$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa File: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (raw, json) Hash identifier: CAQbaG0cgnjxCEY2659t5ukDr0/Uv4PTfKSEFPIWLSk= Subject key identifier: 39:C6:4B:5D:28:35:5B:28:E7:FB:32:64:08:F0:E7:1D:0F:CD:35:A9 Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 4BBDEFB24D16F89ED5D0833725457AEDA3F00160 Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa Signing time: Thu 10 Aug 2023 10:00:01 +0000 ROA not before: Thu 10 Aug 2023 09:55:01 +0000 ROA not after: Thu 08 Aug 2024 10:00:01 +0000 asID: 140474 IP address blocks: 103.153.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 12:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bd:ef:b2:4d:16:f8:9e:d5:d0:83:37:25:45:7a:ed:a3:f0:01:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Aug 10 09:55:01 2023 GMT Not After : Aug 8 10:00:01 2024 GMT Subject: CN=39C64B5D28355B28E7FB326408F0E71D0FCD35A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e6:77:d3:92:b8:8e:f6:96:2f:32:3a:ee:95: 03:af:25:8b:26:04:97:26:50:02:d6:fc:60:ec:c6: d8:d1:8f:ab:43:ed:e4:ea:39:bd:c2:0e:86:b0:36: a8:56:68:56:18:50:f3:c0:d5:45:93:d2:da:c5:b0: 94:e0:e3:8b:9b:e9:a5:b1:79:3e:a3:a2:df:af:2a: c7:ce:1f:b1:4e:55:b7:16:e8:2f:ce:fa:b7:e7:f5: 4a:ec:c1:8a:8f:b1:65:ab:7b:93:df:45:1b:ba:34: 83:a6:82:f7:dc:99:c4:20:64:d4:2c:e4:a9:fa:a8: 60:19:d2:dd:31:fb:38:bf:cb:5e:aa:ac:0a:7b:1d: 4f:71:51:4c:cc:37:cc:17:3c:90:2b:b1:63:c9:3b: 03:85:ba:1e:8f:80:92:1f:42:73:86:df:29:d9:2c: 9a:17:45:a2:bb:5a:9a:2c:5e:b1:76:00:53:95:1d: c8:af:50:cf:3f:fb:d6:cd:b2:bc:8b:f3:0d:1f:20: 37:7e:df:13:3e:aa:6f:cb:ce:ff:e4:5e:20:82:28: e8:55:08:af:20:b3:78:71:84:93:14:87:dc:82:9f: 5a:b7:34:3d:13:e6:43:d4:bd:67:cb:a0:bb:bd:89: e5:84:ec:83:9b:fd:79:f6:5b:16:8f:a3:3c:16:0e: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C6:4B:5D:28:35:5B:28:E7:FB:32:64:08:F0:E7:1D:0F:CD:35:A9 X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.244.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:36:4b:cf:31:d6:2d:6b:6e:72:19:1b:75:7c:13:92:d9:3a: 44:2d:e3:64:ac:c2:c4:a1:c2:d2:3b:00:3e:b3:d1:cb:ab:de: fa:16:68:8d:6f:3b:16:3c:6f:3f:73:f7:09:70:9b:35:8e:93: f4:48:d4:54:ac:21:fe:46:17:80:ee:d2:79:79:f3:ef:a9:64: ff:6e:5d:98:e5:94:80:e5:11:05:99:78:37:e1:52:51:d8:1c: 81:5d:a9:3c:50:d3:ee:d0:78:87:11:66:12:b1:37:b5:ef:85: 97:c2:bb:ee:73:f0:01:16:4d:f4:77:ad:b9:dc:6f:9d:33:77: 3b:1f:f2:2e:a1:5e:13:d2:30:bc:d6:26:35:05:18:a7:63:40: 85:e2:46:1c:15:e2:5a:fd:4c:83:ed:47:62:54:33:17:d6:91: eb:1d:e8:8d:4b:6c:ee:93:10:2f:83:d7:7d:5b:bb:8e:7a:20: 17:67:3f:16:7b:a0:55:72:64:46:71:32:44:35:45:9e:b8:f8: a0:79:1f:ab:38:95:f3:1c:2b:65:3f:62:16:57:10:e3:bb:4b: 95:b5:c3:c1:1a:67:4c:d5:cd:fa:f5:92:a9:70:4b:f1:c0:79: 61:b5:c9:48:68:f6:34:4f:2e:84:9f:a4:c9:58:e8:e2:fd:8b: 91:c4:af:9d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUS73vsk0W+J7V0IM3JUV67aPwAWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yMzA4MTAwOTU1MDFaFw0yNDA4MDgxMDAwMDFaMDMxMTAvBgNV BAMTKDM5QzY0QjVEMjgzNTVCMjhFN0ZCMzI2NDA4RjBFNzFEMEZDRDM1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5nfTkriO9pYvMjrulQOvJYsm BJcmUALW/GDsxtjRj6tD7eTqOb3CDoawNqhWaFYYUPPA1UWT0trFsJTg44ub6aWx eT6jot+vKsfOH7FOVbcW6C/O+rfn9UrswYqPsWWre5PfRRu6NIOmgvfcmcQgZNQs 5Kn6qGAZ0t0x+zi/y16qrAp7HU9xUUzMN8wXPJArsWPJOwOFuh6PgJIfQnOG3ynZ LJoXRaK7WposXrF2AFOVHcivUM8/+9bNsryL8w0fIDd+3xM+qm/Lzv/kXiCCKOhV CK8gs3hxhJMUh9yCn1q3ND0T5kPUvWfLoLu9ieWE7IOb/Xn2WxaPozwWDlA5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUOcZLXSg1Wyjn+zJkCPDnHQ/NNakwHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTI2YWEzLTMwNzMtNDI3Ni1i ZDc0LWFkODZmMDk5YzI1My8wLzMxMzAzMzJlMzEzNTMzMmUzMjM0MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM3MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmfQwDQYJ KoZIhvcNAQELBQADggEBABw2S88x1i1rbnIZG3V8E5LZOkQt42SswsShwtI7AD6z 0cur3voWaI1vOxY8bz9z9wlwmzWOk/RI1FSsIf5GF4Du0nl58++pZP9uXZjllIDl EQWZeDfhUlHYHIFdqTxQ0+7QeIcRZhKxN7XvhZfCu+5z8AEWTfR3rbncb50zdzsf 8i6hXhPSMLzWJjUFGKdjQIXiRhwV4lr9TIPtR2JUMxfWkesd6I1LbO6TEC+D131b u456IBdnPxZ7oFVyZEZxMkQ1RZ64+KB5H6s4lfMcK2U/YhZXEOO7S5W1w8EaZ0zV zfr1kqlwS/HAeWG1yUho9jRPLoSfpMlY6OL9i5HEr50= -----END CERTIFICATE-----Generated at Fri Apr 19 07:38:31 2024 by rpki-client on console-ams.rpki-client.org