$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa File: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (raw, json) Hash identifier: wgQvt1XGBqI5XIiINdCJ3GL1hgDCidqyF88MXteZLoI= Subject key identifier: AA:CD:70:37:B6:A3:D5:70:12:70:7D:C9:C8:9F:92:28:F6:6F:F9:63 Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 12FE079F365D917E3284B203DCDCC7E968868CF0 Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa Signing time: Wed 03 Jan 2024 15:00:00 +0000 ROA not before: Wed 03 Jan 2024 14:55:00 +0000 ROA not after: Wed 01 Jan 2025 15:00:00 +0000 asID: 149949 IP address blocks: 103.187.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fe:07:9f:36:5d:91:7e:32:84:b2:03:dc:dc:c7:e9:68:86:8c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Jan 3 14:55:00 2024 GMT Not After : Jan 1 15:00:00 2025 GMT Subject: CN=AACD7037B6A3D57012707DC9C89F9228F66FF963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:a5:72:a2:43:dd:7d:4b:d0:65:83:b2:2c: 7c:30:7a:4a:26:22:66:0e:00:9e:2d:07:fc:4d:96: d5:a2:7c:16:f2:24:55:cf:10:73:0d:47:3d:a7:b3: 98:5c:40:d0:ed:ba:73:83:d9:13:bc:1f:96:2c:6c: dd:68:9b:ed:98:05:5a:3e:2d:e1:37:bd:80:44:12: d1:13:a9:f2:0d:c4:fa:eb:ce:dc:05:8e:b7:ad:ad: d3:f4:e3:86:db:62:63:2c:50:01:2e:a1:f3:ed:1c: a3:4d:b7:06:45:69:0f:a2:ae:12:50:e2:e8:36:bf: 6b:c3:45:0b:80:fb:b0:1f:37:03:b6:95:60:59:20: 83:08:eb:11:25:95:bc:3d:4c:d7:e1:af:aa:d9:10: 07:9f:38:a0:c9:e0:1a:13:27:1b:28:c2:60:50:75: 51:33:12:e3:c1:05:10:e9:d1:f8:08:d6:b0:bf:78: 9a:61:82:44:69:17:73:25:94:a9:af:49:65:6c:28: 8f:4d:37:c5:99:cd:82:97:76:86:06:ee:7a:9a:37: 19:ff:ae:74:41:5f:47:a0:be:d4:e7:39:5e:44:af: 51:8c:f9:64:9a:ae:af:11:f6:4a:77:9c:4a:5a:14: 65:f5:b9:95:b5:36:7a:4c:fd:53:41:f0:e7:c2:6a: 19:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CD:70:37:B6:A3:D5:70:12:70:7D:C9:C8:9F:92:28:F6:6F:F9:63 X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.88.0/23 Signature Algorithm: sha256WithRSAEncryption 47:ef:2a:4f:b3:59:af:c1:07:1c:87:b6:b5:a2:13:f0:e8:0b: 30:a7:f3:5d:b5:84:9d:b4:9a:0a:d5:62:8e:8e:59:3e:ff:27: 86:f2:0b:d1:16:92:fc:33:bd:b6:42:17:3d:26:c9:d5:01:f5: 96:02:4e:5f:06:69:88:06:b1:81:f7:2f:ab:2c:eb:5e:13:60: 74:5d:62:65:40:4e:86:d3:3c:4a:eb:59:2d:91:32:67:02:a9: cc:91:de:bf:d9:77:f0:41:93:a0:12:d9:fe:83:de:1f:aa:e8: 03:31:9c:d3:fc:2d:a1:06:12:09:9c:fb:d3:0c:0e:df:d6:19: e7:4e:d0:85:e2:3e:1e:ba:26:76:87:c5:fa:18:f6:d0:3d:63: 79:59:e9:6e:c2:09:17:b6:97:d2:d5:b6:09:09:0a:0a:0f:02: 47:dc:12:af:0c:9d:b2:fb:b6:29:2a:e6:71:36:2b:8e:f1:2d: a9:a4:9d:23:29:ed:58:1a:3d:da:83:0c:3f:58:9a:6f:55:33: 91:17:ec:eb:81:f4:92:f8:04:56:17:8f:80:f0:1b:5a:16:71: 8b:34:37:88:57:17:af:3b:9c:9b:72:f1:e1:81:7c:d5:fd:98: 7e:bb:58:19:2e:e6:4a:14:d6:36:47:5c:a4:9a:cc:2d:43:0c: 35:26:7f:17 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEv4HnzZdkX4yhLID3NzH6WiGjPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNDAxMDMxNDU1MDBaFw0yNTAxMDExNTAwMDBaMDMxMTAvBgNV BAMTKEFBQ0Q3MDM3QjZBM0Q1NzAxMjcwN0RDOUM4OUY5MjI4RjY2RkY5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDaVyokPdfUvQZYOyLHwwekom ImYOAJ4tB/xNltWifBbyJFXPEHMNRz2ns5hcQNDtunOD2RO8H5YsbN1om+2YBVo+ LeE3vYBEEtETqfINxPrrztwFjretrdP044bbYmMsUAEuofPtHKNNtwZFaQ+irhJQ 4ug2v2vDRQuA+7AfNwO2lWBZIIMI6xEllbw9TNfhr6rZEAefOKDJ4BoTJxsowmBQ dVEzEuPBBRDp0fgI1rC/eJphgkRpF3MllKmvSWVsKI9NN8WZzYKXdoYG7nqaNxn/ rnRBX0egvtTnOV5Er1GM+WSarq8R9kp3nEpaFGX1uZW1NnpM/VNB8OfCahkRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqs1wN7aj1XAScH3JyJ+SKPZv+WMwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NTBmMGY1LWI4ODMtNGIyNC05 NzkyLTdlOTU3YWY4OGJmOC8wLzMxMzAzMzJlMzEzODM3MmUzODM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7tYMA0GCSqG SIb3DQEBCwUAA4IBAQBH7ypPs1mvwQcch7a1ohPw6Aswp/NdtYSdtJoK1WKOjlk+ /yeG8gvRFpL8M722Qhc9JsnVAfWWAk5fBmmIBrGB9y+rLOteE2B0XWJlQE6G0zxK 61ktkTJnAqnMkd6/2XfwQZOgEtn+g94fqugDMZzT/C2hBhIJnPvTDA7f1hnnTtCF 4j4euiZ2h8X6GPbQPWN5WeluwgkXtpfS1bYJCQoKDwJH3BKvDJ2y+7YpKuZxNiuO 8S2ppJ0jKe1YGj3agww/WJpvVTORF+zrgfSS+ARWF4+A8BtaFnGLNDeIVxevO5yb cvHhgXzV/Zh+u1gZLuZKFNY2R1ykmswtQww1Jn8X -----END CERTIFICATE-----Generated at Sun Jun 23 09:04:58 2024 by rpki-client on console-fra.rpki-client.org