$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa File: 3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa (raw, json) Hash identifier: N86IGSPUsntKoDQdwFXefUN8QF+2oSIWldr3Evp+mjA= Subject key identifier: 01:BE:5D:A6:65:0D:EC:B3:1C:7F:4D:90:2E:FB:8D:4F:BD:E4:F8:C4 Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246 Certificate serial: 5F6B4FBDDF468DC8C6848F60CA7C1589FD8C8350 Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa Signing time: Sat 27 Apr 2024 03:00:01 +0000 ROA not before: Sat 27 Apr 2024 02:55:01 +0000 ROA not after: Sat 26 Apr 2025 03:00:01 +0000 asID: 141127 IP address blocks: 103.158.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 09:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:6b:4f:bd:df:46:8d:c8:c6:84:8f:60:ca:7c:15:89:fd:8c:83:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246 Validity Not Before: Apr 27 02:55:01 2024 GMT Not After : Apr 26 03:00:01 2025 GMT Subject: CN=01BE5DA6650DECB31C7F4D902EFB8D4FBDE4F8C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:97:dd:7c:80:16:77:04:10:3a:d7:7a:73: 30:c0:84:02:4d:29:f0:71:93:f1:5e:eb:e7:ed:c2: 53:52:90:39:62:9a:12:30:1b:5e:77:84:b1:77:5a: 52:ec:f2:a1:58:76:9c:97:dc:cd:3f:06:8b:0a:b2: 63:b9:7c:bc:67:d3:9a:67:51:2a:f2:21:b1:0b:cb: 5b:6f:9f:0f:2d:1e:d5:cb:7c:aa:a2:ae:0b:05:85: b3:d3:4f:6f:ea:64:00:da:09:14:66:ad:11:7e:22: e5:ce:4b:1d:50:55:6a:c2:28:e2:0d:c9:41:23:d3: ae:d9:56:e0:b6:d5:97:78:37:3b:a0:26:87:c6:27: 28:1e:b1:ac:3b:1d:ed:84:50:27:0e:0a:9b:1c:41: 0f:fa:60:d0:4b:7b:a3:9c:3d:1a:3e:9c:29:c1:70: 11:6e:26:0b:17:8f:b7:3a:4f:ae:d3:96:13:e1:dc: 9a:31:ba:dd:90:d2:4a:f7:67:33:30:11:29:3f:2f: a0:9d:21:33:0e:52:5b:67:b9:3b:40:fd:b6:18:44: ed:90:89:15:c7:0b:94:cb:45:bb:f8:75:e6:f9:91: db:7a:06:f1:8e:3a:17:81:5b:b6:8b:3f:a7:48:84: 2f:44:5a:5b:95:9f:91:3b:b5:d6:fb:b6:79:92:ca: d4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BE:5D:A6:65:0D:EC:B3:1C:7F:4D:90:2E:FB:8D:4F:BD:E4:F8:C4 X509v3 Authority Key Identifier: keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.121.0/24 Signature Algorithm: sha256WithRSAEncryption 83:47:27:89:29:4b:47:c7:73:bf:dd:09:d1:ce:31:80:90:25: 44:94:08:9e:d0:d6:51:1b:82:cf:d3:51:14:fb:42:af:85:7a: 38:4a:26:ee:e4:72:08:9e:ac:7a:7e:30:0b:84:f5:ab:8b:e5: 01:e5:b3:36:bf:4a:aa:aa:c1:6b:5e:a7:80:e2:04:db:03:d3: e7:5d:a2:80:1f:10:c8:3a:ed:30:10:94:1c:0f:02:69:28:f1: 5f:7a:e2:bb:8f:77:4a:b7:18:67:b7:98:a7:a2:96:50:6f:c7: 3d:a9:92:cd:4f:4c:d4:d9:57:80:3c:14:e3:5d:e6:01:e7:c6: 87:0c:92:af:c6:cf:29:99:59:d8:9a:ad:9f:b2:4f:b8:02:34: 89:e7:c6:2e:ce:4f:7b:f6:94:77:ce:8a:43:00:3c:b3:b4:00: 74:dd:09:66:0f:b0:2a:d0:1b:35:8c:8d:2a:28:4a:7e:6f:74: c4:28:71:50:39:b2:47:f8:03:eb:8f:34:00:00:6a:58:a6:a5: e7:fe:8f:b1:5a:1a:a0:29:23:fb:db:de:b8:b1:a5:cf:27:7b: b5:60:59:12:a1:14:4a:21:cb:fd:12:a2:9d:3b:d5:2b:b6:b2: b8:ca:2e:6c:ce:d5:7a:d3:ea:10:bd:aa:1e:29:37:85:d7:7c: 82:06:c8:a4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUX2tPvd9GjcjGhI9gynwVif2Mg1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkz ODkxMDI0NjAeFw0yNDA0MjcwMjU1MDFaFw0yNTA0MjYwMzAwMDFaMDMxMTAvBgNV BAMTKDAxQkU1REE2NjUwREVDQjMxQzdGNEQ5MDJFRkI4RDRGQkRFNEY4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQ5fdfIAWdwQQOtd6czDAhAJN KfBxk/Fe6+ftwlNSkDlimhIwG153hLF3WlLs8qFYdpyX3M0/BosKsmO5fLxn05pn USryIbELy1tvnw8tHtXLfKqirgsFhbPTT2/qZADaCRRmrRF+IuXOSx1QVWrCKOIN yUEj067ZVuC21Zd4NzugJofGJygesaw7He2EUCcOCpscQQ/6YNBLe6OcPRo+nCnB cBFuJgsXj7c6T67TlhPh3Joxut2Q0kr3ZzMwESk/L6CdITMOUltnuTtA/bYYRO2Q iRXHC5TLRbv4deb5kdt6BvGOOheBW7aLP6dIhC9EWluVn5E7tdb7tnmSytQxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUAb5dpmUN7LMcf02QLvuNT73k+MQwHwYDVR0j BBgwFoAURBLDaYMuhs8lXHJV6x7KeTiRAkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMC80NDEyQzM2OTgz MkU4NkNGMjU1QzcyNTVFQjFFQ0E3OTM4OTEwMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkzODkx MDI0Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyYzUxMWJlLTY3YTItNDRjOS1i MTgyLWE5MTFiYTk1YmUwMC8wLzMxMzAzMzJlMzEzNTM4MmUzMTMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnnkwDQYJ KoZIhvcNAQELBQADggEBAINHJ4kpS0fHc7/dCdHOMYCQJUSUCJ7Q1lEbgs/TURT7 Qq+FejhKJu7kcgierHp+MAuE9auL5QHlsza/SqqqwWtep4DiBNsD0+ddooAfEMg6 7TAQlBwPAmko8V964ruPd0q3GGe3mKeillBvxz2pks1PTNTZV4A8FONd5gHnxocM kq/GzymZWdiarZ+yT7gCNInnxi7OT3v2lHfOikMAPLO0AHTdCWYPsCrQGzWMjSoo Sn5vdMQocVA5skf4A+uPNAAAalimpef+j7FaGqApI/vb3rixpc8ne7VgWRKhFEoh y/0Sop071Su2srjKLmzO1XrT6hC9qh4pN4XXfIIGyKQ= -----END CERTIFICATE-----Generated at Mon May 6 01:46:48 2024 by rpki-client on console-fra.rpki-client.org