$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa File: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (raw, json) Hash identifier: bUeRMlPqkwApg7Vb4bvig1i36cI8bzbJodoDN6nlTb0= Subject key identifier: 95:44:84:4D:B4:BC:3F:BA:50:5F:11:55:A3:15:E3:93:1E:DD:8C:C9 Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1 Certificate serial: 52CAAEBDC9656268F19DFCEE8B665E6810F4136D Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa Signing time: Wed 17 Jul 2024 19:00:01 +0000 ROA not before: Wed 17 Jul 2024 18:55:01 +0000 ROA not after: Wed 16 Jul 2025 19:00:01 +0000 asID: 149971 IP address blocks: 103.194.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ca:ae:bd:c9:65:62:68:f1:9d:fc:ee:8b:66:5e:68:10:f4:13:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1 Validity Not Before: Jul 17 18:55:01 2024 GMT Not After : Jul 16 19:00:01 2025 GMT Subject: CN=9544844DB4BC3FBA505F1155A315E3931EDD8CC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:33:2c:f8:11:69:39:7b:08:45:55:bf:b4: 9e:b7:a8:f6:d9:64:64:f2:6e:6f:a3:41:91:81:ee: fb:94:41:25:82:fb:87:c0:5c:a4:87:e4:fe:1a:4e: 65:8a:3f:6c:97:5b:ee:dc:9e:14:17:a7:72:31:37: 3d:23:72:e8:67:e3:47:32:ac:35:d6:70:8b:3c:fd: 28:70:b9:03:ff:7d:4d:0d:85:c5:06:99:2c:5d:9f: 92:8d:6b:1d:3d:36:93:be:88:73:66:82:8d:68:e7: 0a:53:2a:50:a1:ae:39:33:98:f4:28:5d:69:22:28: 6a:cc:7d:3b:f0:93:05:07:d7:be:da:2c:da:26:f6: e0:81:94:62:1d:aa:17:7d:00:91:69:5b:95:cd:f2: 8c:0c:9b:4e:b0:48:07:cf:d6:aa:f1:20:63:e7:dd: 24:d8:d0:b8:2d:6b:6c:13:e8:9f:b7:19:93:4f:62: 60:62:6e:a4:82:0d:41:16:49:2c:52:73:4a:73:58: cb:ad:82:ba:84:82:87:07:f2:0f:c3:24:6b:f9:e6: 79:f4:91:b7:95:19:c5:31:60:ac:b5:ff:a0:17:d6: 25:8d:49:ee:2e:f0:e8:d1:2d:53:79:ad:8f:42:af: 61:00:d8:f0:85:55:35:33:99:88:a9:ac:c7:10:1a: 36:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:44:84:4D:B4:BC:3F:BA:50:5F:11:55:A3:15:E3:93:1E:DD:8C:C9 X509v3 Authority Key Identifier: keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.194.46.0/23 Signature Algorithm: sha256WithRSAEncryption 01:b1:26:74:0d:cc:80:47:07:ca:99:52:82:dd:f3:f2:82:70: 9d:40:6e:f1:f1:a7:8e:ea:17:9a:ad:2a:f4:15:34:a2:d0:a2: f8:8a:8c:cf:2c:05:70:c8:72:67:d7:63:49:67:79:d9:65:12: 46:05:3c:15:9a:b4:50:12:61:df:4a:6d:9a:53:ad:e1:fb:58: ff:ca:87:c1:76:06:00:46:62:41:07:ea:57:da:81:08:f9:0e: 7b:af:85:04:e6:1b:38:62:53:d0:2b:b8:c8:6b:aa:f4:b4:5d: 59:64:52:32:ec:03:8b:79:38:9e:6f:ee:68:c0:e9:01:32:36: 40:d9:19:62:26:ea:f3:3e:bc:9d:b6:1a:78:b5:14:2b:04:9b: 06:c0:51:a1:ea:9c:7e:3f:07:69:3c:4a:ac:4b:ec:3d:0f:34: e2:18:c6:b5:fe:14:66:63:87:19:c8:0a:a7:bf:de:8e:b9:95: f6:e1:51:6e:2a:54:30:cd:ff:d2:68:95:f4:e2:b8:07:92:0b: 17:c2:c9:f7:e2:e0:fb:82:3f:46:e6:31:1c:c7:4a:b2:94:bf: ec:43:e4:04:39:b0:31:07:4c:eb:ec:0f:52:4f:fd:fc:96:be: b4:d1:07:4b:7f:bd:84:cc:07:5e:ce:e1:dd:e0:67:43:d6:bb: 39:bf:27:0f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUsquvcllYmjxnfzui2ZeaBD0E20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4 MkY4ODFFMTAeFw0yNDA3MTcxODU1MDFaFw0yNTA3MTYxOTAwMDFaMDMxMTAvBgNV BAMTKDk1NDQ4NDREQjRCQzNGQkE1MDVGMTE1NUEzMTVFMzkzMUVERDhDQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPTjMs+BFpOXsIRVW/tJ63qPbZ ZGTybm+jQZGB7vuUQSWC+4fAXKSH5P4aTmWKP2yXW+7cnhQXp3IxNz0jcuhn40cy rDXWcIs8/ShwuQP/fU0NhcUGmSxdn5KNax09NpO+iHNmgo1o5wpTKlChrjkzmPQo XWkiKGrMfTvwkwUH177aLNom9uCBlGIdqhd9AJFpW5XN8owMm06wSAfP1qrxIGPn 3STY0Lgta2wT6J+3GZNPYmBibqSCDUEWSSxSc0pzWMutgrqEgocH8g/DJGv55nn0 kbeVGcUxYKy1/6AX1iWNSe4u8OjRLVN5rY9Cr2EA2PCFVTUzmYiprMcQGja7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUlUSETbS8P7pQXxFVoxXjkx7djMkwHwYDVR0j BBgwFoAUT2eaIH0liLcJyCzasABzYYL4geEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5M2E5My01ODg5LTRlMDItOWU5NS03NjljYjg5ZTAwMzUvMC80RjY3OUEyMDdE MjU4OEI3MDlDODJDREFCMDAwNzM2MTgyRjg4MUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4MkY4 ODFFMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4OTkzYTkzLTU4ODktNGUwMi05 ZTk1LTc2OWNiODllMDAzNS8wLzMxMzAzMzJlMzEzOTM0MmUzNDM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ8IuMA0GCSqG SIb3DQEBCwUAA4IBAQABsSZ0DcyARwfKmVKC3fPygnCdQG7x8aeO6hearSr0FTSi 0KL4iozPLAVwyHJn12NJZ3nZZRJGBTwVmrRQEmHfSm2aU63h+1j/yofBdgYARmJB B+pX2oEI+Q57r4UE5hs4YlPQK7jIa6r0tF1ZZFIy7AOLeTieb+5owOkBMjZA2Rli JurzPrydthp4tRQrBJsGwFGh6px+PwdpPEqsS+w9DzTiGMa1/hRmY4cZyAqnv96O uZX24VFuKlQwzf/SaJX04rgHkgsXwsn34uD7gj9G5jEcx0qylL/sQ+QEObAxB0zr 7A9ST/38lr600QdLf72EzAdezuHd4GdD1rs5vycP -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org