$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32342d3234203d3e203435333035.roa File: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: lJH7Gw7GH1VXtUyFr/985P0lmVk8EfI/dJP3CK6rihI= Subject key identifier: C8:97:C3:92:36:35:27:F0:79:54:4D:75:DB:F3:90:9C:90:7C:7A:62 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 2F6BE2D4A65A0755A4531C5F6C172C2DCE04BBAE Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32342d3234203d3e203435333035.roa Signing time: Wed 29 May 2024 10:00:00 +0000 ROA not before: Wed 29 May 2024 09:55:00 +0000 ROA not after: Wed 28 May 2025 10:00:00 +0000 asID: 45305 IP address blocks: 103.189.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6b:e2:d4:a6:5a:07:55:a4:53:1c:5f:6c:17:2c:2d:ce:04:bb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: May 29 09:55:00 2024 GMT Not After : May 28 10:00:00 2025 GMT Subject: CN=C897C392363527F079544D75DBF3909C907C7A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:a1:d2:84:c1:5e:28:b7:c6:25:b9:af:a9: f9:4d:09:e0:c0:7f:eb:ba:57:31:fe:f6:ef:16:42: 2c:37:29:5c:cc:b2:b0:77:39:79:4b:a4:65:e8:52: ba:20:c1:7e:ed:f4:6f:75:00:e4:43:4c:0c:db:30: 1d:1d:78:58:5f:58:a0:ce:38:f0:18:7d:a9:86:e2: 46:af:b5:e1:92:bb:00:74:f3:02:cc:a3:ad:08:9c: ba:ea:27:f9:aa:f8:88:92:b4:b2:c0:ff:d2:9e:36: be:de:37:96:34:5d:03:65:d1:67:bf:ec:90:e8:fa: 0e:5e:42:f8:43:c2:b8:38:9e:9d:c5:e6:3c:c5:67: 20:f5:a5:15:a4:25:e9:32:f1:ec:db:a5:f9:48:9e: 6c:b1:bf:99:6f:72:ac:f5:72:bc:a3:2e:c4:4b:0c: dd:f8:27:68:70:de:66:f4:e4:08:15:15:44:8a:d1: 79:15:c5:b0:ce:34:00:24:3e:e5:91:05:14:b4:2f: 72:85:72:2a:41:c6:1b:dc:c7:0b:1d:0e:2c:56:2c: 5f:26:05:99:d7:de:55:05:27:a1:e9:7e:8d:17:d6: a0:73:1b:8e:4a:09:a9:74:76:d3:80:83:36:9f:8b: 81:d1:94:33:c5:f6:ec:21:bc:b4:39:85:f8:e3:c0: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:97:C3:92:36:35:27:F0:79:54:4D:75:DB:F3:90:9C:90:7C:7A:62 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.96.0/24 Signature Algorithm: sha256WithRSAEncryption ba:6f:21:0d:fb:12:1f:85:66:c2:34:f2:cb:93:1b:04:43:96: d6:6f:4d:5b:59:49:25:98:fb:fe:63:22:14:ad:d0:5d:4e:02: 01:83:a8:86:8b:11:31:83:4e:f3:89:6c:18:e2:c8:4c:37:17: 81:4d:d0:e4:67:63:4a:ba:c9:d9:01:e9:3c:38:da:a0:79:5e: 51:e4:47:43:e6:55:0b:1f:cc:de:1e:dd:6c:47:c2:57:1c:e2: e9:22:9a:2d:58:0c:e7:06:f3:01:b1:dc:2a:d7:16:5a:0f:c1: 68:2c:47:5d:aa:2b:bd:13:32:06:13:53:8a:eb:ec:37:98:cb: 74:a4:5d:b4:95:45:1c:40:ce:ad:7a:9e:65:63:74:a7:ba:d4: 4d:88:bf:53:31:e9:c1:f8:40:24:6a:a1:27:af:2f:06:a9:a9: bc:fe:68:a6:89:ff:21:d3:1f:1c:1c:d3:de:a8:1b:44:34:9c: 4a:8a:c8:98:4c:2f:69:28:e3:3f:e9:c7:32:2d:85:46:31:21: 7d:4b:0d:99:16:15:46:fd:65:3a:ee:47:bd:4a:07:c9:ab:27: 4d:4d:50:e5:d0:fc:7e:0e:c2:01:af:84:6f:50:9a:33:76:df: 6e:6c:c7:e2:4a:65:5a:97:e0:3a:ea:ea:3c:0e:4e:e5:18:e8: 05:a4:93:ce -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUL2vi1KZaB1WkUxxfbBcsLc4Eu64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNDA1MjkwOTU1MDBaFw0yNTA1MjgxMDAwMDBaMDMxMTAvBgNV BAMTKEM4OTdDMzkyMzYzNTI3RjA3OTU0NEQ3NURCRjM5MDlDOTA3QzdBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDciqHShMFeKLfGJbmvqflNCeDA f+u6VzH+9u8WQiw3KVzMsrB3OXlLpGXoUrogwX7t9G91AORDTAzbMB0deFhfWKDO OPAYfamG4kavteGSuwB08wLMo60InLrqJ/mq+IiStLLA/9KeNr7eN5Y0XQNl0We/ 7JDo+g5eQvhDwrg4np3F5jzFZyD1pRWkJeky8ezbpflInmyxv5lvcqz1cryjLsRL DN34J2hw3mb05AgVFUSK0XkVxbDONAAkPuWRBRS0L3KFcipBxhvcxwsdDixWLF8m BZnX3lUFJ6Hpfo0X1qBzG45KCal0dtOAgzafi4HRlDPF9uwhvLQ5hfjjwLahAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUyJfDkjY1J/B5VE112/OQnJB8emIwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E0MzMzNmY4LWU1NDYtNDYyYy04 NDEwLWI3NzMyYjZjODAxNS8wLzMxMzAzMzJlMzEzODM5MmUzOTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe9YDANBgkqhkiG 9w0BAQsFAAOCAQEAum8hDfsSH4VmwjTyy5MbBEOW1m9NW1lJJZj7/mMiFK3QXU4C AYOohosRMYNO84lsGOLITDcXgU3Q5GdjSrrJ2QHpPDjaoHleUeRHQ+ZVCx/M3h7d bEfCVxzi6SKaLVgM5wbzAbHcKtcWWg/BaCxHXaorvRMyBhNTiuvsN5jLdKRdtJVF HEDOrXqeZWN0p7rUTYi/UzHpwfhAJGqhJ68vBqmpvP5opon/IdMfHBzT3qgbRDSc SorImEwvaSjjP+nHMi2FRjEhfUsNmRYVRv1lOu5HvUoHyasnTU1Q5dD8fg7CAa+E b1CaM3bfbmzH4kplWpfgOurqPA5O5RjoBaSTzg== -----END CERTIFICATE-----Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org