$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa File: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: fO6tug2UiEAmalrNKZRBn0krind6t57l+zNeWPFaBis= Subject key identifier: 81:73:1E:E8:DB:85:35:92:42:24:1E:A8:6E:44:46:82:3B:87:06:51 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 4A4E7D72E0E831631FDDF0EF5FCC9CDA9563A077 Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa Signing time: Wed 01 May 2024 07:00:00 +0000 ROA not before: Wed 01 May 2024 06:55:00 +0000 ROA not after: Wed 30 Apr 2025 07:00:00 +0000 asID: 9341 IP address blocks: 103.189.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4e:7d:72:e0:e8:31:63:1f:dd:f0:ef:5f:cc:9c:da:95:63:a0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: May 1 06:55:00 2024 GMT Not After : Apr 30 07:00:00 2025 GMT Subject: CN=81731EE8DB85359242241EA86E4446823B870651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:8a:4e:60:3f:ca:41:ab:a0:52:19:b5:bb: 03:c2:8c:fb:04:4c:40:53:4f:79:0f:b7:bc:91:c7: 90:da:71:3d:67:30:ab:f6:55:68:eb:a1:c2:68:5a: 66:ea:1c:b2:eb:e6:ed:ad:ba:cd:03:39:5e:fb:5d: 90:af:9a:20:76:a2:c1:f2:0e:7c:38:f2:77:ba:8e: ac:eb:11:4e:b3:d3:60:87:01:bc:3d:97:c0:bb:d6: 4e:d2:3e:69:60:82:16:d5:95:d0:e1:42:17:6f:21: c7:3b:30:1a:8a:b7:34:f4:89:8e:a5:21:30:4f:30: 3e:8e:a8:fa:1f:8f:42:cb:4f:66:c5:8c:7e:7d:f1: 6e:d9:9f:bd:58:20:01:87:84:8d:92:5e:c0:17:16: a7:ec:5a:5c:21:2c:ea:52:22:b2:b6:30:74:00:20: 34:4f:b9:c2:b3:b4:c5:c0:d6:25:c2:10:34:1d:36: 7e:cd:2e:c4:b8:ba:21:06:76:d1:8b:6a:0d:75:e9: 75:48:80:f7:92:e4:ce:1f:86:f2:5e:36:d4:93:2e: 0e:ad:27:2a:f5:92:05:bf:76:a4:98:5d:8b:94:88: 3d:49:d7:6a:4e:77:00:c4:d0:a8:83:fd:22:28:ad: af:16:05:d0:ea:8a:90:43:21:d3:05:7f:f3:c5:ac: 37:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:73:1E:E8:DB:85:35:92:42:24:1E:A8:6E:44:46:82:3B:87:06:51 X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.206.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:21:9a:ed:8f:24:d7:56:f8:4e:54:e1:e8:ef:95:d7:6b:37: d2:c3:cf:0f:43:78:e1:eb:18:ca:aa:31:e7:0a:b2:ce:f5:82: de:86:0e:15:e7:53:79:b9:1a:b9:62:a8:cf:e5:ac:2c:aa:93: 74:27:ee:04:e6:e6:57:f0:b6:eb:64:57:ca:a5:41:f2:31:10: f7:a4:94:0a:5e:92:d0:c9:09:67:a9:ed:b6:0d:a4:d9:bf:ed: 0d:f8:12:74:1c:c7:b9:39:7c:c8:86:23:4f:ef:60:70:07:8c: 77:36:7d:ed:f2:93:96:4c:c9:52:03:d2:47:0a:16:a2:5b:94: bd:db:d0:e4:6d:02:fa:a4:26:cd:a2:3b:36:25:91:e5:4b:a8: d5:d2:9f:8b:cc:d5:f8:7f:d0:72:c6:8d:a8:c3:9c:bf:c0:36: ac:d6:98:bd:dd:b9:6a:9f:4e:8a:9c:3c:dc:a8:b4:b4:21:8c: 1e:59:83:d8:78:6f:0d:01:be:ec:f6:00:45:82:ee:46:e7:df: 63:b3:5e:8d:b4:5f:33:89:e0:31:78:c0:28:a2:7d:0c:56:1e: 76:21:94:a9:c8:af:47:20:4e:b7:02:a1:b5:bc:0b:ff:94:57: 12:38:88:17:b5:4b:db:fe:d6:fa:0e:5f:51:45:1f:50:95:63: c0:fd:92:96 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSk59cuDoMWMf3fDvX8yc2pVjoHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNDA1MDEwNjU1MDBaFw0yNTA0MzAwNzAwMDBaMDMxMTAvBgNV BAMTKDgxNzMxRUU4REI4NTM1OTI0MjI0MUVBODZFNDQ0NjgyM0I4NzA2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2IpOYD/KQaugUhm1uwPCjPsE TEBTT3kPt7yRx5DacT1nMKv2VWjrocJoWmbqHLLr5u2tus0DOV77XZCvmiB2osHy Dnw48ne6jqzrEU6z02CHAbw9l8C71k7SPmlgghbVldDhQhdvIcc7MBqKtzT0iY6l ITBPMD6OqPofj0LLT2bFjH598W7Zn71YIAGHhI2SXsAXFqfsWlwhLOpSIrK2MHQA IDRPucKztMXA1iXCEDQdNn7NLsS4uiEGdtGLag116XVIgPeS5M4fhvJeNtSTLg6t Jyr1kgW/dqSYXYuUiD1J12pOdwDE0KiD/SIora8WBdDqipBDIdMFf/PFrDclAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUgXMe6NuFNZJCJB6obkRGgjuHBlEwHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4MzFlZWI0LWYzNTctNDVhNy05 MjY1LTQyOGIwMDdhMDI3MC8wLzMxMzAzMzJlMzEzODM5MmUzMjMwMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe9zjANBgkqhkiG 9w0BAQsFAAOCAQEADyGa7Y8k11b4TlTh6O+V12s30sPPD0N44esYyqox5wqyzvWC 3oYOFedTebkauWKoz+WsLKqTdCfuBObmV/C262RXyqVB8jEQ96SUCl6S0MkJZ6nt tg2k2b/tDfgSdBzHuTl8yIYjT+9gcAeMdzZ97fKTlkzJUgPSRwoWoluUvdvQ5G0C +qQmzaI7NiWR5Uuo1dKfi8zV+H/QcsaNqMOcv8A2rNaYvd25ap9Oipw83Ki0tCGM HlmD2HhvDQG+7PYARYLuRuffY7NejbRfM4ngMXjAKKJ9DFYediGUqcivRyBOtwKh tbwL/5RXEjiIF7VL2/7W+g5fUUUfUJVjwP2Slg== -----END CERTIFICATE-----Generated at Sun Jun 2 05:58:47 2024 by rpki-client on console-ams.rpki-client.org