$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231352e302f32342d3234203d3e203338313439.roa File: 3130332e332e3231352e302f32342d3234203d3e203338313439.roa (raw, json) Hash identifier: DxWNHvPmwZOs/Z3yfLBc9ND/xVuA6iVWOBlnfvBRMXw= Subject key identifier: 65:5D:D3:41:71:8F:C3:AB:91:7E:A4:EB:0C:75:2E:12:88:C6:15:13 Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 64E314F1C78A4BBA153C23AA0180860DF7E74ACC Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231352e302f32342d3234203d3e203338313439.roa Signing time: Tue 17 Sep 2024 00:35:41 +0000 ROA not before: Tue 17 Sep 2024 00:30:41 +0000 ROA not after: Tue 16 Sep 2025 00:35:41 +0000 asID: 38149 IP address blocks: 103.3.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e3:14:f1:c7:8a:4b:ba:15:3c:23:aa:01:80:86:0d:f7:e7:4a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Sep 17 00:30:41 2024 GMT Not After : Sep 16 00:35:41 2025 GMT Subject: CN=655DD341718FC3AB917EA4EB0C752E1288C61513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:44:93:d4:35:20:4c:86:9b:f5:3e:e0:70: 07:17:19:65:30:59:52:12:62:43:58:a6:50:09:70: 4c:a4:1f:14:ff:58:61:d9:4d:65:74:18:e2:1d:b7: 1c:6c:a0:27:85:82:ed:5c:df:d5:1d:f4:bb:0d:93: 08:ea:3e:00:86:b7:8f:ae:41:ce:c5:79:bb:c3:90: 6a:50:23:fe:1a:ff:7a:55:51:23:0e:67:51:7d:2c: d5:48:52:e1:e6:6c:0d:68:44:72:7f:94:f8:8e:21: 37:82:2b:b6:5e:ad:77:37:f2:6d:ab:57:10:cf:e7: 72:c2:bf:b5:2b:a9:62:91:9f:fa:0e:87:55:ca:cc: 61:b5:58:a8:d6:27:55:0b:94:8a:45:ef:56:9b:7f: 99:48:41:bc:d4:d8:af:ca:c9:f8:55:31:6d:a0:19: 99:14:5a:8d:b9:e2:18:69:ea:80:29:04:be:49:15: 23:ba:02:38:5b:94:ba:8a:44:76:ae:c7:15:7c:ab: 05:8e:5e:73:8d:09:8c:a2:e9:eb:1e:b9:e5:ea:87: ee:85:aa:32:bd:39:2d:87:12:00:b5:e0:5a:01:76: 1f:5e:1b:aa:a0:9d:d1:c1:be:f3:77:ac:31:3b:aa: 54:5d:4c:59:28:ca:46:21:f1:7e:62:39:8d:86:cf: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5D:D3:41:71:8F:C3:AB:91:7E:A4:EB:0C:75:2E:12:88:C6:15:13 X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231352e302f32342d3234203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.215.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:d8:85:08:2f:b8:5b:29:d2:9d:f2:b6:df:aa:87:66:77:c6: 22:e8:54:c7:1f:0c:37:69:a9:27:38:2d:1b:c3:41:49:44:c4: 4f:18:cc:ea:97:87:f4:ea:e0:31:d0:fd:cf:71:9d:97:02:b4: 48:b3:a0:af:81:e9:88:53:3a:4f:29:ae:5b:89:7c:5a:8e:2f: 44:d9:1e:aa:de:93:7b:1a:6e:fe:75:0a:78:1a:96:42:8e:50: 97:ee:13:27:49:67:68:07:01:7f:1b:8e:b8:ce:8e:ce:2c:1e: 54:1c:1c:1a:53:cf:32:e7:b6:18:b9:ce:a4:49:d7:13:7c:bf: 69:d9:dc:58:f8:48:5b:b3:61:17:31:3b:31:43:e8:3e:ca:a9: 1e:68:84:14:77:17:66:89:60:10:4f:ef:6b:4c:b7:8c:e5:a6: 9c:c6:c7:6d:bd:04:7d:8d:d9:e6:9f:7b:27:97:41:b3:43:2c: 80:a0:ab:17:38:13:c1:7f:77:17:28:d2:b3:b0:c9:31:a9:06: ca:3e:25:4a:4d:fd:41:83:3b:be:ca:05:0e:17:19:6c:4b:6e: 20:5a:4e:b7:63:35:1c:58:d7:ca:f5:30:57:8b:ea:f6:75:0d: 09:f9:47:46:b0:66:d9:5a:5c:64:23:f7:c6:79:fa:20:c4:00: 7f:a4:44:34 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUZOMU8ceKS7oVPCOqAYCGDffnSswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNDA5MTcwMDMwNDFaFw0yNTA5MTYwMDM1NDFaMDMxMTAvBgNV BAMTKDY1NUREMzQxNzE4RkMzQUI5MTdFQTRFQjBDNzUyRTEyODhDNjE1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8kST1DUgTIab9T7gcAcXGWUw WVISYkNYplAJcEykHxT/WGHZTWV0GOIdtxxsoCeFgu1c39Ud9LsNkwjqPgCGt4+u Qc7FebvDkGpQI/4a/3pVUSMOZ1F9LNVIUuHmbA1oRHJ/lPiOITeCK7ZerXc38m2r VxDP53LCv7UrqWKRn/oOh1XKzGG1WKjWJ1ULlIpF71abf5lIQbzU2K/KyfhVMW2g GZkUWo254hhp6oApBL5JFSO6AjhblLqKRHauxxV8qwWOXnONCYyi6eseueXqh+6F qjK9OS2HEgC14FoBdh9eG6qgndHBvvN3rDE7qlRdTFkoykYh8X5iOY2Gz5EXAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUZV3TQXGPw6uRfqTrDHUuEojGFRMwHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzAzMzJlMzMyZTMyMzEzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzMTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnA9cwDQYJKoZIhvcN AQELBQADggEBAG3YhQgvuFsp0p3ytt+qh2Z3xiLoVMcfDDdpqSc4LRvDQUlExE8Y zOqXh/Tq4DHQ/c9xnZcCtEizoK+B6YhTOk8prluJfFqOL0TZHqrek3sabv51Cnga lkKOUJfuEydJZ2gHAX8bjrjOjs4sHlQcHBpTzzLnthi5zqRJ1xN8v2nZ3Fj4SFuz YRcxOzFD6D7KqR5ohBR3F2aJYBBP72tMt4zlppzGx229BH2N2eafeyeXQbNDLICg qxc4E8F/dxco0rOwyTGpBso+JUpN/UGDO77KBQ4XGWxLbiBaTrdjNRxY18r1MFeL 6vZ1DQn5R0awZtlaXGQj98Z5+iDEAH+kRDQ= -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org