$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa File: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (raw, json) Hash identifier: /WX8yCA5eyBT7h+J3vED28wdO9GDpBxOkwzal/IJark= Subject key identifier: CF:1B:3A:DB:72:F4:B6:74:50:1C:00:BD:E4:C6:03:33:1B:A6:79:AB Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 5CE5F4C2BC76F74BD1148B05CA53775E09D7F8B6 Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa Signing time: Sun 07 Jul 2024 05:00:01 +0000 ROA not before: Sun 07 Jul 2024 04:55:01 +0000 ROA not after: Sun 06 Jul 2025 05:00:01 +0000 asID: 138881 IP address blocks: 103.140.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e5:f4:c2:bc:76:f7:4b:d1:14:8b:05:ca:53:77:5e:09:d7:f8:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: Jul 7 04:55:01 2024 GMT Not After : Jul 6 05:00:01 2025 GMT Subject: CN=CF1B3ADB72F4B674501C00BDE4C603331BA679AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:4c:79:e1:42:5a:dc:0f:fa:d4:0e:e5:0b: 09:c7:b1:e4:ff:96:4d:51:d9:35:83:54:05:76:e0: 24:62:0b:b5:44:4f:44:cd:4b:47:20:6b:aa:f8:2e: ed:65:7c:5f:91:14:ab:8b:c2:d3:b3:d8:7f:39:d0: 64:ff:93:d9:48:d3:6f:f4:d9:69:f1:32:28:91:c7: 45:ab:d8:f5:81:96:7b:84:e7:33:87:e8:a4:07:eb: 1e:6b:d9:2a:61:b8:6c:58:02:35:32:d9:9a:f8:de: a7:04:6a:b9:d1:b9:be:86:3d:c6:08:fa:2e:c0:38: ab:2b:52:a7:c4:0d:c4:70:6a:9f:c3:cf:65:07:29: 57:55:91:65:54:73:a4:6c:49:8a:89:27:d2:9b:d2: 04:7a:10:f6:76:99:a2:3f:b5:da:35:39:f8:a4:74: 16:61:57:e5:8b:5e:3a:54:13:c3:b4:35:ad:3e:a4: 7d:47:58:b8:da:01:ee:96:85:9d:a4:49:18:80:7d: 31:96:7f:c8:62:97:31:1b:a0:24:82:91:36:5c:b0: 4f:88:c7:dd:2d:31:72:cf:53:bb:67:6b:62:7a:a1: 7d:a0:dc:06:0f:04:ca:33:c6:62:01:6b:d2:b5:b7: 02:0a:65:7d:5b:d0:97:2e:1a:58:3f:44:3b:ca:a1: d2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1B:3A:DB:72:F4:B6:74:50:1C:00:BD:E4:C6:03:33:1B:A6:79:AB X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.189.0/24 Signature Algorithm: sha256WithRSAEncryption 06:41:4a:d6:0e:f7:22:81:3b:29:b1:a0:da:3d:c3:60:6f:e1: fe:8d:5f:67:dc:f4:a1:b5:56:44:7d:10:c5:40:b2:8d:d3:ca: ce:34:7d:ac:26:fb:b0:bf:fb:00:62:b4:8d:60:55:d9:a2:c4: 86:2a:bc:43:e2:78:80:a0:1b:f3:94:9f:f6:04:12:87:7c:fb: 24:2e:1c:4a:24:e3:85:c6:4f:bb:75:1c:6e:c6:0f:2c:6a:c0: f9:f8:68:48:79:bc:14:16:d3:58:51:f6:99:65:4e:0c:94:8a: 38:f9:07:9d:ba:8e:a5:74:50:9b:ed:31:68:6f:9f:63:7a:7e: b8:ba:a2:d7:68:d0:ca:46:5b:44:b3:b8:84:99:88:8d:e0:6c: 27:d1:f9:6c:26:47:c6:31:ec:9d:5d:c1:0d:07:a5:e3:a7:2f: a6:b3:bd:9c:4c:d0:df:9b:9c:33:44:96:99:90:75:47:47:5a: 6b:4a:6a:09:33:47:1d:cc:61:d0:90:3c:2b:f9:fb:bc:15:ed: 56:e0:66:8d:83:11:94:6c:08:a7:87:fe:72:78:df:95:40:b9: 17:8c:cd:da:a2:7c:20:6b:a0:5e:87:0e:fb:28:f9:0f:11:f7: af:14:29:c2:5f:a2:ad:2b:25:c3:65:6b:a1:61:69:7d:69:47: 92:4d:84:40 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXOX0wrx290vRFIsFylN3XgnX+LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNDA3MDcwNDU1MDFaFw0yNTA3MDYwNTAwMDFaMDMxMTAvBgNV BAMTKENGMUIzQURCNzJGNEI2NzQ1MDFDMDBCREU0QzYwMzMzMUJBNjc5QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcpUx54UJa3A/61A7lCwnHseT/ lk1R2TWDVAV24CRiC7VET0TNS0cga6r4Lu1lfF+RFKuLwtOz2H850GT/k9lI02/0 2WnxMiiRx0Wr2PWBlnuE5zOH6KQH6x5r2SphuGxYAjUy2Zr43qcEarnRub6GPcYI +i7AOKsrUqfEDcRwap/Dz2UHKVdVkWVUc6RsSYqJJ9Kb0gR6EPZ2maI/tdo1Ofik dBZhV+WLXjpUE8O0Na0+pH1HWLjaAe6WhZ2kSRiAfTGWf8hilzEboCSCkTZcsE+I x90tMXLPU7tna2J6oX2g3AYPBMozxmIBa9K1twIKZX1b0JcuGlg/RDvKodKRAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUzxs623L0tnRQHAC95MYDMxumeaswHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyY2IwYjNhLTY5MmQtNDQyZS05 MzA4LTkwM2MwMmQ1NzE4Zi8wLzMxMzAzMzJlMzEzNDMwMmUzMTM4MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjL0wDQYJ KoZIhvcNAQELBQADggEBAAZBStYO9yKBOymxoNo9w2Bv4f6NX2fc9KG1VkR9EMVA so3Tys40fawm+7C/+wBitI1gVdmixIYqvEPieICgG/OUn/YEEod8+yQuHEok44XG T7t1HG7GDyxqwPn4aEh5vBQW01hR9pllTgyUijj5B526jqV0UJvtMWhvn2N6fri6 otdo0MpGW0SzuISZiI3gbCfR+WwmR8Yx7J1dwQ0HpeOnL6azvZxM0N+bnDNElpmQ dUdHWmtKagkzRx3MYdCQPCv5+7wV7VbgZo2DEZRsCKeH/nJ435VAuReMzdqifCBr oF6HDvso+Q8R968UKcJfoq0rJcNla6FhaX1pR5JNhEA= -----END CERTIFICATE-----Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org