$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa File: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (raw, json) Hash identifier: +QUtev1EZclIywAPTEAYSa61H4TOtEkIXH1umDcQW2g= Subject key identifier: 44:E6:22:30:77:CF:6E:36:64:47:39:0A:26:3D:99:34:D9:E3:C9:E0 Certificate issuer: /CN=139934661CE07BEBBFA824F7225502B15AE8B653 Certificate serial: 36CEAAA0833918C0551C032EC3AA3984C8822BA3 Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa Signing time: Tue 01 Aug 2023 10:47:08 +0000 ROA not before: Tue 01 Aug 2023 10:42:08 +0000 ROA not after: Tue 30 Jul 2024 10:47:08 +0000 asID: 141596 IP address blocks: 103.179.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 03:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ce:aa:a0:83:39:18:c0:55:1c:03:2e:c3:aa:39:84:c8:82:2b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653 Validity Not Before: Aug 1 10:42:08 2023 GMT Not After : Jul 30 10:47:08 2024 GMT Subject: CN=44E6223077CF6E366447390A263D9934D9E3C9E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:54:8b:a9:0c:28:42:ff:78:b4:b8:a4:c1: 9b:73:e7:ce:42:fd:a3:e0:3e:45:4f:9e:54:e5:bb: 94:6a:f1:44:50:81:ca:87:40:a0:cf:9d:13:c2:47: b7:ea:89:32:e0:fd:fc:69:6e:03:e6:24:94:4f:13: ec:ed:7b:21:98:97:d6:09:d8:71:1e:a0:98:21:45: 9d:05:19:13:c1:c8:1e:0c:28:f9:68:d9:e4:dd:06: e6:e6:d7:16:d6:77:e1:44:06:b1:b6:3b:57:a6:d4: 3b:4d:22:57:10:44:11:af:2f:30:99:1f:2d:6f:b8: e3:ac:33:32:e5:68:33:4f:34:0d:73:2f:fd:77:fc: 33:99:a8:43:8a:5a:54:3c:89:15:30:24:05:df:07: 10:27:02:85:2b:56:35:e9:12:8c:39:ae:07:0e:72: 4e:4a:9d:46:af:ec:c0:a0:d8:99:64:b4:b7:33:7f: 70:99:53:b9:46:b3:e5:40:a5:0f:2d:b8:56:f1:63: 66:36:85:33:6a:da:36:e1:e4:d6:d1:cb:0e:a0:b7: 30:25:5c:cd:9e:c8:e9:5d:26:e0:cc:d9:fa:ca:c5: 5f:ef:67:e9:02:ea:a0:ab:ac:4a:1e:26:12:96:87: 52:6d:16:30:44:53:b6:8f:dc:e1:af:ce:6a:fb:d4: 58:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E6:22:30:77:CF:6E:36:64:47:39:0A:26:3D:99:34:D9:E3:C9:E0 X509v3 Authority Key Identifier: keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.218.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:c5:20:ad:ba:25:43:5e:af:44:0e:d4:e1:f2:26:af:e4:bf: 71:34:19:e6:21:c0:56:94:b6:1c:24:a3:b2:d5:73:de:65:2a: de:80:15:51:d2:68:a6:c7:69:75:56:35:d3:2f:c9:d5:96:7a: 56:0d:10:ef:19:32:70:8f:77:d6:6b:64:ee:49:ac:6e:39:57: 36:3f:51:ff:b7:ba:01:fe:ed:23:53:2b:5f:39:1a:06:87:78: 57:5d:33:70:a4:28:fd:c5:75:f1:af:28:6f:98:e4:46:df:f4: cb:7d:d4:99:cc:77:1e:ae:86:b8:ce:2a:af:4f:7f:58:9d:4e: cb:35:b8:4e:5b:0f:60:80:6d:ec:7a:c0:eb:ea:19:da:3b:b5: 02:1e:09:50:7d:f4:a7:9a:5c:6a:df:4c:7c:a1:76:0a:d5:6d: 70:ca:8a:ec:61:15:f8:47:d7:81:e7:d3:60:61:e8:9f:10:34: 9a:44:ed:92:4d:10:59:f9:79:3e:9b:26:31:e7:43:0f:bd:4d: 7c:09:64:f6:6e:a3:b5:f5:be:00:84:c7:b8:7c:b4:b4:30:ae: 5d:09:61:70:9a:8e:77:d2:f6:f6:a1:0c:d5:00:d9:e1:95:24: 07:0e:2a:4e:1c:e6:b2:eb:47:c4:fb:c4:6a:f3:70:53:22:1c: 32:56:d5:ef -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNs6qoIM5GMBVHAMuw6o5hMiCK6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1 QUU4QjY1MzAeFw0yMzA4MDExMDQyMDhaFw0yNDA3MzAxMDQ3MDhaMDMxMTAvBgNV BAMTKDQ0RTYyMjMwNzdDRjZFMzY2NDQ3MzkwQTI2M0Q5OTM0RDlFM0M5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UlSLqQwoQv94tLikwZtz585C /aPgPkVPnlTlu5Rq8URQgcqHQKDPnRPCR7fqiTLg/fxpbgPmJJRPE+zteyGYl9YJ 2HEeoJghRZ0FGRPByB4MKPlo2eTdBubm1xbWd+FEBrG2O1em1DtNIlcQRBGvLzCZ Hy1vuOOsMzLlaDNPNA1zL/13/DOZqEOKWlQ8iRUwJAXfBxAnAoUrVjXpEow5rgcO ck5KnUav7MCg2JlktLczf3CZU7lGs+VApQ8tuFbxY2Y2hTNq2jbh5NbRyw6gtzAl XM2eyOldJuDM2frKxV/vZ+kC6qCrrEoeJhKWh1JtFjBEU7aP3OGvzmr71FiPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUROYiMHfPbjZkRzkKJj2ZNNnjyeAwHwYDVR0j BBgwFoAUE5k0Zhzge+u/qCT3IlUCsVrotlMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2EyOTJiMi00YWU0LTQxZGYtODg3YS1jMTcyYzNlMWFlNzMvMC8xMzk5MzQ2NjFD RTA3QkVCQkZBODI0RjcyMjU1MDJCMTVBRThCNjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1QUU4 QjY1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjYTI5MmIyLTRhZTQtNDFkZi04 ODdhLWMxNzJjM2UxYWU3My8wLzMxMzAzMzJlMzEzNzM5MmUzMjMxMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNTM5MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFns9owDQYJ KoZIhvcNAQELBQADggEBAFrFIK26JUNer0QO1OHyJq/kv3E0GeYhwFaUthwko7LV c95lKt6AFVHSaKbHaXVWNdMvydWWelYNEO8ZMnCPd9ZrZO5JrG45VzY/Uf+3ugH+ 7SNTK185GgaHeFddM3CkKP3FdfGvKG+Y5Ebf9Mt91JnMdx6uhrjOKq9Pf1idTss1 uE5bD2CAbex6wOvqGdo7tQIeCVB99KeaXGrfTHyhdgrVbXDKiuxhFfhH14Hn02Bh 6J8QNJpE7ZJNEFn5eT6bJjHnQw+9TXwJZPZuo7X1vgCEx7h8tLQwrl0JYXCajnfS 9vahDNUA2eGVJAcOKk4c5rLrR8T7xGrzcFMiHDJW1e8= -----END CERTIFICATE-----Generated at Sun Jun 2 00:28:55 2024 by rpki-client on console-ams.rpki-client.org