$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa File: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (raw, json) Hash identifier: vH/AHPKtlG2C1g0YKzqe62eHzdCNjomBrQRdxjjmNr0= Subject key identifier: A7:E7:EB:55:FD:35:33:0E:37:27:67:29:61:51:E6:72:14:6C:98:5A Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 4857F2CA20F752E3A71040021DAF17BC52E42E5B Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa Signing time: Mon 26 Aug 2024 17:22:40 +0000 ROA not before: Mon 26 Aug 2024 17:17:40 +0000 ROA not after: Mon 25 Aug 2025 17:22:40 +0000 asID: 149749 IP address blocks: 103.189.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:57:f2:ca:20:f7:52:e3:a7:10:40:02:1d:af:17:bc:52:e4:2e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: Aug 26 17:17:40 2024 GMT Not After : Aug 25 17:22:40 2025 GMT Subject: CN=A7E7EB55FD35330E372767296151E672146C985A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:09:3f:1a:31:27:a0:5c:ad:1a:56:2c:ca:15: b5:46:d6:80:33:3d:a3:43:b3:46:b5:08:fc:0e:ac: b0:fe:f3:97:9f:9e:76:10:60:92:3a:09:a5:bc:83: 71:45:bf:74:0e:d3:a0:c7:cf:e1:9b:07:0b:f5:56: be:23:85:75:ef:7d:78:ba:4e:15:dd:3b:4c:4a:d6: 08:67:51:63:f0:7c:0c:63:97:1a:d0:4a:7a:e5:72: a9:29:21:17:87:fd:f0:8b:10:35:1f:61:8b:7f:82: 95:4c:bd:53:8c:ec:3b:e6:55:6c:05:50:d3:34:b7: 1a:ee:76:de:59:84:2e:0b:c6:50:86:df:c8:74:e8: 71:e1:61:a6:6e:2b:52:3e:c5:8a:73:4b:fe:ff:3c: 95:20:49:5d:98:10:8a:a4:3e:8e:58:cf:67:32:b6: 60:d4:a0:e4:2f:26:e5:f3:4d:14:1d:f4:a0:b3:fc: f7:62:b3:f0:e7:2b:2a:f6:99:fc:2e:d1:da:5a:26: a7:d6:de:30:a3:bc:92:48:0d:7c:11:6a:03:22:90: 93:0e:c3:d8:19:94:09:07:60:f8:b2:b9:3e:e3:33: 0b:52:fb:70:37:30:48:b0:60:0b:e4:9a:92:42:55: 91:c5:98:69:a8:f1:b1:91:59:c9:bc:d9:1b:8c:67: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E7:EB:55:FD:35:33:0E:37:27:67:29:61:51:E6:72:14:6C:98:5A X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.110.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:fa:4a:10:96:31:84:f2:03:67:72:13:df:37:58:6d:ce:4c: ee:a0:93:0c:13:13:68:39:bc:18:01:8e:b6:a9:82:f4:fe:c5: 47:d4:18:e0:e3:b1:e5:20:72:ec:cf:4c:2e:18:62:3f:44:3b: b4:64:13:ca:d3:d0:74:33:e1:5a:09:94:c6:73:0a:75:1e:d9: 50:bf:2f:51:78:be:9b:23:83:d7:b6:d2:07:df:5a:37:23:28: 91:ad:d7:d0:c8:0c:d3:f5:14:d7:02:f8:15:62:42:87:19:b6: b1:a9:65:88:3a:d9:04:41:b8:4f:b6:07:de:c2:34:90:25:f9: 31:a8:12:5d:bc:41:a3:57:aa:0c:3c:47:a0:0b:f6:79:18:40: 7b:a0:14:da:55:fb:72:ff:9e:85:0e:65:db:13:3a:b3:e5:f5: 5e:93:1f:d0:5b:26:0e:10:d0:fc:46:18:89:e7:d6:ab:35:cd: b9:33:94:32:77:7e:73:39:87:05:0c:cd:39:20:9d:dc:06:4f: 80:56:9f:c4:44:d0:ce:31:71:a4:e4:c9:8a:ac:cd:d4:5e:6b: 49:93:b5:cc:bb:00:72:9c:0f:bf:92:ce:0b:7f:94:e5:fd:8d: e3:a7:90:64:a3:d4:be:76:15:fa:5a:6f:ad:9b:79:9a:91:c3: 1f:60:48:8e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSFfyyiD3UuOnEEACHa8XvFLkLlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNDA4MjYxNzE3NDBaFw0yNTA4MjUxNzIyNDBaMDMxMTAvBgNV BAMTKEE3RTdFQjU1RkQzNTMzMEUzNzI3NjcyOTYxNTFFNjcyMTQ2Qzk4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsCT8aMSegXK0aVizKFbVG1oAz PaNDs0a1CPwOrLD+85efnnYQYJI6CaW8g3FFv3QO06DHz+GbBwv1Vr4jhXXvfXi6 ThXdO0xK1ghnUWPwfAxjlxrQSnrlcqkpIReH/fCLEDUfYYt/gpVMvVOM7DvmVWwF UNM0txrudt5ZhC4LxlCG38h06HHhYaZuK1I+xYpzS/7/PJUgSV2YEIqkPo5Yz2cy tmDUoOQvJuXzTRQd9KCz/Pdis/DnKyr2mfwu0dpaJqfW3jCjvJJIDXwRagMikJMO w9gZlAkHYPiyuT7jMwtS+3A3MEiwYAvkmpJCVZHFmGmo8bGRWcm82RuMZ+2XAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUp+frVf01Mw43J2cpYVHmchRsmFowHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNWU1YTMwLTA4MDItNGM1Yy05 NDdlLTk4ZWYyODVmNGY2Yi8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzNzM0Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvW4wDQYJ KoZIhvcNAQELBQADggEBABv6ShCWMYTyA2dyE983WG3OTO6gkwwTE2g5vBgBjrap gvT+xUfUGODjseUgcuzPTC4YYj9EO7RkE8rT0HQz4VoJlMZzCnUe2VC/L1F4vpsj g9e20gffWjcjKJGt19DIDNP1FNcC+BViQocZtrGpZYg62QRBuE+2B97CNJAl+TGo El28QaNXqgw8R6AL9nkYQHugFNpV+3L/noUOZdsTOrPl9V6TH9BbJg4Q0PxGGInn 1qs1zbkzlDJ3fnM5hwUMzTkgndwGT4BWn8RE0M4xcaTkyYqszdRea0mTtcy7AHKc D7+Szgt/lOX9jeOnkGSj1L52Ffpab62beZqRwx9gSI4= -----END CERTIFICATE-----Generated at Mon Nov 25 10:49:34 2024 by rpki-client on console-fra.rpki-client.org