$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa File: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (raw, json) Hash identifier: SaWqlMEUqao7e4oNzOtlLbyOzu7kZSZlO5/rYQs5MNQ= Subject key identifier: 2B:62:CC:D0:CF:93:AC:01:F0:16:D5:3B:95:91:DD:47:DD:FC:77:8E Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 5E07C97C92F15C03D4DE851476FBF6D11092CE9D Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa Signing time: Tue 20 Feb 2024 14:00:00 +0000 ROA not before: Tue 20 Feb 2024 13:55:00 +0000 ROA not after: Tue 18 Feb 2025 14:00:00 +0000 asID: 141892 IP address blocks: 103.112.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:07:c9:7c:92:f1:5c:03:d4:de:85:14:76:fb:f6:d1:10:92:ce:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Feb 20 13:55:00 2024 GMT Not After : Feb 18 14:00:00 2025 GMT Subject: CN=2B62CCD0CF93AC01F016D53B9591DD47DDFC778E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:27:47:7b:3d:be:69:49:b0:e8:34:ff:31: 9d:0a:ff:29:69:b5:c4:ec:98:f6:45:7b:3b:8f:f4: 6d:4d:73:82:ef:d0:1f:ba:21:59:f7:aa:da:b6:3f: 68:e9:2c:5d:2f:9e:10:4c:b2:08:35:17:57:90:09: 58:17:57:98:20:80:1c:49:2a:32:ed:43:1f:cd:b1: 20:c3:5e:eb:31:da:09:ea:97:d0:f9:db:6b:44:9a: 3b:41:a4:ef:a2:73:8f:9a:27:1f:8a:22:57:22:41: 94:df:8a:86:9d:fd:70:c9:27:7c:28:19:1c:7b:d8: 47:37:ea:93:b5:00:5f:8f:1b:6d:33:3a:97:a4:59: 7d:86:6c:62:17:22:f7:c2:7a:aa:46:94:d2:47:3d: e7:89:ec:28:8b:47:fb:f1:07:bc:d8:19:03:dd:dc: 35:6a:d2:21:68:d0:22:94:45:21:27:4c:59:ed:2d: c1:b6:08:76:ea:51:08:cc:cd:75:f3:98:db:54:6f: d3:56:f1:5d:4a:8c:16:34:ef:8c:79:8b:98:f1:ec: e7:ea:f7:91:cc:05:81:61:70:8c:17:9b:f9:c8:c6: 68:68:44:de:ef:8d:76:05:ff:fe:35:4c:bb:a6:6a: d3:13:65:f2:94:e2:33:45:d5:bb:01:26:83:5c:a8: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:62:CC:D0:CF:93:AC:01:F0:16:D5:3B:95:91:DD:47:DD:FC:77:8E X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.138.0/24 Signature Algorithm: sha256WithRSAEncryption 04:04:db:29:f0:35:50:78:3f:9c:f3:0f:65:e8:c7:47:b7:01: c5:f4:1c:b8:4a:14:1d:03:58:97:e0:e0:96:d8:70:6f:7d:d0: 77:73:26:04:71:5a:51:07:9a:11:69:10:73:1f:db:f7:ee:e8: a5:cf:07:d9:90:45:f2:91:f7:f4:1e:b2:a4:65:f3:6d:2b:11: 4f:2c:9e:f9:55:5f:7e:4e:76:ad:19:ca:f5:97:65:86:6a:60: 23:71:75:40:aa:db:46:ae:28:92:bd:ab:80:34:22:65:79:42: e4:ec:e8:b0:1e:a6:b5:6d:48:e8:92:ac:39:9f:a3:10:71:81: fe:d5:79:62:a3:06:50:fd:c3:49:b0:50:31:a2:fa:38:51:6d: 53:5b:e2:a9:67:a7:ae:d3:82:24:d3:7c:32:34:74:a2:13:91: 7e:72:50:3d:12:0f:09:7e:8a:3b:13:f0:3c:dc:0b:bc:14:9c: 6f:a9:c6:31:e6:96:ec:09:eb:24:e0:37:da:07:a2:e0:ad:a1: 35:16:96:d8:c2:6e:1b:39:ad:4e:09:e1:84:9d:e2:fd:8c:bf: 9b:b2:62:38:9f:70:da:10:4b:64:0e:b9:95:63:85:64:e0:4e: b3:d9:d5:0c:77:c1:5a:f9:b7:1f:a8:5d:eb:9c:68:20:1e:20: 79:9f:dc:8e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXgfJfJLxXAPU3oUUdvv20RCSzp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNDAyMjAxMzU1MDBaFw0yNTAyMTgxNDAwMDBaMDMxMTAvBgNV BAMTKDJCNjJDQ0QwQ0Y5M0FDMDFGMDE2RDUzQjk1OTFERDQ3RERGQzc3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSoidHez2+aUmw6DT/MZ0K/ylp tcTsmPZFezuP9G1Nc4Lv0B+6IVn3qtq2P2jpLF0vnhBMsgg1F1eQCVgXV5gggBxJ KjLtQx/NsSDDXusx2gnql9D522tEmjtBpO+ic4+aJx+KIlciQZTfioad/XDJJ3wo GRx72Ec36pO1AF+PG20zOpekWX2GbGIXIvfCeqpGlNJHPeeJ7CiLR/vxB7zYGQPd 3DVq0iFo0CKURSEnTFntLcG2CHbqUQjMzXXzmNtUb9NW8V1KjBY074x5i5jx7Ofq 95HMBYFhcIwXm/nIxmhoRN7vjXYF//41TLumatMTZfKU4jNF1bsBJoNcqLXxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUK2LM0M+TrAHwFtU7lZHdR938d44wHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMxMzAzMzJlMzEzMTMyMmUzMTMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzODM5MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncIowDQYJ KoZIhvcNAQELBQADggEBAAQE2ynwNVB4P5zzD2Xox0e3AcX0HLhKFB0DWJfg4JbY cG990HdzJgRxWlEHmhFpEHMf2/fu6KXPB9mQRfKR9/QesqRl820rEU8snvlVX35O dq0ZyvWXZYZqYCNxdUCq20auKJK9q4A0ImV5QuTs6LAeprVtSOiSrDmfoxBxgf7V eWKjBlD9w0mwUDGi+jhRbVNb4qlnp67TgiTTfDI0dKITkX5yUD0SDwl+ijsT8Dzc C7wUnG+pxjHmluwJ6yTgN9oHouCtoTUWltjCbhs5rU4J4YSd4v2Mv5uyYjifcNoQ S2QOuZVjhWTgTrPZ1Qx3wVr5tx+oXeucaCAeIHmf3I4= -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:28 2024 by rpki-client on console-ams.rpki-client.org