$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa File: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (raw, json) Hash identifier: /o6tmQkGvPsOq4Lw5BPVkwo19QVwkW2zkWmc/uGp+xM= Subject key identifier: 52:9B:B2:1C:79:64:4E:9B:40:A1:39:3B:B2:46:F0:B1:CA:E2:75:37 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 554A189C8614E8210BC31FC932A839E83B9EEA4A Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa Signing time: Sat 29 Jun 2024 02:00:00 +0000 ROA not before: Sat 29 Jun 2024 01:55:00 +0000 ROA not after: Sat 28 Jun 2025 02:00:00 +0000 asID: 142327 IP address blocks: 103.168.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 05:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4a:18:9c:86:14:e8:21:0b:c3:1f:c9:32:a8:39:e8:3b:9e:ea:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Jun 29 01:55:00 2024 GMT Not After : Jun 28 02:00:00 2025 GMT Subject: CN=529BB21C79644E9B40A1393BB246F0B1CAE27537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:47:ef:05:b7:5b:c3:9d:5f:16:9f:b9:e0: 23:1e:ef:a2:47:d8:c9:44:02:46:47:e4:63:d4:27: ed:2f:52:cb:45:fd:e3:b0:30:e7:8f:d5:0d:d0:06: d4:b0:8f:f7:2d:06:86:d3:a9:f9:34:22:37:d6:e5: 69:74:66:39:8e:72:e5:24:ed:8f:74:3e:01:06:42: 36:a3:56:72:be:7e:19:ef:e9:b1:51:1c:b5:1d:ec: 5f:46:dd:a6:e5:11:4f:63:63:ab:fa:be:10:1c:95: 78:de:6b:f2:b3:4d:9f:8c:d0:01:4d:c6:5f:94:44: 0d:db:05:6d:2c:ea:49:48:a0:cc:2d:dd:28:0e:95: 4f:04:57:6b:a6:1c:f3:bf:7d:5b:41:f2:48:c1:45: 55:dd:7a:38:80:97:e3:e1:f7:c3:e9:49:d8:b2:60: 2e:3f:13:47:54:01:c2:8e:ed:02:33:12:b0:eb:f2: 22:40:7e:f1:44:c4:0a:07:de:be:5c:e4:86:a7:82: d2:4e:4a:55:8c:87:75:67:8d:6c:9a:3f:0d:b6:99: a8:a4:a1:d0:df:c4:ef:4c:89:91:e4:36:51:94:dc: 42:4a:6c:23:e5:ee:dc:68:a2:45:ce:bd:9b:67:dd: f4:62:d5:14:fb:00:75:fc:40:db:e0:a3:50:bd:07: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9B:B2:1C:79:64:4E:9B:40:A1:39:3B:B2:46:F0:B1:CA:E2:75:37 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.250.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:f9:dd:d7:66:21:0d:9d:00:85:78:dc:91:5a:d9:a2:b4:a8: 69:14:70:3f:41:8f:5c:d8:8b:45:b1:e4:c0:ad:91:e9:d5:73: 1a:a3:85:5f:57:3b:f8:f9:35:00:bc:b0:be:17:2e:82:c4:3f: 1b:1d:f9:eb:17:df:54:54:4d:9d:4a:8e:66:49:fa:45:84:b6: ef:db:e5:6f:3f:45:fc:65:30:0d:09:ab:14:c4:94:07:03:4f: a0:90:f0:b2:66:72:0c:bc:6d:ad:da:44:17:f8:85:fc:75:89: 8c:7e:53:98:ea:59:dd:58:b2:77:01:7b:ff:94:12:5f:05:35: 2c:37:c1:23:b9:fb:46:4a:ed:43:08:04:c1:23:fa:8d:c4:3c: 40:ce:bc:31:ac:e7:19:8b:cc:64:71:03:d0:aa:c0:e0:67:f8: ed:bf:ce:4b:4e:bc:18:7a:67:37:5f:bb:32:cf:d7:dd:7e:f8: f8:92:01:47:7b:1e:8d:d9:d6:41:86:24:98:fa:89:05:7a:b8: 3b:ba:bc:bb:ed:bf:de:30:20:4a:47:56:05:60:85:1b:a1:df: bf:78:36:b0:97:19:4e:21:d4:d2:c6:ed:fb:47:96:b3:c8:7f: 4b:b4:2f:54:5d:d2:fd:de:88:dd:65:cb:e9:39:b8:91:f1:93: 58:b0:5a:86 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUVUoYnIYU6CELwx/JMqg56Due6kowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNDA2MjkwMTU1MDBaFw0yNTA2MjgwMjAwMDBaMDMxMTAvBgNV BAMTKDUyOUJCMjFDNzk2NDRFOUI0MEExMzkzQkIyNDZGMEIxQ0FFMjc1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/UfvBbdbw51fFp+54CMe76JH 2MlEAkZH5GPUJ+0vUstF/eOwMOeP1Q3QBtSwj/ctBobTqfk0IjfW5Wl0ZjmOcuUk 7Y90PgEGQjajVnK+fhnv6bFRHLUd7F9G3ablEU9jY6v6vhAclXjea/KzTZ+M0AFN xl+URA3bBW0s6klIoMwt3SgOlU8EV2umHPO/fVtB8kjBRVXdejiAl+Ph98PpSdiy YC4/E0dUAcKO7QIzErDr8iJAfvFExAoH3r5c5IangtJOSlWMh3VnjWyaPw22maik odDfxO9MiZHkNlGU3EJKbCPl7txookXOvZtn3fRi1RT7AHX8QNvgo1C9Bxa5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUUpuyHHlkTptAoTk7skbwscridTcwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzOGQ1ODBiLTQ1MmUtNDJkNy1i MDQxLTkwMWRjMzNkNjg1Ny8wLzMxMzAzMzJlMzEzNjM4MmUzMjM1MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzMyMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqPowDQYJ KoZIhvcNAQELBQADggEBAGr53ddmIQ2dAIV43JFa2aK0qGkUcD9Bj1zYi0Wx5MCt kenVcxqjhV9XO/j5NQC8sL4XLoLEPxsd+esX31RUTZ1KjmZJ+kWEtu/b5W8/Rfxl MA0JqxTElAcDT6CQ8LJmcgy8ba3aRBf4hfx1iYx+U5jqWd1YsncBe/+UEl8FNSw3 wSO5+0ZK7UMIBMEj+o3EPEDOvDGs5xmLzGRxA9CqwOBn+O2/zktOvBh6ZzdfuzLP 191++PiSAUd7Ho3Z1kGGJJj6iQV6uDu6vLvtv94wIEpHVgVghRuh3794NrCXGU4h 1NLG7ftHlrPIf0u0L1Rd0v3eiN1ly+k5uJHxk1iwWoY= -----END CERTIFICATE-----Generated at Sat Nov 23 06:11:00 2024 by rpki-client on console-ams.rpki-client.org