$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa File: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (raw, json) Hash identifier: 8tUzsxKbUhWv8QMGzTdvG/CrCmfw2jg9eLANqPp52oM= Subject key identifier: C1:5F:92:42:60:D9:CA:5A:AF:B9:FF:FD:F3:7D:76:08:36:25:EB:79 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 2B60C54DF55D01450751A3D722623E39A05534F7 Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa Signing time: Sun 22 Oct 2023 02:00:01 +0000 ROA not before: Sun 22 Oct 2023 01:55:01 +0000 ROA not after: Sun 20 Oct 2024 02:00:01 +0000 asID: 141461 IP address blocks: 103.111.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:60:c5:4d:f5:5d:01:45:07:51:a3:d7:22:62:3e:39:a0:55:34:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Oct 22 01:55:01 2023 GMT Not After : Oct 20 02:00:01 2024 GMT Subject: CN=C15F924260D9CA5AAFB9FFFDF37D76083625EB79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:37:9d:ce:a0:04:66:e0:5b:b1:58:21:34: e0:aa:a1:db:bb:e0:16:66:08:db:4a:98:06:cc:b8: 99:e8:ce:dd:cc:b5:19:c7:7a:08:7f:25:11:1e:fc: 0e:1f:21:9a:37:6d:38:65:a2:96:19:b5:92:1d:97: 5f:91:19:6a:d8:4f:c8:48:87:1e:85:ad:90:d8:89: 98:f0:77:fb:71:d2:58:e6:03:95:f9:4b:38:67:de: 4e:95:1b:56:15:b8:c2:d7:6e:0f:78:67:5b:1f:f9: 27:1a:c7:17:0d:c3:d6:2b:98:0b:44:62:1d:18:b5: 93:6f:a5:74:cc:81:97:8b:0f:89:b7:e5:4c:88:c5: 4b:d1:f6:0e:c5:0b:00:23:77:80:36:f8:61:82:ad: ee:66:11:e1:22:81:58:81:42:68:ec:1e:38:a4:25: 26:51:ce:cc:8e:9e:88:af:e2:56:19:6a:1f:48:2b: 25:c0:f8:0e:ee:79:42:58:e0:7c:77:c7:44:6c:5a: 91:58:68:eb:0f:67:1f:e4:32:c9:e7:13:29:16:0e: cb:16:00:5c:e6:37:96:d9:bc:23:5d:ff:60:e9:45: 43:16:45:9a:e3:28:64:99:2c:25:d7:94:08:af:ce: 15:1f:8d:c7:5a:b6:33:11:2b:57:bb:ee:d1:a1:f4: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5F:92:42:60:D9:CA:5A:AF:B9:FF:FD:F3:7D:76:08:36:25:EB:79 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.140.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:ca:cc:a0:e1:86:bf:7e:03:ea:9b:07:71:31:96:b8:b7:aa: a0:dc:59:a5:39:96:7c:30:79:06:c5:0b:c8:33:37:09:74:ca: af:85:80:b5:89:67:59:94:d5:de:a7:14:b7:ea:85:13:bb:76: e5:ce:ad:37:5d:9f:d6:3e:19:70:11:25:0e:4a:dc:82:1d:fb: ff:96:d6:af:03:63:05:96:69:f7:a1:9a:47:22:ef:af:fa:2c: 4d:b6:2c:1a:e0:8c:2f:a4:6d:f1:23:99:7e:cb:77:3e:aa:98: 62:b1:cf:03:e4:d8:e3:e5:ca:17:f2:30:08:99:2a:39:68:23: 26:85:4d:57:75:0a:86:56:2f:60:07:c0:fe:0e:33:b4:64:cf: 0f:b8:ee:e1:f9:e1:fe:79:5f:db:80:4a:c6:4d:e9:f1:ee:77: 4b:ee:d9:b1:7d:93:a3:20:ed:46:84:e6:47:c1:69:18:ef:fd: 93:17:82:a0:07:88:e1:7b:5b:ee:ec:a1:d9:3f:d1:17:34:c1: e4:c9:e7:49:57:62:08:8e:f4:1e:b1:08:fd:25:34:a0:de:cd: d2:f1:51:07:bf:e1:53:cf:8d:15:d3:f7:b2:d1:58:a4:1f:9f: 37:3c:02:7e:2e:23:b3:bf:3b:52:02:83:3a:71:8d:0d:71:c3: c3:0a:de:35 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUK2DFTfVdAUUHUaPXImI+OaBVNPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yMzEwMjIwMTU1MDFaFw0yNDEwMjAwMjAwMDFaMDMxMTAvBgNV BAMTKEMxNUY5MjQyNjBEOUNBNUFBRkI5RkZGREYzN0Q3NjA4MzYyNUVCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6DedzqAEZuBbsVghNOCqodu7 4BZmCNtKmAbMuJnozt3MtRnHegh/JREe/A4fIZo3bThlopYZtZIdl1+RGWrYT8hI hx6FrZDYiZjwd/tx0ljmA5X5Szhn3k6VG1YVuMLXbg94Z1sf+ScaxxcNw9YrmAtE Yh0YtZNvpXTMgZeLD4m35UyIxUvR9g7FCwAjd4A2+GGCre5mEeEigViBQmjsHjik JSZRzsyOnoiv4lYZah9IKyXA+A7ueUJY4Hx3x0RsWpFYaOsPZx/kMsnnEykWDssW AFzmN5bZvCNd/2DpRUMWRZrjKGSZLCXXlAivzhUfjcdatjMRK1e77tGh9DSpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUwV+SQmDZylqvuf/98312CDYl63kwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExMjdlYWZkLWE2NzQtNDQzNy1h YmYxLWU1NTBkZWMxMzdmYS8wLzMxMzAzMzJlMzEzMTMxMmUzMTM0MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNDM2MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnb4wwDQYJ KoZIhvcNAQELBQADggEBAErKzKDhhr9+A+qbB3Exlri3qqDcWaU5lnwweQbFC8gz Nwl0yq+FgLWJZ1mU1d6nFLfqhRO7duXOrTddn9Y+GXARJQ5K3IId+/+W1q8DYwWW afehmkci76/6LE22LBrgjC+kbfEjmX7Ldz6qmGKxzwPk2OPlyhfyMAiZKjloIyaF TVd1CoZWL2AHwP4OM7Rkzw+47uH54f55X9uASsZN6fHud0vu2bF9k6Mg7UaE5kfB aRjv/ZMXgqAHiOF7W+7sodk/0Rc0weTJ50lXYgiO9B6xCP0lNKDezdLxUQe/4VPP jRXT97LRWKQfnzc8An4uI7O/O1ICgzpxjQ1xw8MK3jU= -----END CERTIFICATE-----Generated at Sat Jun 1 19:50:29 2024 by rpki-client on console-ams.rpki-client.org