$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa File: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (raw, json) Hash identifier: lK6Qd1/dGAjzZBmPfVoB4voeqINzusfLCchCi/3naRI= Subject key identifier: 0F:8D:66:AF:23:A0:B7:4A:9A:36:B9:8A:E6:DC:84:B7:EA:87:58:71 Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 46D068CD9A2F2C2B2E991454D343657610DBE04B Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa Signing time: Mon 31 Jul 2023 00:02:19 +0000 ROA not before: Sun 30 Jul 2023 23:57:19 +0000 ROA not after: Mon 29 Jul 2024 00:02:19 +0000 asID: 141064 IP address blocks: 103.155.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 22:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d0:68:cd:9a:2f:2c:2b:2e:99:14:54:d3:43:65:76:10:db:e0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Jul 30 23:57:19 2023 GMT Not After : Jul 29 00:02:19 2024 GMT Subject: CN=0F8D66AF23A0B74A9A36B98AE6DC84B7EA875871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5d:61:b6:e2:7a:fe:48:8a:3b:b1:a6:52:97: 15:18:67:3a:f3:db:a5:03:77:2c:02:83:fb:0e:ac: 0f:b9:51:02:8b:ee:da:ff:38:62:5e:98:63:c8:a2: e0:0c:67:53:98:68:73:10:09:59:03:ee:ae:41:b8: 6f:4e:1c:49:1e:7d:7b:d4:fd:be:9e:f2:01:6a:0e: 3f:a1:d8:ca:8f:0e:ca:38:eb:11:6d:bb:84:d5:39: 43:ae:14:fd:da:d1:ae:2a:dd:8c:3d:2c:21:1a:ab: c0:67:6c:72:51:a4:26:2f:b5:57:0b:60:d1:2f:96: 44:ae:36:3f:7a:96:7f:39:a8:35:b1:24:ea:6a:50: 08:a9:ff:46:51:07:4c:82:02:0e:29:86:02:5e:ec: 6b:47:be:c3:67:82:86:a7:8b:07:ab:fb:db:dc:5c: b5:06:79:5c:ea:35:60:c7:80:e6:2e:f1:52:fb:3f: 6e:bf:85:a9:45:55:1d:3b:6c:02:23:40:93:16:91: 8d:58:63:0d:94:61:5f:7a:62:d0:f3:d5:43:77:cd: 79:65:75:d4:aa:47:4d:ba:50:a0:a3:4d:17:d5:59: 56:c2:cd:c5:a1:4c:8d:cb:de:2d:d7:b8:e2:d1:56: b3:bb:0a:c7:4b:86:ce:bf:92:89:c9:2c:7d:78:0f: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8D:66:AF:23:A0:B7:4A:9A:36:B9:8A:E6:DC:84:B7:EA:87:58:71 X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.166.0/23 Signature Algorithm: sha256WithRSAEncryption 02:db:5c:58:7b:71:3b:e5:59:42:10:ba:92:39:4d:65:48:93: dd:03:8e:46:cf:e3:d5:10:4a:ea:8a:5f:ea:0b:94:7f:5d:79: f8:1b:c1:15:77:7a:09:a4:8f:a3:c8:84:9e:66:22:ef:28:df: 5b:a0:19:cc:c6:34:4a:9f:91:93:31:10:d2:27:9e:e7:31:80: 0c:97:f6:0b:7c:1a:78:8b:02:36:c5:1f:44:a5:6f:53:c5:ed: e4:c7:a4:53:23:1a:b8:44:7e:24:cc:f5:1e:93:6f:f4:be:3d: 7a:af:78:0b:7d:55:8c:97:1f:0c:fc:5c:55:6f:d9:ce:e7:aa: 18:f1:82:c8:8d:17:92:c8:a7:3e:5c:84:d4:8e:e2:71:8d:39: c7:3c:37:77:0c:56:c0:6c:93:39:5b:7a:0f:c2:a9:ff:24:34: 39:23:ca:87:44:5f:b1:de:d3:6b:f2:d6:a2:66:d3:bd:8e:4b: 7b:e3:03:2d:37:78:a4:29:1b:f4:63:8b:39:fd:7a:f9:ab:94: b1:2c:1b:cc:b8:7d:af:74:bb:44:ef:2b:26:81:20:19:2e:43: 0d:2b:0c:e5:fc:1e:1b:d2:73:e1:91:d3:d2:f5:9d:9f:92:de: be:ee:00:aa:f1:b4:f5:ea:20:4b:91:a9:42:6f:10:da:60:a9: 0f:ce:31:fb -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIURtBozZovLCsumRRU00NldhDb4EswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yMzA3MzAyMzU3MTlaFw0yNDA3MjkwMDAyMTlaMDMxMTAvBgNV BAMTKDBGOEQ2NkFGMjNBMEI3NEE5QTM2Qjk4QUU2REM4NEI3RUE4NzU4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXWG24nr+SIo7saZSlxUYZzrz 26UDdywCg/sOrA+5UQKL7tr/OGJemGPIouAMZ1OYaHMQCVkD7q5BuG9OHEkefXvU /b6e8gFqDj+h2MqPDso46xFtu4TVOUOuFP3a0a4q3Yw9LCEaq8BnbHJRpCYvtVcL YNEvlkSuNj96ln85qDWxJOpqUAip/0ZRB0yCAg4phgJe7GtHvsNngoaniwer+9vc XLUGeVzqNWDHgOYu8VL7P26/halFVR07bAIjQJMWkY1YYw2UYV96YtDz1UN3zXll ddSqR026UKCjTRfVWVbCzcWhTI3L3i3XuOLRVrO7CsdLhs6/konJLH14D7MtAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUD41mryOgt0qaNrmK5tyEt+qHWHEwHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRjNmIyYmQ3LWQ3ZjEtNDgxNS1h NjBhLWNhZDU0MDI5Y2U4OC8wLzMxMzAzMzJlMzEzNTM1MmUzMTM2MzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzMDM2MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnm6YwDQYJ KoZIhvcNAQELBQADggEBAALbXFh7cTvlWUIQupI5TWVIk90DjkbP49UQSuqKX+oL lH9defgbwRV3egmkj6PIhJ5mIu8o31ugGczGNEqfkZMxENInnucxgAyX9gt8GniL AjbFH0Slb1PF7eTHpFMjGrhEfiTM9R6Tb/S+PXqveAt9VYyXHwz8XFVv2c7nqhjx gsiNF5LIpz5chNSO4nGNOcc8N3cMVsBskzlbeg/Cqf8kNDkjyodEX7He02vy1qJm 072OS3vjAy03eKQpG/Rjizn9evmrlLEsG8y4fa90u0TvKyaBIBkuQw0rDOX8HhvS c+GR09L1nZ+S3r7uAKrxtPXqIEuRqUJvENpgqQ/OMfs= -----END CERTIFICATE-----Generated at Tue Apr 23 18:35:59 2024 by rpki-client on console-ams.rpki-client.org