$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa File: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (raw, json) Hash identifier: kwgZlAehoInBl32w+IZeJMWxeIEAZ8IfMVtQyqbqAN8= Subject key identifier: B6:FD:3A:E7:35:47:0D:86:5B:E9:A9:7E:7D:20:89:D2:7C:7A:9A:50 Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 157975B3E259BA1FC83A7FB821520ECB88DAEA96 Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa Signing time: Tue 13 Aug 2024 10:00:00 +0000 ROA not before: Tue 13 Aug 2024 09:55:00 +0000 ROA not after: Tue 12 Aug 2025 10:00:00 +0000 asID: 150497 IP address blocks: 103.58.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 06:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:79:75:b3:e2:59:ba:1f:c8:3a:7f:b8:21:52:0e:cb:88:da:ea:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: Aug 13 09:55:00 2024 GMT Not After : Aug 12 10:00:00 2025 GMT Subject: CN=B6FD3AE735470D865BE9A97E7D2089D27C7A9A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:ad:24:59:1a:93:b6:b6:62:73:6e:c9:c2: 79:8a:29:5a:97:08:4e:3b:ea:26:f7:e6:61:d7:45: 29:84:91:fb:43:fb:99:dd:42:39:2a:8b:94:da:53: d7:29:10:67:00:2d:6b:cf:0d:4b:8e:08:20:a3:cb: 8e:74:0d:32:e1:ad:1e:26:54:6d:c9:5e:d4:d9:10: aa:35:d5:95:80:3e:20:1a:b3:6d:02:f0:d0:34:63: d4:2f:58:fc:e1:e4:de:02:ef:8e:2a:92:5f:ab:a7: f0:3c:66:4f:b2:07:d1:0c:46:f0:5d:dd:04:d8:5d: d1:8a:33:0a:d1:30:67:51:d4:7b:96:de:5d:7b:e7: 62:73:f0:cc:07:e6:a3:35:81:54:70:6b:4f:e6:8f: 4d:b2:32:d9:01:06:b7:9d:de:b9:f8:e5:27:ae:71: 3c:1e:bc:13:cc:be:c9:32:c1:95:72:ea:8a:60:6a: b9:24:1e:ec:de:8c:09:2d:8d:00:69:5f:30:0e:d5: 25:bb:23:e4:47:cc:21:5c:5b:8f:05:84:b7:f1:4e: e2:5f:df:74:15:49:bd:5c:19:5c:b5:6c:61:60:01: 1a:4d:36:9a:8e:1b:89:2d:04:cb:d6:c1:d8:50:7f: ce:4b:5d:b8:fa:17:c4:28:ef:27:c3:01:4a:cb:42: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FD:3A:E7:35:47:0D:86:5B:E9:A9:7E:7D:20:89:D2:7C:7A:9A:50 X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.58.198.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:51:e3:96:b8:b7:4e:4f:91:34:e8:19:0e:ae:be:51:30:76: 4c:3a:79:52:b9:2e:a3:fd:5f:53:90:fb:85:ad:8d:ae:d4:20: 10:a7:77:18:a4:f7:d7:3b:cb:36:6d:e8:b3:03:94:62:9f:39: 0f:bf:62:ca:21:f5:cf:de:39:1d:18:0e:63:5a:4b:ca:2c:4a: 23:eb:31:5f:90:cb:72:b8:6d:65:25:d8:85:18:d1:af:91:ac: f8:6a:86:70:71:1d:cd:4d:53:cf:66:3a:a8:ff:98:62:14:7b: f7:3e:8a:55:96:86:d7:7b:8b:90:4b:5a:12:43:47:a3:e8:a2: d2:30:fd:76:a5:4a:0d:6c:6c:cb:8b:0a:c8:45:83:3e:ed:25: 11:6f:54:07:92:6f:3d:a9:86:14:cf:7d:7d:05:80:5c:d8:0c: 79:18:fe:83:1f:f0:a2:34:1b:00:b2:94:72:12:57:35:a3:16: 9f:c8:c1:5f:7e:bd:d3:ac:a6:a1:0f:a0:7c:05:ed:29:a2:a9: 20:14:82:cb:17:c1:7e:73:84:50:7b:cb:72:6c:11:f8:75:dc: c0:79:6d:e1:25:9c:49:a1:cf:6c:7c:25:94:4f:1f:7b:e8:33: ce:70:95:b9:51:b3:d7:46:28:a5:07:8b:9c:c3:de:6a:04:2a: df:84:14:03 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFXl1s+JZuh/IOn+4IVIOy4ja6pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNDA4MTMwOTU1MDBaFw0yNTA4MTIxMDAwMDBaMDMxMTAvBgNV BAMTKEI2RkQzQUU3MzU0NzBEODY1QkU5QTk3RTdEMjA4OUQyN0M3QTlBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKn60kWRqTtrZic27JwnmKKVqX CE476ib35mHXRSmEkftD+5ndQjkqi5TaU9cpEGcALWvPDUuOCCCjy450DTLhrR4m VG3JXtTZEKo11ZWAPiAas20C8NA0Y9QvWPzh5N4C744qkl+rp/A8Zk+yB9EMRvBd 3QTYXdGKMwrRMGdR1HuW3l1752Jz8MwH5qM1gVRwa0/mj02yMtkBBred3rn45Seu cTwevBPMvskywZVy6opgarkkHuzejAktjQBpXzAO1SW7I+RHzCFcW48FhLfxTuJf 33QVSb1cGVy1bGFgARpNNpqOG4ktBMvWwdhQf85LXbj6F8Qo7yfDAUrLQlZ9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtv065zVHDYZb6al+fSCJ0nx6mlAwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4Y2UyMDA4LTg0YjctNGJlZi05 NGI5LWJiM2ZkYjE3YjIzOC8wLzMxMzAzMzJlMzUzODJlMzEzOTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzrGMA0GCSqG SIb3DQEBCwUAA4IBAQAfUeOWuLdOT5E06BkOrr5RMHZMOnlSuS6j/V9TkPuFrY2u 1CAQp3cYpPfXO8s2beizA5RinzkPv2LKIfXP3jkdGA5jWkvKLEoj6zFfkMtyuG1l JdiFGNGvkaz4aoZwcR3NTVPPZjqo/5hiFHv3PopVlobXe4uQS1oSQ0ej6KLSMP12 pUoNbGzLiwrIRYM+7SURb1QHkm89qYYUz319BYBc2Ax5GP6DH/CiNBsAspRyElc1 oxafyMFffr3TrKahD6B8Be0poqkgFILLF8F+c4RQe8tybBH4ddzAeW3hJZxJoc9s fCWUTx976DPOcJW5UbPXRiilB4ucw95qBCrfhBQD -----END CERTIFICATE-----Generated at Sat Nov 23 00:48:00 2024 by rpki-client on console-fra.rpki-client.org