$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa File: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (raw, json) Hash identifier: 4xG5rUbrfk7U5JEhOVdnlCDzgzXDJr6D4I9VnoiM2Rc= Subject key identifier: 59:11:C0:90:AE:40:15:6C:0D:8C:25:81:C0:05:65:13:5E:CF:DA:96 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 52D7ACAF9943B77D0319937F3A57D5723E33FCC4 Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa Signing time: Thu 12 Sep 2024 08:00:02 +0000 ROA not before: Thu 12 Sep 2024 07:55:02 +0000 ROA not after: Thu 11 Sep 2025 08:00:02 +0000 asID: 149948 IP address blocks: 103.190.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d7:ac:af:99:43:b7:7d:03:19:93:7f:3a:57:d5:72:3e:33:fc:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Sep 12 07:55:02 2024 GMT Not After : Sep 11 08:00:02 2025 GMT Subject: CN=5911C090AE40156C0D8C2581C00565135ECFDA96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:6d:52:30:b9:a8:8d:9b:c1:8f:72:de:66: e3:6d:ee:6e:2e:74:02:fd:b2:b3:b5:a7:a6:01:2d: bf:b1:e5:6f:bd:53:9b:5d:fd:7e:45:a2:0e:64:ae: 79:23:14:f8:b0:5b:eb:58:05:11:f9:24:ce:35:ab: 20:56:fe:3e:60:b0:1b:87:e7:43:c6:7f:88:72:8c: c3:bc:7c:02:7a:37:2c:c2:43:0a:ef:e4:4c:c4:a3: fd:3a:02:51:e1:09:dd:c2:83:56:02:42:56:21:38: 77:c9:16:7a:33:f1:bf:35:85:88:7c:bb:65:25:6a: a1:1d:de:b3:42:86:cb:06:10:a2:fb:9a:a0:98:a4: 2e:70:a4:70:1e:eb:63:a8:42:be:99:07:2e:54:ac: 7a:26:55:df:b4:72:c0:ef:7c:2e:69:1e:ef:31:3a: fb:e8:e3:72:34:69:eb:46:cf:44:cc:4e:1c:05:80: 4d:7a:a7:25:80:dc:6e:ab:83:9e:b2:24:86:e6:de: 21:ea:e4:a3:6d:8b:b3:9d:ce:0d:5c:38:f0:48:cc: c4:97:9f:09:d8:9d:3d:c8:21:04:22:72:85:c5:93: 3f:47:f6:98:c9:7f:29:33:e4:82:a5:81:b0:af:6a: 47:96:38:57:79:44:8d:ae:57:87:25:99:33:65:bc: 32:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:11:C0:90:AE:40:15:6C:0D:8C:25:81:C0:05:65:13:5E:CF:DA:96 X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.28.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:46:bc:29:25:87:4b:bb:cc:28:bd:09:55:df:60:2d:4b:d7: a5:34:f7:7f:d1:c0:5d:39:ef:65:ec:53:ab:7d:03:5b:2d:80: a1:58:1c:34:66:1f:ae:65:8f:5e:7a:81:8b:eb:22:0e:33:d6: e1:e7:a6:ac:04:10:96:7a:79:14:f8:0d:cc:cc:69:bc:50:6d: 5a:66:4a:21:ca:39:93:a5:cb:4b:99:03:fd:b7:e3:b6:dc:3c: eb:f4:57:23:10:b4:69:89:c5:e5:0d:47:7a:ff:de:60:10:d7: 06:57:d5:e0:b9:44:da:47:ac:40:95:cf:4e:f9:68:f8:2a:80: 70:10:25:5d:a5:d0:e7:b5:c3:0b:7c:65:65:06:7d:64:44:60: 2e:07:f4:12:14:e4:01:1e:a5:d0:01:d7:c7:58:25:73:36:e0: 98:26:ae:cb:d9:f0:1f:8d:89:12:ce:75:ba:c7:3c:dc:c7:91: fd:36:56:14:9e:2b:01:f2:8c:42:4c:e7:54:ec:d8:15:6a:aa: 2b:0e:bc:d2:c1:96:ae:24:20:23:11:b0:38:cc:0d:01:25:ac: fb:58:1f:95:c6:db:25:9d:df:cb:74:36:e3:ff:b1:29:a3:e2: f6:35:36:24:5d:51:73:2f:76:0a:7b:16:5b:90:ee:19:ed:6d: 31:64:f6:25 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUtesr5lDt30DGZN/OlfVcj4z/MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNDA5MTIwNzU1MDJaFw0yNTA5MTEwODAwMDJaMDMxMTAvBgNV BAMTKDU5MTFDMDkwQUU0MDE1NkMwRDhDMjU4MUMwMDU2NTEzNUVDRkRBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUSm1SMLmojZvBj3LeZuNt7m4u dAL9srO1p6YBLb+x5W+9U5td/X5Fog5krnkjFPiwW+tYBRH5JM41qyBW/j5gsBuH 50PGf4hyjMO8fAJ6NyzCQwrv5EzEo/06AlHhCd3Cg1YCQlYhOHfJFnoz8b81hYh8 u2UlaqEd3rNChssGEKL7mqCYpC5wpHAe62OoQr6ZBy5UrHomVd+0csDvfC5pHu8x Ovvo43I0aetGz0TMThwFgE16pyWA3G6rg56yJIbm3iHq5KNti7Odzg1cOPBIzMSX nwnYnT3IIQQicoXFkz9H9pjJfykz5IKlgbCvakeWOFd5RI2uV4clmTNlvDKtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWRHAkK5AFWwNjCWBwAVlE17P2pYwHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlZTE0MzgyLWQ1ODctNGU4Ni04 ZTdlLTZhMjY0YTU4ZWEwNi8wLzMxMzAzMzJlMzEzOTMwMmUzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ74cMA0GCSqG SIb3DQEBCwUAA4IBAQAPRrwpJYdLu8wovQlV32AtS9elNPd/0cBdOe9l7FOrfQNb LYChWBw0Zh+uZY9eeoGL6yIOM9bh56asBBCWenkU+A3MzGm8UG1aZkohyjmTpctL mQP9t+O23Dzr9FcjELRpicXlDUd6/95gENcGV9XguUTaR6xAlc9O+Wj4KoBwECVd pdDntcMLfGVlBn1kRGAuB/QSFOQBHqXQAdfHWCVzNuCYJq7L2fAfjYkSznW6xzzc x5H9NlYUnisB8oxCTOdU7NgVaqorDrzSwZauJCAjEbA4zA0BJaz7WB+Vxtslnd/L dDbj/7Epo+L2NTYkXVFzL3YKexZbkO4Z7W0xZPYl -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:39 2024 by rpki-client on console-fra.rpki-client.org