$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa File: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (raw, json) Hash identifier: 2cvQNplRjrm7J2RLwbKy2FXfpqf9d+5P4GE6HnsmJCU= Subject key identifier: 9D:31:54:EF:5D:CB:49:98:56:2B:B5:69:D3:A1:3F:3E:46:F5:AB:C6 Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 420438CDE1CA958E146048512D32CB8AC0E74776 Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa Signing time: Fri 12 Apr 2024 10:00:01 +0000 ROA not before: Fri 12 Apr 2024 09:55:01 +0000 ROA not after: Fri 11 Apr 2025 10:00:01 +0000 asID: 149692 IP address blocks: 103.186.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 11:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:04:38:cd:e1:ca:95:8e:14:60:48:51:2d:32:cb:8a:c0:e7:47:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Apr 12 09:55:01 2024 GMT Not After : Apr 11 10:00:01 2025 GMT Subject: CN=9D3154EF5DCB4998562BB569D3A13F3E46F5ABC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:12:15:f0:17:b4:c1:3a:21:2f:2a:f4:fc:ff: ba:0b:d0:31:ca:aa:46:e8:42:9f:c8:3c:a8:e7:1c: e6:b1:5b:87:a0:05:d2:67:2b:e4:20:32:18:95:1a: 12:69:00:bf:fc:10:c6:54:2c:19:cc:39:5c:06:79: 45:14:0a:00:d2:94:cf:6c:0b:60:90:ef:98:45:2e: d2:0a:9d:55:07:ca:e5:eb:54:97:0d:fb:11:25:58: 1e:7c:54:79:26:d9:18:fe:6c:55:82:52:7d:13:30: e0:e5:fa:5a:ff:68:1c:bd:94:d2:5a:aa:23:6e:e4: ef:d0:0a:41:ba:9d:04:44:1e:76:8c:8d:9e:11:b9: 9d:6f:3a:48:73:8c:8a:7f:c8:7a:31:99:d5:57:fb: 29:fc:ac:d9:ad:8b:46:de:02:f4:9c:73:59:af:db: 99:a6:86:33:ca:a8:8d:0a:ce:2e:7c:45:09:db:33: fe:a2:74:f9:5e:15:54:d2:ca:a1:07:a4:85:b0:1c: 3d:e4:ec:42:17:fb:47:ad:e2:12:4c:56:52:85:e6: a9:76:a8:ab:79:98:88:b9:eb:e4:e1:43:cd:4f:ad: 12:d2:0b:b2:a6:2e:a6:e5:95:c5:ca:08:22:d2:cb: aa:75:6c:e7:32:f7:ec:6f:48:e0:80:32:4d:94:d2: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:31:54:EF:5D:CB:49:98:56:2B:B5:69:D3:A1:3F:3E:46:F5:AB:C6 X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.60.0/23 Signature Algorithm: sha256WithRSAEncryption 08:e0:67:a8:db:ef:57:42:cf:67:2b:c4:29:ad:44:b1:e9:8c: 94:4d:34:55:e2:2e:b2:71:c2:9d:4d:bf:ca:37:c5:57:83:30: 29:1c:12:af:17:18:0b:b8:aa:d1:23:bb:20:56:77:94:0f:9e: e0:d3:92:d6:81:b0:84:df:dc:56:c2:4b:9b:5e:1a:18:5f:cc: 72:a6:7b:9f:66:1d:76:b4:b8:ca:30:92:d2:38:b4:da:4c:1c: c6:86:8a:80:3e:7c:2a:b4:b3:bd:fd:86:04:96:5a:44:74:fa: 34:f4:5c:b5:c0:f0:24:f8:57:b0:26:fd:80:fa:0c:51:50:2b: e6:d4:89:2a:dd:e1:2b:2d:7e:66:27:02:70:e9:38:00:a0:3d: 11:bb:b5:b1:6e:d7:99:22:e0:b9:e8:19:cd:35:eb:ab:90:02: 28:c9:45:49:e0:96:2b:7c:7e:1e:2a:70:e0:e3:cf:87:90:2c: 0f:7a:37:56:45:a4:ac:64:b2:d7:a7:c7:bd:54:b9:9f:e4:f7: 02:b5:26:58:ee:45:b7:6a:4f:98:80:77:87:db:5d:e8:c6:b9: 0f:6e:a0:8a:f7:40:59:3e:77:0d:0b:27:dd:fd:d2:13:44:3c: c2:bf:26:e2:e4:b2:11:c6:91:94:d7:22:61:61:10:b2:f6:25: 76:ec:48:e2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQgQ4zeHKlY4UYEhRLTLLisDnR3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNDA0MTIwOTU1MDFaFw0yNTA0MTExMDAwMDFaMDMxMTAvBgNV BAMTKDlEMzE1NEVGNURDQjQ5OTg1NjJCQjU2OUQzQTEzRjNFNDZGNUFCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCREhXwF7TBOiEvKvT8/7oL0DHK qkboQp/IPKjnHOaxW4egBdJnK+QgMhiVGhJpAL/8EMZULBnMOVwGeUUUCgDSlM9s C2CQ75hFLtIKnVUHyuXrVJcN+xElWB58VHkm2Rj+bFWCUn0TMODl+lr/aBy9lNJa qiNu5O/QCkG6nQREHnaMjZ4RuZ1vOkhzjIp/yHoxmdVX+yn8rNmti0beAvScc1mv 25mmhjPKqI0Kzi58RQnbM/6idPleFVTSyqEHpIWwHD3k7EIX+0et4hJMVlKF5ql2 qKt5mIi56+ThQ81PrRLSC7KmLqbllcXKCCLSy6p1bOcy9+xvSOCAMk2U0kI/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnTFU713LSZhWK7Vp06E/Pkb1q8YwHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2Nzk4MjRmLTRlMDgtNDk3MC1i YmE2LTI3YjQ3MjZjYTU4MC8wLzMxMzAzMzJlMzEzODM2MmUzNjMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7o8MA0GCSqG SIb3DQEBCwUAA4IBAQAI4Geo2+9XQs9nK8QprUSx6YyUTTRV4i6yccKdTb/KN8VX gzApHBKvFxgLuKrRI7sgVneUD57g05LWgbCE39xWwkubXhoYX8xypnufZh12tLjK MJLSOLTaTBzGhoqAPnwqtLO9/YYEllpEdPo09Fy1wPAk+FewJv2A+gxRUCvm1Ikq 3eErLX5mJwJw6TgAoD0Ru7WxbteZIuC56BnNNeurkAIoyUVJ4JYrfH4eKnDg48+H kCwPejdWRaSsZLLXp8e9VLmf5PcCtSZY7kW3ak+YgHeH213oxrkPbqCK90BZPncN Cyfd/dITRDzCvybi5LIRxpGU1yJhYRCy9iV27Eji -----END CERTIFICATE-----Generated at Fri Jun 28 09:12:13 2024 by rpki-client on console-fra.rpki-client.org