$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa File: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (raw, json) Hash identifier: y0IC1wewy1NTZC1WvVqvRnWg597FE/H/DcwR9g+OaRM= Subject key identifier: 47:00:D4:5A:B8:4F:DA:D3:0D:7C:DD:99:A1:64:3D:09:A5:DB:A4:48 Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 11F62DC581F4297D391F58236F56D169A67106CB Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa Signing time: Mon 26 Aug 2024 17:23:05 +0000 ROA not before: Mon 26 Aug 2024 17:18:05 +0000 ROA not after: Mon 25 Aug 2025 17:23:05 +0000 asID: 149749 IP address blocks: 103.189.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f6:2d:c5:81:f4:29:7d:39:1f:58:23:6f:56:d1:69:a6:71:06:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: Aug 26 17:18:05 2024 GMT Not After : Aug 25 17:23:05 2025 GMT Subject: CN=4700D45AB84FDAD30D7CDD99A1643D09A5DBA448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:43:50:fe:ec:6a:24:99:f8:8c:b7:8b:e4: 1e:f9:ac:1f:16:be:7b:66:28:b2:88:ad:bf:99:0b: 60:5d:0d:99:d5:f5:68:36:5e:4a:0f:6b:09:39:df: 53:c8:67:e6:90:6d:65:c4:e1:8e:e0:47:fd:22:55: 57:55:b8:4d:7c:ff:c1:ec:57:53:4b:b0:82:b4:0c: 4c:63:d1:47:72:61:f0:69:dc:86:40:88:57:38:ab: 1c:dc:b0:23:86:5a:4f:fe:3d:f2:1b:ac:db:45:76: b2:70:a9:fc:f6:3e:1d:84:70:98:75:17:1b:67:6b: 55:99:16:48:49:5f:b3:a5:5d:75:47:b1:ce:21:5b: 74:42:32:ea:ac:0b:b5:98:06:e6:ab:c5:40:2c:24: 5b:bc:b4:f0:38:47:e4:47:ea:dd:ef:fa:63:2a:bd: 89:06:4a:8c:d5:ae:98:e2:93:bb:48:60:01:29:42: 9b:02:98:7d:c4:63:2d:f7:06:a5:7d:c9:2e:91:c0: f1:75:03:36:a9:11:e1:e4:c8:28:86:1d:91:a2:2b: 45:66:9c:f0:0e:48:ee:58:45:89:88:dd:6c:32:80: 6e:c9:32:bd:05:d0:77:74:9c:97:eb:88:43:95:a9: 99:43:04:51:ed:62:e1:4e:22:68:b0:33:b3:be:dd: 63:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:00:D4:5A:B8:4F:DA:D3:0D:7C:DD:99:A1:64:3D:09:A5:DB:A4:48 X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.111.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:ee:f6:33:ee:a2:46:fd:a7:58:66:2f:99:17:39:6f:72:ac: 3d:37:53:54:b2:c9:26:02:38:01:21:66:a1:42:7a:70:22:a8: 0b:d1:74:dc:7f:43:0a:df:93:3a:47:97:0d:7f:c8:84:81:d6: 2a:7a:4c:23:b2:e2:fe:66:71:93:b8:ee:33:ba:f2:19:91:13: f6:3f:a8:13:55:5c:eb:dd:7b:29:52:27:39:67:ad:13:f9:80: 87:6e:3f:7b:6a:34:f1:55:47:ab:7c:db:3d:5d:f7:a3:3d:39: 3a:33:2d:c3:a6:0e:c9:1e:01:f0:21:3b:52:e7:ce:67:02:e9: 18:5b:f7:e6:9d:df:00:30:fe:ab:5a:0e:4e:f0:35:e3:25:27: f4:20:c1:e0:ab:4a:8a:b6:1b:05:61:42:56:45:35:f9:9c:32: 8f:74:87:27:de:41:61:e9:fb:39:63:ea:74:04:92:36:3c:9f: c8:91:47:ab:23:d9:3e:37:d2:2b:a4:36:f1:77:7e:d6:f1:4a: 8f:3e:98:8a:a9:d7:90:e8:c3:ff:b4:2f:5e:5b:00:65:23:f3: fe:21:59:d3:fe:d9:de:f6:49:78:8a:37:84:9a:bc:f6:92:f3: 37:c7:f8:8f:7e:a6:61:b4:8f:36:c5:b4:96:c1:46:12:7a:33: 3e:dc:d7:13 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEfYtxYH0KX05H1gjb1bRaaZxBsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNDA4MjYxNzE4MDVaFw0yNTA4MjUxNzIzMDVaMDMxMTAvBgNV BAMTKDQ3MDBENDVBQjg0RkRBRDMwRDdDREQ5OUExNjQzRDA5QTVEQkE0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO10NQ/uxqJJn4jLeL5B75rB8W vntmKLKIrb+ZC2BdDZnV9Wg2XkoPawk531PIZ+aQbWXE4Y7gR/0iVVdVuE18/8Hs V1NLsIK0DExj0UdyYfBp3IZAiFc4qxzcsCOGWk/+PfIbrNtFdrJwqfz2Ph2EcJh1 Fxtna1WZFkhJX7OlXXVHsc4hW3RCMuqsC7WYBuarxUAsJFu8tPA4R+RH6t3v+mMq vYkGSozVrpjik7tIYAEpQpsCmH3EYy33BqV9yS6RwPF1AzapEeHkyCiGHZGiK0Vm nPAOSO5YRYmI3WwygG7JMr0F0Hd0nJfriEOVqZlDBFHtYuFOImiwM7O+3WPFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQURwDUWrhP2tMNfN2ZoWQ9CaXbpEgwHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNWU1YTMwLTA4MDItNGM1Yy05 NDdlLTk4ZWYyODVmNGY2Yi8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM0Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvW8wDQYJ KoZIhvcNAQELBQADggEBAHru9jPuokb9p1hmL5kXOW9yrD03U1SyySYCOAEhZqFC enAiqAvRdNx/QwrfkzpHlw1/yISB1ip6TCOy4v5mcZO47jO68hmRE/Y/qBNVXOvd eylSJzlnrRP5gIduP3tqNPFVR6t82z1d96M9OTozLcOmDskeAfAhO1LnzmcC6Rhb 9+ad3wAw/qtaDk7wNeMlJ/QgweCrSoq2GwVhQlZFNfmcMo90hyfeQWHp+zlj6nQE kjY8n8iRR6sj2T430iukNvF3ftbxSo8+mIqp15Dow/+0L15bAGUj8/4hWdP+2d72 SXiKN4SavPaS8zfH+I9+pmG0jzbFtJbBRhJ6Mz7c1xM= -----END CERTIFICATE-----Generated at Mon Nov 25 10:49:34 2024 by rpki-client on console-fra.rpki-client.org