$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa File: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (raw, json) Hash identifier: o91zPp4ayAOJNN4yhRZb0XTHvD+8eIDU00sluDrc0OI= Subject key identifier: 4D:09:F3:89:90:B4:06:D6:79:68:74:E4:33:D2:F0:DB:04:CA:6C:B3 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 519384B68B8023795F62067398D3F61CC3AC5659 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa Signing time: Sat 16 Sep 2023 11:00:00 +0000 ROA not before: Sat 16 Sep 2023 10:55:00 +0000 ROA not after: Sat 14 Sep 2024 11:00:00 +0000 asID: 141921 IP address blocks: 103.165.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 03:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:93:84:b6:8b:80:23:79:5f:62:06:73:98:d3:f6:1c:c3:ac:56:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Sep 16 10:55:00 2023 GMT Not After : Sep 14 11:00:00 2024 GMT Subject: CN=4D09F38990B406D6796874E433D2F0DB04CA6CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:49:50:dc:97:bc:3d:3c:66:fa:60:43:97:36: ce:9e:0c:a3:54:51:9f:4b:1e:ed:dd:19:66:99:1d: 9c:15:58:dd:ce:8e:c5:24:09:fc:aa:7b:cb:ca:81: 90:aa:00:59:83:91:fa:f2:32:c9:c9:9e:06:31:6f: 81:87:55:03:a7:1d:71:fb:44:3a:53:c1:e9:91:f8: a3:f1:d8:22:91:d8:89:2c:6d:ab:1a:a7:b2:65:87: b2:be:25:c4:cb:65:dc:4d:76:f1:0b:dc:8b:86:0d: 94:d9:9b:7e:11:65:8e:30:79:fa:ec:28:07:9c:52: 63:b2:96:9c:8d:63:f8:99:00:a1:c8:1b:b5:08:d7: d7:75:42:f8:3c:d7:f1:f0:f0:fe:b1:05:69:32:b6: 6f:3f:72:44:9b:15:4d:aa:70:1d:9b:a1:01:61:92: 37:3f:15:5a:f5:de:3b:ce:93:52:19:01:73:cf:8b: e3:be:9f:07:8f:cf:ca:16:06:e9:fc:d1:c9:60:de: 67:b5:ec:5b:c3:ec:cd:c1:01:6d:f0:4a:90:f3:53: 16:61:0e:05:a2:49:39:9f:c9:33:9f:34:7b:60:03: e0:7e:ca:eb:46:6a:ce:7a:71:60:9a:ab:c7:ef:e2: 88:2b:9b:c3:5e:0f:2f:3f:7e:45:33:2c:de:67:f9: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:09:F3:89:90:B4:06:D6:79:68:74:E4:33:D2:F0:DB:04:CA:6C:B3 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.155.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:55:82:77:d3:de:13:79:82:e7:a7:7d:c2:ea:34:b4:64:47: c5:ff:61:ae:44:72:33:dd:ef:1b:10:e4:49:10:f8:64:20:4b: aa:1e:48:78:80:df:11:01:03:c5:c3:3b:35:9c:6d:97:d9:e5: 63:2d:7b:60:cf:63:ab:36:10:77:7b:db:a0:d8:bb:ff:a8:77: 28:d5:79:a0:db:27:03:20:03:c5:75:47:f1:eb:1f:d6:2e:74: 50:a9:da:fe:75:9f:e1:e6:d1:7f:19:1d:de:67:5a:14:a7:8a: 99:dc:77:3d:57:20:ba:a9:58:60:53:72:7f:d9:56:fd:c1:69: 7e:08:f2:ae:db:d1:54:25:4f:80:c8:49:94:9f:e9:26:a7:a5: 5a:45:39:8d:f7:fa:56:bc:6b:9d:48:75:5b:af:b5:05:09:81: 52:f7:46:e9:12:12:c6:a8:46:c0:a5:29:5c:e7:e8:72:2c:fd: f3:b0:56:a2:7d:c8:f1:be:2a:b5:40:08:57:e6:f9:7a:f5:2e: 14:f3:a6:23:7d:a6:b3:c4:dc:3a:3a:d0:c1:dd:62:80:a6:41: e5:e7:de:e5:5f:45:7b:3d:bb:35:5a:2a:85:eb:d8:a7:fe:6a: 24:0d:0d:6f:56:2e:49:d3:e1:77:d4:54:ce:5a:06:e5:78:3b: 5e:88:89:f7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUZOEtouAI3lfYgZzmNP2HMOsVlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yMzA5MTYxMDU1MDBaFw0yNDA5MTQxMTAwMDBaMDMxMTAvBgNV BAMTKDREMDlGMzg5OTBCNDA2RDY3OTY4NzRFNDMzRDJGMERCMDRDQTZDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlSVDcl7w9PGb6YEOXNs6eDKNU UZ9LHu3dGWaZHZwVWN3OjsUkCfyqe8vKgZCqAFmDkfryMsnJngYxb4GHVQOnHXH7 RDpTwemR+KPx2CKR2Iksbasap7Jlh7K+JcTLZdxNdvEL3IuGDZTZm34RZY4wefrs KAecUmOylpyNY/iZAKHIG7UI19d1Qvg81/Hw8P6xBWkytm8/ckSbFU2qcB2boQFh kjc/FVr13jvOk1IZAXPPi+O+nwePz8oWBun80clg3me17FvD7M3BAW3wSpDzUxZh DgWiSTmfyTOfNHtgA+B+yutGas56cWCaq8fv4ogrm8NeDy8/fkUzLN5n+YwnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUTQnziZC0BtZ5aHTkM9Lw2wTKbLMwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2MGZlMmFjLTI5ZjYtNDNhMi1i ZTY0LTA2YTNhZTlkOGQyMC8wLzMxMzAzMzJlMzEzNjM1MmUzMTM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpZswDQYJ KoZIhvcNAQELBQADggEBABxVgnfT3hN5guenfcLqNLRkR8X/Ya5EcjPd7xsQ5EkQ +GQgS6oeSHiA3xEBA8XDOzWcbZfZ5WMte2DPY6s2EHd726DYu/+odyjVeaDbJwMg A8V1R/HrH9YudFCp2v51n+Hm0X8ZHd5nWhSnipncdz1XILqpWGBTcn/ZVv3BaX4I 8q7b0VQlT4DISZSf6SanpVpFOY33+la8a51IdVuvtQUJgVL3RukSEsaoRsClKVzn 6HIs/fOwVqJ9yPG+KrVACFfm+Xr1LhTzpiN9prPE3Do60MHdYoCmQeXn3uVfRXs9 uzVaKoXr2Kf+aiQNDW9WLknT4XfUVM5aBuV4O16Iifc= -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:23 2024 by rpki-client on console-fra.rpki-client.org