$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa File: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (raw, json) Hash identifier: XdZFfHv73MmMxr67KWTebXMbK3einYwjrX0Bd9m8ZRU= Subject key identifier: 05:84:43:41:32:C5:76:EA:6A:52:FA:0A:32:BF:62:00:23:84:32:1A Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 7F5C2C98ADBB3B023BCEEC2AC4765DB012AB5C51 Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa Signing time: Mon 31 Jul 2023 00:08:14 +0000 ROA not before: Mon 31 Jul 2023 00:03:14 +0000 ROA not after: Mon 29 Jul 2024 00:08:14 +0000 asID: 139421 IP address blocks: 103.144.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 07:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5c:2c:98:ad:bb:3b:02:3b:ce:ec:2a:c4:76:5d:b0:12:ab:5c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Jul 31 00:03:14 2023 GMT Not After : Jul 29 00:08:14 2024 GMT Subject: CN=0584434132C576EA6A52FA0A32BF62002384321A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:10:86:ff:6a:ae:0c:69:8a:37:df:c1:36: c9:b9:33:fc:f4:85:75:b9:e3:e6:a7:34:f5:f2:ed: e1:70:9f:b2:7a:7b:a7:49:77:da:04:79:bf:64:b1: 7e:e2:6c:a3:ea:21:59:7c:97:d2:ac:a0:b6:d8:54: 32:75:49:37:39:5c:ef:f3:94:e0:75:7f:dc:45:3f: 39:4a:b7:8c:5c:8a:0a:67:28:c7:35:47:7a:a5:01: df:b2:eb:c7:91:0f:e8:74:3a:24:6d:95:95:8d:3b: 18:51:b7:bb:87:c9:0d:bc:44:35:b8:ad:49:dd:80: fb:bc:cc:1a:f1:81:bd:41:a8:6d:76:ab:61:50:dc: c4:0f:df:84:99:4c:05:18:21:2b:34:8a:de:d4:fe: 8e:8f:c2:3a:63:8d:10:98:50:a5:ef:c6:fd:34:28: 56:ca:ab:df:54:26:83:1e:3d:05:6f:95:b5:20:75: fb:37:a6:fc:8e:ab:e5:97:f8:c1:2d:53:2d:72:4c: 18:bc:96:6e:aa:de:3c:1c:2c:a8:52:65:72:a1:eb: 93:e3:73:c9:61:f3:e3:79:24:2d:d9:0f:c5:67:e6: f1:7d:99:9b:4a:9e:39:17:f7:90:d6:02:45:9b:57: 8e:75:8d:5e:46:fe:8d:20:7e:86:4d:2f:b3:18:dd: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:84:43:41:32:C5:76:EA:6A:52:FA:0A:32:BF:62:00:23:84:32:1A X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.102.0/23 Signature Algorithm: sha256WithRSAEncryption 54:31:af:7a:52:4f:25:aa:0f:0a:74:7e:e5:62:82:9d:4d:44: 02:8d:b1:79:93:b1:39:1c:82:ba:a8:3b:d2:29:27:61:e1:07: 19:d2:7c:80:5a:3b:ba:cf:51:0a:d0:55:bc:5b:13:d9:e2:c5: 5d:f3:a2:f3:77:ba:d1:18:23:43:4b:f6:62:26:c8:bc:9f:b7: da:2e:4a:ec:a1:65:1e:ef:02:7d:5d:9e:ab:fe:b9:8e:25:a7: 60:7d:aa:ca:e5:99:1e:ba:28:4f:c7:d4:0d:c5:e8:75:99:a8: 5a:14:09:5d:fb:48:2b:26:13:fb:33:33:84:cf:46:8e:fb:e5: 3b:d5:c7:40:1b:ea:02:bb:2e:9d:3a:62:79:4b:73:0e:17:23: ec:1f:0d:a9:03:69:88:f2:90:e6:54:3f:13:e2:48:b8:8d:51: d9:69:7e:a8:9d:07:8c:7f:05:f0:86:7c:a0:96:bd:f5:a6:07: c8:03:ae:91:12:a8:ac:7f:dc:a6:80:7b:a1:33:bf:fe:4c:18: 34:75:24:81:25:c8:0e:59:d5:6d:cf:bd:0d:80:c8:5b:7f:a8: 7e:8c:ad:6b:36:56:42:35:72:ab:c2:8c:79:3c:b6:06:8b:c4: e9:c7:a0:70:30:45:3d:41:0d:ab:8f:48:6b:20:58:0d:9b:40: a1:7b:58:fa -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUf1wsmK27OwI7zuwqxHZdsBKrXFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yMzA3MzEwMDAzMTRaFw0yNDA3MjkwMDA4MTRaMDMxMTAvBgNV BAMTKDA1ODQ0MzQxMzJDNTc2RUE2QTUyRkEwQTMyQkY2MjAwMjM4NDMyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1hCG/2quDGmKN9/BNsm5M/z0 hXW54+anNPXy7eFwn7J6e6dJd9oEeb9ksX7ibKPqIVl8l9KsoLbYVDJ1STc5XO/z lOB1f9xFPzlKt4xcigpnKMc1R3qlAd+y68eRD+h0OiRtlZWNOxhRt7uHyQ28RDW4 rUndgPu8zBrxgb1BqG12q2FQ3MQP34SZTAUYISs0it7U/o6PwjpjjRCYUKXvxv00 KFbKq99UJoMePQVvlbUgdfs3pvyOq+WX+MEtUy1yTBi8lm6q3jwcLKhSZXKh65Pj c8lh8+N5JC3ZD8Vn5vF9mZtKnjkX95DWAkWbV451jV5G/o0gfoZNL7MY3ZhrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUBYRDQTLFdupqUvoKMr9iACOEMhowHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhNTM0MWU4LTIyZDgtNDQ5Yy1h NzUzLWU0N2JiZmM0ODUzOC8wLzMxMzAzMzJlMzEzNDM0MmUzMTMwMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzNDMyMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkGYwDQYJ KoZIhvcNAQELBQADggEBAFQxr3pSTyWqDwp0fuVigp1NRAKNsXmTsTkcgrqoO9Ip J2HhBxnSfIBaO7rPUQrQVbxbE9nixV3zovN3utEYI0NL9mImyLyft9ouSuyhZR7v An1dnqv+uY4lp2B9qsrlmR66KE/H1A3F6HWZqFoUCV37SCsmE/szM4TPRo775TvV x0Ab6gK7Lp06YnlLcw4XI+wfDakDaYjykOZUPxPiSLiNUdlpfqidB4x/BfCGfKCW vfWmB8gDrpESqKx/3KaAe6Ezv/5MGDR1JIElyA5Z1W3PvQ2AyFt/qH6MrWs2VkI1 cqvCjHk8tgaLxOnHoHAwRT1BDauPSGsgWA2bQKF7WPo= -----END CERTIFICATE-----Generated at Wed Apr 24 06:27:08 2024 by rpki-client on console-ams.rpki-client.org