 84:87:05:03:03:c8:b7:24:94:b4:a6:f1:4d:56:02: 13:64:a7:70:09:8d:6b:8d:6a:26:b5:d1:28:f6:f3: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:BA:D2:C7:B0:47:E9:22:A0:89:E6:5B:C7:DE:F6:97:20:66:71 X509v3 Authority Key Identifier: keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.17.0/24 Signature Algorithm: sha256WithRSAEncryption 24:f9:80:54:fd:0f:29:9c:7b:d3:dd:30:24:62:c6:db:59:11: 20:95:72:96:2c:18:bd:3c:cf:b9:56:27:af:b5:4d:36:cd:46: 38:a1:2d:26:fc:7b:d3:ae:b8:8c:bb:8c:f5:00:4d:81:71:a9: 62:ea:97:52:7c:1c:26:85:1a:c2:ac:06:53:31:f3:bc:32:56: a2:c5:cc:dd:f7:e0:42:a3:0b:a5:f5:87:d3:34:ae:5d:ae:6e: 75:a4:96:a4:ae:94:71:68:5e:a6:19:55:9d:ff:f6:e4:c4:31: 61:8b:61:3a:3b:42:8b:3d:5f:e7:54:e8:8d:bf:ff:a9:20:c4: 16:14:d7:a5:1e:86:10:7b:ee:39:61:cc:8e:be:09:22:b9:9d: 05:52:d4:57:f1:3d:cb:7d:e1:87:70:34:c0:f0:2c:6c:5d:65: 68:be:82:35:c0:0b:68:46:80:62:8c:90:c6:8f:f5:b1:22:d3: 1a:1f:94:50:77:53:f2:bd:8f:06:72:cb:c8:a8:09:52:9a:82: d2:a3:4b:d3:b2:fe:1f:d6:09:52:60:93:5a:52:cb:80:a3:96: 03:e5:f0:79:cd:35:ab:56:2c:e1:39:b7:a6:0f:63:4c:cc:ce: 80:83:7c:e7:96:db:bb:87:31:87:b8:84:0f:26:44:6a:a2:c8: 16:d5:5a:bc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULbYeIg/f9sNgePr6aWfxkbgumbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0RE QzM0RUE2QTAeFw0yNDEwMzEwMzUyNTFaFw0yNTEwMzAwMzU3NTFaMDMxMTAvBgNV BAMTKDFCQ0RCQUQyQzdCMDQ3RTkyMkEwODlFNjVCQzdERUY2OTcyMDY2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEMPjZpCO7O35cZYyV5gcH3NS JOeB3N+a3rTk4GRUFOGhsh28tGgU7Fd4VG4+j6ShA9TPYNcoKdGRNOF6hbsbZSB4 q8OlS4Q2hyiVzCoQcLmkAPZmfkQ4Vwm2l5d2OQr+EsMXRUyHTnzcotIc23tWyj84 le1YlRkA2HY/pX5E35fqPhwShO0nyU7lHz/QwTRy12EGGluq8ZYggcKhcde/8802 Wj76JbgOdFpVuc9zBQgmjyc4E3FLpkYD4ciaNzi4jdRHeDRwGhHaNo/rMy+Y+9yI TlpxIudjQ8uf6MK4noSHBQMDyLcklLSm8U1WAhNkp3AJjWuNaia10Sj28/yxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUG8260sewR+kioInmW8fe9pcgZnEwHwYDVR0j BBgwFoAUSFALAMYdobDsRITgeR27zdw06mowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzI3ODc0Ny02YWM3LTRmODctOWIyYi0yMTM1OTI5NGYwMzQvMC80ODUwMEIwMEM2 MURBMUIwRUM0NDg0RTA3OTFEQkJDRERDMzRFQTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0REQzM0 RUE2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjMjc4NzQ3LTZhYzctNGY4Ny05 YjJiLTIxMzU5Mjk0ZjAzNC8wLzMxMzAzMzJlMzgzNzJlMzEzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdXETANBgkqhkiG 9w0BAQsFAAOCAQEAJPmAVP0PKZx7090wJGLG21kRIJVyliwYvTzPuVYnr7VNNs1G OKEtJvx70664jLuM9QBNgXGpYuqXUnwcJoUawqwGUzHzvDJWosXM3ffgQqMLpfWH 0zSuXa5udaSWpK6UcWhephlVnf/25MQxYYthOjtCiz1f51Tojb//qSDEFhTXpR6G EHvuOWHMjr4JIrmdBVLUV/E9y33hh3A0wPAsbF1laL6CNcALaEaAYoyQxo/1sSLT Gh+UUHdT8r2PBnLLyKgJUpqC0qNL07L+H9YJUmCTWlLLgKOWA+Xwec01q1Ys4Tm3 pg9jTMzOgIN855bbu4cxh7iEDyZEaqLIFtVavA== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org