$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/3130332e3136392e342e302f32332d3234203d3e203137393935.roa File: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: rrNVuw+gyG5fNfMRuErVCzVZRchl+1rKIOvAk+VOyqA= Subject key identifier: 20:C0:BF:ED:4D:3C:54:A3:FD:9E:97:D0:7A:ED:71:04:96:58:52:7C Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 58EA5F60FA508DF5C8537C49678CC2D0105B88CB Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/3130332e3136392e342e302f32332d3234203d3e203137393935.roa Signing time: Fri 01 Sep 2023 10:01:52 +0000 ROA not before: Fri 01 Sep 2023 09:56:52 +0000 ROA not after: Fri 30 Aug 2024 10:01:52 +0000 asID: 17995 IP address blocks: 103.169.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 18:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ea:5f:60:fa:50:8d:f5:c8:53:7c:49:67:8c:c2:d0:10:5b:88:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Sep 1 09:56:52 2023 GMT Not After : Aug 30 10:01:52 2024 GMT Subject: CN=20C0BFED4D3C54A3FD9E97D07AED71049658527C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:f3:ff:db:99:bc:51:27:62:18:26:e0:8a: f6:9d:72:a0:cc:cf:70:96:dd:60:64:c6:a1:d9:c6: c8:36:cd:a7:60:d3:c5:ef:03:f2:ab:c9:90:77:0a: fc:5d:23:90:d6:31:26:7a:5a:7d:a6:41:f1:09:29: 7c:ac:83:9b:ec:ff:d5:0a:39:ca:fb:50:a5:52:b8: 0a:95:ed:d9:d3:3c:60:b8:d7:d1:f4:7d:57:54:d0: d5:e0:38:1c:63:cd:ed:ec:07:a9:80:33:bb:f2:a5: 34:99:d8:a4:f4:be:07:94:0b:c8:42:a2:33:b5:86: 4e:75:b5:c4:af:96:fb:d4:02:00:2a:f1:54:61:c0: 0c:fa:09:fd:88:2f:ea:44:67:11:ad:74:b9:b3:3a: fe:24:a8:2e:a5:ff:75:26:86:3b:dd:a7:c2:d8:89: e8:ba:d7:e4:e5:3c:93:c4:cd:15:3a:0b:62:03:17: 7e:3e:7d:0c:30:3c:02:37:d6:5a:8d:40:22:6e:d8: 8b:63:a1:cf:3e:59:ea:19:10:4e:83:88:63:8f:14: f8:b3:c4:dc:60:9a:f0:40:2f:c1:34:71:f1:7f:ee: 3b:46:4c:7e:e1:a9:4e:40:4d:bb:60:5b:b4:d7:a6: bb:0a:ae:05:71:ee:81:7e:37:b3:b8:db:df:58:b6: 14:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C0:BF:ED:4D:3C:54:A3:FD:9E:97:D0:7A:ED:71:04:96:58:52:7C X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/3130332e3136392e342e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.4.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:fc:84:40:e7:fe:d4:ef:97:a5:9c:38:42:c2:40:9b:06:c3: 68:1d:1a:1e:9d:78:6c:e1:9d:2d:e9:65:1c:3a:fb:eb:ad:4b: 2c:86:cc:78:62:c3:c6:50:e3:72:be:da:5a:bc:4b:3d:b3:79: 34:b0:93:5c:aa:07:b0:49:98:fd:c4:54:33:1a:4e:b0:73:7b: 2a:24:85:24:3f:b4:1c:5c:53:e4:dd:17:5a:77:f6:c7:c5:6f: 4b:af:bf:88:f2:06:85:71:2d:ac:a7:13:55:e1:67:7d:c2:fc: b6:0c:e9:e1:68:49:41:4a:9f:e5:50:e5:5e:fd:52:2c:04:6c: 89:80:5b:e8:2f:26:8b:a1:b5:fe:bb:8b:48:c4:c5:16:ef:83: 51:a2:6a:ec:db:74:27:c0:cc:cd:52:0a:a4:5e:a3:54:9f:51: fe:e5:65:66:47:f8:e6:66:f8:8e:36:7e:1a:0e:6c:7d:1d:3f: 45:97:ee:df:03:4c:f2:de:5e:02:5f:c5:e4:21:ab:c2:34:f3: 4c:f7:3b:a4:4a:3e:8b:02:42:40:e5:8f:dd:49:49:88:91:7e: 33:58:c3:bd:f9:52:06:e8:91:48:0c:c8:be:40:29:5a:9b:37: 6f:36:f2:20:56:c7:8f:81:52:f2:54:8d:63:f9:0d:5f:20:6a: 55:0b:ab:0b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUWOpfYPpQjfXIU3xJZ4zC0BBbiMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yMzA5MDEwOTU2NTJaFw0yNDA4MzAxMDAxNTJaMDMxMTAvBgNV BAMTKDIwQzBCRkVENEQzQzU0QTNGRDlFOTdEMDdBRUQ3MTA0OTY1ODUyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbPP/25m8USdiGCbgivadcqDM z3CW3WBkxqHZxsg2zadg08XvA/KryZB3CvxdI5DWMSZ6Wn2mQfEJKXysg5vs/9UK Ocr7UKVSuAqV7dnTPGC419H0fVdU0NXgOBxjze3sB6mAM7vypTSZ2KT0vgeUC8hC ojO1hk51tcSvlvvUAgAq8VRhwAz6Cf2IL+pEZxGtdLmzOv4kqC6l/3Umhjvdp8LY iei61+TlPJPEzRU6C2IDF34+fQwwPAI31lqNQCJu2Itjoc8+WeoZEE6DiGOPFPiz xNxgmvBAL8E0cfF/7jtGTH7hqU5ATbtgW7TXprsKrgVx7oF+N7O4299YthTfAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUIMC/7U08VKP9npfQeu1xBJZYUnwwHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0MWU0YWM5LWMwNmItNDM0My04 NTI2LTNhMWYxYjFiNWQ4Mi8wLzMxMzAzMzJlMzEzNjM5MmUzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzczOTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqQQwDQYJKoZIhvcN AQELBQADggEBAA78hEDn/tTvl6WcOELCQJsGw2gdGh6deGzhnS3pZRw6++utSyyG zHhiw8ZQ43K+2lq8Sz2zeTSwk1yqB7BJmP3EVDMaTrBzeyokhSQ/tBxcU+TdF1p3 9sfFb0uvv4jyBoVxLaynE1XhZ33C/LYM6eFoSUFKn+VQ5V79UiwEbImAW+gvJouh tf67i0jExRbvg1GiauzbdCfAzM1SCqReo1SfUf7lZWZH+OZm+I42fhoObH0dP0WX 7t8DTPLeXgJfxeQhq8I080z3O6RKPosCQkDlj91JSYiRfjNYw735UgbokUgMyL5A KVqbN2828iBWx4+BUvJUjWP5DV8galULqws= -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:39 2024 by rpki-client on console-ams.rpki-client.org