$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa File: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (raw, json) Hash identifier: nLaASs9tLnFtsMmTK6mYdWM74LCdJ+9HtBpIw1GZ1DI= Subject key identifier: 2E:CF:B6:7D:5C:DB:D1:7C:91:EB:75:A1:13:2A:FD:4C:D9:68:55:F2 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 5ACA1822D1B91F5CD77F34CC45CC60C9CBA21E56 Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa Signing time: Sat 28 Oct 2023 20:22:48 +0000 ROA not before: Sat 28 Oct 2023 20:17:48 +0000 ROA not after: Sat 26 Oct 2024 20:22:48 +0000 asID: 139438 IP address blocks: 103.145.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 10:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ca:18:22:d1:b9:1f:5c:d7:7f:34:cc:45:cc:60:c9:cb:a2:1e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Oct 28 20:17:48 2023 GMT Not After : Oct 26 20:22:48 2024 GMT Subject: CN=2ECFB67D5CDBD17C91EB75A1132AFD4CD96855F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9b:78:a9:d0:51:aa:4d:89:1e:c6:41:fd:c1: 33:fb:64:9e:f5:d5:7b:37:ed:ad:94:22:f2:fa:5d: 01:4d:83:42:45:b9:30:7d:da:5a:95:f0:1c:6e:52: e7:30:f9:ad:87:18:15:5f:d9:92:30:f6:a9:f1:72: dd:55:c7:36:03:5f:82:e3:3e:31:67:7d:82:1a:7e: 8d:79:78:61:41:58:3c:cf:d8:f6:94:ee:51:a8:51: 64:34:c7:93:6d:50:b1:cb:4a:ea:37:81:6d:28:78: 8b:4b:f2:7a:f8:67:c1:57:01:fa:ec:82:45:71:c7: 30:8e:a4:25:08:26:25:1b:ec:e5:1b:09:c8:be:12: de:fd:88:2c:42:fc:88:b1:53:3d:d5:3b:63:f6:e7: e3:4c:41:15:a2:4a:a6:90:54:0d:f6:46:14:ea:1c: e3:46:a3:e9:1a:8a:67:12:62:bb:fd:80:43:00:6e: d2:7f:16:e9:45:80:0b:53:9b:5e:45:ee:62:39:00: db:93:2d:29:81:c2:8e:02:42:45:a7:03:1d:e9:40: ac:64:e7:7d:35:68:05:24:e8:9e:f2:87:48:0e:11: 9a:a3:a2:ff:05:6e:6c:2c:6d:42:0a:4f:e7:8e:d1: 23:bc:50:d3:8e:ee:a1:d0:bf:06:ed:d7:fd:1a:d5: f1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CF:B6:7D:5C:DB:D1:7C:91:EB:75:A1:13:2A:FD:4C:D9:68:55:F2 X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.14.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:a3:49:47:c8:60:26:f8:f4:e4:ca:f7:9f:e1:ce:0a:48:cc: 10:6f:b7:85:69:fc:c7:99:9e:b6:02:74:6e:a2:3e:33:02:84: 86:1b:33:29:9e:e5:47:b4:59:a6:26:d4:e1:d9:88:08:7f:32: 57:76:d9:00:d0:2a:7b:91:38:88:39:c6:7a:50:66:e4:7d:27: 8e:cf:a2:e5:31:43:db:d8:fd:3c:e3:c7:0c:a6:a0:43:35:07: 42:81:f1:55:67:2e:5e:43:e9:b0:63:81:3b:e5:68:ba:9d:f3: 6d:1c:2f:27:a8:b4:ab:f5:1c:01:6d:85:77:c6:cd:60:91:6e: fd:cc:8a:97:ae:63:4d:ed:4b:d0:cf:dc:a7:f5:e2:25:27:89: f0:62:86:1c:01:1b:46:06:d7:17:7d:4a:54:99:dd:6c:7d:85: 3b:c6:dd:83:51:d9:3d:7f:2d:17:6a:49:69:ae:e6:fe:39:e7: ff:a3:0a:70:04:25:1e:f3:d6:2f:16:5a:7b:7d:88:0c:bd:aa: 4c:69:dc:09:b3:bb:b6:6c:1d:37:c8:c9:13:a6:78:98:45:14: 5e:26:89:cf:64:a8:e2:5f:1b:09:63:7e:73:5c:13:f1:de:e2: 0c:1c:a7:60:1b:ef:48:12:f1:30:44:17:db:78:5a:fe:de:54: 5e:3d:e5:42 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWsoYItG5H1zXfzTMRcxgycuiHlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yMzEwMjgyMDE3NDhaFw0yNDEwMjYyMDIyNDhaMDMxMTAvBgNV BAMTKDJFQ0ZCNjdENUNEQkQxN0M5MUVCNzVBMTEzMkFGRDRDRDk2ODU1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDem3ip0FGqTYkexkH9wTP7ZJ71 1Xs37a2UIvL6XQFNg0JFuTB92lqV8BxuUucw+a2HGBVf2ZIw9qnxct1VxzYDX4Lj PjFnfYIafo15eGFBWDzP2PaU7lGoUWQ0x5NtULHLSuo3gW0oeItL8nr4Z8FXAfrs gkVxxzCOpCUIJiUb7OUbCci+Et79iCxC/IixUz3VO2P25+NMQRWiSqaQVA32RhTq HONGo+kaimcSYrv9gEMAbtJ/FulFgAtTm15F7mI5ANuTLSmBwo4CQkWnAx3pQKxk 5301aAUk6J7yh0gOEZqjov8FbmwsbUIKT+eO0SO8UNOO7qHQvwbt1/0a1fFbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULs+2fVzb0XyR63WhEyr9TNloVfIwHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMDQyMzNmLWJiMmMtNDdkNy05 MDFjLWUzYzgyZjhkNDIzYy8wLzMxMzAzMzJlMzEzNDM1MmUzMTM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5EOMA0GCSqG SIb3DQEBCwUAA4IBAQAdo0lHyGAm+PTkyvef4c4KSMwQb7eFafzHmZ62AnRuoj4z AoSGGzMpnuVHtFmmJtTh2YgIfzJXdtkA0Cp7kTiIOcZ6UGbkfSeOz6LlMUPb2P08 48cMpqBDNQdCgfFVZy5eQ+mwY4E75Wi6nfNtHC8nqLSr9RwBbYV3xs1gkW79zIqX rmNN7UvQz9yn9eIlJ4nwYoYcARtGBtcXfUpUmd1sfYU7xt2DUdk9fy0Xaklprub+ Oef/owpwBCUe89YvFlp7fYgMvapMadwJs7u2bB03yMkTpniYRRReJonPZKjiXxsJ Y35zXBPx3uIMHKdgG+9IEvEwRBfbeFr+3lRePeVC -----END CERTIFICATE-----Generated at Sun May 5 11:44:51 2024 by rpki-client on console-ams.rpki-client.org