$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa File: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (raw, json) Hash identifier: WQermmKrjmkRkTYr0aG0+hIvHneRLS+rGSH7EGxbhwM= Subject key identifier: AE:95:EE:BC:AF:F1:18:F2:5F:F8:C1:87:BF:82:5D:32:F9:8F:C3:80 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 311319C81F332B66E96E50B585C34CA08417D9AF Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa Signing time: Thu 10 Oct 2024 14:00:00 +0000 ROA not before: Thu 10 Oct 2024 13:55:00 +0000 ROA not after: Thu 09 Oct 2025 14:00:00 +0000 asID: 149752 IP address blocks: 103.189.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:13:19:c8:1f:33:2b:66:e9:6e:50:b5:85:c3:4c:a0:84:17:d9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Oct 10 13:55:00 2024 GMT Not After : Oct 9 14:00:00 2025 GMT Subject: CN=AE95EEBCAFF118F25FF8C187BF825D32F98FC380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:cf:08:d8:3e:9f:d6:03:78:46:2f:72:1a: 39:6f:8b:ba:c8:16:f8:f2:1d:c9:eb:db:87:8b:b0: e2:29:f9:1e:3e:98:fb:8a:65:81:d3:73:b1:c1:3a: 1e:65:9a:47:dd:e8:91:bb:95:4a:af:71:b5:27:20: fd:09:52:b2:80:2b:14:8b:fe:28:59:a5:21:9a:3e: ce:18:69:82:10:6d:a4:80:43:50:e3:86:e1:c9:84: 38:39:a0:65:24:15:32:33:e2:79:bf:e8:6c:1b:89: e4:35:22:a9:64:bf:c4:82:9a:1a:04:56:96:6e:ed: cf:f4:f7:c9:9e:4d:f3:78:31:fa:f9:49:43:c7:d9: 3c:83:c4:e9:4b:1e:e3:04:09:1d:03:e9:b2:86:b0: cc:f9:c8:b2:3d:71:b3:7e:d0:ce:dc:ef:b4:e0:07: c1:e1:7c:fd:8a:f5:b0:fe:aa:51:b0:8c:6e:c0:62: f8:61:57:23:25:e1:59:d0:d0:01:29:98:62:05:fc: fd:e9:ee:6e:d3:49:89:0a:c1:e3:0e:c9:5b:a9:b4: 74:28:bc:0d:46:89:0c:8f:a0:69:dc:df:ad:5e:a7: 9d:69:65:d9:8a:61:e4:23:d1:c5:15:c3:a9:14:e6: fd:4c:20:70:c3:05:1d:9e:4d:e6:62:0c:d2:ef:09: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:95:EE:BC:AF:F1:18:F2:5F:F8:C1:87:BF:82:5D:32:F9:8F:C3:80 X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.139.0/24 Signature Algorithm: sha256WithRSAEncryption 60:93:ae:7f:c4:44:f2:38:6a:78:5f:f3:d1:48:99:3f:cb:a4: 43:5a:a5:38:27:50:30:68:72:2b:70:08:17:79:9e:a7:f4:8e: 8f:4b:bc:bf:76:7b:53:8d:58:a6:e2:9f:10:17:33:09:2c:84: 67:9d:5b:65:e2:a3:86:c9:9e:c2:fb:5c:c3:c9:8d:8e:4b:c7: 53:5a:be:e0:98:92:7d:33:2f:38:93:df:c9:c2:28:a3:e8:88: d9:18:29:c0:da:a1:4a:af:fc:30:5b:02:b6:d4:a3:ce:9c:ce: 11:b4:6c:50:e9:11:38:73:54:0a:1a:94:d9:5c:63:44:1a:b2: 8a:f3:8f:fe:cf:20:0d:46:b5:1c:53:95:80:04:0c:bf:d9:27: 73:c1:a3:4e:61:e5:ce:10:32:4c:4d:18:b7:05:5c:8f:30:ec: 94:7f:43:d4:fc:db:9c:60:62:5c:bc:b7:99:e6:16:66:8d:b5: ad:a0:d7:b4:80:30:18:1e:4f:90:8b:a8:c3:14:53:69:03:b4: b7:2a:4a:4c:5f:51:38:f6:31:3d:fd:e2:14:ac:af:93:12:a8: 0c:18:fb:3c:b0:f0:39:de:e1:08:3c:ec:4a:82:73:51:62:f6: 4c:2e:12:cf:e4:86:c6:73:59:7b:6a:54:7e:14:fc:c2:3e:ca: 91:e8:04:13 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMRMZyB8zK2bpblC1hcNMoIQX2a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNDEwMTAxMzU1MDBaFw0yNTEwMDkxNDAwMDBaMDMxMTAvBgNV BAMTKEFFOTVFRUJDQUZGMTE4RjI1RkY4QzE4N0JGODI1RDMyRjk4RkMzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKs8I2D6f1gN4Ri9yGjlvi7rI FvjyHcnr24eLsOIp+R4+mPuKZYHTc7HBOh5lmkfd6JG7lUqvcbUnIP0JUrKAKxSL /ihZpSGaPs4YaYIQbaSAQ1DjhuHJhDg5oGUkFTIz4nm/6GwbieQ1Iqlkv8SCmhoE VpZu7c/098meTfN4Mfr5SUPH2TyDxOlLHuMECR0D6bKGsMz5yLI9cbN+0M7c77Tg B8HhfP2K9bD+qlGwjG7AYvhhVyMl4VnQ0AEpmGIF/P3p7m7TSYkKweMOyVuptHQo vA1GiQyPoGnc361ep51pZdmKYeQj0cUVw6kU5v1MIHDDBR2eTeZiDNLvCT9LAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUrpXuvK/xGPJf+MGHv4JdMvmPw4AwHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjNmI1OTdjLTk1NDctNGMxZS1h Yzg3LTNhNDM0YTMwMGE2Ny8wLzMxMzAzMzJlMzEzODM5MmUzMTMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvYswDQYJ KoZIhvcNAQELBQADggEBAGCTrn/ERPI4anhf89FImT/LpENapTgnUDBocitwCBd5 nqf0jo9LvL92e1ONWKbinxAXMwkshGedW2Xio4bJnsL7XMPJjY5Lx1NavuCYkn0z LziT38nCKKPoiNkYKcDaoUqv/DBbArbUo86czhG0bFDpEThzVAoalNlcY0Qasorz j/7PIA1GtRxTlYAEDL/ZJ3PBo05h5c4QMkxNGLcFXI8w7JR/Q9T825xgYly8t5nm FmaNta2g17SAMBgeT5CLqMMUU2kDtLcqSkxfUTj2MT394hSsr5MSqAwY+zyw8Dne 4Qg87EqCc1Fi9kwuEs/khsZzWXtqVH4U/MI+ypHoBBM= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org