$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa File: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (raw, json) Hash identifier: y8PryIragPCs1pBiOWrmo1mGII7UOYbCs+BA6DS057E= Subject key identifier: 3A:D2:29:FB:82:C3:27:F4:83:46:28:00:79:6F:42:98:02:F7:D2:64 Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Certificate serial: 7976A76C8B0842742075B3F78D7770FA647F3553 Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa Signing time: Sat 16 Sep 2023 12:00:01 +0000 ROA not before: Sat 16 Sep 2023 11:55:01 +0000 ROA not after: Sat 14 Sep 2024 12:00:01 +0000 asID: 136070 IP address blocks: 103.157.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:76:a7:6c:8b:08:42:74:20:75:b3:f7:8d:77:70:fa:64:7f:35:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Validity Not Before: Sep 16 11:55:01 2023 GMT Not After : Sep 14 12:00:01 2024 GMT Subject: CN=3AD229FB82C327F483462800796F429802F7D264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:44:cc:dc:bc:4f:da:96:d8:c5:ec:d2:35: 5c:86:ff:50:28:6b:7f:54:70:1a:3d:b1:e9:82:28: 7b:8a:85:ec:46:bf:19:d8:ae:8a:cb:51:56:78:88: dc:65:9d:d7:8e:64:6a:1b:f1:44:c2:ec:40:33:03: a4:0c:7b:68:ff:38:57:d7:99:1c:7f:f8:80:45:b7: 0d:43:90:38:6d:71:5e:70:87:80:0b:d8:c3:c3:fa: 59:4e:51:d1:b7:88:66:0f:76:64:48:a9:5a:2b:19: cd:6f:6b:b8:e1:8b:a5:1d:9e:e8:2a:ed:10:c5:b9: 60:57:eb:0d:56:86:95:24:8d:5a:e4:4e:ad:7e:71: af:4d:89:aa:41:76:7b:c9:94:4b:8e:44:0a:f5:a7: a4:7e:2a:89:05:9a:1e:0b:84:3b:4e:bf:af:16:88: 2a:c6:9f:25:a2:3a:03:54:7e:da:a7:c2:9d:37:5b: e7:b1:51:96:9f:90:4b:a3:8a:76:fc:86:9d:d4:8c: fd:a2:ed:ec:08:d9:26:1a:d2:33:0a:cb:36:3b:20: a4:fe:4f:a5:a4:83:ed:8e:54:1a:c1:02:41:25:14: 34:29:3f:cb:8b:b6:f8:9c:d6:6f:0b:36:36:a6:92: 2e:0a:2c:a6:9d:d6:09:31:59:d4:fe:5e:e3:42:ec: a9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D2:29:FB:82:C3:27:F4:83:46:28:00:79:6F:42:98:02:F7:D2:64 X509v3 Authority Key Identifier: keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.55.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:61:64:3a:00:9c:63:98:9b:9f:05:fb:fe:74:90:2b:3d:ca: 69:52:6f:51:f7:46:bb:6d:f8:03:b1:a5:85:ab:cc:0f:94:dc: 19:05:aa:24:34:d8:6b:48:95:9c:df:2f:4f:68:89:f5:2b:7e: 3a:be:90:c0:1d:c3:9d:2a:ab:07:75:ec:22:d9:29:83:bf:0d: e7:9b:7c:50:d0:fd:60:67:4e:2a:f0:06:4b:a9:4a:df:b4:4a: 3e:13:51:1b:7d:be:1f:e4:75:d2:05:df:83:c1:a1:96:8a:fe: 34:97:6c:de:77:68:8a:c1:ff:c9:2c:0b:f5:2e:f8:76:bc:cb: 46:de:72:8a:3f:0f:e1:35:12:41:9e:84:de:3e:5e:ec:49:a6: e3:52:e5:3c:1c:62:d3:f5:4b:2a:01:e6:53:7d:ab:d2:0a:7f: 84:45:1e:8d:78:25:21:16:20:4a:8d:8f:fd:a0:d6:79:be:5d: 21:4c:75:20:7f:d3:be:a4:8d:e8:26:5f:0c:f2:fb:bd:4e:99: 52:ea:4a:71:0a:ad:68:85:28:57:1e:8c:a1:f4:3a:e1:53:9c: fd:db:6d:ea:60:91:13:65:39:be:66:88:79:03:1b:75:43:eb: e6:8c:8d:58:f3:d5:78:d4:c0:85:a3:cd:5b:f0:54:0c:18:98: 44:f1:11:be -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeXanbIsIQnQgdbP3jXdw+mR/NVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2 RjNGRTBCMzAeFw0yMzA5MTYxMTU1MDFaFw0yNDA5MTQxMjAwMDFaMDMxMTAvBgNV BAMTKDNBRDIyOUZCODJDMzI3RjQ4MzQ2MjgwMDc5NkY0Mjk4MDJGN0QyNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvUTM3LxP2pbYxezSNVyG/1Ao a39UcBo9semCKHuKhexGvxnYrorLUVZ4iNxlndeOZGob8UTC7EAzA6QMe2j/OFfX mRx/+IBFtw1DkDhtcV5wh4AL2MPD+llOUdG3iGYPdmRIqVorGc1va7jhi6Udnugq 7RDFuWBX6w1WhpUkjVrkTq1+ca9NiapBdnvJlEuORAr1p6R+KokFmh4LhDtOv68W iCrGnyWiOgNUftqnwp03W+exUZafkEujinb8hp3UjP2i7ewI2SYa0jMKyzY7IKT+ T6Wkg+2OVBrBAkElFDQpP8uLtvic1m8LNjamki4KLKad1gkxWdT+XuNC7KnpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOtIp+4LDJ/SDRigAeW9CmAL30mQwHwYDVR0j BBgwFoAUoKKlyowgp89toTJcm9XDN28/4LMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjM3NzcxMS0xZTNkLTRlNWEtYTRhYy0wNWExYzUwMmFkMjgvMC9BMEEyQTVDQThD MjBBN0NGNkRBMTMyNUM5QkQ1QzMzNzZGM0ZFMEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2RjNG RTBCMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmMzc3NzExLTFlM2QtNGU1YS1h NGFjLTA1YTFjNTAyYWQyOC8wLzMxMzAzMzJlMzEzNTM3MmUzNTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ503MA0GCSqG SIb3DQEBCwUAA4IBAQBPYWQ6AJxjmJufBfv+dJArPcppUm9R90a7bfgDsaWFq8wP lNwZBaokNNhrSJWc3y9PaIn1K346vpDAHcOdKqsHdewi2SmDvw3nm3xQ0P1gZ04q 8AZLqUrftEo+E1Ebfb4f5HXSBd+DwaGWiv40l2zed2iKwf/JLAv1Lvh2vMtG3nKK Pw/hNRJBnoTePl7sSabjUuU8HGLT9UsqAeZTfavSCn+ERR6NeCUhFiBKjY/9oNZ5 vl0hTHUgf9O+pI3oJl8M8vu9TplS6kpxCq1ohShXHoyh9DrhU5z9223qYJETZTm+ Zoh5Axt1Q+vmjI1Y89V41MCFo81b8FQMGJhE8RG+ -----END CERTIFICATE-----Generated at Sat Jun 1 23:00:04 2024 by rpki-client on console-ams.rpki-client.org