$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa File: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (raw, json) Hash identifier: NwOCdDEwU+lfRzvRTjyFDEHr2OOgvg/IeOTrwJ/bAHQ= Subject key identifier: C6:09:C8:88:FF:BC:0E:B5:DC:B8:F3:9B:69:93:2A:9C:51:71:3C:4D Certificate issuer: /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Certificate serial: 1D0D07D0BD8E9704639C33E3B8198A91DB03A674 Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa Signing time: Thu 02 Nov 2023 13:01:10 +0000 ROA not before: Thu 02 Nov 2023 12:56:10 +0000 ROA not after: Thu 31 Oct 2024 13:01:10 +0000 asID: 151586 IP address blocks: 103.119.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0d:07:d0:bd:8e:97:04:63:9c:33:e3:b8:19:8a:91:db:03:a6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Validity Not Before: Nov 2 12:56:10 2023 GMT Not After : Oct 31 13:01:10 2024 GMT Subject: CN=C609C888FFBC0EB5DCB8F39B69932A9C51713C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:06:25:db:4e:51:2d:eb:ad:00:b0:53:ad: d9:f0:90:f4:60:96:dc:86:2d:01:de:d1:4c:fa:3f: 8c:46:a7:1d:99:39:b4:2e:2d:7c:d9:84:7e:cd:b3: 69:c8:20:e5:b5:d0:6b:cf:08:ee:d7:4e:79:5b:94: c7:02:8e:b2:9e:93:f1:85:68:b6:e5:ad:60:fb:98: b6:37:08:05:7d:0d:db:de:fd:05:10:d8:ce:79:f8: c9:17:32:0c:21:aa:29:a8:65:e4:84:99:e2:96:e6: 58:a7:c8:fd:e6:96:58:03:12:4b:55:b6:7a:af:99: a2:93:1f:b0:8e:e6:aa:ec:5b:72:99:ef:d5:9f:47: 56:70:a0:89:2b:d1:39:e1:b9:a9:4b:5e:c6:aa:bd: 5f:1c:b1:35:e5:a8:be:52:20:d0:3f:49:95:ee:f3: bb:48:39:a6:9b:4f:43:77:af:16:63:df:a5:65:31: 5c:40:25:41:33:47:72:d1:d2:49:80:af:4d:3e:3a: aa:4b:f7:3f:38:d9:e2:b5:9c:d3:72:1a:9a:79:19: 3d:60:87:73:a1:9b:81:6c:b0:1e:35:0e:cc:94:46: 3a:b3:c5:34:e7:2c:e9:cc:e6:69:d9:db:ee:8b:bd: 3b:c7:ef:99:6f:a5:8a:c8:49:52:96:59:a3:09:e9: 7f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:09:C8:88:FF:BC:0E:B5:DC:B8:F3:9B:69:93:2A:9C:51:71:3C:4D X509v3 Authority Key Identifier: keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.119.236.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:79:dc:99:e5:ac:2e:44:28:76:ab:44:a6:75:40:51:a7:51: e8:d9:b3:97:b7:74:55:bb:f7:61:f5:1a:46:ba:62:3a:ad:f4: 50:27:5c:f6:1d:54:7e:06:28:5a:02:f6:b4:0b:4d:bc:37:32: 08:d5:d2:c2:5a:6c:2b:a4:22:d7:46:a2:f9:70:df:4d:62:fb: b3:a7:29:a3:c1:86:2b:b4:74:f3:30:8f:ad:fa:5a:cc:45:4e: d3:7c:6c:4e:75:55:29:01:ed:b4:f1:dd:ed:b2:df:90:b2:ef: 1e:74:69:d4:25:77:65:b2:b6:42:87:89:20:55:9b:85:2a:d0: 1d:f9:0a:f6:36:a0:f6:aa:93:60:e2:9b:16:94:92:e9:18:0d: 9e:af:70:e8:68:7d:ab:47:91:84:f2:4f:d8:ae:c5:98:e1:a0: 9d:77:47:b5:dd:5f:5f:09:98:29:79:71:09:1d:bb:41:0d:cd: d1:49:96:1b:68:1f:4f:88:7d:e1:e1:b3:c8:02:a6:f2:5c:b5: 6b:d5:eb:93:28:c0:c9:12:96:ef:61:c0:66:e8:30:ef:69:b4: 1a:5a:35:4f:68:3a:5c:f5:6a:32:36:34:a5:d2:3d:bc:05:db: 51:ec:17:ae:67:a7:a4:42:68:ee:88:cd:e0:1f:64:ad:05:d1: 4d:7c:43:57 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHQ0H0L2OlwRjnDPjuBmKkdsDpnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2 MEU3MzQ5OTAeFw0yMzExMDIxMjU2MTBaFw0yNDEwMzExMzAxMTBaMDMxMTAvBgNV BAMTKEM2MDlDODg4RkZCQzBFQjVEQ0I4RjM5QjY5OTMyQTlDNTE3MTNDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrwgYl205RLeutALBTrdnwkPRg ltyGLQHe0Uz6P4xGpx2ZObQuLXzZhH7Ns2nIIOW10GvPCO7XTnlblMcCjrKek/GF aLblrWD7mLY3CAV9Ddve/QUQ2M55+MkXMgwhqimoZeSEmeKW5linyP3mllgDEktV tnqvmaKTH7CO5qrsW3KZ79WfR1ZwoIkr0TnhualLXsaqvV8csTXlqL5SINA/SZXu 87tIOaabT0N3rxZj36VlMVxAJUEzR3LR0kmAr00+OqpL9z842eK1nNNyGpp5GT1g h3Ohm4FssB41DsyURjqzxTTnLOnM5mnZ2+6LvTvH75lvpYrISVKWWaMJ6X9JAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUxgnIiP+8DrXcuPObaZMqnFFxPE0wHwYDVR0j BBgwFoAUeCWpww1a6kFEdA6bEqPAvGDnNJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDAwYjBjMi03ZWZkLTQyNzgtOThlNC1kNGY3YzI3M2VlYzIvMC83ODI1QTlDMzBE NUFFQTQxNDQ3NDBFOUIxMkEzQzBCQzYwRTczNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2MEU3 MzQ5OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwMDBiMGMyLTdlZmQtNDI3OC05 OGU0LWQ0ZjdjMjczZWVjMi8wLzMxMzAzMzJlMzEzMTM5MmUzMjMzMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTM4MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnd+wwDQYJ KoZIhvcNAQELBQADggEBAD153JnlrC5EKHarRKZ1QFGnUejZs5e3dFW792H1Gka6 Yjqt9FAnXPYdVH4GKFoC9rQLTbw3MgjV0sJabCukItdGovlw301i+7OnKaPBhiu0 dPMwj636WsxFTtN8bE51VSkB7bTx3e2y35Cy7x50adQld2WytkKHiSBVm4Uq0B35 CvY2oPaqk2DimxaUkukYDZ6vcOhofatHkYTyT9iuxZjhoJ13R7XdX18JmCl5cQkd u0ENzdFJlhtoH0+IfeHhs8gCpvJctWvV65MowMkSlu9hwGboMO9ptBpaNU9oOlz1 ajI2NKXSPbwF21HsF65np6RCaO6IzeAfZK0F0U18Q1c= -----END CERTIFICATE-----Generated at Sat Jun 22 14:21:50 2024 by rpki-client on console-ams.rpki-client.org