$ rpki-client -vvf repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa File: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (raw, json) Hash identifier: 2zgmqTCIaPAHYWPftqkFjb0hZ28cJ5grf2c4LX9qqic= Subject key identifier: 4E:1A:61:F2:80:D4:ED:B1:98:51:5C:09:E1:39:18:2E:D9:FA:53:1F Certificate issuer: /CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Certificate serial: 51007714EB3A0025EECFB8660658303352451DE9 Authority key identifier: 21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa Signing time: Thu 26 Sep 2024 12:02:22 +0000 ROA not before: Thu 26 Sep 2024 11:57:22 +0000 ROA not after: Thu 25 Sep 2025 12:02:22 +0000 asID: 141623 IP address blocks: 103.161.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:00:77:14:eb:3a:00:25:ee:cf:b8:66:06:58:30:33:52:45:1d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Validity Not Before: Sep 26 11:57:22 2024 GMT Not After : Sep 25 12:02:22 2025 GMT Subject: CN=4E1A61F280D4EDB198515C09E139182ED9FA531F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e8:3a:74:d7:1e:3a:0f:17:ed:97:ec:d7:7d: fc:f5:b3:c7:33:72:66:9f:91:64:47:f3:0d:4d:9f: f8:f0:eb:89:3a:d4:6b:e5:fe:14:24:5f:d3:93:2d: ec:02:b5:cf:a8:47:ac:11:96:98:5a:2b:a1:62:ea: ce:8b:2b:87:4b:57:ed:e3:38:e3:e6:94:81:dc:50: 5a:ef:c2:fc:81:ba:4e:3c:fc:3c:6e:78:a5:69:2e: 5b:21:b5:67:e3:c7:71:ae:79:b8:ee:fe:f5:58:d2: d0:83:d3:e7:0c:4d:7a:49:a5:e7:b2:66:1e:00:28: 24:ec:fa:f5:de:cf:b4:63:3d:2b:f4:55:79:88:bb: 95:2c:f8:88:31:b9:12:01:49:89:a1:0c:3b:0a:33: b7:fa:9e:bf:8e:c0:9e:4d:47:0b:ed:14:dd:6a:12: 7b:80:56:9b:4f:59:f5:96:0b:8d:ad:1d:48:eb:2b: fe:63:e8:5a:7e:d1:7a:85:78:5b:c0:85:85:c0:56: 3d:6f:ec:77:d0:0b:33:4e:57:da:41:21:d7:4d:75: c1:00:55:35:89:a1:7b:4b:e1:1f:a5:46:91:59:ce: 1e:f8:36:49:d9:e5:5c:28:11:4f:7b:0f:92:43:13: a1:f4:ce:3f:96:2f:5b:fe:0f:29:fe:f8:68:be:b2: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1A:61:F2:80:D4:ED:B1:98:51:5C:09:E1:39:18:2E:D9:FA:53:1F X509v3 Authority Key Identifier: keyid:21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.185.0/24 Signature Algorithm: sha256WithRSAEncryption 11:fa:f7:da:9a:ac:8c:07:af:90:79:9a:1e:fe:64:8e:df:bb: 8e:3c:d1:27:f7:06:22:39:44:02:2e:69:28:58:33:f6:77:cc: fe:09:b8:ed:9c:99:5b:ac:54:35:53:a3:cd:76:73:5c:45:2e: 41:0f:29:20:f9:d4:24:26:17:5e:81:2b:49:0e:c8:21:8a:60: ac:e0:23:0b:30:d1:f2:15:d1:a3:a0:da:f2:ef:c2:67:72:c9: 69:59:61:3c:b7:fc:c8:0b:94:51:30:53:44:1c:56:ca:ee:07: 38:28:a9:e8:50:fe:a9:8b:12:d1:67:ce:23:7d:f9:57:fb:29: 77:0a:87:87:f8:05:a7:9d:7e:34:8a:35:0c:6b:a4:63:8a:a4: c6:d2:a3:33:3a:5a:53:6d:45:88:34:bc:ba:f7:80:29:c7:db: bc:8f:34:81:a5:56:b5:ee:f2:c0:eb:4d:83:a0:32:e2:f6:2f: 73:35:c1:9a:4e:01:a2:bc:d0:d6:a8:35:57:36:3a:f6:a5:38: be:f2:98:c1:fb:6d:80:77:a6:87:59:6a:b6:28:1f:6e:28:ee: 02:b7:a8:89:88:f3:7b:ab:f7:36:3a:f3:d1:a9:71:c1:21:8a: a9:27:0b:44:76:4a:25:4d:ad:82:d7:d5:21:8e:f5:93:59:2f: be:84:16:01 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUQB3FOs6ACXuz7hmBlgwM1JFHekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNB MDk2QjJGRTAeFw0yNDA5MjYxMTU3MjJaFw0yNTA5MjUxMjAyMjJaMDMxMTAvBgNV BAMTKDRFMUE2MUYyODBENEVEQjE5ODUxNUMwOUUxMzkxODJFRDlGQTUzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6Dp01x46Dxftl+zXffz1s8cz cmafkWRH8w1Nn/jw64k61Gvl/hQkX9OTLewCtc+oR6wRlphaK6Fi6s6LK4dLV+3j OOPmlIHcUFrvwvyBuk48/DxueKVpLlshtWfjx3Guebju/vVY0tCD0+cMTXpJpeey Zh4AKCTs+vXez7RjPSv0VXmIu5Us+IgxuRIBSYmhDDsKM7f6nr+OwJ5NRwvtFN1q EnuAVptPWfWWC42tHUjrK/5j6Fp+0XqFeFvAhYXAVj1v7HfQCzNOV9pBIddNdcEA VTWJoXtL4R+lRpFZzh74NknZ5VwoEU97D5JDE6H0zj+WL1v+Dyn++Gi+sqyFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUThph8oDU7bGYUVwJ4TkYLtn6Ux8wHwYDVR0j BBgwFoAUIV/H5eIrjEaRDU18ohTJI6CWsv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2VhYzljMC1kZTFiLTQ2ZGQtYmYzNy0xOGZlM2E4ZDVmYmYvMC8yMTVGQzdFNUUy MkI4QzQ2OTEwRDREN0NBMjE0QzkyM0EwOTZCMkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNBMDk2 QjJGRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzZWFjOWMwLWRlMWItNDZkZC1i ZjM3LTE4ZmUzYThkNWZiZi8wLzMxMzAzMzJlMzEzNjMxMmUzMTM4MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMyMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnobkwDQYJ KoZIhvcNAQELBQADggEBABH699qarIwHr5B5mh7+ZI7fu4480Sf3BiI5RAIuaShY M/Z3zP4JuO2cmVusVDVTo812c1xFLkEPKSD51CQmF16BK0kOyCGKYKzgIwsw0fIV 0aOg2vLvwmdyyWlZYTy3/MgLlFEwU0QcVsruBzgoqehQ/qmLEtFnziN9+Vf7KXcK h4f4BaedfjSKNQxrpGOKpMbSozM6WlNtRYg0vLr3gCnH27yPNIGlVrXu8sDrTYOg MuL2L3M1wZpOAaK80NaoNVc2OvalOL7ymMH7bYB3podZarYoH24o7gK3qImI83ur 9zY689GpccEhiqknC0R2SiVNrYLX1SGO9ZNZL76EFgE= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:23 2024 by rpki-client on console-fra.rpki-client.org