$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa File: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (raw, json) Hash identifier: qGumntOXTFeGElNfm1Xy/Z97O10Rspgrto06ZLLCRuM= Subject key identifier: A2:4D:85:DF:37:56:4D:F9:A8:D4:05:68:0E:17:3A:66:90:B3:2E:5C Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 3C55DBE5E5D54E16CAD940EF84575CBDD732A068 Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa Signing time: Mon 31 Jul 2023 00:02:19 +0000 ROA not before: Sun 30 Jul 2023 23:57:19 +0000 ROA not after: Mon 29 Jul 2024 00:02:19 +0000 asID: 141064 IP address blocks: 103.155.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 22:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:55:db:e5:e5:d5:4e:16:ca:d9:40:ef:84:57:5c:bd:d7:32:a0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Jul 30 23:57:19 2023 GMT Not After : Jul 29 00:02:19 2024 GMT Subject: CN=A24D85DF37564DF9A8D405680E173A6690B32E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:60:e1:14:bf:5d:81:69:da:ea:db:31:77: be:60:29:a1:3c:ae:bc:99:bd:55:fa:fd:78:92:15: fd:18:da:50:20:da:a9:22:27:bc:57:b1:ea:4d:00: 30:c9:90:0a:43:3a:6b:04:9f:c5:de:b5:e4:35:17: fb:82:4c:1a:0e:51:88:d1:74:2e:50:91:a9:04:de: a4:f0:47:6a:06:a8:78:fe:12:d5:d4:27:a5:ca:13: 3e:00:bf:d0:c8:3e:71:35:64:87:2a:2d:bc:5c:20: d4:34:94:fd:70:6c:b7:29:cf:6c:f6:49:54:8d:73: f4:29:4a:a7:91:83:f5:c1:83:37:6e:ed:51:c1:de: be:ca:41:73:dd:4a:63:74:f6:a2:cf:ad:7d:e9:67: ba:0d:4b:9a:47:2a:1d:96:f8:30:a6:e4:47:ab:95: 33:52:c8:5c:a7:d9:ee:a1:99:f4:ac:c9:cf:93:9b: 04:bf:f6:fe:c3:70:e2:5f:06:72:4a:b0:4a:81:da: b7:e1:c4:5c:1a:d7:66:03:54:68:1a:cc:37:71:a3: de:b5:a9:bb:4c:ba:29:d1:4c:58:ab:1a:eb:c6:2c: 7c:62:0f:bd:36:14:ec:b7:41:ed:16:e6:b1:77:f9: 9f:3a:35:19:ad:7c:28:9f:c6:15:bc:03:53:04:e6: 24:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4D:85:DF:37:56:4D:F9:A8:D4:05:68:0E:17:3A:66:90:B3:2E:5C X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.167.0/24 Signature Algorithm: sha256WithRSAEncryption 40:91:1f:67:6f:89:c6:1a:ee:76:2d:19:ba:e6:e8:80:ff:f2: a7:1b:9e:1b:53:9e:c4:4a:57:0b:0b:55:b8:25:13:fd:72:79: a6:12:ea:aa:b8:e6:70:d1:98:cb:ac:24:3b:80:94:9d:69:4c: 17:b2:e3:20:17:2f:a7:93:e7:b6:f7:1c:37:15:31:01:2a:ce: b2:6d:07:56:f2:05:29:63:21:61:8d:20:9b:e6:15:ba:95:96: f7:2d:75:07:59:7b:88:99:9d:ce:f5:3a:2f:fc:65:65:e2:6f: f5:3b:71:c7:a0:2b:0b:5a:56:9c:68:0a:90:ab:21:bc:32:04: b8:64:1d:ab:f3:a0:82:78:77:88:72:54:42:bd:37:33:3a:e7: 3e:c8:04:10:f1:2a:3c:56:5f:88:f5:e1:94:58:bc:72:6c:e5: 30:7e:18:3a:5e:70:80:43:78:da:e4:eb:2c:49:46:bb:fd:de: 1b:03:3f:2a:91:6e:c1:59:7f:46:00:32:09:a2:39:76:47:ac: 29:d3:9f:2e:94:ba:b7:38:42:ea:53:47:60:4e:7b:21:b0:8d: eb:85:00:b1:eb:ea:b6:9b:66:2a:ac:ee:80:92:b8:43:6e:4e: df:19:1d:25:cb:12:88:da:2a:63:0d:45:73:54:d4:43:f4:3c: 6b:88:30:d7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPFXb5eXVThbK2UDvhFdcvdcyoGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yMzA3MzAyMzU3MTlaFw0yNDA3MjkwMDAyMTlaMDMxMTAvBgNV BAMTKEEyNEQ4NURGMzc1NjRERjlBOEQ0MDU2ODBFMTczQTY2OTBCMzJFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnR2DhFL9dgWna6tsxd75gKaE8 rryZvVX6/XiSFf0Y2lAg2qkiJ7xXsepNADDJkApDOmsEn8XeteQ1F/uCTBoOUYjR dC5QkakE3qTwR2oGqHj+EtXUJ6XKEz4Av9DIPnE1ZIcqLbxcINQ0lP1wbLcpz2z2 SVSNc/QpSqeRg/XBgzdu7VHB3r7KQXPdSmN09qLPrX3pZ7oNS5pHKh2W+DCm5Eer lTNSyFyn2e6hmfSsyc+TmwS/9v7DcOJfBnJKsEqB2rfhxFwa12YDVGgazDdxo961 qbtMuinRTFirGuvGLHxiD702FOy3Qe0W5rF3+Z86NRmtfCifxhW8A1ME5iS5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUok2F3zdWTfmo1AVoDhc6ZpCzLlwwHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRjNmIyYmQ3LWQ3ZjEtNDgxNS1h NjBhLWNhZDU0MDI5Y2U4OC8wLzMxMzAzMzJlMzEzNTM1MmUzMTM2MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM2MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm6cwDQYJ KoZIhvcNAQELBQADggEBAECRH2dvicYa7nYtGbrm6ID/8qcbnhtTnsRKVwsLVbgl E/1yeaYS6qq45nDRmMusJDuAlJ1pTBey4yAXL6eT57b3HDcVMQEqzrJtB1byBSlj IWGNIJvmFbqVlvctdQdZe4iZnc71Oi/8ZWXib/U7ccegKwtaVpxoCpCrIbwyBLhk HavzoIJ4d4hyVEK9NzM65z7IBBDxKjxWX4j14ZRYvHJs5TB+GDpecIBDeNrk6yxJ Rrv93hsDPyqRbsFZf0YAMgmiOXZHrCnTny6Uurc4QupTR2BOeyGwjeuFALHr6rab Ziqs7oCSuENuTt8ZHSXLEojaKmMNRXNU1EP0PGuIMNc= -----END CERTIFICATE-----Generated at Tue Apr 23 18:35:59 2024 by rpki-client on console-ams.rpki-client.org