$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa File: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (raw, json) Hash identifier: IsUfNXGGb6B2JpK1REITELEe401FAG/0ijHJDoCEoDE= Subject key identifier: CA:A5:86:03:CD:45:1A:65:08:F0:19:0C:18:EA:15:4D:CE:C3:FD:EF Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 666E36CF314E87568688C4551FA69E7598264DFD Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa Signing time: Thu 17 Oct 2024 10:02:22 +0000 ROA not before: Thu 17 Oct 2024 09:57:22 +0000 ROA not after: Thu 16 Oct 2025 10:02:22 +0000 asID: 38758 IP address blocks: 103.131.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6e:36:cf:31:4e:87:56:86:88:c4:55:1f:a6:9e:75:98:26:4d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Oct 17 09:57:22 2024 GMT Not After : Oct 16 10:02:22 2025 GMT Subject: CN=CAA58603CD451A6508F0190C18EA154DCEC3FDEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:49:ab:c3:82:a7:ac:27:b8:73:44:5d:3e: d0:4f:31:e3:e4:40:a1:1c:d2:8b:70:02:25:2e:3d: eb:1c:12:7a:02:a4:ed:e1:d0:f5:be:f4:a4:37:5f: 68:e2:a5:79:07:43:d6:f0:f6:27:d7:49:94:b2:14: 9f:62:41:29:b2:80:4a:94:0b:3e:ed:bd:23:5d:21: 9b:ad:5a:e4:08:00:93:48:e2:a4:c8:9b:e5:d2:b5: 46:26:b8:ae:d1:fe:d6:89:ab:36:ad:71:f0:a3:8e: 5e:f1:46:86:be:1b:5e:ce:8b:4a:f0:a3:13:47:a5: 34:99:0c:c7:6e:28:80:71:b6:fb:74:46:1a:18:da: b2:77:fa:45:af:b6:71:44:95:1c:1e:f1:d0:31:e8: ee:5c:ac:e4:cd:4a:03:c6:88:01:4e:d3:c7:0a:f2: cc:15:61:d2:30:3c:ea:11:62:bd:38:04:14:83:33: aa:35:7d:b9:c5:0d:e1:02:43:86:3f:ca:d4:b7:40: 9a:55:d8:b2:7d:53:5c:a2:7f:7c:2d:6a:0c:48:9b: 66:23:2f:87:98:02:ec:4d:b6:8d:36:03:96:24:33: e7:3e:02:e8:ff:42:a6:5c:bb:43:e7:6b:bd:76:27: 87:36:86:07:a1:72:fe:86:16:28:3c:22:bf:bb:9d: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A5:86:03:CD:45:1A:65:08:F0:19:0C:18:EA:15:4D:CE:C3:FD:EF X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.217.0/24 Signature Algorithm: sha256WithRSAEncryption 33:4d:2e:ce:08:c2:f1:2b:59:c6:67:89:59:99:9a:07:25:be: 0a:c3:37:f5:51:c2:e7:56:3f:1a:d1:5e:20:9e:f9:60:08:b2: 1b:b2:e9:51:6f:41:15:f8:7e:8a:6e:65:6d:4c:76:9a:26:c3: bf:42:88:1e:45:84:42:47:04:7e:6b:3a:5b:1a:0b:c5:cb:47: 9c:7c:93:e4:20:0f:fa:eb:28:e5:04:b6:a7:95:c6:99:4b:11: 57:27:a8:ee:6b:ba:9e:3a:00:46:53:90:6b:0c:b7:5b:ca:69: 9d:64:3c:1d:08:94:1c:9b:6c:f9:85:88:b2:f0:0f:7b:7f:b6: 33:a4:93:c6:59:5e:b8:f2:1f:52:6d:82:18:04:1b:75:b1:8d: 8d:b7:77:6d:40:2c:d8:9d:a9:4b:44:bd:cd:47:d5:94:b7:6a: d5:ae:70:02:2d:71:f4:6f:d7:05:f6:c5:02:ec:b8:5a:be:b8: 91:ae:49:8d:b3:17:49:dc:f8:97:17:73:ba:64:e1:3f:ac:54: 1b:b4:9d:0e:b3:34:a7:37:f9:e0:f1:3d:ec:76:89:6f:bc:9e: a4:54:a0:d1:71:51:d2:a0:3a:bf:35:26:b0:76:e3:40:50:a8: d3:90:fc:3d:77:47:18:d8:e0:e3:f6:e1:03:0b:34:4a:3c:55: 63:98:cc:6d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZm42zzFOh1aGiMRVH6aedZgmTf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNDEwMTcwOTU3MjJaFw0yNTEwMTYxMDAyMjJaMDMxMTAvBgNV BAMTKENBQTU4NjAzQ0Q0NTFBNjUwOEYwMTkwQzE4RUExNTREQ0VDM0ZERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8Umrw4KnrCe4c0RdPtBPMePk QKEc0otwAiUuPescEnoCpO3h0PW+9KQ3X2jipXkHQ9bw9ifXSZSyFJ9iQSmygEqU Cz7tvSNdIZutWuQIAJNI4qTIm+XStUYmuK7R/taJqzatcfCjjl7xRoa+G17Oi0rw oxNHpTSZDMduKIBxtvt0RhoY2rJ3+kWvtnFElRwe8dAx6O5crOTNSgPGiAFO08cK 8swVYdIwPOoRYr04BBSDM6o1fbnFDeECQ4Y/ytS3QJpV2LJ9U1yif3wtagxIm2Yj L4eYAuxNto02A5YkM+c+Auj/QqZcu0Pna712J4c2hgehcv6GFig8Ir+7naZZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyqWGA81FGmUI8BkMGOoVTc7D/e8wHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q1NTNlZGFiLTRhM2QtNDRlNC04 ZDk2LTYyNWExYzIwMzc4ZC8wLzMxMzAzMzJlMzEzMzMxMmUzMjMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4PZMA0GCSqG SIb3DQEBCwUAA4IBAQAzTS7OCMLxK1nGZ4lZmZoHJb4Kwzf1UcLnVj8a0V4gnvlg CLIbsulRb0EV+H6KbmVtTHaaJsO/QogeRYRCRwR+azpbGgvFy0ecfJPkIA/66yjl BLanlcaZSxFXJ6jua7qeOgBGU5BrDLdbymmdZDwdCJQcm2z5hYiy8A97f7YzpJPG WV648h9SbYIYBBt1sY2Nt3dtQCzYnalLRL3NR9WUt2rVrnACLXH0b9cF9sUC7Lha vriRrkmNsxdJ3PiXF3O6ZOE/rFQbtJ0OszSnN/ng8T3sdolvvJ6kVKDRcVHSoDq/ NSawduNAUKjTkPw9d0cY2ODj9uEDCzRKPFVjmMxt -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org