$ rpki-client -vvf repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa File: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (raw, json) Hash identifier: UInZsMvDimz9gQSVeWEpP6G47EPeJg4fLXau5OzQIkc= Subject key identifier: 52:FC:D5:A2:71:89:F7:BC:D2:73:64:46:32:D9:12:78:14:17:B6:DD Certificate issuer: /CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Certificate serial: 77298331F1FC1121E33C2BF7370C532F874DA5A8 Authority key identifier: 47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa Signing time: Thu 25 Jul 2024 05:02:17 +0000 ROA not before: Thu 25 Jul 2024 04:57:17 +0000 ROA not after: Thu 24 Jul 2025 05:02:17 +0000 asID: 149925 IP address blocks: 103.191.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:29:83:31:f1:fc:11:21:e3:3c:2b:f7:37:0c:53:2f:87:4d:a5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Validity Not Before: Jul 25 04:57:17 2024 GMT Not After : Jul 24 05:02:17 2025 GMT Subject: CN=52FCD5A27189F7BCD273644632D912781417B6DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:13:f9:b0:aa:d6:61:67:47:2d:40:30:2f: 05:99:85:a0:27:7e:3f:70:7f:d4:5f:e2:f4:a9:16: c7:2b:46:f5:db:d8:84:34:97:28:26:64:13:67:33: 0d:04:7b:c0:8e:e2:61:dc:34:0f:6a:f3:45:37:4d: 88:e8:79:52:da:ce:c4:6c:a0:db:ec:c5:ca:72:c4: 98:48:04:04:26:9c:42:09:df:2e:06:e4:69:57:05: 1d:12:7f:58:01:c9:dd:d3:8e:5b:58:74:90:5e:e4: 23:f3:c3:1c:ff:3d:5d:25:50:7f:a7:45:7d:e2:2b: f9:90:73:3d:20:63:9a:36:3b:5f:0f:98:13:af:10: 5f:8f:76:7a:a7:12:05:98:1d:0c:58:f8:d1:d9:6f: ff:75:70:31:3a:6e:99:7f:da:4a:4e:13:b6:c0:61: 97:4e:12:a5:a5:6a:3c:77:60:2b:6b:96:7c:d3:17: 49:e9:3f:cc:c3:ee:cd:ed:01:6f:a7:61:0d:05:e7: b5:0e:71:b0:84:88:fb:e8:07:02:0c:5d:c3:1b:3f: 2e:50:86:77:a8:a0:16:d7:f1:cf:14:1f:6a:99:6e: 7b:57:9d:4e:36:b0:b5:a7:62:a9:b9:7f:d1:94:ba: 34:f4:71:32:eb:ac:28:eb:fd:63:b4:c1:04:0b:1d: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FC:D5:A2:71:89:F7:BC:D2:73:64:46:32:D9:12:78:14:17:B6:DD X509v3 Authority Key Identifier: keyid:47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.165.0/24 Signature Algorithm: sha256WithRSAEncryption ad:4b:4a:2b:fa:77:cb:ca:63:1a:43:67:e2:d7:8d:79:4f:a9: 1e:15:04:39:35:db:98:fa:bb:cd:eb:33:f4:1e:b5:3a:12:ac: a8:45:dd:0d:3d:2d:e1:90:a4:60:42:54:90:7b:13:30:d9:c3: 39:2d:16:b5:2b:87:d6:61:67:3f:50:35:96:8e:8a:1b:c8:0e: 39:21:cd:9c:f2:1e:b2:8a:a5:38:14:31:bd:0d:d9:24:6b:40: fd:fa:28:75:f8:51:83:e2:ef:76:f6:d5:97:eb:f5:93:1c:10: 3d:f8:a8:31:0a:a1:5e:e6:0b:64:d1:b9:e2:7d:bc:21:04:a7: 9c:62:d7:59:62:e4:e3:74:fa:25:7a:9c:ec:c6:4f:7c:e3:d8: 87:ea:d3:40:26:ff:c4:cc:49:d1:83:40:cd:43:35:07:01:ea: 2d:da:f9:16:b8:dc:a0:3f:fc:97:f4:20:e7:cf:5d:ce:f7:bb: 97:4a:b9:0a:7c:4f:9c:fe:4f:8e:f5:af:d5:e0:cc:dc:28:eb: 5e:9d:e1:ea:67:d1:78:e2:86:0c:9f:03:fe:cc:75:41:77:b3: a7:c2:89:d6:6a:0c:46:e3:d4:6e:7e:50:ac:f4:5e:8e:95:a6: 93:51:07:f6:02:8f:5c:7b:9b:da:72:19:80:a4:b0:7b:42:36: f6:79:96:7a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUdymDMfH8ESHjPCv3NwxTL4dNpagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0 Q0QwNDc2QzAeFw0yNDA3MjUwNDU3MTdaFw0yNTA3MjQwNTAyMTdaMDMxMTAvBgNV BAMTKDUyRkNENUEyNzE4OUY3QkNEMjczNjQ0NjMyRDkxMjc4MTQxN0I2REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfRP5sKrWYWdHLUAwLwWZhaAn fj9wf9Rf4vSpFscrRvXb2IQ0lygmZBNnMw0Ee8CO4mHcNA9q80U3TYjoeVLazsRs oNvsxcpyxJhIBAQmnEIJ3y4G5GlXBR0Sf1gByd3TjltYdJBe5CPzwxz/PV0lUH+n RX3iK/mQcz0gY5o2O18PmBOvEF+PdnqnEgWYHQxY+NHZb/91cDE6bpl/2kpOE7bA YZdOEqWlajx3YCtrlnzTF0npP8zD7s3tAW+nYQ0F57UOcbCEiPvoBwIMXcMbPy5Q hneooBbX8c8UH2qZbntXnU42sLWnYqm5f9GUujT0cTLrrCjr/WO0wQQLHfzpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUUvzVonGJ97zSc2RGMtkSeBQXtt0wHwYDVR0j BBgwFoAUR8flSmcWSv+VOZtEz3r/NkzQR2wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVmYTU0ZC0yNDhlLTQyM2MtOWU0OS1kNmU2YmZiYmY3OGIvMC80N0M3RTU0QTY3 MTY0QUZGOTUzOTlCNDRDRjdBRkYzNjRDRDA0NzZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0Q0Qw NDc2Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNWZhNTRkLTI0OGUtNDIzYy05 ZTQ5LWQ2ZTZiZmJiZjc4Yi8wLzMxMzAzMzJlMzEzOTMxMmUzMTM2MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMyMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv6UwDQYJ KoZIhvcNAQELBQADggEBAK1LSiv6d8vKYxpDZ+LXjXlPqR4VBDk125j6u83rM/Qe tToSrKhF3Q09LeGQpGBCVJB7EzDZwzktFrUrh9ZhZz9QNZaOihvIDjkhzZzyHrKK pTgUMb0N2SRrQP36KHX4UYPi73b21Zfr9ZMcED34qDEKoV7mC2TRueJ9vCEEp5xi 11li5ON0+iV6nOzGT3zj2Ifq00Am/8TMSdGDQM1DNQcB6i3a+Ra43KA//Jf0IOfP Xc73u5dKuQp8T5z+T471r9XgzNwo616d4epn0XjihgyfA/7MdUF3s6fCidZqDEbj 1G5+UKz0Xo6VppNRB/YCj1x7m9pyGYCksHtCNvZ5lno= -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:15 2024 by rpki-client on console-fra.rpki-client.org