$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa File: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (raw, json) Hash identifier: Juqtcnw5dFFu5T73BMr7UKHzv1aKbgUnoCmnBMU/IDI= Subject key identifier: 88:A1:EE:95:57:B7:4A:5F:55:EE:BD:EC:55:11:73:46:66:D5:FC:25 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 734DF85B297EE229CFC11D9DB7FA03758AC78888 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa Signing time: Tue 09 Apr 2024 10:00:01 +0000 ROA not before: Tue 09 Apr 2024 09:55:01 +0000 ROA not after: Tue 08 Apr 2025 10:00:01 +0000 asID: 150935 IP address blocks: 103.109.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4d:f8:5b:29:7e:e2:29:cf:c1:1d:9d:b7:fa:03:75:8a:c7:88:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Apr 9 09:55:01 2024 GMT Not After : Apr 8 10:00:01 2025 GMT Subject: CN=88A1EE9557B74A5F55EEBDEC5511734666D5FC25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:78:8d:56:d7:04:25:c3:a9:86:cb:d5:0e: d7:66:1d:67:ba:fe:b4:2d:9b:03:96:8e:f3:7a:53: 02:7a:92:0a:5a:3f:49:9d:de:89:21:40:1a:6e:50: 83:0c:a6:79:88:f2:d1:88:9d:85:05:b2:6d:6c:56: 64:1b:4c:53:8f:66:75:e0:80:60:a5:dc:d3:8b:39: 45:47:59:4e:d6:22:36:ad:b0:d6:bd:af:73:13:36: 5b:c0:69:cb:5b:88:f8:b6:c7:0f:fd:9e:63:9f:e9: ae:da:f7:0f:a0:f8:45:e9:60:0d:46:40:0f:ff:2d: 98:e0:b4:4c:1f:26:02:74:44:80:1e:c7:62:76:10: 88:a1:fd:0d:68:49:23:9f:af:52:72:14:24:c4:c6: 82:88:6d:2e:e8:da:36:91:6e:a7:f2:80:51:69:9f: c6:a8:06:7d:8d:b9:84:cc:dd:39:64:41:e4:68:7b: 73:5f:82:55:c6:1a:e6:c4:a3:9a:e1:71:3a:f3:46: 38:37:a6:88:73:33:64:f3:9f:14:dd:a8:ac:96:ce: ae:42:b8:fb:60:3f:a6:df:7b:e6:4b:1f:e2:63:f5: 7c:b0:a9:e5:87:8f:b9:7f:4a:6f:bc:f8:4d:a8:b0: dc:76:48:21:77:41:81:db:c2:c8:23:33:c3:91:f7: 0a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A1:EE:95:57:B7:4A:5F:55:EE:BD:EC:55:11:73:46:66:D5:FC:25 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.206.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:7e:d2:dd:77:a4:97:b4:ab:f4:2c:e6:95:be:f1:8b:c7:39: c4:70:ea:9d:d1:bb:64:b0:00:19:01:fb:f5:ed:73:9a:c7:ea: 3f:44:27:b8:0b:53:f0:dc:dc:95:02:25:26:ca:b6:ed:27:c2: b2:3e:5d:64:4b:e2:67:b8:bb:71:af:a0:c6:e7:82:88:b0:b0: e5:24:be:e0:32:92:0d:69:59:c6:50:37:35:25:69:b4:00:29: e4:b7:63:ae:d7:a7:68:fd:d8:78:0a:08:5e:21:32:b8:24:42: 3e:ec:0e:54:21:60:6e:77:99:ea:41:5f:91:e7:7d:c5:f9:b8: 45:06:f3:f2:dc:7c:86:df:6b:f5:91:ad:c4:3b:ee:1f:54:e7: 6f:86:32:5c:d7:f5:b1:7f:33:8f:a2:29:60:db:65:0d:3c:28: c6:96:6e:be:f6:77:9d:16:7b:cb:1d:fb:b3:39:ea:be:0c:14: 9b:48:69:0a:7a:f8:72:4f:c4:3f:54:29:a0:b7:1c:d3:2d:7d: d2:6c:41:d5:ce:8a:5d:a0:c3:c5:e2:6a:bb:de:ec:46:ef:72: b9:02:66:b1:b1:b5:64:d3:d6:60:b7:cf:83:88:b3:51:03:e1: ac:92:c9:07:cb:42:25:f9:86:d0:00:92:9f:72:09:df:71:1f: 24:dc:17:da -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUc034Wyl+4inPwR2dt/oDdYrHiIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNDA0MDkwOTU1MDFaFw0yNTA0MDgxMDAwMDFaMDMxMTAvBgNV BAMTKDg4QTFFRTk1NTdCNzRBNUY1NUVFQkRFQzU1MTE3MzQ2NjZENUZDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+U3iNVtcEJcOphsvVDtdmHWe6 /rQtmwOWjvN6UwJ6kgpaP0md3okhQBpuUIMMpnmI8tGInYUFsm1sVmQbTFOPZnXg gGCl3NOLOUVHWU7WIjatsNa9r3MTNlvAactbiPi2xw/9nmOf6a7a9w+g+EXpYA1G QA//LZjgtEwfJgJ0RIAex2J2EIih/Q1oSSOfr1JyFCTExoKIbS7o2jaRbqfygFFp n8aoBn2NuYTM3TlkQeRoe3NfglXGGubEo5rhcTrzRjg3pohzM2TznxTdqKyWzq5C uPtgP6bfe+ZLH+Jj9XywqeWHj7l/Sm+8+E2osNx2SCF3QYHbwsgjM8OR9wolAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUiKHulVe3Sl9V7r3sVRFzRmbV/CUwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjODg5MmViLWRkYzAtNGNiNi05 NTdjLWI2NTNmMjhiYmYzOS8wLzMxMzAzMzJlMzEzMDM5MmUzMjMwMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTMzMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbc4wDQYJ KoZIhvcNAQELBQADggEBAG1+0t13pJe0q/Qs5pW+8YvHOcRw6p3Ru2SwABkB+/Xt c5rH6j9EJ7gLU/Dc3JUCJSbKtu0nwrI+XWRL4me4u3GvoMbngoiwsOUkvuAykg1p WcZQNzUlabQAKeS3Y67Xp2j92HgKCF4hMrgkQj7sDlQhYG53mepBX5HnfcX5uEUG 8/LcfIbfa/WRrcQ77h9U52+GMlzX9bF/M4+iKWDbZQ08KMaWbr72d50We8sd+7M5 6r4MFJtIaQp6+HJPxD9UKaC3HNMtfdJsQdXOil2gw8Xiarve7EbvcrkCZrGxtWTT 1mC3z4OIs1ED4aySyQfLQiX5htAAkp9yCd9xHyTcF9o= -----END CERTIFICATE-----Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org