$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa File: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (raw, json) Hash identifier: t8aG55RbMcqjxnaTHmZPqaZDl4lrVMlqNWSnzULjb0A= Subject key identifier: AF:46:B8:57:29:3A:3C:E1:3B:74:2C:96:4F:8F:34:24:5C:AA:BD:8A Certificate issuer: /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Certificate serial: 78ACAA8ACE93EB83E4B02B6A8035AA81C1A9B6C8 Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa Signing time: Thu 15 Feb 2024 23:00:01 +0000 ROA not before: Thu 15 Feb 2024 22:55:01 +0000 ROA not after: Thu 13 Feb 2025 23:00:01 +0000 asID: 149737 IP address blocks: 103.188.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ac:aa:8a:ce:93:eb:83:e4:b0:2b:6a:80:35:aa:81:c1:a9:b6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Validity Not Before: Feb 15 22:55:01 2024 GMT Not After : Feb 13 23:00:01 2025 GMT Subject: CN=AF46B857293A3CE13B742C964F8F34245CAABD8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:c2:75:dc:6c:48:c7:9a:37:87:28:cc:03: e1:89:1a:eb:15:eb:7a:83:52:b4:74:4c:a8:ec:63: fe:3a:d5:5d:11:b5:9d:1a:07:88:db:b7:31:b1:a2: a4:ab:c1:a0:84:40:54:be:52:5b:2e:a5:78:dd:f5: 8f:19:d9:04:aa:fc:40:2f:ce:b3:d2:67:d3:61:ed: 7e:72:ab:ce:60:04:68:78:31:1a:e1:21:c8:e7:ba: 41:59:0a:2d:84:28:9c:ee:dd:b7:b5:f2:ee:b8:7b: 4a:9c:5f:61:8a:1d:4e:58:5e:56:16:18:e6:86:f4: c0:25:9c:62:6b:79:99:63:20:f3:b5:bf:4d:9a:b4: b6:2d:b2:7f:62:4c:50:de:cf:d6:25:f4:fb:9f:5d: ff:14:c0:4b:b4:44:50:7b:3a:9a:73:60:3b:61:73: 43:3b:82:f7:7e:41:e2:90:00:4e:8f:28:93:3d:96: 4c:3a:7f:33:eb:8f:bd:1a:96:8d:5f:fe:50:b2:da: 3f:6e:4a:dc:b2:3e:a5:b1:6d:73:20:eb:85:a7:f1: 36:f5:be:8d:46:d9:b5:87:19:2e:dd:13:aa:9f:cb: 71:4d:16:21:bc:47:78:f5:ab:d8:59:0d:6e:4b:c3: d2:f5:88:db:66:47:d7:53:82:db:12:42:e6:75:ad: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:B8:57:29:3A:3C:E1:3B:74:2C:96:4F:8F:34:24:5C:AA:BD:8A X509v3 Authority Key Identifier: keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.252.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:85:a2:b3:da:e3:92:02:6a:8f:9d:9e:db:3e:3b:cc:a1:d2: d9:19:f4:1e:15:08:42:be:c7:c7:88:39:d5:4b:aa:ca:0c:4c: d7:7e:60:3a:aa:aa:5f:c5:d3:60:b7:b5:40:bd:a1:ee:bd:3d: ad:7d:69:47:27:9d:b9:36:f3:06:46:90:03:ab:12:90:b1:3f: 1b:19:aa:a1:91:ca:4f:5b:23:37:58:dd:62:14:4f:5c:0b:d8: c9:c8:47:8f:76:97:b3:1d:11:7d:12:42:e7:bd:9f:fd:30:62: 80:be:83:e3:87:9c:76:e1:68:89:68:fa:da:f9:11:27:2b:57: e7:63:01:cb:0c:ed:1f:9d:ed:5e:c0:84:3b:a3:b5:86:dd:dd: ce:05:9a:6a:b8:ef:64:ea:df:7c:37:0e:53:7c:7b:94:bd:d6: 3c:9e:c1:6a:71:d0:c7:27:f3:d7:06:3e:83:f0:e5:5e:b3:db: 83:25:d7:61:76:ad:75:e1:23:16:3d:29:ec:50:7f:ab:64:68: e3:e1:6a:ef:20:c9:14:4f:62:9a:db:d0:98:16:08:2b:6e:3d: 42:d9:01:d9:f9:41:22:65:e2:c9:cd:e8:0e:8c:43:d6:19:d8: 82:98:f3:65:9c:16:c0:54:ff:0e:84:db:38:61:98:23:4a:2c: e7:ca:11:f6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUeKyqis6T64PksCtqgDWqgcGptsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5 ODI1NERCMjAeFw0yNDAyMTUyMjU1MDFaFw0yNTAyMTMyMzAwMDFaMDMxMTAvBgNV BAMTKEFGNDZCODU3MjkzQTNDRTEzQjc0MkM5NjRGOEYzNDI0NUNBQUJEOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJcJ13GxIx5o3hyjMA+GJGusV 63qDUrR0TKjsY/461V0RtZ0aB4jbtzGxoqSrwaCEQFS+UlsupXjd9Y8Z2QSq/EAv zrPSZ9Nh7X5yq85gBGh4MRrhIcjnukFZCi2EKJzu3be18u64e0qcX2GKHU5YXlYW GOaG9MAlnGJreZljIPO1v02atLYtsn9iTFDez9Yl9PufXf8UwEu0RFB7OppzYDth c0M7gvd+QeKQAE6PKJM9lkw6fzPrj70alo1f/lCy2j9uStyyPqWxbXMg64Wn8Tb1 vo1G2bWHGS7dE6qfy3FNFiG8R3j1q9hZDW5Lw9L1iNtmR9dTgtsSQuZ1reHbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUr0a4Vyk6POE7dCyWT480JFyqvYowHwYDVR0j BBgwFoAUtel7cfr6JP+PorGjNVjYCpglTbIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWVkMDk4Yi00OWIxLTRmNTMtYjc1YS0yNzNlMTFjMjUxNDkvMC9CNUU5N0I3MUZB RkEyNEZGOEZBMkIxQTMzNTU4RDgwQTk4MjU0REIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5ODI1 NERCMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhZWQwOThiLTQ5YjEtNGY1My1i NzVhLTI3M2UxMWMyNTE0OS8wLzMxMzAzMzJlMzEzODM4MmUzMjM1MzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzNzMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvPwwDQYJ KoZIhvcNAQELBQADggEBAH6ForPa45ICao+dnts+O8yh0tkZ9B4VCEK+x8eIOdVL qsoMTNd+YDqqql/F02C3tUC9oe69Pa19aUcnnbk28wZGkAOrEpCxPxsZqqGRyk9b IzdY3WIUT1wL2MnIR492l7MdEX0SQue9n/0wYoC+g+OHnHbhaIlo+tr5EScrV+dj AcsM7R+d7V7AhDujtYbd3c4Fmmq472Tq33w3DlN8e5S91jyewWpx0Mcn89cGPoPw 5V6z24Ml12F2rXXhIxY9KexQf6tkaOPhau8gyRRPYprb0JgWCCtuPULZAdn5QSJl 4snN6A6MQ9YZ2IKY82WcFsBU/w6E2zhhmCNKLOfKEfY= -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org