$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa File: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (raw, json) Hash identifier: JLFs+kH7v2ZY+xNtA/ogvHKkCAa1+FJVTt4bnTYMOus= Subject key identifier: 09:D6:9B:1C:9A:24:9C:7C:B3:A2:E3:0A:51:3C:92:DB:F5:EE:C7:A7 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 02175F034F9BE66FB66724EAD907094F5D8040EC Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa Signing time: Fri 25 Oct 2024 08:01:18 +0000 ROA not before: Fri 25 Oct 2024 07:56:18 +0000 ROA not after: Fri 24 Oct 2025 08:01:18 +0000 asID: 150259 IP address blocks: 103.87.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:17:5f:03:4f:9b:e6:6f:b6:67:24:ea:d9:07:09:4f:5d:80:40:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Oct 25 07:56:18 2024 GMT Not After : Oct 24 08:01:18 2025 GMT Subject: CN=09D69B1C9A249C7CB3A2E30A513C92DBF5EEC7A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:81:42:28:f1:12:96:bb:b9:80:8b:9c:2a: 79:02:4b:cb:08:f0:f5:b1:e8:50:a8:58:1d:b9:6a: 56:b9:ed:3e:05:c0:94:a3:62:bc:e1:8b:84:55:fd: 92:2c:df:a5:75:04:02:9d:b5:c0:64:ef:98:42:d7: 17:b3:3f:ce:6c:08:c0:f9:8e:ef:19:58:34:8d:d7: b2:d2:e6:ea:cf:fe:d5:8d:94:46:e8:7c:42:92:8f: 00:ae:da:ad:10:f0:c8:4e:13:83:e1:a8:1a:7e:a5: 66:d5:dc:63:e3:7b:a1:06:7a:df:ae:37:5c:70:3f: 24:d1:2d:62:f7:78:aa:f1:40:a5:31:23:93:9c:94: fc:97:98:b0:97:78:29:b2:96:06:40:e6:8c:a4:c2: 60:2b:66:1e:11:9c:82:e7:4a:75:dc:5f:2a:df:cb: fd:61:e4:4d:eb:2d:c3:fb:f0:bb:bd:92:94:d1:d2: 26:e3:28:02:3a:d4:55:fa:15:6f:80:8b:cf:1a:86: ed:9a:e7:11:d3:d9:74:19:b9:b2:79:70:46:19:af: 23:ca:e5:49:04:50:24:97:b3:f0:d3:4f:60:0f:a6: 8e:c5:46:c6:98:d0:63:70:8d:af:b4:ae:d7:90:9c: 61:34:3e:08:b5:48:ed:a8:ea:4a:53:7f:43:fc:9e: 6c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D6:9B:1C:9A:24:9C:7C:B3:A2:E3:0A:51:3C:92:DB:F5:EE:C7:A7 X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.202.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:5d:cc:15:4b:48:38:a3:a1:4f:f8:75:f1:cf:5b:f3:a3:2f: e0:ef:f7:19:7a:87:a0:6b:13:b8:33:bd:f9:92:d9:3e:e5:d6: df:31:c0:38:7d:5a:15:29:2d:1c:f8:fd:8e:e1:a8:28:95:20: 35:ae:f9:a2:b8:68:fe:17:af:1c:2e:f9:a4:f7:ab:10:95:50: 1e:b9:bd:9f:a5:9a:b1:f9:92:bb:28:9f:f5:3c:99:f4:fc:c7: e9:74:e5:1d:8d:09:96:28:a4:e2:d7:10:43:08:89:19:61:f1: 43:64:29:4d:84:1a:09:21:51:ea:cd:2d:b0:ff:d1:5d:aa:45: c4:ef:45:16:e1:af:1e:1c:05:94:86:4c:57:18:eb:6b:0d:85: fc:3e:e7:59:0e:07:5e:e5:c0:87:7a:47:4a:13:89:5a:19:e5: 2c:21:f8:a5:17:01:88:38:31:09:9f:bd:18:de:15:6e:3c:ef: 5c:4a:18:0d:53:dc:29:91:cd:58:20:44:15:d8:b2:86:fc:bb: 58:b2:6f:87:96:5d:23:54:3c:d4:a4:2c:53:66:30:15:18:8e: 40:7d:d9:8c:f2:67:04:54:c4:80:d7:a3:5d:65:c7:a8:6f:f1: c2:93:c6:37:a9:a8:7a:78:b2:38:f4:81:03:58:05:2b:08:f5: 3e:28:41:42 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAhdfA0+b5m+2ZyTq2QcJT12AQOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNDEwMjUwNzU2MThaFw0yNTEwMjQwODAxMThaMDMxMTAvBgNV BAMTKDA5RDY5QjFDOUEyNDlDN0NCM0EyRTMwQTUxM0M5MkRCRjVFRUM3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJL4FCKPESlru5gIucKnkCS8sI 8PWx6FCoWB25ala57T4FwJSjYrzhi4RV/ZIs36V1BAKdtcBk75hC1xezP85sCMD5 ju8ZWDSN17LS5urP/tWNlEbofEKSjwCu2q0Q8MhOE4PhqBp+pWbV3GPje6EGet+u N1xwPyTRLWL3eKrxQKUxI5OclPyXmLCXeCmylgZA5oykwmArZh4RnILnSnXcXyrf y/1h5E3rLcP78Lu9kpTR0ibjKAI61FX6FW+Ai88ahu2a5xHT2XQZubJ5cEYZryPK 5UkEUCSXs/DTT2APpo7FRsaY0GNwja+0rteQnGE0Pgi1SO2o6kpTf0P8nmwBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUCdabHJoknHyzouMKUTyS2/Xux6cwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4ZDU5NDMwLWRlNzgtNDUzMi04 ZTFhLTM0YjUzYjhmMjZmYS8wLzMxMzAzMzJlMzgzNzJlMzIzMDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1fKMA0GCSqG SIb3DQEBCwUAA4IBAQAdXcwVS0g4o6FP+HXxz1vzoy/g7/cZeoegaxO4M735ktk+ 5dbfMcA4fVoVKS0c+P2O4agolSA1rvmiuGj+F68cLvmk96sQlVAeub2fpZqx+ZK7 KJ/1PJn0/MfpdOUdjQmWKKTi1xBDCIkZYfFDZClNhBoJIVHqzS2w/9FdqkXE70UW 4a8eHAWUhkxXGOtrDYX8PudZDgde5cCHekdKE4laGeUsIfilFwGIODEJn70Y3hVu PO9cShgNU9wpkc1YIEQV2LKG/LtYsm+Hll0jVDzUpCxTZjAVGI5AfdmM8mcEVMSA 16NdZceob/HCk8Y3qah6eLI49IEDWAUrCPU+KEFC -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org