$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa File: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (raw, json) Hash identifier: JeyEC5GT44T1l/mY8nDqe/JsiSipfq9Qfm+r93xH6/g= Subject key identifier: CA:D1:6D:F5:28:D4:4B:E9:30:BB:3C:9A:AC:A2:E1:F5:69:3C:1E:60 Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Certificate serial: 202C7AE666BE217F3FB8EDD96D3B17E8BEBB20A8 Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa Signing time: Mon 13 May 2024 09:00:00 +0000 ROA not before: Mon 13 May 2024 08:55:00 +0000 ROA not after: Mon 12 May 2025 09:00:00 +0000 asID: 147144 IP address blocks: 103.175.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2c:7a:e6:66:be:21:7f:3f:b8:ed:d9:6d:3b:17:e8:be:bb:20:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Validity Not Before: May 13 08:55:00 2024 GMT Not After : May 12 09:00:00 2025 GMT Subject: CN=CAD16DF528D44BE930BB3C9AACA2E1F5693C1E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f3:c1:cc:8b:6d:39:99:ca:12:7a:ae:33:ba: eb:4e:2f:ad:f6:a5:d3:07:03:b7:62:be:89:b8:57: d1:8b:d2:c3:85:90:ea:d3:54:ab:7b:f9:8b:41:64: b1:ac:0a:d4:6f:f1:e0:c4:e1:11:4c:5d:5e:6b:f3: b6:13:12:26:a6:2d:3a:a5:22:a7:c4:d5:82:83:00: 9a:8f:0b:89:92:f8:30:43:bc:34:8a:48:55:7d:5c: f9:19:fc:9c:ec:8f:7f:3f:5d:b8:87:7b:83:c0:fd: 14:98:44:d0:4d:9b:bf:36:49:3a:00:46:a4:df:71: f6:02:88:82:2e:9f:ff:ce:35:9a:a4:dd:25:22:b8: e3:84:71:e3:6c:3a:dd:1c:aa:6f:53:0c:7f:ae:6b: 54:a0:7a:73:01:cf:53:1a:90:82:e2:c4:69:52:f5: 80:b0:04:23:41:cc:45:75:cd:39:b2:ae:a3:9b:2c: 95:26:1a:fe:a7:18:2c:e9:6e:42:2b:93:57:8c:bc: 4e:4a:88:d1:bf:cc:71:96:d4:33:66:2b:ae:8d:43: 83:f1:34:02:71:38:07:f6:01:70:a6:30:3f:74:fd: db:29:a4:f3:a6:f3:dd:4c:e4:f7:dd:43:13:3f:7d: 26:36:6a:cc:9b:7d:de:36:2e:4b:9f:1a:14:d0:e6: 96:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D1:6D:F5:28:D4:4B:E9:30:BB:3C:9A:AC:A2:E1:F5:69:3C:1E:60 X509v3 Authority Key Identifier: keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.87.0/24 Signature Algorithm: sha256WithRSAEncryption 77:0d:60:ba:53:f7:c6:14:7c:77:38:48:6d:45:42:36:3b:2c: 1e:ad:68:7d:4e:de:1f:59:5b:3a:13:da:31:41:2d:da:cb:cb: fd:84:bf:d9:7c:e2:9b:19:52:7f:91:f6:2b:eb:17:2f:cb:4c: 23:64:ca:55:5e:ae:60:6c:5e:bd:5a:5d:b7:0b:7c:81:4e:76: ee:11:9b:86:2f:3f:83:5b:87:1a:16:c5:14:7d:f4:4c:65:ba: 18:02:be:d5:da:78:58:f6:84:1a:5c:cc:82:f3:64:58:02:b7: a9:ae:0f:ae:87:38:ee:01:ca:3a:49:22:e2:f1:3e:ec:16:26: 6f:64:ff:5a:d3:a6:99:b9:d9:8d:cb:c2:c6:ab:bc:80:cb:a5: 33:6a:d4:16:b4:65:7d:5b:50:0e:af:04:8d:e0:43:de:50:ff: b5:c6:42:bb:07:53:6a:a9:a8:9f:fb:36:ad:0a:de:e0:53:89: 76:4f:8e:9d:a9:35:c1:5d:68:bd:22:7b:0d:45:65:6b:02:05: 9e:ae:75:39:4a:e6:b5:55:21:e8:ec:d3:d6:14:fe:23:40:5e: 86:8a:6d:eb:50:df:de:b0:e7:24:e1:c6:ca:9a:13:0d:1d:cf: fa:75:c5:0d:63:60:9d:b1:51:a8:a0:33:45:b1:d5:d9:d1:b5: 97:c6:c0:1d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUICx65ma+IX8/uO3ZbTsX6L67IKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4 MTkxMURCQjAeFw0yNDA1MTMwODU1MDBaFw0yNTA1MTIwOTAwMDBaMDMxMTAvBgNV BAMTKENBRDE2REY1MjhENDRCRTkzMEJCM0M5QUFDQTJFMUY1NjkzQzFFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS88HMi205mcoSeq4zuutOL632 pdMHA7divom4V9GL0sOFkOrTVKt7+YtBZLGsCtRv8eDE4RFMXV5r87YTEiamLTql IqfE1YKDAJqPC4mS+DBDvDSKSFV9XPkZ/Jzsj38/XbiHe4PA/RSYRNBNm782SToA RqTfcfYCiIIun//ONZqk3SUiuOOEceNsOt0cqm9TDH+ua1SgenMBz1MakILixGlS 9YCwBCNBzEV1zTmyrqObLJUmGv6nGCzpbkIrk1eMvE5KiNG/zHGW1DNmK66NQ4Px NAJxOAf2AXCmMD90/dsppPOm891M5PfdQxM/fSY2asybfd42LkufGhTQ5pbhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUytFt9SjUS+kwuzyarKLh9Wk8HmAwHwYDVR0j BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx MURCQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1Yjg0NTlhLWUzNTEtNGM4ZC1i YzI5LTVmZDA4YzRjNTk0MS8wLzMxMzAzMzJlMzEzNzM1MmUzODM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ69XMA0GCSqG SIb3DQEBCwUAA4IBAQB3DWC6U/fGFHx3OEhtRUI2OywerWh9Tt4fWVs6E9oxQS3a y8v9hL/ZfOKbGVJ/kfYr6xcvy0wjZMpVXq5gbF69Wl23C3yBTnbuEZuGLz+DW4ca FsUUffRMZboYAr7V2nhY9oQaXMyC82RYAreprg+uhzjuAco6SSLi8T7sFiZvZP9a 06aZudmNy8LGq7yAy6UzatQWtGV9W1AOrwSN4EPeUP+1xkK7B1Nqqaif+zatCt7g U4l2T46dqTXBXWi9InsNRWVrAgWernU5Sua1VSHo7NPWFP4jQF6Gim3rUN/esOck 4cbKmhMNHc/6dcUNY2CdsVGooDNFsdXZ0bWXxsAd -----END CERTIFICATE-----Generated at Mon Nov 25 04:52:36 2024 by rpki-client on console-fra.rpki-client.org