$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa File: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (raw, json) Hash identifier: o8TgHu9bKtFBEm66HGqEcpnp2K+FvKSaenS62XPEG8E= Subject key identifier: 24:AC:CF:D2:34:49:FA:29:AE:8C:73:FF:FC:99:38:8B:5C:71:1B:4F Certificate issuer: /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Certificate serial: 5D8B42F02B7B84A0216824576049FB9794E4E7B2 Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa Signing time: Thu 22 Jun 2023 04:00:01 +0000 ROA not before: Thu 22 Jun 2023 03:55:01 +0000 ROA not after: Thu 20 Jun 2024 04:00:01 +0000 asID: 131111 IP address blocks: 103.158.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Apr 2024 21:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:8b:42:f0:2b:7b:84:a0:21:68:24:57:60:49:fb:97:94:e4:e7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7 Validity Not Before: Jun 22 03:55:01 2023 GMT Not After : Jun 20 04:00:01 2024 GMT Subject: CN=24ACCFD23449FA29AE8C73FFFC99388B5C711B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:2c:41:b5:31:55:de:ca:17:22:c4:7c:a9: 15:ed:29:c4:56:e1:a1:83:ae:d6:78:d9:1b:4b:bb: 8b:75:0e:2f:81:c2:e6:7e:ef:a5:68:ad:0e:37:b9: 99:71:ff:8c:27:c4:cf:6b:4d:85:b5:36:f8:83:c8: 32:4d:c3:74:d3:a2:18:3c:40:d8:8a:4f:61:0a:7e: 82:3c:95:75:c0:da:34:82:89:cf:57:4a:c2:6a:dc: f7:f0:d6:05:51:33:90:54:90:5f:a0:1a:a8:9f:07: 9d:51:ec:70:0a:59:81:84:5a:18:66:f7:26:1a:30: ba:80:fb:5b:26:19:5b:b5:2b:9c:2e:d4:e3:13:d7: d8:4f:f4:e3:82:cc:10:c6:4e:46:ac:3e:dd:5c:5f: b1:bc:98:74:ff:02:17:08:4a:a2:a6:e5:ef:ef:17: 6f:03:84:9d:03:71:ee:f4:49:3b:92:4d:cb:d9:53: 31:43:3a:54:5a:34:b6:5a:13:60:6b:55:54:27:03: 9e:fa:5d:2d:5b:e7:04:02:a0:ea:fb:5e:02:28:7f: 0c:2c:ef:c3:6f:7c:da:ab:c5:e7:cc:08:1f:2a:31: 1c:8d:da:76:3c:0a:e6:71:6f:f2:16:65:45:0f:ea: 80:4d:e6:db:20:ad:db:58:bf:cf:2c:6f:c2:17:fb: c7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AC:CF:D2:34:49:FA:29:AE:8C:73:FF:FC:99:38:8B:5C:71:1B:4F X509v3 Authority Key Identifier: keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.194.0/24 Signature Algorithm: sha256WithRSAEncryption a5:f9:3a:32:a6:12:9b:04:12:2f:48:35:33:7e:3f:de:95:c8: af:dd:57:87:1d:16:e4:5c:ee:bb:64:4d:bb:82:5a:a4:4c:e4: 8d:c7:df:c2:f7:ef:c3:e7:4f:ba:f6:6b:34:6c:56:20:dc:f6: 94:dc:ed:46:6d:c1:1a:55:a0:65:21:3c:51:99:67:a4:60:fc: 9b:e6:fd:c9:73:fb:7b:91:9a:6e:c2:b1:00:1e:4e:7d:f2:e2: a4:24:7c:86:ce:57:f6:cc:37:72:c0:85:ae:f1:24:24:e4:34: f0:54:f6:c4:2f:13:53:1d:f8:35:cf:36:da:fa:48:9b:cd:ad: 91:83:93:f5:5e:40:c8:49:f3:5a:15:93:f4:99:65:bd:dc:bd: d5:27:c0:08:b8:c5:5e:8e:33:b9:23:8a:ae:82:21:db:2c:4f: d1:10:80:ae:91:58:d5:f6:1c:01:e8:50:e6:05:54:fa:25:18: 58:28:2f:6f:27:1d:c6:1e:10:3f:0b:f5:2c:2d:95:ab:ea:51: 1c:4b:51:5a:a6:84:31:25:81:fa:00:14:a1:0f:2b:ec:87:c2: 27:cf:08:06:7f:e4:f2:6e:0f:99:2c:26:ad:c8:6b:4c:e9:e9: cc:51:98:f9:1b:d1:16:3d:06:47:b2:0a:5c:b9:b7:df:9d:ed: c9:80:01:19 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXYtC8Ct7hKAhaCRXYEn7l5Tk57IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlD MEYyRTNGNzAeFw0yMzA2MjIwMzU1MDFaFw0yNDA2MjAwNDAwMDFaMDMxMTAvBgNV BAMTKDI0QUNDRkQyMzQ0OUZBMjlBRThDNzNGRkZDOTkzODhCNUM3MTFCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUSxBtTFV3soXIsR8qRXtKcRW 4aGDrtZ42RtLu4t1Di+BwuZ+76VorQ43uZlx/4wnxM9rTYW1NviDyDJNw3TTohg8 QNiKT2EKfoI8lXXA2jSCic9XSsJq3Pfw1gVRM5BUkF+gGqifB51R7HAKWYGEWhhm 9yYaMLqA+1smGVu1K5wu1OMT19hP9OOCzBDGTkasPt1cX7G8mHT/AhcISqKm5e/v F28DhJ0Dce70STuSTcvZUzFDOlRaNLZaE2BrVVQnA576XS1b5wQCoOr7XgIofwws 78NvfNqrxefMCB8qMRyN2nY8CuZxb/IWZUUP6oBN5tsgrdtYv88sb8IX+8eZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUJKzP0jRJ+imujHP//Jk4i1xxG08wHwYDVR0j BBgwFoAUagLcEPQfzg60l5jdvPMfycDy4/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTQ2YmRhZC1mMTMwLTQ4YTktODUzNC01NGJhM2U4ZWQ2MWYvMC82QTAyREMxMEY0 MUZDRTBFQjQ5Nzk4RERCQ0YzMUZDOUMwRjJFM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkEwMkRDMTBGNDFGQ0UwRUI0OTc5OEREQkNGMzFGQzlDMEYy RTNGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNDZiZGFkLWYxMzAtNDhhOS04 NTM0LTU0YmEzZThlZDYxZi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM5MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnsIwDQYJ KoZIhvcNAQELBQADggEBAKX5OjKmEpsEEi9INTN+P96VyK/dV4cdFuRc7rtkTbuC WqRM5I3H38L378PnT7r2azRsViDc9pTc7UZtwRpVoGUhPFGZZ6Rg/Jvm/clz+3uR mm7CsQAeTn3y4qQkfIbOV/bMN3LAha7xJCTkNPBU9sQvE1Md+DXPNtr6SJvNrZGD k/VeQMhJ81oVk/SZZb3cvdUnwAi4xV6OM7kjiq6CIdssT9EQgK6RWNX2HAHoUOYF VPolGFgoL28nHcYeED8L9SwtlavqURxLUVqmhDElgfoAFKEPK+yHwifPCAZ/5PJu D5ksJq3Ia0zp6cxRmPkb0RY9BkeyCly5t9+d7cmAARk= -----END CERTIFICATE-----Generated at Tue Apr 16 22:12:19 2024 by rpki-client on console-fra.rpki-client.org