$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa File: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (raw, json) Hash identifier: 1c7vF0j+180KK05qO1wx3UahSJfHdN6s0TH81QKT2fw= Subject key identifier: 26:AF:AC:1E:D4:58:44:70:B5:8F:F7:3D:2A:2F:B8:1D:91:4A:3B:BE Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 4409B992CDC2BD3F56D60B7F3FF45DA7A72CAF0A Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa Signing time: Fri 19 Jul 2024 17:00:00 +0000 ROA not before: Fri 19 Jul 2024 16:55:00 +0000 ROA not after: Fri 18 Jul 2025 17:00:00 +0000 asID: 147078 IP address blocks: 103.173.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Feb 2025 11:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:09:b9:92:cd:c2:bd:3f:56:d6:0b:7f:3f:f4:5d:a7:a7:2c:af:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Jul 19 16:55:00 2024 GMT Not After : Jul 18 17:00:00 2025 GMT Subject: CN=26AFAC1ED4584470B58FF73D2A2FB81D914A3BBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e8:d4:5d:1d:75:82:14:f5:7f:0c:8b:1c:47: 0e:6f:d6:b0:6e:21:c5:47:de:d9:ea:5e:ec:88:a7: 7d:a4:3c:6f:d9:d4:9c:aa:27:80:64:60:2f:99:2e: 67:c1:be:10:ab:fa:e7:18:49:13:c1:49:5b:49:bc: b5:21:db:c0:df:8a:b7:f2:4e:f9:7f:de:db:b8:37: 9b:2c:35:78:89:4f:8c:e5:1d:2f:0d:16:be:9f:f3: 11:af:03:3b:c2:34:3f:6d:69:c1:a0:da:4c:ce:6c: 25:6e:e0:7b:ff:63:3d:f8:00:d3:66:e2:20:be:bd: 52:7e:bc:dd:d2:f7:e9:5e:a0:cb:f9:97:b2:4f:e0: 70:3c:d9:37:40:1a:42:77:93:5f:c3:90:83:76:26: c8:a3:77:74:00:bb:50:38:07:98:f2:80:2d:90:4c: c5:ee:d9:a5:20:20:82:69:3e:b6:4a:ef:57:45:8c: cc:65:5d:d9:40:75:60:48:73:59:d1:15:d4:7b:62: fb:65:a2:8d:2c:db:94:60:ea:a9:80:9f:a0:63:44: ef:59:7a:18:37:7a:c7:78:77:27:78:f1:1a:5f:86: 1e:81:62:4e:56:b0:43:69:43:1c:b0:06:2c:e3:68: 05:4a:ce:31:aa:74:39:83:84:d2:12:5e:ec:0f:1e: a8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AF:AC:1E:D4:58:44:70:B5:8F:F7:3D:2A:2F:B8:1D:91:4A:3B:BE X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.138.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:99:ea:dc:f8:b0:f0:c9:d5:c1:7e:02:f5:09:e2:8a:49:f3: c9:bb:45:83:4c:4e:91:e2:fb:08:99:bc:e6:62:96:28:25:60: 45:ec:92:8d:9f:86:f9:7f:7c:f0:a2:1a:72:b7:7b:8d:27:b2: 3b:30:50:a2:b2:ac:ad:29:2d:e3:3a:44:2c:79:35:fe:7d:7d: 9b:77:8e:fb:19:74:9a:5d:fa:a0:97:6c:c9:43:d7:02:dc:f8: 44:d1:0f:83:13:b6:3d:eb:0a:34:5e:2e:20:ea:ae:c4:67:8a: 25:de:95:7b:dc:bd:d7:9c:58:8b:71:8e:63:70:33:28:a3:59: ed:4f:57:1f:48:28:1d:78:59:4f:4b:bf:2f:82:ba:6a:0d:25: 24:58:43:bb:b6:cf:e9:2b:4e:7c:5d:29:2f:9d:f1:b6:bc:1c: 71:e6:d5:ce:37:07:a8:ec:08:26:bb:13:c0:5c:3e:39:e3:00: c1:ee:9e:e2:cb:80:72:a2:72:c0:8b:67:10:97:8e:9f:03:90: 8e:04:79:b7:cd:1e:dc:3e:f0:03:c3:c7:43:d6:91:23:dd:ce: 97:b8:eb:70:f8:2b:2c:ea:3b:38:8d:34:ea:83:f7:24:15:5d: 20:ba:e6:8d:e1:03:a1:0f:09:f0:8b:55:64:57:d6:2a:01:20: 3b:ed:40:0d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIURAm5ks3CvT9W1gt/P/Rdp6csrwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNDA3MTkxNjU1MDBaFw0yNTA3MTgxNzAwMDBaMDMxMTAvBgNV BAMTKDI2QUZBQzFFRDQ1ODQ0NzBCNThGRjczRDJBMkZCODFEOTE0QTNCQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6NRdHXWCFPV/DIscRw5v1rBu IcVH3tnqXuyIp32kPG/Z1JyqJ4BkYC+ZLmfBvhCr+ucYSRPBSVtJvLUh28Dfirfy Tvl/3tu4N5ssNXiJT4zlHS8NFr6f8xGvAzvCND9tacGg2kzObCVu4Hv/Yz34ANNm 4iC+vVJ+vN3S9+leoMv5l7JP4HA82TdAGkJ3k1/DkIN2Jsijd3QAu1A4B5jygC2Q TMXu2aUgIIJpPrZK71dFjMxlXdlAdWBIc1nRFdR7Yvtloo0s25Rg6qmAn6BjRO9Z ehg3esd4dyd48Rpfhh6BYk5WsENpQxywBizjaAVKzjGqdDmDhNISXuwPHqjvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUJq+sHtRYRHC1j/c9Ki+4HZFKO74wHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1ZWZjYmYwLTY2ZWMtNDhkMy1i MjIxLTBmMDk2ODZkNTgxOC8wLzMxMzAzMzJlMzEzNzMzMmUzMTMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrYowDQYJ KoZIhvcNAQELBQADggEBAI2Z6tz4sPDJ1cF+AvUJ4opJ88m7RYNMTpHi+wiZvOZi liglYEXsko2fhvl/fPCiGnK3e40nsjswUKKyrK0pLeM6RCx5Nf59fZt3jvsZdJpd +qCXbMlD1wLc+ETRD4MTtj3rCjReLiDqrsRniiXelXvcvdecWItxjmNwMyijWe1P Vx9IKB14WU9Lvy+CumoNJSRYQ7u2z+krTnxdKS+d8ba8HHHm1c43B6jsCCa7E8Bc PjnjAMHunuLLgHKicsCLZxCXjp8DkI4EebfNHtw+8APDx0PWkSPdzpe463D4Kyzq OziNNOqD9yQVXSC65o3hA6EPCfCLVWRX1ioBIDvtQA0= -----END CERTIFICATE-----Generated at Fri Feb 21 11:02:44 2025 by rpki-client