$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138372e302f32342d3234203d3e203538353533.roa File: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (raw, json) Hash identifier: bUy4CZmFBklHDVwaxUEZUZiNt8d1i/3iKLLtmboWyaU= Subject key identifier: 14:E3:8B:D6:5A:25:7D:59:CF:27:F0:DE:76:F7:79:43:CB:E4:8A:95 Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 409E983B0BFCC8157505EA219C882EE37598221D Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138372e302f32342d3234203d3e203538353533.roa Signing time: Mon 16 Sep 2024 16:00:00 +0000 ROA not before: Mon 16 Sep 2024 15:55:00 +0000 ROA not after: Mon 15 Sep 2025 16:00:00 +0000 asID: 58553 IP address blocks: 103.20.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9e:98:3b:0b:fc:c8:15:75:05:ea:21:9c:88:2e:e3:75:98:22:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Sep 16 15:55:00 2024 GMT Not After : Sep 15 16:00:00 2025 GMT Subject: CN=14E38BD65A257D59CF27F0DE76F77943CBE48A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:03:38:8c:87:cc:c8:2c:15:6b:ec:b2:ce: 74:87:f1:fc:ad:1e:3d:41:99:f1:f0:fa:1a:ff:87: ac:44:c2:8b:34:b3:17:c0:58:95:92:cd:75:8f:a8: c7:49:0c:69:d1:5a:17:72:bf:9f:f2:a5:7e:92:d0: 6d:04:32:c8:d9:46:86:c9:ec:0b:c5:80:da:99:1f: ed:e4:9c:7e:fa:c1:9f:ae:02:7e:d7:78:e7:27:19: 36:ba:5b:e6:f0:a8:65:fa:de:b0:00:ec:c7:3c:f8: b0:6d:d4:88:b2:b5:68:42:e8:e3:4d:d8:67:63:38: 50:77:33:ee:bb:1c:93:28:a1:ab:17:2b:6f:46:6a: 01:8d:90:6d:cb:81:5f:17:df:5a:15:fd:55:71:d9: 53:7c:fc:3f:08:27:a8:12:b2:48:12:c1:41:9d:f7: 46:d0:ea:0f:fd:d6:7d:39:b0:c6:c7:92:b8:26:2a: fe:54:f8:c1:ec:60:41:29:61:20:e4:c1:f0:93:f9: 6d:75:9a:b0:5e:18:be:7b:89:df:59:5f:4c:4b:de: 0a:16:0c:63:df:40:84:51:d4:5e:54:a6:7d:31:bb: cb:37:06:a9:66:65:ca:8c:7d:8b:31:07:83:f9:7f: e4:51:ea:bb:9d:21:2b:9d:4a:88:62:9b:33:34:79: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E3:8B:D6:5A:25:7D:59:CF:27:F0:DE:76:F7:79:43:CB:E4:8A:95 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138372e302f32342d3234203d3e203538353533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.187.0/24 Signature Algorithm: sha256WithRSAEncryption 07:04:15:14:08:32:8d:a7:b1:f1:f1:49:d9:cb:01:ae:06:3b: 34:bf:ab:94:c2:5b:0a:ae:21:55:1a:7f:ad:94:72:ac:25:c1: 87:68:14:7c:b9:eb:b1:1b:08:cf:fb:30:70:94:be:94:3f:25: df:25:33:76:b0:fc:f9:4b:fc:e1:a1:15:c5:2d:4d:f6:f0:94: af:ab:c8:82:56:d5:e3:1a:4b:f8:e2:0b:d9:e2:a0:33:d1:f3: d4:77:6b:d6:ae:ae:c3:d0:24:a4:12:3b:4c:09:35:04:1d:c3: 10:34:86:e3:45:15:91:aa:fd:99:1a:04:bc:cc:b8:8b:ea:d2: 54:36:0a:e3:50:bf:c0:87:3f:f2:61:28:43:b1:83:74:f8:fb: 5e:ec:37:68:97:89:86:06:a9:e3:2b:fa:a3:2a:b6:06:b0:89: d5:82:2f:6a:f1:90:e9:64:5a:e0:4a:69:d4:2c:7b:5f:3d:25: c2:d2:a3:e5:82:61:19:28:f9:cb:ea:00:22:d3:36:ab:4d:67: 59:a1:6e:39:e0:3b:db:08:38:2c:29:31:d5:a1:2f:44:2b:bf: f6:bf:9f:a0:f2:fa:0e:fe:88:93:ae:76:1c:7e:50:fb:c4:e2: bd:ce:41:fb:58:e2:e9:1d:11:3e:94:46:6f:57:ed:9b:29:da: 0a:ea:4a:f8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQJ6YOwv8yBV1BeohnIgu43WYIh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNDA5MTYxNTU1MDBaFw0yNTA5MTUxNjAwMDBaMDMxMTAvBgNV BAMTKDE0RTM4QkQ2NUEyNTdENTlDRjI3RjBERTc2Rjc3OTQzQ0JFNDhBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpQM4jIfMyCwVa+yyznSH8fyt Hj1BmfHw+hr/h6xEwos0sxfAWJWSzXWPqMdJDGnRWhdyv5/ypX6S0G0EMsjZRobJ 7AvFgNqZH+3knH76wZ+uAn7XeOcnGTa6W+bwqGX63rAA7Mc8+LBt1IiytWhC6ONN 2GdjOFB3M+67HJMooasXK29GagGNkG3LgV8X31oV/VVx2VN8/D8IJ6gSskgSwUGd 90bQ6g/91n05sMbHkrgmKv5U+MHsYEEpYSDkwfCT+W11mrBeGL57id9ZX0xL3goW DGPfQIRR1F5Upn0xu8s3BqlmZcqMfYsxB4P5f+RR6rudISudSohimzM0eVsBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFOOL1lolfVnPJ/Dedvd5Q8vkipUwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwOTczYmViLTY2YmEtNDhiYy05 Mzc0LTcyZDdmYjg5YzVhMy8wLzMxMzAzMzJlMzIzMDJlMzEzODM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcUuzANBgkqhkiG 9w0BAQsFAAOCAQEABwQVFAgyjaex8fFJ2csBrgY7NL+rlMJbCq4hVRp/rZRyrCXB h2gUfLnrsRsIz/swcJS+lD8l3yUzdrD8+Uv84aEVxS1N9vCUr6vIglbV4xpL+OIL 2eKgM9Hz1Hdr1q6uw9AkpBI7TAk1BB3DEDSG40UVkar9mRoEvMy4i+rSVDYK41C/ wIc/8mEoQ7GDdPj7Xuw3aJeJhgap4yv6oyq2BrCJ1YIvavGQ6WRa4Epp1Cx7Xz0l wtKj5YJhGSj5y+oAItM2q01nWaFuOeA72wg4LCkx1aEvRCu/9r+foPL6Dv6Ik652 HH5Q+8Tivc5B+1ji6R0RPpRGb1ftmynaCupK+A== -----END CERTIFICATE-----Generated at Mon Nov 25 17:55:29 2024 by rpki-client on console-fra.rpki-client.org