$ rpki-client -vvf repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/3130332e3139352e39302e302f32332d3234203d3e203538343034.roa File: 3130332e3139352e39302e302f32332d3234203d3e203538343034.roa (raw, json) Hash identifier: IDvrgAk2h65ZJEo1qEYbEs8Gg0z11qH57HLaIFgcM0Q= Subject key identifier: 17:C5:A9:E3:3C:10:6F:41:6B:EB:42:61:2F:8B:E5:04:47:E1:3F:5E Certificate issuer: /CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB Certificate serial: 2D98D5D5B17B3164FD8581355AA1D32811BD7A45 Authority key identifier: 52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/3130332e3139352e39302e302f32332d3234203d3e203538343034.roa Signing time: Wed 21 Aug 2024 05:01:22 +0000 ROA not before: Wed 21 Aug 2024 04:56:22 +0000 ROA not after: Wed 20 Aug 2025 05:01:22 +0000 asID: 58404 IP address blocks: 103.195.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:98:d5:d5:b1:7b:31:64:fd:85:81:35:5a:a1:d3:28:11:bd:7a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB Validity Not Before: Aug 21 04:56:22 2024 GMT Not After : Aug 20 05:01:22 2025 GMT Subject: CN=17C5A9E33C106F416BEB42612F8BE50447E13F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:57:69:5b:76:b6:67:1b:6d:18:e2:7d:c2: f4:d1:b5:b4:ee:32:5c:47:d6:0e:07:36:e9:b3:43: bd:7f:e5:ab:51:61:ef:cf:18:48:37:5d:72:8c:3b: e1:ea:11:48:5b:ef:77:69:d5:7f:58:26:00:ea:9f: da:b2:19:e7:8f:64:53:9d:ce:d1:fe:63:2f:64:44: 8c:4b:8f:ef:49:41:d6:47:4b:f1:22:f8:b8:73:73: 3b:07:8c:9e:c5:df:fa:84:b5:88:a0:52:83:fd:bf: 29:93:ac:7f:db:7f:6f:cd:0c:bd:cf:a7:39:15:fb: ff:c0:66:cf:5d:33:5c:81:44:ac:35:e1:59:3c:2c: 5b:1d:0b:cd:3a:73:46:e7:e8:08:aa:50:10:cf:e3: 6b:8b:d4:5e:83:15:9f:54:4a:fd:b6:35:3e:b0:e3: 6c:fd:a7:84:ef:25:45:74:02:63:88:f0:8f:ec:0b: 53:81:aa:17:9e:fe:ea:86:9e:a7:bf:5d:e6:8d:ad: 63:e9:1e:1f:dc:7e:e6:1b:d1:32:3f:6c:6a:41:e6: 2f:36:09:a1:92:17:1c:8c:9b:4a:ae:de:9c:e8:e8: 49:73:a2:1f:52:89:b9:53:68:61:1f:67:ac:8a:e0: 49:ea:f0:b8:e3:d6:ed:71:74:90:45:af:d4:f8:49: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C5:A9:E3:3C:10:6F:41:6B:EB:42:61:2F:8B:E5:04:47:E1:3F:5E X509v3 Authority Key Identifier: keyid:52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/3130332e3139352e39302e302f32332d3234203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.195.90.0/23 Signature Algorithm: sha256WithRSAEncryption 53:a0:f0:29:9e:99:da:7a:d5:6a:e9:cd:63:74:fa:fd:7f:45: a6:ea:4d:a2:7f:3d:1a:99:02:41:87:ff:aa:5f:83:98:4d:f1: ef:21:b8:61:27:01:83:8e:f2:2c:8d:26:ac:a0:5e:5e:58:24: 94:c7:50:15:ed:f8:20:98:a4:98:dc:eb:ed:57:9b:5f:6d:8b: c1:b9:47:79:50:7d:b8:86:38:ea:d0:c8:77:ac:d1:64:80:85: ab:48:c0:78:9d:40:42:a7:0d:47:4f:32:82:58:6d:82:1a:ea: 0b:04:05:1a:0e:b7:27:74:5f:18:a6:62:de:26:9d:34:38:1f: ec:be:95:4e:fc:88:87:ad:cf:1a:c8:6a:2c:d8:8a:d3:39:95: 7a:52:09:94:15:ab:e0:8e:c5:44:4f:8a:70:0f:8d:d6:b7:90: b8:b2:87:40:ca:c1:17:6d:ce:45:7d:5f:67:b3:4d:7e:12:a8: f9:a6:23:ef:55:bb:a0:5a:3d:b2:a5:c2:95:dd:fd:4a:37:9b: f1:a2:9e:8f:76:24:d1:49:ef:cb:30:99:97:6d:f1:61:64:40: bd:50:58:75:c8:6d:38:4e:aa:c0:68:1b:8d:25:f6:f6:e4:df: 26:e0:d8:4b:03:88:04:bb:61:0e:cd:0d:c7:03:1f:8e:26:1d: 93:aa:11:6d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULZjV1bF7MWT9hYE1WqHTKBG9ekUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4QTc5OUU5NEJENTA1MkY2RjU4QUNGREQ5RjRERUQz QTBFRDVCQjAeFw0yNDA4MjEwNDU2MjJaFw0yNTA4MjAwNTAxMjJaMDMxMTAvBgNV BAMTKDE3QzVBOUUzM0MxMDZGNDE2QkVCNDI2MTJGOEJFNTA0NDdFMTNGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFldpW3a2ZxttGOJ9wvTRtbTu MlxH1g4HNumzQ71/5atRYe/PGEg3XXKMO+HqEUhb73dp1X9YJgDqn9qyGeePZFOd ztH+Yy9kRIxLj+9JQdZHS/Ei+LhzczsHjJ7F3/qEtYigUoP9vymTrH/bf2/NDL3P pzkV+//AZs9dM1yBRKw14Vk8LFsdC806c0bn6AiqUBDP42uL1F6DFZ9USv22NT6w 42z9p4TvJUV0AmOI8I/sC1OBqhee/uqGnqe/XeaNrWPpHh/cfuYb0TI/bGpB5i82 CaGSFxyMm0qu3pzo6Elzoh9SiblTaGEfZ6yK4Enq8Ljj1u1xdJBFr9T4STgPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUF8Wp4zwQb0Fr60JhL4vlBEfhP14wHwYDVR0j BBgwFoAUUop5npS9UFL29YrP3Z9N7ToO1bswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OThmMTljMy1lNGUxLTQxYTEtYWFmMC1kNjEzYWNhNDkzMGMvMC81MjhBNzk5RTk0 QkQ1MDUyRjZGNThBQ0ZERDlGNERFRDNBMEVENUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTI4QTc5OUU5NEJENTA1MkY2RjU4QUNGREQ5RjRERUQzQTBF RDVCQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5OGYxOWMzLWU0ZTEtNDFhMS1h YWYwLWQ2MTNhY2E0OTMwYy8wLzMxMzAzMzJlMzEzOTM1MmUzOTMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzUzODM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWfDWjANBgkqhkiG 9w0BAQsFAAOCAQEAU6DwKZ6Z2nrVaunNY3T6/X9FpupNon89GpkCQYf/ql+DmE3x 7yG4YScBg47yLI0mrKBeXlgklMdQFe34IJikmNzr7VebX22LwblHeVB9uIY46tDI d6zRZICFq0jAeJ1AQqcNR08yglhtghrqCwQFGg63J3RfGKZi3iadNDgf7L6VTvyI h63PGshqLNiK0zmVelIJlBWr4I7FRE+KcA+N1reQuLKHQMrBF23ORX1fZ7NNfhKo +aYj71W7oFo9sqXCld39Sjeb8aKej3Yk0UnvyzCZl23xYWRAvVBYdchtOE6qwGgb jSX29uTfJuDYSwOIBLthDs0NxwMfjiYdk6oRbQ== -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org