$ rpki-client -vvf repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa File: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (raw, json) Hash identifier: p1W1U+Gokc2ez6NJZxVpzXBkh+zY2NYBTS27oBXKm9c= Subject key identifier: 99:16:6E:F8:8D:A8:F6:DF:4C:93:2D:8A:CE:E7:70:28:00:70:C7:56 Certificate issuer: /CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B Certificate serial: 50B4A5AF1E1C558EDA183322C6FAC1C401DAC185 Authority key identifier: 18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa Signing time: Mon 27 May 2024 08:00:00 +0000 ROA not before: Mon 27 May 2024 07:55:00 +0000 ROA not after: Mon 26 May 2025 08:00:00 +0000 asID: 138855 IP address blocks: 103.171.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b4:a5:af:1e:1c:55:8e:da:18:33:22:c6:fa:c1:c4:01:da:c1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B Validity Not Before: May 27 07:55:00 2024 GMT Not After : May 26 08:00:00 2025 GMT Subject: CN=99166EF88DA8F6DF4C932D8ACEE770280070C756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8a:69:b5:98:c0:24:4b:1c:2c:85:a2:c5:dc: 9a:0d:cd:9e:50:dd:a8:0d:b2:a8:cc:6a:42:33:fa: 2e:ad:fd:2c:82:9f:81:38:83:4b:a3:7a:44:46:07: 4c:8d:05:f9:fe:ed:88:7f:a0:45:2e:46:ef:31:e3: df:0f:ca:02:62:78:9f:f6:0c:0e:a0:59:c3:25:f3: f9:22:75:1d:0e:ac:64:83:a7:f4:e9:80:f5:6f:bf: c9:15:1a:07:0d:cc:b0:91:08:10:47:f0:ec:0f:51: 11:c9:0d:f3:82:6a:46:24:1c:07:24:81:c2:7d:19: e6:57:6c:ee:3e:fc:23:d6:c3:60:d3:74:da:b6:06: c0:5e:66:5e:aa:20:13:65:1e:0c:b7:f2:02:e5:7f: 36:70:07:d8:69:bd:5f:0a:e6:75:b9:fa:cd:5b:5c: eb:49:9c:99:c5:25:76:fd:25:b6:75:ee:28:ab:e6: 83:49:73:07:0f:f4:76:b8:b5:66:ca:7b:51:4a:2c: f2:e3:ee:f2:2a:f5:f0:6d:64:b3:e5:6d:6d:a6:dd: b7:28:e6:bb:cf:97:5f:00:07:98:86:17:18:0e:72: da:5f:2a:f2:34:cb:be:d0:62:7c:17:24:48:19:f0: 27:15:d3:c3:32:8c:22:98:34:8d:d9:84:5b:25:ca: 68:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:16:6E:F8:8D:A8:F6:DF:4C:93:2D:8A:CE:E7:70:28:00:70:C7:56 X509v3 Authority Key Identifier: keyid:18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.22.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:26:dd:ed:bc:f2:5d:61:26:d5:7d:3a:a6:3f:f7:ac:8f:a7: fc:1d:3f:da:32:9f:8e:59:16:a9:1c:23:ba:b1:4d:f7:f7:02: 47:a6:4a:bb:f3:81:6d:16:f5:58:ea:f9:0e:08:59:37:04:68: 24:8a:f4:3a:24:19:cf:29:8b:12:1b:e0:42:b1:12:48:7a:b7: 5b:89:81:57:09:c1:08:7f:ed:a9:17:c8:fa:da:72:44:27:52: be:db:3c:79:7c:b2:51:ac:40:8a:1e:e5:d6:ea:ec:6b:ff:11: 68:dd:c3:aa:82:2d:7c:c7:84:2d:67:8f:02:16:77:1c:8d:51: 1f:9c:49:a0:07:b5:de:b6:19:c8:bf:25:84:87:cc:fb:65:e4: d7:68:2a:d3:71:81:e3:4a:35:88:fe:09:f2:31:dc:f6:74:cb: 20:f8:54:22:9c:5c:3d:b1:b5:e2:c8:7d:4d:dd:07:89:27:55: 54:26:fd:78:94:d9:34:a3:74:78:ae:5f:72:97:61:3f:36:03: 00:e6:73:9a:8c:09:93:3f:1d:63:77:a3:8d:32:ff:bd:31:00: a9:91:41:a7:6c:51:45:c9:e8:74:97:d6:25:89:82:00:5b:2e: d4:2a:d5:e8:00:ec:f5:8d:fc:5e:c2:94:7e:e5:ee:8f:ba:62: 14:0b:0a:1f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUULSlrx4cVY7aGDMixvrBxAHawYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4N0FFQTVBMkQ5REI0NzlFNjE4MTY3QjJGRTQ3MjUw QUNGRTc5QjAeFw0yNDA1MjcwNzU1MDBaFw0yNTA1MjYwODAwMDBaMDMxMTAvBgNV BAMTKDk5MTY2RUY4OERBOEY2REY0QzkzMkQ4QUNFRTc3MDI4MDA3MEM3NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNimm1mMAkSxwshaLF3JoNzZ5Q 3agNsqjMakIz+i6t/SyCn4E4g0ujekRGB0yNBfn+7Yh/oEUuRu8x498PygJieJ/2 DA6gWcMl8/kidR0OrGSDp/TpgPVvv8kVGgcNzLCRCBBH8OwPURHJDfOCakYkHAck gcJ9GeZXbO4+/CPWw2DTdNq2BsBeZl6qIBNlHgy38gLlfzZwB9hpvV8K5nW5+s1b XOtJnJnFJXb9JbZ17iir5oNJcwcP9Ha4tWbKe1FKLPLj7vIq9fBtZLPlbW2m3bco 5rvPl18AB5iGFxgOctpfKvI0y77QYnwXJEgZ8CcV08MyjCKYNI3ZhFslymgfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmRZu+I2o9t9Mky2KzudwKABwx1YwHwYDVR0j BBgwFoAUGIeupaLZ20eeYYFnsv5HJQrP55swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWI5M2UxYy01ZjJhLTQzYTktOTlmMS1mZGQwNDAyZjk0NmUvMC8xODg3QUVBNUEy RDlEQjQ3OUU2MTgxNjdCMkZFNDcyNTBBQ0ZFNzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg4N0FFQTVBMkQ5REI0NzlFNjE4MTY3QjJGRTQ3MjUwQUNG RTc5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YjkzZTFjLTVmMmEtNDNhOS05 OWYxLWZkZDA0MDJmOTQ2ZS8wLzMxMzAzMzJlMzEzNzMxMmUzMjMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6sWMA0GCSqG SIb3DQEBCwUAA4IBAQBaJt3tvPJdYSbVfTqmP/esj6f8HT/aMp+OWRapHCO6sU33 9wJHpkq784FtFvVY6vkOCFk3BGgkivQ6JBnPKYsSG+BCsRJIerdbiYFXCcEIf+2p F8j62nJEJ1K+2zx5fLJRrECKHuXW6uxr/xFo3cOqgi18x4QtZ48CFnccjVEfnEmg B7XethnIvyWEh8z7ZeTXaCrTcYHjSjWI/gnyMdz2dMsg+FQinFw9sbXiyH1N3QeJ J1VUJv14lNk0o3R4rl9yl2E/NgMA5nOajAmTPx1jd6ONMv+9MQCpkUGnbFFFyeh0 l9YliYIAWy7UKtXoAOz1jfxewpR+5e6PumIUCwof -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org