$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa File: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (raw, json) Hash identifier: Vowfqb01B3RQZ9usgO233LKgbomEwoSZKEz3MjhkLRs= Subject key identifier: C8:69:88:F4:4E:5D:25:14:EF:A3:26:35:76:2F:D1:C0:A9:DD:17:D2 Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Certificate serial: 05AD09EBE409BC8BDD5201646DB3CF330B3CE932 Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa Signing time: Mon 15 Apr 2024 10:00:01 +0000 ROA not before: Mon 15 Apr 2024 09:55:01 +0000 ROA not after: Mon 14 Apr 2025 10:00:01 +0000 asID: 149383 IP address blocks: 103.181.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ad:09:eb:e4:09:bc:8b:dd:52:01:64:6d:b3:cf:33:0b:3c:e9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Validity Not Before: Apr 15 09:55:01 2024 GMT Not After : Apr 14 10:00:01 2025 GMT Subject: CN=C86988F44E5D2514EFA32635762FD1C0A9DD17D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:61:c0:48:80:9a:23:ad:05:f5:87:36:be:f8: 8d:e9:53:e6:6b:26:33:cd:be:b4:c9:b5:33:ef:ba: 78:07:c1:4d:ae:33:b9:3e:dc:15:65:ea:28:18:0a: d1:5b:76:69:6f:a2:5a:c7:70:b5:80:b3:da:38:96: a8:df:88:7b:1f:ee:ca:05:a3:35:a4:fd:21:3d:95: 11:f8:0b:a7:74:76:3e:f9:e0:54:ff:ec:f2:4e:37: 5a:93:82:7d:73:63:00:c7:8a:bc:e4:e6:63:aa:4b: a4:e4:5b:2a:69:ec:51:92:18:e3:40:c8:6d:13:10: 7a:11:2a:7f:eb:3c:05:98:61:ad:81:c2:70:ed:5c: 22:49:18:80:89:3f:1b:34:7a:6c:e5:6c:60:b3:29: 87:6c:41:cc:be:f6:55:9c:ec:a8:65:d7:4b:d3:d3: 73:f5:e5:ad:4c:04:96:7c:5d:ae:0a:75:61:91:72: e8:c4:79:fc:c0:97:b6:ea:c2:e3:1c:a8:8c:e4:6f: 3d:8f:0d:c4:56:65:1a:b0:b6:2d:3d:52:e3:3c:34: bb:3f:dd:37:65:92:60:3b:77:38:d2:18:bb:bf:60: b8:e2:1c:54:af:8e:93:25:50:0c:62:e9:07:87:ec: a6:17:84:8c:fe:fb:40:13:7c:a0:ad:8c:ba:4b:46: 6f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:69:88:F4:4E:5D:25:14:EF:A3:26:35:76:2F:D1:C0:A9:DD:17:D2 X509v3 Authority Key Identifier: keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.139.0/24 Signature Algorithm: sha256WithRSAEncryption 38:4b:a1:1e:25:63:58:d1:b4:70:fa:38:b7:3b:fa:5a:d9:8b: d5:77:46:7b:a6:c3:04:f7:c9:9e:ba:ff:64:5a:58:20:20:ad: 04:92:7a:4f:5c:2c:24:82:60:bf:b6:08:87:a2:c4:16:1f:e5: d8:74:e2:f4:cc:02:b0:03:d0:9e:b6:c3:58:df:47:24:89:4e: e6:0d:9f:aa:2a:a4:31:cc:97:ae:a3:e8:bb:7b:57:37:a3:39: 31:27:76:f0:23:89:e8:9d:08:cb:08:57:ac:ae:dc:e9:29:16: 4a:a0:60:01:3d:c6:b2:97:52:af:af:14:1e:ad:00:d2:e5:68: 11:c8:8f:9e:53:21:44:ab:25:1a:c8:b7:fe:56:c3:14:4c:15: 10:fe:3f:73:1b:73:f0:73:0f:64:74:1f:2b:b8:ce:f5:12:88: 6d:10:55:3e:59:57:c1:28:7b:c3:f4:c6:13:1b:1c:28:08:9e: 01:6e:24:e2:41:8a:df:ee:3a:78:3b:20:68:b9:b2:d9:e0:01: 27:76:93:11:0d:1b:e2:a4:77:a9:19:88:e3:ad:f9:5e:4a:97: f0:c0:35:f3:8a:27:21:59:4e:d8:12:c2:fa:aa:73:3a:e5:4c: f0:22:48:23:58:88:08:88:07:6e:1d:fc:c0:51:b8:89:a0:a8: f6:87:59:44 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBa0J6+QJvIvdUgFkbbPPMws86TIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkEx ODhCQUY3OTAeFw0yNDA0MTUwOTU1MDFaFw0yNTA0MTQxMDAwMDFaMDMxMTAvBgNV BAMTKEM4Njk4OEY0NEU1RDI1MTRFRkEzMjYzNTc2MkZEMUMwQTlERDE3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcYcBIgJojrQX1hza++I3pU+Zr JjPNvrTJtTPvungHwU2uM7k+3BVl6igYCtFbdmlvolrHcLWAs9o4lqjfiHsf7soF ozWk/SE9lRH4C6d0dj754FT/7PJON1qTgn1zYwDHirzk5mOqS6TkWypp7FGSGONA yG0TEHoRKn/rPAWYYa2BwnDtXCJJGICJPxs0emzlbGCzKYdsQcy+9lWc7Khl10vT 03P15a1MBJZ8Xa4KdWGRcujEefzAl7bqwuMcqIzkbz2PDcRWZRqwti09UuM8NLs/ 3TdlkmA7dzjSGLu/YLjiHFSvjpMlUAxi6QeH7KYXhIz++0ATfKCtjLpLRm/5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUyGmI9E5dJRTvoyY1di/RwKndF9IwHwYDVR0j BBgwFoAUOydiiP1wHj7El8K8wXgxuhiLr3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC8zQjI3NjI4OEZE NzAxRTNFQzQ5N0MyQkNDMTc4MzFCQTE4OEJBRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNzYyODhGRDcwMUUzRUM0OTdDMkJDQzE3ODMxQkExODhC QUY3OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3YTExMGU4LWI4YzItNDI3Ny1i ZWIzLTkyYWE1YjM2OTBmMC8wLzMxMzAzMzJlMzEzODMxMmUzMTMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM4MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntYswDQYJ KoZIhvcNAQELBQADggEBADhLoR4lY1jRtHD6OLc7+lrZi9V3RnumwwT3yZ66/2Ra WCAgrQSSek9cLCSCYL+2CIeixBYf5dh04vTMArAD0J62w1jfRySJTuYNn6oqpDHM l66j6Lt7VzejOTEndvAjieidCMsIV6yu3OkpFkqgYAE9xrKXUq+vFB6tANLlaBHI j55TIUSrJRrIt/5WwxRMFRD+P3Mbc/BzD2R0Hyu4zvUSiG0QVT5ZV8Eoe8P0xhMb HCgIngFuJOJBit/uOng7IGi5stngASd2kxENG+Kkd6kZiOOt+V5Kl/DANfOKJyFZ TtgSwvqqczrlTPAiSCNYiAiIB24d/MBRuImgqPaHWUQ= -----END CERTIFICATE-----Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org