$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa File: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (raw, json) Hash identifier: 0ITBGJ00BgJjiaRA5n1B3d0PzWeChxwSHb9vKaBZRbM= Subject key identifier: 15:70:FC:F4:4B:DC:17:BE:D3:63:FC:47:B7:C0:6D:0F:C3:3C:AF:77 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 679E44CD7B19AE487E4996A85593BCFB12E0718B Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa Signing time: Tue 25 Jun 2024 15:01:25 +0000 ROA not before: Tue 25 Jun 2024 14:56:25 +0000 ROA not after: Tue 24 Jun 2025 15:01:25 +0000 asID: 149368 IP address blocks: 103.180.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9e:44:cd:7b:19:ae:48:7e:49:96:a8:55:93:bc:fb:12:e0:71:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Jun 25 14:56:25 2024 GMT Not After : Jun 24 15:01:25 2025 GMT Subject: CN=1570FCF44BDC17BED363FC47B7C06D0FC33CAF77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:47:45:94:8f:32:cd:09:1a:72:04:0a:c6: 58:be:45:71:9b:c3:26:45:eb:c9:d3:6b:f2:c9:a3: b3:3b:04:12:51:9d:12:45:db:89:4c:cc:4d:bf:a8: 8b:30:52:82:ba:38:9d:2f:7b:ee:33:af:57:5a:31: 53:f3:8a:17:c5:9c:94:19:99:be:74:3d:99:c7:91: 05:16:25:38:53:f7:54:14:a3:ed:12:41:88:40:8d: 02:c2:91:8a:b0:7a:f9:a2:cc:60:41:15:cf:a0:d7: 48:91:c4:68:56:46:e5:fe:d1:13:31:6a:51:77:04: 27:c6:06:58:37:2f:1c:21:ec:86:0a:1d:55:9d:f3: 97:13:d5:01:6e:f5:c5:65:34:7e:8c:9a:86:6f:c5: 3d:97:df:c3:ff:78:89:ee:9b:62:77:d7:84:74:72: 9c:64:73:e0:b0:a8:65:cb:75:63:51:28:2d:d6:b2: 58:24:f9:ff:2a:f9:f6:7b:b9:05:bc:da:e3:ec:9e: 0e:0f:db:a7:86:dc:d1:b8:e7:ac:3e:0e:0b:a5:31: 82:36:0c:3c:0b:88:a2:d9:82:d9:ee:0a:b6:50:c1: 21:3d:9f:6a:6d:e5:d8:29:a5:de:9f:58:f2:53:f3: 16:4a:e4:92:a8:43:63:5b:7d:92:f5:29:37:81:4b: 86:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:70:FC:F4:4B:DC:17:BE:D3:63:FC:47:B7:C0:6D:0F:C3:3C:AF:77 X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.198.0/23 Signature Algorithm: sha256WithRSAEncryption 10:3e:e7:a7:40:96:88:16:e7:f1:85:c4:3c:a6:9f:7f:21:f5: d3:3b:04:13:eb:93:a2:85:f0:0b:33:7f:ec:81:7c:fb:d8:96: 97:63:59:10:c0:76:9b:45:ce:5a:57:91:ab:9a:cf:81:ba:51: 72:47:9b:c5:f7:28:53:7a:2d:e2:98:7b:24:05:12:61:90:27: e8:6a:a5:60:0e:57:44:e3:e1:0c:c4:de:a0:f8:e8:cf:3f:cf: b0:6e:b8:5f:2c:a3:ed:17:e8:f3:19:c7:94:75:22:ca:af:71: 4a:87:18:71:05:8f:23:a8:68:12:24:a0:83:e7:35:a2:f7:9e: b1:8d:a6:8a:7a:05:d6:38:3e:d7:12:a5:26:a5:be:e7:9b:24: 7d:ec:5d:27:72:c9:14:20:c2:f3:47:89:1c:d3:76:3c:58:3e: ce:a5:96:26:00:18:1a:f6:79:6c:e8:25:cf:5f:d0:27:9e:ab: 10:48:0e:b9:8f:72:f9:df:f5:ba:1c:50:c8:7a:ca:cc:18:f0: a2:25:77:2d:20:97:ab:fa:6f:5f:09:7b:39:60:6b:6c:64:dd: 20:2f:c8:c0:20:b5:88:25:ff:60:04:72:5e:af:09:1a:d8:89: 56:3d:70:c7:7a:44:5a:8c:e6:7d:04:93:38:d9:92:09:bd:ec: 4b:dd:3e:a5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZ55EzXsZrkh+SZaoVZO8+xLgcYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNDA2MjUxNDU2MjVaFw0yNTA2MjQxNTAxMjVaMDMxMTAvBgNV BAMTKDE1NzBGQ0Y0NEJEQzE3QkVEMzYzRkM0N0I3QzA2RDBGQzMzQ0FGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTkdFlI8yzQkacgQKxli+RXGb wyZF68nTa/LJo7M7BBJRnRJF24lMzE2/qIswUoK6OJ0ve+4zr1daMVPzihfFnJQZ mb50PZnHkQUWJThT91QUo+0SQYhAjQLCkYqwevmizGBBFc+g10iRxGhWRuX+0RMx alF3BCfGBlg3Lxwh7IYKHVWd85cT1QFu9cVlNH6MmoZvxT2X38P/eInum2J314R0 cpxkc+CwqGXLdWNRKC3Wslgk+f8q+fZ7uQW82uPsng4P26eG3NG456w+DgulMYI2 DDwLiKLZgtnuCrZQwSE9n2pt5dgppd6fWPJT8xZK5JKoQ2NbfZL1KTeBS4a/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUFXD89EvcF77TY/xHt8BtD8M8r3cwHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhYzgwMWEwLTc5MTItNGIwMS1h MjgxLTg4MDI0NjI0YTJkNC8wLzMxMzAzMzJlMzEzODMwMmUzMTM5MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntMYwDQYJ KoZIhvcNAQELBQADggEBABA+56dAlogW5/GFxDymn38h9dM7BBPrk6KF8Aszf+yB fPvYlpdjWRDAdptFzlpXkauaz4G6UXJHm8X3KFN6LeKYeyQFEmGQJ+hqpWAOV0Tj 4QzE3qD46M8/z7BuuF8so+0X6PMZx5R1IsqvcUqHGHEFjyOoaBIkoIPnNaL3nrGN pop6BdY4PtcSpSalvuebJH3sXSdyyRQgwvNHiRzTdjxYPs6lliYAGBr2eWzoJc9f 0CeeqxBIDrmPcvnf9bocUMh6yswY8KIldy0gl6v6b18Jezlga2xk3SAvyMAgtYgl /2AEcl6vCRrYiVY9cMd6RFqM5n0EkzjZkgm97EvdPqU= -----END CERTIFICATE-----Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org