$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa File: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (raw, json) Hash identifier: Fvip00fA/IO0pkst9v7jjS0LBkILlMUvI3O7OPKGvBA= Subject key identifier: 23:BD:B7:4C:D6:40:1C:E3:18:F4:01:CC:22:8D:58:A6:3A:EE:8A:51 Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 657522E7E65D9D9655DC09AE6471BACA9E1DFFA0 Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa Signing time: Tue 21 Nov 2023 06:18:43 +0000 ROA not before: Tue 21 Nov 2023 06:13:43 +0000 ROA not after: Tue 19 Nov 2024 06:18:43 +0000 asID: 139456 IP address blocks: 103.167.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 07:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:75:22:e7:e6:5d:9d:96:55:dc:09:ae:64:71:ba:ca:9e:1d:ff:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Nov 21 06:13:43 2023 GMT Not After : Nov 19 06:18:43 2024 GMT Subject: CN=23BDB74CD6401CE318F401CC228D58A63AEE8A51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:29:0d:f9:19:04:15:32:24:12:03:47:b7: d1:5c:04:83:14:fa:c8:a1:df:fa:79:be:77:16:9d: 67:e1:9b:23:e1:35:93:fb:0e:80:c8:aa:31:dd:ed: 25:42:ff:ff:88:1e:14:f4:56:01:cf:cb:85:65:0e: 33:eb:ed:57:33:e2:f9:eb:f3:44:a8:f0:32:e0:9a: e2:c0:e6:15:68:ba:c2:55:15:5b:57:0a:5d:fb:c9: c9:04:4d:60:43:e4:65:87:c5:0b:bf:87:61:0a:d1: 9c:6c:0c:0c:d0:ba:1f:38:9b:9d:f8:df:1d:64:58: fa:3a:cd:d4:c3:b4:c7:cf:d8:06:e9:46:6d:95:ba: 2a:26:91:4e:eb:46:8b:61:7f:47:50:5a:3d:b3:5c: fd:d0:bb:a9:3c:b7:0e:75:e6:e6:a5:df:1e:3a:88: c3:82:ba:f8:58:92:0d:ac:dd:7a:68:bb:89:00:7c: 00:80:3c:ab:6d:72:bb:3c:1f:54:f2:03:89:8d:6a: b2:c4:e3:97:60:6f:c6:b7:58:a3:42:72:88:5d:a7: 98:56:e4:e9:90:d2:71:75:3b:25:cb:00:43:6c:c0: 9d:5b:06:89:02:ad:e0:97:03:18:9d:71:38:be:61: b3:0f:63:d2:f0:20:13:f9:25:db:49:bd:21:0f:6f: b9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BD:B7:4C:D6:40:1C:E3:18:F4:01:CC:22:8D:58:A6:3A:EE:8A:51 X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.132.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:87:29:45:68:8f:14:24:42:df:11:58:2c:22:e9:73:0e:48: d6:06:fa:5e:56:0b:c6:03:ab:ea:4c:fe:f5:86:18:76:8c:38: dd:90:f0:82:59:b7:a8:a1:5d:40:8b:74:fe:ac:54:d6:98:af: 78:63:38:e3:5d:c6:4d:5c:57:92:f4:61:21:4f:6e:de:ba:a2: 17:f0:d8:1b:ed:44:ee:8d:4b:36:92:2b:71:74:16:77:7f:11: 02:66:68:81:33:1e:6c:db:68:90:f4:10:76:ae:26:2c:c4:66: a4:ec:33:be:3c:a4:7b:70:35:4d:3e:c1:42:5e:b4:ba:43:0f: fe:92:7d:f4:da:42:b4:13:4d:5e:33:08:5b:f0:5e:ee:b1:08: 63:ed:c5:ce:db:1b:f1:47:03:3b:02:04:b8:39:99:1c:41:86: c4:a0:9d:f3:1f:99:f2:d5:58:42:df:4b:54:bf:d1:94:50:bb: 4f:50:ab:55:60:6c:62:62:76:5a:3f:22:61:d5:7d:31:bd:2f: 40:6f:e6:d1:7f:33:67:23:5e:b4:e9:a5:25:c9:0f:a6:fc:ef: a1:21:64:b6:65:74:36:18:17:c9:7f:d1:d6:83:b3:b8:a9:51: 83:8e:f7:32:6b:cb:07:2a:2d:94:32:27:b7:2f:35:8a:0c:a1: 37:b2:4a:eb -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZXUi5+ZdnZZV3AmuZHG6yp4d/6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yMzExMjEwNjEzNDNaFw0yNDExMTkwNjE4NDNaMDMxMTAvBgNV BAMTKDIzQkRCNzRDRDY0MDFDRTMxOEY0MDFDQzIyOEQ1OEE2M0FFRThBNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdykN+RkEFTIkEgNHt9FcBIMU +sih3/p5vncWnWfhmyPhNZP7DoDIqjHd7SVC//+IHhT0VgHPy4VlDjPr7Vcz4vnr 80So8DLgmuLA5hVousJVFVtXCl37yckETWBD5GWHxQu/h2EK0ZxsDAzQuh84m534 3x1kWPo6zdTDtMfP2AbpRm2VuiomkU7rRothf0dQWj2zXP3Qu6k8tw515ual3x46 iMOCuvhYkg2s3Xpou4kAfACAPKttcrs8H1TyA4mNarLE45dgb8a3WKNCcohdp5hW 5OmQ0nF1OyXLAENswJ1bBokCreCXAxidcTi+YbMPY9LwIBP5JdtJvSEPb7mhAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUI723TNZAHOMY9AHMIo1YpjruilEwHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlZDQ3MjAyLWRlNjAtNDdmMy1h MmE3LTYwOGE3NGExZTg3NC8wLzMxMzAzMzJlMzEzNjM3MmUzMTMzMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnp4QwDQYJ KoZIhvcNAQELBQADggEBAF2HKUVojxQkQt8RWCwi6XMOSNYG+l5WC8YDq+pM/vWG GHaMON2Q8IJZt6ihXUCLdP6sVNaYr3hjOONdxk1cV5L0YSFPbt66ohfw2BvtRO6N SzaSK3F0Fnd/EQJmaIEzHmzbaJD0EHauJizEZqTsM748pHtwNU0+wUJetLpDD/6S ffTaQrQTTV4zCFvwXu6xCGPtxc7bG/FHAzsCBLg5mRxBhsSgnfMfmfLVWELfS1S/ 0ZRQu09Qq1VgbGJidlo/ImHVfTG9L0Bv5tF/M2cjXrTppSXJD6b876EhZLZldDYY F8l/0daDs7ipUYOO9zJrywcqLZQyJ7cvNYoMoTeySus= -----END CERTIFICATE-----Generated at Fri May 31 06:46:51 2024 by rpki-client on console-ams.rpki-client.org