$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa File: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (raw, json) Hash identifier: 1rkyCVMsMm8UGzFIE1MSIF0R/mGZtYbdNzqNou6odlg= Subject key identifier: 9F:E3:84:20:46:2A:A1:ED:46:98:15:04:D5:F0:EE:96:EC:2E:C7:F8 Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 490BBDE5E4E97AEEF7B8011880213FBD780B6DE9 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa Signing time: Thu 23 May 2024 04:00:00 +0000 ROA not before: Thu 23 May 2024 03:55:00 +0000 ROA not after: Thu 22 May 2025 04:00:00 +0000 asID: 131111 IP address blocks: 103.158.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0b:bd:e5:e4:e9:7a:ee:f7:b8:01:18:80:21:3f:bd:78:0b:6d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: May 23 03:55:00 2024 GMT Not After : May 22 04:00:00 2025 GMT Subject: CN=9FE38420462AA1ED46981504D5F0EE96EC2EC7F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:9d:c1:9d:71:a4:2e:bf:2a:2f:b1:49:1c: de:f2:a5:ed:47:9c:94:15:22:ec:8d:73:3d:05:ee: 0b:26:44:d4:6a:1d:11:3e:00:f8:65:7d:ac:da:76: 1a:9d:ac:33:05:87:69:92:38:3e:26:ee:a1:57:06: 06:7e:a4:1a:46:06:32:4d:70:31:47:f8:3e:86:21: bd:5a:95:6c:e2:18:c4:c9:e1:6f:f5:51:ce:97:4a: a3:48:a0:5b:66:4f:5d:f3:e3:df:07:6e:e8:73:71: 5b:8c:39:2b:67:2c:74:eb:30:b2:01:f8:95:f8:a4: 65:d1:1e:c5:52:93:0b:1a:66:8c:f6:8e:fe:c2:2f: 86:88:48:f2:60:b1:38:c3:0c:89:85:87:b0:17:0e: 71:ba:99:57:41:02:e7:2b:d3:75:67:6d:f7:ea:bf: d3:71:b8:62:55:d7:65:af:81:74:e7:0f:25:26:f4: 2a:63:82:40:a8:78:1a:d5:a7:5b:43:d0:cb:84:41: 9c:ad:7b:d5:bf:48:d3:d9:5f:af:8e:5a:70:3b:de: 65:15:a6:b4:76:2c:9f:88:39:2f:ea:e7:f8:e2:04: 1f:3b:6e:b3:e2:98:24:b9:ec:73:36:10:db:3d:e4: 4a:98:32:38:83:4b:48:33:c9:c3:a5:b4:d9:f5:19: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E3:84:20:46:2A:A1:ED:46:98:15:04:D5:F0:EE:96:EC:2E:C7:F8 X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.194.0/23 Signature Algorithm: sha256WithRSAEncryption 01:c5:b0:e3:a7:33:54:cb:f5:da:93:a3:64:59:79:60:09:b8: 6a:0b:2e:4a:5a:41:fd:a8:11:04:bd:8b:28:e8:28:36:73:23: 69:fc:ba:e9:3d:b1:6a:7f:0a:79:e7:38:00:32:7b:a2:cf:cf: 06:6e:aa:37:01:dd:3d:55:39:e7:0e:b9:b4:1c:3a:6f:e2:cc: 1c:4d:4e:83:50:8f:93:06:d6:da:68:93:4b:f5:70:77:b0:8d: 79:41:f2:20:83:ef:69:52:44:cf:82:a4:2c:22:67:76:ca:a5: e3:bd:fe:58:35:31:35:fc:cc:3b:d0:3c:d6:b0:6d:3a:9a:70: 0c:5c:17:df:cf:a2:0a:2b:bf:51:03:38:4f:b2:d9:fb:f1:73: fd:7d:6d:27:f0:d6:87:4a:fc:c8:39:98:c4:34:81:9b:43:c7: 68:fd:7f:12:a1:83:52:7a:87:cc:58:1a:39:24:51:07:1d:23: 04:b7:24:3e:7d:a9:a7:a5:65:09:ef:7f:0d:98:7a:bb:cd:1e: c1:f5:fe:4f:9a:2f:68:85:82:dc:7c:a3:fc:d3:f5:17:b1:33: 84:b8:f6:6b:d7:24:59:20:44:eb:40:ce:01:f2:d9:f7:2b:6f: 88:fc:6e:8f:9b:b7:41:fa:5b:23:17:b3:07:63:f7:34:a1:06: e3:c4:47:41 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSQu95eTpeu73uAEYgCE/vXgLbekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yNDA1MjMwMzU1MDBaFw0yNTA1MjIwNDAwMDBaMDMxMTAvBgNV BAMTKDlGRTM4NDIwNDYyQUExRUQ0Njk4MTUwNEQ1RjBFRTk2RUMyRUM3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7p3BnXGkLr8qL7FJHN7ype1H nJQVIuyNcz0F7gsmRNRqHRE+APhlfazadhqdrDMFh2mSOD4m7qFXBgZ+pBpGBjJN cDFH+D6GIb1alWziGMTJ4W/1Uc6XSqNIoFtmT13z498HbuhzcVuMOStnLHTrMLIB +JX4pGXRHsVSkwsaZoz2jv7CL4aISPJgsTjDDImFh7AXDnG6mVdBAucr03Vnbffq v9NxuGJV12WvgXTnDyUm9CpjgkCoeBrVp1tD0MuEQZyte9W/SNPZX6+OWnA73mUV prR2LJ+IOS/q5/jiBB87brPimCS57HM2ENs95EqYMjiDS0gzycOltNn1GSDVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUn+OEIEYqoe1GmBUE1fDuluwux/gwHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNDZiZGFkLWYxMzAtNDhhOS04 NTM0LTU0YmEzZThlZDYxZi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM5MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnsIwDQYJ KoZIhvcNAQELBQADggEBAAHFsOOnM1TL9dqTo2RZeWAJuGoLLkpaQf2oEQS9iyjo KDZzI2n8uuk9sWp/CnnnOAAye6LPzwZuqjcB3T1VOecOubQcOm/izBxNToNQj5MG 1tpok0v1cHewjXlB8iCD72lSRM+CpCwiZ3bKpeO9/lg1MTX8zDvQPNawbTqacAxc F9/Pogorv1EDOE+y2fvxc/19bSfw1odK/Mg5mMQ0gZtDx2j9fxKhg1J6h8xYGjkk UQcdIwS3JD59qaelZQnvfw2YervNHsH1/k+aL2iFgtx8o/zT9RexM4S49mvXJFkg ROtAzgHy2fcrb4j8bo+bt0H6WyMXswdj9zShBuPER0E= -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:19 2024 by rpki-client on console-fra.rpki-client.org