$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa File: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (raw, json) Hash identifier: kert8DjZFZG3h4rCknF6lI82qh6y9UTKORk1t7qqQVA= Subject key identifier: AB:D2:20:BF:20:52:53:4F:F4:1F:69:43:88:EE:06:33:15:24:83:71 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 43093A5C3CB386CECDE114D79FAC67AB6FAB5F95 Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa Signing time: Sun 11 Feb 2024 04:00:01 +0000 ROA not before: Sun 11 Feb 2024 03:55:01 +0000 ROA not after: Sun 09 Feb 2025 04:00:01 +0000 asID: 139967 IP address blocks: 103.153.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 13:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:09:3a:5c:3c:b3:86:ce:cd:e1:14:d7:9f:ac:67:ab:6f:ab:5f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Feb 11 03:55:01 2024 GMT Not After : Feb 9 04:00:01 2025 GMT Subject: CN=ABD220BF2052534FF41F694388EE063315248371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e9:9f:f2:68:0f:3b:c6:a2:53:fb:a8:7d:20: 26:7e:b3:5d:72:49:95:2f:44:af:30:56:c4:2d:a4: 2d:90:ec:ca:2c:bc:7b:5f:51:b5:81:0f:8d:84:f7: 5f:f6:63:cd:ed:8b:45:92:3c:38:8a:63:31:71:9b: 3b:e1:a5:c9:3f:28:22:24:03:1c:57:21:b2:52:ed: a2:1e:f4:0b:ac:ee:23:33:cf:49:d4:fa:30:ca:ce: 0d:48:b2:96:c8:a5:76:f7:e5:38:c6:71:66:d5:50: c6:8c:d9:9f:a5:1c:78:45:e8:84:2c:bc:18:ec:73: 06:4f:b1:3f:d6:e4:90:c5:32:6f:26:b5:41:33:9e: 05:d8:55:a2:3a:b1:57:96:fb:2a:5b:65:d3:fa:0e: 47:b2:63:78:dc:fb:54:60:cb:1d:ab:d4:64:4c:d0: 91:74:0c:91:b7:78:5f:2e:0b:04:0a:b7:bf:f5:4b: a9:98:9b:5f:08:d0:a7:ca:20:c3:09:e6:dc:aa:91: 1a:c0:15:7f:04:fd:6b:fb:57:fd:e6:f0:d2:20:81: 21:21:de:12:76:35:eb:be:06:1c:ac:74:ec:ee:2b: f6:0d:8b:84:53:8c:16:d3:10:7f:7f:7e:13:95:d2: e5:63:2b:ec:62:fe:c4:b9:84:d7:aa:9d:0a:2f:bb: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D2:20:BF:20:52:53:4F:F4:1F:69:43:88:EE:06:33:15:24:83:71 X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.83.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:59:49:73:12:36:b0:05:d0:9a:68:6d:94:7a:4d:fa:cb:cb: e5:ff:84:af:8a:7b:ac:9f:c0:62:3d:b4:25:a1:99:e4:0a:ef: 05:f6:60:2e:9e:07:b3:f0:f7:24:20:68:a4:91:9d:5a:8d:63: 20:ca:45:40:68:6e:91:b2:cf:5f:2b:aa:fc:e1:fd:a9:1a:51: c2:a2:5b:50:88:82:cc:5e:2a:c6:61:0c:7e:2e:04:0a:8c:7f: a4:53:69:e2:e2:84:71:97:ba:de:ab:6e:ce:a0:62:63:c1:ae: 93:e9:5e:59:48:bb:3b:69:4b:bf:49:c8:27:43:54:d7:3c:7a: c2:8f:7c:d8:b5:fd:47:b7:55:7a:5e:64:d6:1f:d0:ec:8b:c4: ea:8a:9d:75:65:83:67:7f:18:d2:ae:39:89:72:09:be:57:c7: 58:61:07:eb:1d:70:aa:33:ab:94:77:7b:21:47:b7:02:3e:72: 7b:5a:d6:b3:d2:cb:74:0b:c0:a0:1a:1d:b8:20:35:72:b5:8e: e8:34:41:72:ca:3d:32:86:80:a7:a4:e3:ee:5c:dd:a6:31:af: 90:67:5e:b7:3a:a4:f9:86:6b:49:d2:b8:35:f3:6d:44:80:65: f6:54:ca:00:e3:22:0a:f8:57:d5:39:0d:b2:9f:e6:d0:56:9a: 78:e8:b0:bc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQwk6XDyzhs7N4RTXn6xnq2+rX5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNDAyMTEwMzU1MDFaFw0yNTAyMDkwNDAwMDFaMDMxMTAvBgNV BAMTKEFCRDIyMEJGMjA1MjUzNEZGNDFGNjk0Mzg4RUUwNjMzMTUyNDgzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp6Z/yaA87xqJT+6h9ICZ+s11y SZUvRK8wVsQtpC2Q7MosvHtfUbWBD42E91/2Y83ti0WSPDiKYzFxmzvhpck/KCIk AxxXIbJS7aIe9Aus7iMzz0nU+jDKzg1IspbIpXb35TjGcWbVUMaM2Z+lHHhF6IQs vBjscwZPsT/W5JDFMm8mtUEzngXYVaI6sVeW+ypbZdP6DkeyY3jc+1Rgyx2r1GRM 0JF0DJG3eF8uCwQKt7/1S6mYm18I0KfKIMMJ5tyqkRrAFX8E/Wv7V/3m8NIggSEh 3hJ2Neu+BhysdOzuK/YNi4RTjBbTEH9/fhOV0uVjK+xi/sS5hNeqnQovu6/nAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUq9IgvyBSU0/0H2lDiO4GMxUkg3EwHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNzZkYjFlLWJmOWEtNDlhOC1i Zjc2LTlmMzE0ZTdkMWQ4ZS8wLzMxMzAzMzJlMzEzNTMzMmUzODMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5lTMA0GCSqG SIb3DQEBCwUAA4IBAQBdWUlzEjawBdCaaG2Uek36y8vl/4Svinusn8BiPbQloZnk Cu8F9mAungez8PckIGikkZ1ajWMgykVAaG6Rss9fK6r84f2pGlHColtQiILMXirG YQx+LgQKjH+kU2ni4oRxl7req27OoGJjwa6T6V5ZSLs7aUu/ScgnQ1TXPHrCj3zY tf1Ht1V6XmTWH9Dsi8Tqip11ZYNnfxjSrjmJcgm+V8dYYQfrHXCqM6uUd3shR7cC PnJ7Wtaz0st0C8CgGh24IDVytY7oNEFyyj0yhoCnpOPuXN2mMa+QZ163OqT5hmtJ 0rg1821EgGX2VMoA4yIK+FfVOQ2yn+bQVpp46LC8 -----END CERTIFICATE-----Generated at Sat May 18 07:39:11 2024 by rpki-client on console-ams.rpki-client.org