$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa File: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (raw, json) Hash identifier: cW/9D7f3rSD1Wd+uYOFJYajDwTDUi1FLo5623123rGc= Subject key identifier: 38:2E:0D:4A:91:9C:BF:97:FD:4C:1C:E2:59:01:3C:66:D8:79:54:B0 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 026BDE7EB1553284D290974BA1CB31DA1FE51CAE Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa Signing time: Tue 17 Sep 2024 11:01:03 +0000 ROA not before: Tue 17 Sep 2024 10:56:03 +0000 ROA not after: Tue 16 Sep 2025 11:01:03 +0000 asID: 140464 IP address blocks: 103.153.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6b:de:7e:b1:55:32:84:d2:90:97:4b:a1:cb:31:da:1f:e5:1c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Sep 17 10:56:03 2024 GMT Not After : Sep 16 11:01:03 2025 GMT Subject: CN=382E0D4A919CBF97FD4C1CE259013C66D87954B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:6a:cb:75:df:ef:a1:f4:f0:94:58:c0:1e: 9e:e3:63:81:6f:2a:d2:6f:e8:f7:26:58:b6:c3:aa: a1:00:f6:67:97:60:d7:cb:9d:fc:5d:55:12:88:23: 76:7f:6e:4b:e0:42:71:c6:c4:fd:e9:f2:99:7a:6c: 04:12:22:23:83:8c:82:af:9b:2c:00:8a:1f:ea:1f: f5:28:3a:6e:bb:2a:2b:24:c3:c3:03:5a:d5:04:2a: fb:47:db:0c:7e:bf:4e:a7:9b:7e:98:82:ee:11:be: 6d:fd:ed:e8:93:06:04:5c:d0:be:0d:5f:4e:fa:d8: dd:7b:f6:07:50:e5:28:b9:0d:66:c5:bb:e1:a5:7d: 9b:a8:8d:ae:0e:f5:4d:01:05:c2:4e:37:da:5c:da: 23:cb:fb:0e:d3:96:87:e1:45:28:e6:f7:1e:4b:f1: d8:96:2f:f1:ca:65:b2:0c:58:d4:a4:c6:fa:c8:de: b7:c4:c6:fb:ac:74:bd:6e:38:31:14:a6:c9:03:b7: 3f:5b:57:8b:6e:73:7c:82:c3:9d:dd:0a:3d:d2:f6: 4d:12:f4:d8:e8:82:1b:64:80:de:c7:dc:88:4e:59: ed:6d:f6:8c:23:ea:a7:c0:91:42:57:1c:26:4b:c0: e6:18:be:7b:9a:9e:f4:c8:d1:71:9a:21:90:2d:4a: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2E:0D:4A:91:9C:BF:97:FD:4C:1C:E2:59:01:3C:66:D8:79:54:B0 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.134.0/24 Signature Algorithm: sha256WithRSAEncryption d3:e1:f4:01:b4:5d:01:ef:ef:d0:12:5e:c6:39:4b:47:f0:0e: 8a:e3:4c:f5:8e:ea:64:75:66:97:ab:a8:1b:d2:09:a0:e4:54: 02:a0:55:3f:69:95:10:c3:7f:9d:f8:25:b9:9f:8a:2d:ab:96: 5e:b5:b4:9c:63:14:0b:5b:31:28:ce:e3:17:c8:79:60:91:01: 6a:13:a2:1e:61:65:66:37:47:37:01:00:d0:73:d3:24:0c:85: 58:44:ba:45:30:29:87:25:09:7f:82:ce:29:2c:0c:45:19:81: 22:c5:6b:c5:c0:06:77:41:63:9a:d7:be:e1:34:1f:d7:28:c1: cc:6f:a4:a4:74:97:78:cb:37:3a:e6:3f:fa:bb:69:d6:15:5c: dd:b3:16:c1:ea:cb:a3:7b:57:97:ec:ac:2d:a3:37:f5:85:61: 6a:1a:9c:b2:df:d9:d2:24:04:97:bd:38:eb:d7:75:c9:ae:57: 98:da:1c:6f:1d:bd:b6:e4:47:56:5b:89:76:60:4f:83:4a:eb: aa:81:ce:76:8f:d4:a3:d9:2b:95:2d:62:91:8d:44:7c:db:99: a0:eb:c2:a0:56:22:f4:17:35:0b:a5:b1:8d:ae:cc:d8:89:3b: 13:36:f1:83:45:73:42:e5:70:1f:32:cd:c9:a9:4e:91:85:ab: 98:90:7f:1a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAmvefrFVMoTSkJdLocsx2h/lHK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNDA5MTcxMDU2MDNaFw0yNTA5MTYxMTAxMDNaMDMxMTAvBgNV BAMTKDM4MkUwRDRBOTE5Q0JGOTdGRDRDMUNFMjU5MDEzQzY2RDg3OTU0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzmrLdd/vofTwlFjAHp7jY4Fv KtJv6PcmWLbDqqEA9meXYNfLnfxdVRKII3Z/bkvgQnHGxP3p8pl6bAQSIiODjIKv mywAih/qH/UoOm67Kiskw8MDWtUEKvtH2wx+v06nm36Ygu4Rvm397eiTBgRc0L4N X0762N179gdQ5Si5DWbFu+GlfZuoja4O9U0BBcJON9pc2iPL+w7TlofhRSjm9x5L 8diWL/HKZbIMWNSkxvrI3rfExvusdL1uODEUpskDtz9bV4tuc3yCw53dCj3S9k0S 9NjoghtkgN7H3IhOWe1t9owj6qfAkUJXHCZLwOYYvnuanvTI0XGaIZAtSmfFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUOC4NSpGcv5f9TBziWQE8Zth5VLAwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJlOTA1LWYyOTYtNDVkMS1h ODc5LTRhNGRlNTJjYjJkNi8wLzMxMzAzMzJlMzEzNTMzMmUzMTMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM2MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmYYwDQYJ KoZIhvcNAQELBQADggEBANPh9AG0XQHv79ASXsY5S0fwDorjTPWO6mR1ZperqBvS CaDkVAKgVT9plRDDf534Jbmfii2rll61tJxjFAtbMSjO4xfIeWCRAWoToh5hZWY3 RzcBANBz0yQMhVhEukUwKYclCX+CziksDEUZgSLFa8XABndBY5rXvuE0H9cowcxv pKR0l3jLNzrmP/q7adYVXN2zFsHqy6N7V5fsrC2jN/WFYWoanLLf2dIkBJe9OOvX dcmuV5jaHG8dvbbkR1ZbiXZgT4NK66qBznaP1KPZK5UtYpGNRHzbmaDrwqBWIvQX NQulsY2uzNiJOxM28YNFc0LlcB8yzcmpTpGFq5iQfxo= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org