$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa File: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (raw, json) Hash identifier: 5jjNyH4IFmanP0qvJGbyyLdkj/5QXLl3Ec+MH+kAGqY= Subject key identifier: FB:26:44:B7:18:1A:7E:AF:5A:EF:C6:1A:EC:95:6D:F2:5B:9D:ED:60 Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 68E86484EBB540C286E9C5657E699AAA84EAF8EC Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa Signing time: Fri 14 Jun 2024 13:00:02 +0000 ROA not before: Fri 14 Jun 2024 12:55:02 +0000 ROA not after: Fri 13 Jun 2025 13:00:02 +0000 asID: 149318 IP address blocks: 103.178.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e8:64:84:eb:b5:40:c2:86:e9:c5:65:7e:69:9a:aa:84:ea:f8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Jun 14 12:55:02 2024 GMT Not After : Jun 13 13:00:02 2025 GMT Subject: CN=FB2644B7181A7EAF5AEFC61AEC956DF25B9DED60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:3a:00:7e:b1:b3:9c:a7:4b:c4:f2:cf:90: ab:40:1d:05:5b:7a:cd:8b:15:c0:5b:0c:18:3e:c6: 60:0e:0c:d3:0d:2e:fd:4a:64:43:82:dd:e2:23:ed: f6:d9:85:11:a9:48:a0:8d:61:4c:17:de:fe:b8:98: 95:e0:98:d5:13:78:9c:5d:ff:fb:53:cb:91:98:c0: e9:7f:5f:1e:65:60:f5:d3:04:d5:fe:dc:57:c5:73: b9:65:11:d4:e5:29:1b:43:23:19:a9:ec:bb:5d:2a: e5:00:00:a0:0d:fb:e3:97:bf:e2:73:e6:1c:02:6d: ca:02:33:6a:13:69:72:d0:22:db:11:a8:94:6f:d3: 03:34:e7:4d:d1:8b:4e:c6:6f:9d:4d:f9:b1:b1:e2: 27:d3:66:5d:6e:ec:c0:41:b5:3b:2c:ff:e2:17:f3: fa:dc:85:6e:87:82:99:28:b7:97:3f:fd:a1:1f:4d: bd:d7:ec:9c:26:20:e9:6b:80:92:94:1e:fa:2f:0c: 54:2e:ad:8f:4a:b9:c6:b1:c8:be:34:d8:fc:70:77: ad:2b:fb:d2:43:7b:5f:cf:c0:cd:41:22:ec:59:2f: ed:8d:1d:6e:bd:fc:3f:e8:b1:c3:b2:a7:1f:59:b5: 69:b7:27:16:dd:4a:98:03:4c:04:e4:38:00:f5:33: 77:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:26:44:B7:18:1A:7E:AF:5A:EF:C6:1A:EC:95:6D:F2:5B:9D:ED:60 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.84.0/23 Signature Algorithm: sha256WithRSAEncryption 87:31:ea:48:ab:31:33:0e:8f:52:37:44:99:2e:95:b0:62:e9: df:62:48:6e:25:17:bd:57:13:90:45:3b:8f:b2:c4:ed:78:40: a7:1c:20:8b:51:9a:f0:75:9c:2c:4c:99:c8:eb:5e:88:f4:3f: eb:9b:27:51:00:23:ea:12:52:77:fa:00:4a:ab:d7:dc:cc:d4: 40:4b:31:37:24:dc:70:f5:2b:a1:47:b5:6e:a3:44:08:1f:57: b0:2f:db:51:c9:56:38:43:38:99:9e:5f:14:35:6f:4c:80:60: 62:3a:14:05:e4:a4:7e:c8:10:1a:b3:e1:94:f3:92:31:74:0b: fd:76:23:7b:80:31:04:b9:b7:fc:4f:70:26:75:d4:d2:96:7a: dd:09:24:5c:4c:21:af:9f:0d:93:44:81:99:15:6a:68:da:cf: fe:e0:79:57:96:6a:2c:5a:78:ca:71:6a:db:ef:0b:99:c6:e5: 4c:a9:3b:a3:99:77:3d:1b:7e:5e:c7:c1:88:99:af:73:80:7f: b4:bd:ea:88:3b:fb:46:47:43:7f:11:b7:44:73:c9:0f:aa:44: 1a:ad:aa:e9:7d:d5:9e:56:1c:2a:d6:3b:29:da:5d:29:de:51: 0c:08:2b:aa:4d:52:0f:1b:50:55:87:a5:13:d5:a9:0f:00:ff: 2c:59:30:64 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaOhkhOu1QMKG6cVlfmmaqoTq+OwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNDA2MTQxMjU1MDJaFw0yNTA2MTMxMzAwMDJaMDMxMTAvBgNV BAMTKEZCMjY0NEI3MTgxQTdFQUY1QUVGQzYxQUVDOTU2REYyNUI5REVENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkODoAfrGznKdLxPLPkKtAHQVb es2LFcBbDBg+xmAODNMNLv1KZEOC3eIj7fbZhRGpSKCNYUwX3v64mJXgmNUTeJxd //tTy5GYwOl/Xx5lYPXTBNX+3FfFc7llEdTlKRtDIxmp7LtdKuUAAKAN++OXv+Jz 5hwCbcoCM2oTaXLQItsRqJRv0wM0503Ri07Gb51N+bGx4ifTZl1u7MBBtTss/+IX 8/rchW6Hgpkot5c//aEfTb3X7JwmIOlrgJKUHvovDFQurY9KucaxyL402Pxwd60r +9JDe1/PwM1BIuxZL+2NHW69/D/oscOypx9ZtWm3JxbdSpgDTATkOAD1M3d3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+yZEtxgafq9a78Ya7JVt8lud7WAwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjMDc1ZWY2LWEyNTEtNDdkZC04 ZGRhLWNhZGZmNDk3YTdlNS8wLzMxMzAzMzJlMzEzNzM4MmUzODM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzMzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7JUMA0GCSqG SIb3DQEBCwUAA4IBAQCHMepIqzEzDo9SN0SZLpWwYunfYkhuJRe9VxOQRTuPssTt eECnHCCLUZrwdZwsTJnI616I9D/rmydRACPqElJ3+gBKq9fczNRASzE3JNxw9Suh R7Vuo0QIH1ewL9tRyVY4QziZnl8UNW9MgGBiOhQF5KR+yBAas+GU85IxdAv9diN7 gDEEubf8T3AmddTSlnrdCSRcTCGvnw2TRIGZFWpo2s/+4HlXlmosWnjKcWrb7wuZ xuVMqTujmXc9G35ex8GIma9zgH+0veqIO/tGR0N/EbdEc8kPqkQararpfdWeVhwq 1jsp2l0p3lEMCCuqTVIPG1BVh6UT1akPAP8sWTBk -----END CERTIFICATE-----Generated at Sun Nov 24 17:17:42 2024 by rpki-client on console-fra.rpki-client.org