$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa File: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (raw, json) Hash identifier: XrO+qd1BLoaQBLZxMj2i0RtL9NTY4yJgufeeYQXCG4g= Subject key identifier: 08:67:DD:FB:10:F9:DC:03:1E:85:1D:E6:55:2C:EC:E0:A1:C8:06:BA Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 093492395867719E710E1CE1D9C376F9B24DA08B Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa Signing time: Wed 08 May 2024 15:00:00 +0000 ROA not before: Wed 08 May 2024 14:55:00 +0000 ROA not after: Wed 07 May 2025 15:00:00 +0000 asID: 142343 IP address blocks: 103.169.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:34:92:39:58:67:71:9e:71:0e:1c:e1:d9:c3:76:f9:b2:4d:a0:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: May 8 14:55:00 2024 GMT Not After : May 7 15:00:00 2025 GMT Subject: CN=0867DDFB10F9DC031E851DE6552CECE0A1C806BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:aa:48:cb:3b:83:f6:a2:40:0b:c2:5c:47: 24:e3:d3:b1:1e:1e:d5:9d:78:68:6b:2f:43:aa:f8: 72:53:fb:da:c3:61:6d:c3:4c:b8:ff:24:d3:24:42: 09:1b:d9:94:6a:73:4b:b7:98:4b:9e:f6:9a:66:03: 67:c9:ef:5d:cc:0d:09:24:6c:44:4a:5f:74:92:5b: 55:9d:23:a0:4e:1e:1b:fb:e0:53:c8:1c:66:ac:da: cd:3c:b6:6d:00:a9:5b:5d:ae:c7:3a:d2:de:35:da: 1e:fe:32:27:c6:a3:5d:eb:53:f8:c2:06:5a:8c:04: d0:05:12:36:ac:53:e9:ba:d1:c5:62:23:58:c1:6a: 64:95:73:49:4d:3d:8e:3d:81:bd:72:c8:82:03:81: 0e:7a:0a:c0:54:39:38:dc:77:71:c5:1d:e1:4a:40: 47:bc:f5:25:a7:54:47:3b:db:0e:fd:b1:e2:fd:b6: 37:6d:8c:36:97:97:f0:7c:93:d0:e2:46:f7:bd:fe: 6c:93:70:c0:7d:d7:2b:bd:7e:2b:e7:d8:8b:47:c5: 6f:41:f2:45:e4:4e:28:52:a1:67:00:85:63:24:c6: c7:fa:6b:c7:a6:2f:e0:b4:97:a9:81:1c:5f:55:3d: 38:89:cc:1d:7e:6c:92:4b:c1:38:1b:e6:85:e5:af: d1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:67:DD:FB:10:F9:DC:03:1E:85:1D:E6:55:2C:EC:E0:A1:C8:06:BA X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.138.0/23 Signature Algorithm: sha256WithRSAEncryption ac:5e:1d:ad:83:2a:49:0b:e4:b5:0f:76:37:23:a8:73:b6:c2: 10:82:00:ad:5e:47:ae:11:de:26:c4:ca:da:42:0c:1e:f9:ff: 01:d4:c7:ab:1a:7d:78:e3:25:3d:77:0a:93:e2:f0:fb:23:9a: b4:b4:78:00:80:c9:b1:70:48:a3:7c:2e:80:39:9f:1f:39:ea: f0:1e:dd:59:e6:89:1d:ea:fa:aa:01:b6:e9:9a:94:ef:33:6c: b2:dc:83:79:af:7c:e3:49:f7:10:99:52:51:cf:21:f7:27:00: 58:bd:b0:00:0f:6d:fa:13:80:be:e3:b9:bc:7b:db:36:af:ef: 58:99:39:f4:39:85:7d:b7:ab:ce:9d:42:35:c7:ad:f8:2e:f6: f2:ff:8c:a7:8e:ed:d2:7f:b8:c8:3f:00:1a:fd:25:d0:95:73: 12:e5:1f:44:31:e4:3b:a5:c7:c1:19:b5:7f:29:0a:da:9c:61: 60:6a:35:67:a5:d2:2a:4a:da:b6:1c:ed:b3:50:99:1c:27:48: 64:a2:66:dc:aa:f1:1c:7c:2c:bb:9b:01:28:df:cc:bb:a5:bc: 48:a5:0a:ec:b8:61:78:12:73:43:4c:b2:8e:b5:19:a5:00:f5: 65:41:20:f0:86:ac:49:36:16:c2:89:d1:e6:d6:33:bd:a0:17: 2e:c0:97:5b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCTSSOVhncZ5xDhzh2cN2+bJNoIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNDA1MDgxNDU1MDBaFw0yNTA1MDcxNTAwMDBaMDMxMTAvBgNV BAMTKDA4NjdEREZCMTBGOURDMDMxRTg1MURFNjU1MkNFQ0UwQTFDODA2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzV6pIyzuD9qJAC8JcRyTj07Ee HtWdeGhrL0Oq+HJT+9rDYW3DTLj/JNMkQgkb2ZRqc0u3mEue9ppmA2fJ713MDQkk bERKX3SSW1WdI6BOHhv74FPIHGas2s08tm0AqVtdrsc60t412h7+MifGo13rU/jC BlqMBNAFEjasU+m60cViI1jBamSVc0lNPY49gb1yyIIDgQ56CsBUOTjcd3HFHeFK QEe89SWnVEc72w79seL9tjdtjDaXl/B8k9DiRve9/myTcMB91yu9fivn2ItHxW9B 8kXkTihSoWcAhWMkxsf6a8emL+C0l6mBHF9VPTiJzB1+bJJLwTgb5oXlr9E1AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUCGfd+xD53AMehR3mVSzs4KHIBrowHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0Y2E1ODY4LTU3ZTktNDliOS1i ZmUxLTQ4ZDc4MzM0YTE4Yy8wLzMxMzAzMzJlMzEzNjM5MmUzMTMzMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM0MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqYowDQYJ KoZIhvcNAQELBQADggEBAKxeHa2DKkkL5LUPdjcjqHO2whCCAK1eR64R3ibEytpC DB75/wHUx6safXjjJT13CpPi8PsjmrS0eACAybFwSKN8LoA5nx856vAe3VnmiR3q +qoBtumalO8zbLLcg3mvfONJ9xCZUlHPIfcnAFi9sAAPbfoTgL7jubx72zav71iZ OfQ5hX23q86dQjXHrfgu9vL/jKeO7dJ/uMg/ABr9JdCVcxLlH0Qx5Dulx8EZtX8p CtqcYWBqNWel0ipK2rYc7bNQmRwnSGSiZtyq8Rx8LLubASjfzLulvEilCuy4YXgS c0NMso61GaUA9WVBIPCGrEk2FsKJ0ebWM72gFy7Al1s= -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:13 2024 by rpki-client on console-ams.rpki-client.org