$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa File: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (raw, json) Hash identifier: /yE9hxH5qk25qcRz3ccfkBOSvhOQL+WqsnAaeuhlbEk= Subject key identifier: 2D:EF:8D:D4:73:80:4E:6B:6C:85:EE:97:CF:F1:6D:C7:C2:88:1D:97 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 0AEBB9FB743F60353D8B68C2865E47BC234C50F0 Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa Signing time: Thu 12 Oct 2023 12:00:01 +0000 ROA not before: Thu 12 Oct 2023 11:55:01 +0000 ROA not after: Thu 10 Oct 2024 12:00:01 +0000 asID: 141137 IP address blocks: 103.158.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:eb:b9:fb:74:3f:60:35:3d:8b:68:c2:86:5e:47:bc:23:4c:50:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Oct 12 11:55:01 2023 GMT Not After : Oct 10 12:00:01 2024 GMT Subject: CN=2DEF8DD473804E6B6C85EE97CFF16DC7C2881D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4d:05:e0:01:40:b7:8d:58:51:ec:2a:6e:36: 76:2f:be:f2:04:0d:3d:d2:fe:fa:5e:8f:13:c7:2b: 63:02:18:4e:54:26:41:95:96:95:e8:c5:8f:90:70: f0:7e:63:6a:01:67:26:07:29:78:64:e4:ee:3c:fa: 65:5f:ba:c5:74:ec:3d:66:b0:e6:4c:d5:50:a5:cf: e1:05:87:52:96:a3:c3:3a:1c:a2:77:6a:46:95:ad: 90:de:44:7f:1f:68:16:e8:fe:72:38:8d:ac:08:10: 0c:a3:e1:25:b5:5a:4c:15:af:26:55:1b:74:11:37: e9:68:97:03:de:a4:7d:11:c6:54:21:28:c7:49:e5: c6:a9:6d:85:ce:c8:b7:83:7d:2f:52:6e:6e:ba:35: 33:a6:6c:0e:9d:d6:ea:d3:c8:d8:1f:a0:42:41:43: b2:47:f1:5a:92:9b:d0:69:b6:a3:e1:a7:77:da:74: cd:f2:77:fb:79:bf:0f:3b:8f:50:63:54:53:4f:6a: 80:6b:a4:c5:08:02:2a:49:1e:5a:bc:44:4a:22:f5: d2:1a:e5:9b:a4:7f:e0:5c:73:94:fe:4f:10:37:1a: 31:e8:28:e6:82:fd:90:b7:94:d7:8e:bb:fa:da:33: cf:7f:c5:8b:49:d8:4a:b5:ac:01:fd:b2:e1:ed:b5: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EF:8D:D4:73:80:4E:6B:6C:85:EE:97:CF:F1:6D:C7:C2:88:1D:97 X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.253.0/24 Signature Algorithm: sha256WithRSAEncryption 99:aa:17:35:e9:a1:83:43:15:9f:03:3a:62:54:a7:54:33:02: fa:19:61:db:49:22:99:c0:ff:11:ef:1e:84:0d:66:df:af:19: da:54:ee:f4:86:b8:c0:2a:95:05:ef:bf:00:3a:7f:17:1b:7a: 8c:86:a6:a3:3a:0c:83:c4:f0:3b:d8:c2:8b:52:18:ad:d8:f7: bc:7b:c9:50:a1:ea:96:71:f7:3a:3e:20:6c:38:12:d9:38:49: b1:24:bf:a2:bd:78:ea:7c:59:b6:7a:df:98:3e:21:06:b7:3f: 7e:a4:4d:7b:ab:83:46:6c:ba:38:a2:3b:e5:97:0c:cd:f8:08: c9:6d:7f:9c:89:d7:12:9f:25:d7:cb:25:8d:9b:10:7f:7e:95: 30:e7:d7:b9:86:ae:ca:2c:fc:f4:da:f9:8a:53:31:7d:80:9d: c0:fa:23:a7:00:4d:49:18:23:80:5e:56:37:0a:1b:65:0a:b3: 8c:b4:fe:c9:77:1a:cc:bc:f2:1c:e9:64:a0:e1:00:c1:85:a7: 30:64:ec:a1:5b:ec:24:02:00:e5:b4:38:c1:59:36:22:a6:67: ce:0d:22:f4:ef:72:5d:5f:05:dd:f9:82:41:67:bc:69:83:b2: d2:f6:e8:0f:69:89:15:af:fb:84:3d:bf:e2:42:cb:27:3f:42: 33:91:9c:f7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCuu5+3Q/YDU9i2jChl5HvCNMUPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yMzEwMTIxMTU1MDFaFw0yNDEwMTAxMjAwMDFaMDMxMTAvBgNV BAMTKDJERUY4REQ0NzM4MDRFNkI2Qzg1RUU5N0NGRjE2REM3QzI4ODFEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTQXgAUC3jVhR7CpuNnYvvvIE DT3S/vpejxPHK2MCGE5UJkGVlpXoxY+QcPB+Y2oBZyYHKXhk5O48+mVfusV07D1m sOZM1VClz+EFh1KWo8M6HKJ3akaVrZDeRH8faBbo/nI4jawIEAyj4SW1WkwVryZV G3QRN+lolwPepH0RxlQhKMdJ5capbYXOyLeDfS9Sbm66NTOmbA6d1urTyNgfoEJB Q7JH8VqSm9BptqPhp3fadM3yd/t5vw87j1BjVFNPaoBrpMUIAipJHlq8REoi9dIa 5Zukf+Bcc5T+TxA3GjHoKOaC/ZC3lNeOu/raM89/xYtJ2Eq1rAH9suHttcWFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQULe+N1HOATmtshe6Xz/Ftx8KIHZcwHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0OTAzNDVlLTJkNTctNDM0OS1i NzhmLWM4YjE4YTQ0MjQ0NS8wLzMxMzAzMzJlMzEzNTM4MmUzMjM1MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnv0wDQYJ KoZIhvcNAQELBQADggEBAJmqFzXpoYNDFZ8DOmJUp1QzAvoZYdtJIpnA/xHvHoQN Zt+vGdpU7vSGuMAqlQXvvwA6fxcbeoyGpqM6DIPE8DvYwotSGK3Y97x7yVCh6pZx 9zo+IGw4Etk4SbEkv6K9eOp8WbZ635g+IQa3P36kTXurg0ZsujiiO+WXDM34CMlt f5yJ1xKfJdfLJY2bEH9+lTDn17mGrsos/PTa+YpTMX2AncD6I6cATUkYI4BeVjcK G2UKs4y0/sl3Gsy88hzpZKDhAMGFpzBk7KFb7CQCAOW0OMFZNiKmZ84NIvTvcl1f Bd35gkFnvGmDstL26A9piRWv+4Q9v+JCyyc/QjORnPc= -----END CERTIFICATE-----Generated at Thu May 2 10:16:52 2024 by rpki-client on console-ams.rpki-client.org