$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa File: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (raw, json) Hash identifier: rocwRr0NP6Uj0/rSOv/9FOGchYWFwBQRYbTt7bw6igg= Subject key identifier: DE:C5:0A:67:23:28:6D:70:FB:97:D9:2A:F9:8B:E3:D5:67:E0:A6:E6 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 66A81C876363CABD391DF11B47FC272789C68E51 Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa Signing time: Mon 01 Jul 2024 01:02:53 +0000 ROA not before: Mon 01 Jul 2024 00:57:53 +0000 ROA not after: Mon 30 Jun 2025 01:02:53 +0000 asID: 46032 IP address blocks: 103.148.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a8:1c:87:63:63:ca:bd:39:1d:f1:1b:47:fc:27:27:89:c6:8e:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Jul 1 00:57:53 2024 GMT Not After : Jun 30 01:02:53 2025 GMT Subject: CN=DEC50A6723286D70FB97D92AF98BE3D567E0A6E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:90:af:68:ba:b0:9d:29:7e:43:af:3d:25: 7d:e1:9e:d7:8e:af:c5:6c:d4:ff:dc:a9:18:a6:a2: 15:de:f1:2b:22:24:89:98:3f:99:9a:46:e9:c4:82: 47:87:1c:20:e9:b2:4e:ee:73:c6:78:8c:c6:7f:2a: cf:40:d3:b9:cc:ff:a0:31:aa:c6:5e:1b:db:7f:73: 76:41:cc:31:30:f7:aa:4e:27:0d:0e:cd:af:7c:b2: e9:fc:c6:03:b0:f8:3a:b4:41:fb:51:15:a9:28:5a: 95:3c:7d:5e:5d:79:1b:00:c2:cc:9d:45:da:a7:dd: d0:b1:83:ba:40:57:69:eb:a6:cc:91:8b:33:4d:52: 76:9c:bb:b5:a4:74:ca:2d:ef:35:e1:a6:de:9c:73: 8e:19:ad:b5:e3:be:44:af:bc:bc:8d:2c:15:1e:ca: e6:9a:17:9b:97:b6:44:58:3f:d1:43:23:e2:ab:1d: 4f:1d:4f:22:8b:a7:0f:09:40:fa:46:a1:c8:2a:fb: 44:15:1a:0a:12:25:48:aa:df:1e:1b:85:45:d3:77: 79:0a:4b:4e:9f:a3:74:66:6e:27:b3:ee:b1:15:d7: 05:53:9b:33:df:c8:60:c7:6a:6d:09:8f:ce:20:f4: 52:98:44:12:10:46:bd:c5:55:1e:e2:ad:de:c6:6c: f5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C5:0A:67:23:28:6D:70:FB:97:D9:2A:F9:8B:E3:D5:67:E0:A6:E6 X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.111.0/24 Signature Algorithm: sha256WithRSAEncryption 37:76:12:7c:67:c6:29:98:43:c7:fc:34:59:66:1d:35:64:5c: 57:31:c6:cf:bc:21:4a:db:7d:14:eb:3f:d8:9d:cc:8b:b1:f3: d6:90:45:14:3d:95:53:67:6f:0c:61:63:34:8f:8b:25:00:14: 31:d9:d1:79:46:39:59:dc:0a:e8:2a:5d:86:45:d1:46:da:41: 72:a0:fd:12:53:dd:bc:c0:7f:2c:42:e7:52:85:ef:cc:cd:da: 66:bc:ae:6b:51:06:9a:b5:00:fb:68:87:9c:7b:0e:b2:15:87: d5:87:28:7b:30:0b:9f:4a:b6:ec:67:cb:2e:86:ad:4c:1b:8c: 98:53:4a:29:27:0a:d9:b8:2e:2b:c1:5f:7a:b8:ec:2e:13:b9: 95:82:d8:c6:83:01:df:52:d3:35:2c:ba:ca:61:08:a1:92:aa: 33:20:40:90:3b:2b:db:b8:6f:ce:96:27:36:a0:0f:98:39:b2: 55:40:1b:43:2b:db:a4:93:fb:58:f3:8c:52:e7:65:da:0c:bf: 8f:ba:59:bf:53:71:87:68:16:4c:38:5b:2e:ee:9c:1a:0c:0c: 39:57:9e:ac:0c:e5:65:35:cf:26:f6:e1:8c:56:a1:85:95:36: 28:ff:fd:b0:54:f5:70:1c:11:e7:fb:54:fd:d0:4c:f3:3c:ec: 34:cb:dd:48 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZqgch2Njyr05HfEbR/wnJ4nGjlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNDA3MDEwMDU3NTNaFw0yNTA2MzAwMTAyNTNaMDMxMTAvBgNV BAMTKERFQzUwQTY3MjMyODZENzBGQjk3RDkyQUY5OEJFM0Q1NjdFMEE2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCur5CvaLqwnSl+Q689JX3hnteO r8Vs1P/cqRimohXe8SsiJImYP5maRunEgkeHHCDpsk7uc8Z4jMZ/Ks9A07nM/6Ax qsZeG9t/c3ZBzDEw96pOJw0Oza98sun8xgOw+Dq0QftRFakoWpU8fV5deRsAwsyd Rdqn3dCxg7pAV2nrpsyRizNNUnacu7WkdMot7zXhpt6cc44ZrbXjvkSvvLyNLBUe yuaaF5uXtkRYP9FDI+KrHU8dTyKLpw8JQPpGocgq+0QVGgoSJUiq3x4bhUXTd3kK S06fo3Rmbiez7rEV1wVTmzPfyGDHam0Jj84g9FKYRBIQRr3FVR7ird7GbPUDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3sUKZyMobXD7l9kq+Yvj1WfgpuYwHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZjkyNDQ3LWFjZDMtNDI3Yy1i NWU3LWRiMzkxN2YxODVjOC8wLzMxMzAzMzJlMzEzNDM4MmUzMTMxMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RvMA0GCSqG SIb3DQEBCwUAA4IBAQA3dhJ8Z8YpmEPH/DRZZh01ZFxXMcbPvCFK230U6z/YncyL sfPWkEUUPZVTZ28MYWM0j4slABQx2dF5RjlZ3AroKl2GRdFG2kFyoP0SU928wH8s QudShe/MzdpmvK5rUQaatQD7aIecew6yFYfVhyh7MAufSrbsZ8suhq1MG4yYU0op JwrZuC4rwV96uOwuE7mVgtjGgwHfUtM1LLrKYQihkqozIECQOyvbuG/Olic2oA+Y ObJVQBtDK9ukk/tY84xS52XaDL+Pulm/U3GHaBZMOFsu7pwaDAw5V56sDOVlNc8m 9uGMVqGFlTYo//2wVPVwHBHn+1T90EzzPOw0y91I -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:20 2024 by rpki-client on console-fra.rpki-client.org