$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa File: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (raw, json) Hash identifier: ys4UGsG1uP8LFRAanrka89JamSeqL98fcjZ0S/b3Ihc= Subject key identifier: 19:5D:BB:2F:BE:21:BE:51:A2:20:17:FD:E0:68:82:91:C0:71:8F:E3 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 0D9522196DE16E58FFE7B87F266DE212DE1F7172 Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa Signing time: Fri 16 Feb 2024 13:00:00 +0000 ROA not before: Fri 16 Feb 2024 12:55:00 +0000 ROA not after: Fri 14 Feb 2025 13:00:00 +0000 asID: 139967 IP address blocks: 103.101.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 13:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:95:22:19:6d:e1:6e:58:ff:e7:b8:7f:26:6d:e2:12:de:1f:71:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Feb 16 12:55:00 2024 GMT Not After : Feb 14 13:00:00 2025 GMT Subject: CN=195DBB2FBE21BE51A22017FDE0688291C0718FE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:1d:91:f8:22:73:e0:85:0c:cf:19:15:3c: 43:82:ef:5b:6a:87:d7:93:c1:59:61:2c:8b:f1:33: 89:02:5e:5c:11:ba:59:a0:e6:ad:24:ab:55:62:af: 39:5e:7b:67:31:50:e8:82:ba:a1:56:2a:92:e5:fd: 28:a9:c1:83:c8:03:65:40:68:7e:2e:eb:4f:c4:3d: 10:9b:7e:ee:90:8a:07:fb:82:31:ce:2f:32:24:2a: 81:9c:69:4b:0b:e1:c7:df:83:8b:b3:8a:9b:21:06: ad:24:ee:44:71:fc:e4:65:12:da:1b:44:66:c8:ed: 82:4f:63:d2:28:01:27:d9:90:16:4e:70:a5:30:f0: 1f:fc:ce:2c:6a:32:df:33:4f:97:9e:d7:96:b6:8c: da:07:29:f8:f1:01:14:bb:68:ac:30:cd:30:b9:65: 3f:56:64:f0:2e:f0:56:19:36:8e:f9:37:84:a9:f2: b8:9f:d7:8d:bb:5b:62:36:69:d5:d3:8a:63:7d:da: bb:73:0d:db:94:b0:34:4b:93:10:cd:77:03:7d:3c: b2:fd:a5:7d:d3:32:69:64:20:68:d1:56:c6:a8:b6: f2:ae:17:0f:8a:09:dd:55:52:03:3a:9c:ea:31:98: df:35:8a:79:49:56:03:ad:b1:36:4f:bf:49:16:6c: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5D:BB:2F:BE:21:BE:51:A2:20:17:FD:E0:68:82:91:C0:71:8F:E3 X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.143.0/24 Signature Algorithm: sha256WithRSAEncryption aa:0a:00:66:4a:41:38:60:dd:72:94:f9:37:46:22:73:76:d6: 14:05:d5:77:ab:2c:be:2f:61:44:0b:77:e7:41:47:14:57:e5: 09:6e:2e:af:51:71:99:00:84:a6:49:d1:5d:95:5f:99:b7:86: ee:a8:48:ac:f8:d6:e7:6d:4c:38:af:cb:8a:cf:c7:d2:48:e1: 09:58:b8:3d:b1:47:bc:85:e6:0a:0e:4d:31:e7:0b:8a:7d:9b: 23:09:91:85:26:c3:86:9c:a6:f6:3c:a8:07:7d:70:d6:a9:e4: b1:66:50:ed:66:4d:30:c2:05:e9:e2:69:23:12:1d:5f:e8:30: d2:0c:d5:b1:47:79:cf:ab:60:dc:9c:3a:7a:ca:5f:86:3d:ea: 72:51:ba:0d:02:39:37:2e:77:b8:e5:b8:09:b8:92:09:c4:c6: 88:f0:b7:27:e6:ee:de:72:49:63:62:65:8e:fe:19:6d:e3:d8: ea:d6:86:af:84:dd:5f:3e:81:b6:13:9a:6b:04:26:83:50:20: 6f:bf:45:d5:90:33:df:e0:16:88:f4:f0:53:b3:6f:f6:83:3e: ee:73:7d:3d:40:a9:49:ab:87:c1:59:18:2c:f2:be:3c:5a:aa: e5:20:d9:7d:4b:3a:3e:88:12:22:90:00:76:e3:60:10:d0:51: 23:e1:58:67 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDZUiGW3hblj/57h/Jm3iEt4fcXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNDAyMTYxMjU1MDBaFw0yNTAyMTQxMzAwMDBaMDMxMTAvBgNV BAMTKDE5NURCQjJGQkUyMUJFNTFBMjIwMTdGREUwNjg4MjkxQzA3MThGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHh2R+CJz4IUMzxkVPEOC71tq h9eTwVlhLIvxM4kCXlwRulmg5q0kq1Virzlee2cxUOiCuqFWKpLl/SipwYPIA2VA aH4u60/EPRCbfu6Qigf7gjHOLzIkKoGcaUsL4cffg4uzipshBq0k7kRx/ORlEtob RGbI7YJPY9IoASfZkBZOcKUw8B/8zixqMt8zT5ee15a2jNoHKfjxARS7aKwwzTC5 ZT9WZPAu8FYZNo75N4Sp8rif1427W2I2adXTimN92rtzDduUsDRLkxDNdwN9PLL9 pX3TMmlkIGjRVsaotvKuFw+KCd1VUgM6nOoxmN81inlJVgOtsTZPv0kWbOTjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUGV27L74hvlGiIBf94GiCkcBxj+MwHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxZGM3MWNkLWFjY2EtNDE1Yy1i MjgzLWI5MzcyYzBkNGNlOC8wLzMxMzAzMzJlMzEzMDMxMmUzMTM0MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM2Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZY8wDQYJ KoZIhvcNAQELBQADggEBAKoKAGZKQThg3XKU+TdGInN21hQF1XerLL4vYUQLd+dB RxRX5QluLq9RcZkAhKZJ0V2VX5m3hu6oSKz41udtTDivy4rPx9JI4QlYuD2xR7yF 5goOTTHnC4p9myMJkYUmw4acpvY8qAd9cNap5LFmUO1mTTDCBeniaSMSHV/oMNIM 1bFHec+rYNycOnrKX4Y96nJRug0COTcud7jluAm4kgnExojwtyfm7t5ySWNiZY7+ GW3j2OrWhq+E3V8+gbYTmmsEJoNQIG+/RdWQM9/gFoj08FOzb/aDPu5zfT1AqUmr h8FZGCzyvjxaquUg2X1LOj6IEiKQAHbjYBDQUSPhWGc= -----END CERTIFICATE-----Generated at Mon May 27 08:06:50 2024 by rpki-client on console-ams.rpki-client.org