$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa File: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (raw, json) Hash identifier: P+PJmhSLpd83S2cxURBDcslsCmkTTuYqFLowXEXkTfY= Subject key identifier: D5:15:F8:85:20:AE:E0:59:64:2D:36:C8:26:B5:5C:81:73:6E:CF:A9 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 11C25FD98CDBD891CFFBA20F82783D53095040B2 Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa Signing time: Tue 08 Oct 2024 06:32:56 +0000 ROA not before: Tue 08 Oct 2024 06:27:56 +0000 ROA not after: Tue 07 Oct 2025 06:32:56 +0000 asID: 150955 IP address blocks: 103.79.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c2:5f:d9:8c:db:d8:91:cf:fb:a2:0f:82:78:3d:53:09:50:40:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Oct 8 06:27:56 2024 GMT Not After : Oct 7 06:32:56 2025 GMT Subject: CN=D515F88520AEE059642D36C826B55C81736ECFA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:ce:01:53:41:bf:5b:dd:11:44:ff:13:63: da:b4:4f:c9:0d:42:de:e0:b2:96:cf:34:3e:02:68: 2d:6a:fc:5a:35:96:fb:17:63:ff:f6:1f:62:50:84: 89:18:2b:8f:d2:fa:5f:42:7b:e7:15:cc:ae:ba:17: 27:7d:f5:08:9d:fe:de:0c:9b:61:3a:db:14:61:d1: a4:26:70:a7:fb:fa:15:8e:a5:85:e8:97:64:43:7b: cc:a4:ea:aa:66:cc:85:56:21:0a:c5:3e:9f:dc:8b: 3c:cf:46:a0:3d:24:49:84:7f:fd:bc:9a:d6:ff:64: fe:6d:37:0f:ec:52:08:b4:cf:37:ce:4e:ed:65:c3: 42:09:df:38:1c:94:de:ee:fa:f8:c2:e5:c6:7e:ac: 77:0d:ad:f3:f5:11:e7:cd:4d:f4:77:88:1d:01:25: fe:fe:e5:1d:03:77:d9:2e:65:47:63:6a:31:31:8f: 0c:76:93:f0:dd:29:e3:b0:15:e6:af:34:d0:a0:92: 3b:a1:aa:eb:bc:07:3c:ee:78:97:de:98:63:b2:44: e6:22:cb:1d:1c:af:ae:0e:b7:5c:23:f6:3d:b6:61: 7e:45:a5:62:78:00:36:c3:62:2a:7d:06:aa:6e:01: f2:05:4c:dc:c0:ce:48:04:d5:dc:c3:5e:b9:09:8b: 97:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:15:F8:85:20:AE:E0:59:64:2D:36:C8:26:B5:5C:81:73:6E:CF:A9 X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.236.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:d2:ff:97:03:ca:14:db:41:12:91:57:76:f2:22:53:15:9a: 7c:34:e3:aa:e4:3d:2a:60:48:50:51:f9:11:68:86:d4:8e:79: 62:80:8b:a1:6e:b1:1d:d8:55:10:89:bf:90:4e:84:ef:65:3a: e6:2e:0c:b5:b7:07:71:6f:45:c1:03:a0:f6:75:a1:95:dc:65: f5:f4:95:bf:3f:76:49:fc:b6:c2:53:bd:33:5e:89:3c:3e:41: 3f:29:41:0e:db:a4:c8:b5:76:06:cb:71:5f:7f:00:30:d2:6d: 0e:b4:ff:a0:10:d7:ed:27:4a:16:1f:d5:b0:6f:ab:f0:f4:54: 64:a4:3c:36:2e:e6:b6:54:88:e1:a7:34:92:e1:af:10:1c:67: dd:59:1a:39:1e:44:09:1c:a7:bb:9f:0c:db:c6:fd:40:12:93: d4:e6:de:41:c5:02:f2:ea:cd:b2:b7:b1:1e:1f:fa:f2:94:01: 7e:be:ea:58:b6:ab:77:14:14:53:28:f4:68:35:2a:08:d0:de: 90:94:99:ff:1d:8c:24:54:07:0f:a9:1a:b8:07:c6:b7:8d:63: b2:61:3e:84:af:86:c6:bb:7e:b9:c5:38:e7:af:e4:f0:3c:23: cf:c9:05:f8:54:1a:bc:87:ae:44:e8:82:98:75:80:68:58:e3: 94:5d:66:59 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEcJf2Yzb2JHP+6IPgng9UwlQQLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNDEwMDgwNjI3NTZaFw0yNTEwMDcwNjMyNTZaMDMxMTAvBgNV BAMTKEQ1MTVGODg1MjBBRUUwNTk2NDJEMzZDODI2QjU1QzgxNzM2RUNGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87M4BU0G/W90RRP8TY9q0T8kN Qt7gspbPND4CaC1q/Fo1lvsXY//2H2JQhIkYK4/S+l9Ce+cVzK66Fyd99Qid/t4M m2E62xRh0aQmcKf7+hWOpYXol2RDe8yk6qpmzIVWIQrFPp/cizzPRqA9JEmEf/28 mtb/ZP5tNw/sUgi0zzfOTu1lw0IJ3zgclN7u+vjC5cZ+rHcNrfP1EefNTfR3iB0B Jf7+5R0Dd9kuZUdjajExjwx2k/DdKeOwFeavNNCgkjuhquu8BzzueJfemGOyROYi yx0cr64Ot1wj9j22YX5FpWJ4ADbDYip9BqpuAfIFTNzAzkgE1dzDXrkJi5f5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1RX4hSCu4FlkLTbIJrVcgXNuz6kwHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiZmYxYjNmLTExOTAtNDExOS1i YmM2LTE0MTdkZjhhYTI1OC8wLzMxMzAzMzJlMzczOTJlMzIzMzM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0/sMA0GCSqG SIb3DQEBCwUAA4IBAQCM0v+XA8oU20ESkVd28iJTFZp8NOOq5D0qYEhQUfkRaIbU jnligIuhbrEd2FUQib+QToTvZTrmLgy1twdxb0XBA6D2daGV3GX19JW/P3ZJ/LbC U70zXok8PkE/KUEO26TItXYGy3FffwAw0m0OtP+gENftJ0oWH9Wwb6vw9FRkpDw2 Lua2VIjhpzSS4a8QHGfdWRo5HkQJHKe7nwzbxv1AEpPU5t5BxQLy6s2yt7EeH/ry lAF+vupYtqt3FBRTKPRoNSoI0N6QlJn/HYwkVAcPqRq4B8a3jWOyYT6Er4bGu365 xTjnr+TwPCPPyQX4VBq8h65E6IKYdYBoWOOUXWZZ -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org