$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa File: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: vQHXwA344Pp/iKj5lZNlXEhLUE22nOyVTmzGR/5sqgc= Subject key identifier: C6:33:E8:AB:23:C6:F5:46:A2:B2:09:AE:D2:84:D4:12:C5:FF:03:45 Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 02D5FB3A51F70A901C830F590316E6179E1A0D2E Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa Signing time: Fri 01 Sep 2023 10:01:51 +0000 ROA not before: Fri 01 Sep 2023 09:56:51 +0000 ROA not after: Fri 30 Aug 2024 10:01:51 +0000 asID: 17995 IP address blocks: 103.164.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 01:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d5:fb:3a:51:f7:0a:90:1c:83:0f:59:03:16:e6:17:9e:1a:0d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Sep 1 09:56:51 2023 GMT Not After : Aug 30 10:01:51 2024 GMT Subject: CN=C633E8AB23C6F546A2B209AED284D412C5FF0345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:a4:50:05:d3:8f:22:cb:2e:02:0d:dc:fd: d5:47:23:41:6a:a1:b6:18:16:58:59:05:a9:0a:05: 3e:85:63:1b:04:e3:bb:fa:f1:94:f3:6e:ae:6b:09: ef:cf:64:d9:54:86:66:98:4f:6a:1d:d0:20:fd:1f: 9f:c9:df:02:13:6c:f7:ea:d3:88:19:bb:92:5f:85: 04:e1:56:d3:34:76:b0:b0:72:64:72:0f:b7:fa:5d: ab:0b:70:8b:71:01:d9:5b:a4:e3:af:39:f1:ed:1a: cf:7a:16:fc:aa:e4:30:b1:14:31:95:65:cf:d2:98: 19:3e:fd:37:c6:34:d0:69:a2:cd:dc:84:d1:60:c1: 6b:66:62:b8:9a:5d:f0:2f:fb:6a:5e:e5:61:24:26: b2:b9:ad:6a:6f:e1:8a:e3:e5:d0:eb:5a:1b:de:37: 6f:9f:15:30:ac:46:0f:0f:0a:88:0b:42:bf:73:8a: 6d:02:30:8c:53:e0:2d:ec:5e:86:1c:64:e0:d3:3c: e1:ea:a8:7c:56:2b:dd:78:39:c3:42:30:d9:08:23: 01:75:82:32:54:5c:5c:02:6e:28:20:54:b5:40:23: 2e:cd:e3:46:27:da:21:e6:a4:14:1e:9a:3d:07:92: ce:6a:4d:3a:6c:e1:c5:f3:e5:f9:81:b5:78:f8:b4: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:33:E8:AB:23:C6:F5:46:A2:B2:09:AE:D2:84:D4:12:C5:FF:03:45 X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.248.0/23 Signature Algorithm: sha256WithRSAEncryption 64:4c:2b:d9:4b:e3:40:be:29:9d:95:b2:9a:88:16:33:e5:fc: 94:8a:2f:d2:4a:fb:13:e4:7a:77:27:8a:b9:24:88:bb:1d:e8: dc:3e:66:1f:ea:9f:4a:49:b2:69:e5:59:a2:cc:16:72:26:65: b9:d8:91:f2:2f:3c:24:4a:c0:e4:cc:1f:b0:f4:9f:d1:ca:ef: 80:f2:11:20:79:06:b1:ca:32:a1:4f:41:63:43:ff:c1:41:b3: 2f:53:b9:8d:55:63:1b:c6:91:5b:ee:59:d5:35:25:46:c5:d7: 58:00:56:f7:e8:ef:20:a7:a3:84:d3:08:61:f0:57:1b:2e:a2: aa:77:84:7f:24:9a:04:50:42:53:7a:e0:43:31:75:9e:d1:78: dc:1d:6a:ca:e1:65:72:da:60:0d:33:32:c0:1e:0b:a3:d1:da: ba:aa:4a:d5:1b:bc:ea:f9:03:ed:dd:3b:07:d6:a0:f3:7f:55: da:2a:d3:79:6a:6d:46:6b:7e:56:90:26:4b:27:9b:da:81:c7: 6b:26:3d:86:9e:35:c6:95:a0:06:56:e4:9e:be:f0:b9:78:ea: b0:d6:7b:06:8b:e9:82:f8:04:50:5a:fc:13:4f:5d:8c:ca:48: 03:52:7d:18:5c:7e:9d:67:cf:0f:a3:74:dc:7b:0d:b1:fe:a2: 9c:f3:67:12 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAtX7OlH3CpAcgw9ZAxbmF54aDS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yMzA5MDEwOTU2NTFaFw0yNDA4MzAxMDAxNTFaMDMxMTAvBgNV BAMTKEM2MzNFOEFCMjNDNkY1NDZBMkIyMDlBRUQyODRENDEyQzVGRjAzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VqRQBdOPIssuAg3c/dVHI0Fq obYYFlhZBakKBT6FYxsE47v68ZTzbq5rCe/PZNlUhmaYT2od0CD9H5/J3wITbPfq 04gZu5JfhQThVtM0drCwcmRyD7f6XasLcItxAdlbpOOvOfHtGs96Fvyq5DCxFDGV Zc/SmBk+/TfGNNBpos3chNFgwWtmYriaXfAv+2pe5WEkJrK5rWpv4Yrj5dDrWhve N2+fFTCsRg8PCogLQr9zim0CMIxT4C3sXoYcZODTPOHqqHxWK914OcNCMNkIIwF1 gjJUXFwCbiggVLVAIy7N40Yn2iHmpBQemj0Hks5qTTps4cXz5fmBtXj4tNmhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUxjPoqyPG9Uaisgmu0oTUEsX/A0UwHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwNDFiNDhkLTczYzQtNGNkZC1i Y2FjLWE1OTY5OWJjYmJjMS8wLzMxMzAzMzJlMzEzNjM0MmUzMjM0MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6T4MA0GCSqG SIb3DQEBCwUAA4IBAQBkTCvZS+NAvimdlbKaiBYz5fyUii/SSvsT5Hp3J4q5JIi7 HejcPmYf6p9KSbJp5VmizBZyJmW52JHyLzwkSsDkzB+w9J/Ryu+A8hEgeQaxyjKh T0FjQ//BQbMvU7mNVWMbxpFb7lnVNSVGxddYAFb36O8gp6OE0whh8FcbLqKqd4R/ JJoEUEJTeuBDMXWe0XjcHWrK4WVy2mANMzLAHguj0dq6qkrVG7zq+QPt3TsH1qDz f1XaKtN5am1Ga35WkCZLJ5vagcdrJj2GnjXGlaAGVuSevvC5eOqw1nsGi+mC+ARQ WvwTT12MykgDUn0YXH6dZ88Po3Tcew2x/qKc82cS -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:38 2024 by rpki-client on console-ams.rpki-client.org