$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa File: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (raw, json) Hash identifier: ie2OSlltMh5IJuYjihFiK2xtHfUGtJskTHH3BlF6dQ8= Subject key identifier: BC:1D:BD:26:68:4B:9D:5D:AA:D7:AF:A1:E6:07:A1:05:A4:F0:3D:85 Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB Certificate serial: 10C284DEE90A5EECF3FB54D8A2B94BFB2766C53F Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa Signing time: Tue 02 Apr 2024 05:03:15 +0000 ROA not before: Tue 02 Apr 2024 04:58:15 +0000 ROA not after: Tue 01 Apr 2025 05:03:15 +0000 asID: 136841 IP address blocks: 103.100.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c2:84:de:e9:0a:5e:ec:f3:fb:54:d8:a2:b9:4b:fb:27:66:c5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB Validity Not Before: Apr 2 04:58:15 2024 GMT Not After : Apr 1 05:03:15 2025 GMT Subject: CN=BC1DBD26684B9D5DAAD7AFA1E607A105A4F03D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d7:57:9d:71:90:e0:6e:18:9a:05:3d:0a:1b: 95:a0:4c:5d:bf:43:0f:a4:58:dc:15:36:fe:0b:a3: 83:6d:e1:ec:5e:48:93:6d:a1:67:13:60:2a:34:1c: f7:14:0a:02:4a:c7:ff:60:06:6f:41:5e:69:7a:63: ff:60:96:e0:e7:72:42:8c:39:53:98:30:a6:99:59: d4:67:90:ff:08:a4:a4:76:20:a8:fa:ef:80:df:e9: 69:0a:9e:d3:ee:c4:a6:0c:15:c5:e3:c2:08:9c:60: 66:d6:bd:c0:2b:90:9f:83:e0:98:d4:fa:91:ab:46: 06:67:d6:5f:85:24:13:3c:a5:14:b5:13:55:b8:f9: f0:de:c6:c8:37:7f:64:c8:66:c9:59:22:4c:2b:98: 57:c1:aa:6c:aa:ef:92:06:a7:cb:33:b3:3c:04:ea: 11:7e:f1:1f:69:7d:6c:2f:15:05:0d:02:0b:95:37: 10:4b:ae:be:87:bb:71:86:e8:be:a5:f3:57:3e:14: 09:33:17:08:80:d9:41:f3:04:ce:87:a5:ed:3c:8b: ce:87:bf:ff:e0:3b:7d:e9:43:9d:3a:9b:c9:4e:d1: cb:d0:5e:5d:c4:1a:23:f1:7c:71:12:88:74:e1:86: 13:29:c1:7a:88:37:66:42:1f:a6:7f:40:f9:23:82: 61:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1D:BD:26:68:4B:9D:5D:AA:D7:AF:A1:E6:07:A1:05:A4:F0:3D:85 X509v3 Authority Key Identifier: keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.174.0/24 Signature Algorithm: sha256WithRSAEncryption 38:8e:ae:fe:33:2a:19:0b:d0:fa:96:ca:15:4f:22:5c:37:74: 2c:3b:e3:d3:21:d0:40:74:42:9b:0d:aa:d4:2d:57:d4:21:f0: 68:41:53:2d:7e:87:0c:0b:1b:e8:41:65:7c:04:e0:5c:68:5a: bc:23:15:27:c9:40:74:91:42:f4:a8:48:19:d0:1b:c2:1e:ff: 85:f7:f8:94:2d:fb:6e:97:96:d3:84:fc:81:78:21:5c:fd:76: bd:ad:be:8c:6e:f2:bc:db:cc:8a:6b:aa:1f:3b:0d:af:ef:48: 89:3d:81:8d:a8:41:4e:ea:b4:0e:9c:88:29:d4:53:9c:9c:da: 18:16:e2:90:79:86:e5:cf:93:17:cc:3e:04:09:e6:11:fc:b4: cb:9c:ad:a0:f2:d6:aa:bc:47:58:0b:80:22:ed:9e:6b:1f:5c: 6d:dd:45:f9:d5:39:2f:01:0a:53:e7:93:d2:35:83:7c:bc:6f: 67:88:a4:30:85:37:f0:e9:ac:06:58:4d:5c:e4:13:cd:29:d8: 72:76:fd:ff:fc:ec:49:06:09:7a:f3:df:4a:b7:7a:5a:56:90: 2c:b2:19:99:7b:1e:89:3c:bf:30:cd:87:a8:7f:ad:b0:15:a1: 80:73:17:8b:e8:e2:19:fb:fb:02:4e:5c:f3:52:fe:a2:25:48: a6:db:d2:39 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEMKE3ukKXuzz+1TYorlL+ydmxT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYz RTk2MkNBQjAeFw0yNDA0MDIwNDU4MTVaFw0yNTA0MDEwNTAzMTVaMDMxMTAvBgNV BAMTKEJDMURCRDI2Njg0QjlENURBQUQ3QUZBMUU2MDdBMTA1QTRGMDNEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg11edcZDgbhiaBT0KG5WgTF2/ Qw+kWNwVNv4Lo4Nt4exeSJNtoWcTYCo0HPcUCgJKx/9gBm9BXml6Y/9gluDnckKM OVOYMKaZWdRnkP8IpKR2IKj674Df6WkKntPuxKYMFcXjwgicYGbWvcArkJ+D4JjU +pGrRgZn1l+FJBM8pRS1E1W4+fDexsg3f2TIZslZIkwrmFfBqmyq75IGp8szszwE 6hF+8R9pfWwvFQUNAguVNxBLrr6Hu3GG6L6l81c+FAkzFwiA2UHzBM6Hpe08i86H v//gO33pQ506m8lO0cvQXl3EGiPxfHESiHThhhMpwXqIN2ZCH6Z/QPkjgmGJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUvB29JmhLnV2q16+h5gehBaTwPYUwHwYDVR0j BBgwFoAUZFydRFsnlmYu6YoD5QwSTz6WLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC82NDVDOUQ0NDVC Mjc5NjY2MkVFOThBMDNFNTBDMTI0RjNFOTYyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYzRTk2 MkNBQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMxMzAzMzJlMzEzMDMwMmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZK4wDQYJ KoZIhvcNAQELBQADggEBADiOrv4zKhkL0PqWyhVPIlw3dCw749Mh0EB0QpsNqtQt V9Qh8GhBUy1+hwwLG+hBZXwE4FxoWrwjFSfJQHSRQvSoSBnQG8Ie/4X3+JQt+26X ltOE/IF4IVz9dr2tvoxu8rzbzIprqh87Da/vSIk9gY2oQU7qtA6ciCnUU5yc2hgW 4pB5huXPkxfMPgQJ5hH8tMucraDy1qq8R1gLgCLtnmsfXG3dRfnVOS8BClPnk9I1 g3y8b2eIpDCFN/DprAZYTVzkE80p2HJ2/f/87EkGCXrz30q3elpWkCyyGZl7Hok8 vzDNh6h/rbAVoYBzF4vo4hn7+wJOXPNS/qIlSKbb0jk= -----END CERTIFICATE-----Generated at Mon May 6 11:49:27 2024 by rpki-client on console-fra.rpki-client.org