$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa File: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: +NvwQ/pDlIAZKuJAQcUAbNlfQsSY9FVArKr24amvTpc= Subject key identifier: 5C:92:86:4D:65:2E:10:01:35:15:8C:36:59:A7:E5:EB:B4:51:E8:13 Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 0FF8F1A6AD9D55C1AD5941A475273B12CD9D5C2E Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa Signing time: Mon 03 Jul 2023 09:00:00 +0000 ROA not before: Mon 03 Jul 2023 08:55:00 +0000 ROA not after: Mon 01 Jul 2024 09:00:00 +0000 asID: 45305 IP address blocks: 103.142.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 04:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f8:f1:a6:ad:9d:55:c1:ad:59:41:a4:75:27:3b:12:cd:9d:5c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Jul 3 08:55:00 2023 GMT Not After : Jul 1 09:00:00 2024 GMT Subject: CN=5C92864D652E100135158C3659A7E5EBB451E813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:d4:c2:14:5e:4a:75:d5:96:de:c0:92:49: 84:18:b3:5f:b1:10:09:00:e2:44:47:97:ba:d4:30: 96:c1:bf:8a:a2:18:df:4d:a0:ed:43:e7:15:33:fd: 3a:57:18:fb:62:60:1d:c2:59:bb:05:4b:6c:d1:17: 7f:33:a5:e5:a2:10:f2:92:4d:03:da:cc:df:8a:56: a1:16:1a:a1:ae:4e:ff:5a:d7:5d:e5:c1:2b:c4:59: 92:37:2f:f9:c2:00:53:ce:07:b4:f7:40:f9:10:c0: 38:b0:c4:26:95:29:70:97:dc:a1:6d:ec:2e:7f:ac: 01:b2:c9:d6:3d:50:bc:17:98:75:63:9c:f6:ce:d4: 53:f0:e7:9f:31:59:a1:19:2e:f4:e0:17:24:10:11: 94:fb:93:ef:7f:09:2c:70:40:b9:99:67:af:3c:6c: 44:60:6b:4c:ec:1d:34:c3:d9:c0:1b:53:5e:e7:d9: c9:8d:69:be:c5:4b:22:b3:74:dd:c9:68:b0:d1:08: c8:bb:3c:cc:51:78:34:b8:b1:71:a5:2c:4a:82:3e: a0:b0:e8:26:12:ef:e2:cc:fd:c9:14:0f:94:40:53: 4d:d8:76:0e:7c:54:8b:68:ea:8e:8a:08:59:0b:5b: e4:59:f0:d0:92:cc:87:e0:2d:30:e4:3c:c4:bf:1b: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:92:86:4D:65:2E:10:01:35:15:8C:36:59:A7:E5:EB:B4:51:E8:13 X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.254.0/24 Signature Algorithm: sha256WithRSAEncryption 57:07:a2:95:aa:45:aa:f0:c2:1d:98:25:04:83:29:37:22:25: dd:53:8b:40:9d:23:21:c0:5a:25:d4:50:8d:06:4c:f1:0e:1d: c9:16:6e:db:78:8b:d5:e0:6e:50:33:c1:70:12:e4:c8:c5:9f: a4:fa:16:61:7d:95:25:b1:f5:62:fa:7c:44:3a:e6:d9:bc:ad: 4e:9a:54:5d:d9:2a:4d:30:ef:a0:50:f7:38:cd:7e:58:c3:d5: 92:0f:f6:30:ed:f6:f3:18:c4:1f:32:e5:37:bf:20:46:d0:51: 6c:36:db:e5:42:8b:65:d3:0e:98:99:41:4a:d4:5b:c7:1b:c1: b2:ca:a1:4e:92:53:ef:90:5c:c8:bc:84:7d:6e:bb:41:8a:71: b1:0a:4f:b1:c6:6f:49:cd:aa:fb:f7:86:9a:5d:ee:8c:29:ed: 93:be:1e:c3:75:a6:61:0b:3e:a4:a7:06:f8:37:86:18:d9:84: ac:d5:7d:17:5b:a2:48:78:54:12:33:4b:3c:fa:99:e1:f3:aa: 9d:57:c3:24:20:a9:05:c5:94:ce:ad:73:12:19:cb:4f:1c:58: f3:b0:6b:e4:f7:b7:70:4c:bc:96:5c:fe:ab:50:91:ae:1a:f7: 64:bd:75:20:ee:9c:89:87:02:24:45:35:8d:39:b9:d1:e7:82: a6:3e:4f:76 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUD/jxpq2dVcGtWUGkdSc7Es2dXC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yMzA3MDMwODU1MDBaFw0yNDA3MDEwOTAwMDBaMDMxMTAvBgNV BAMTKDVDOTI4NjRENjUyRTEwMDEzNTE1OEMzNjU5QTdFNUVCQjQ1MUU4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4X9TCFF5KddWW3sCSSYQYs1+x EAkA4kRHl7rUMJbBv4qiGN9NoO1D5xUz/TpXGPtiYB3CWbsFS2zRF38zpeWiEPKS TQPazN+KVqEWGqGuTv9a113lwSvEWZI3L/nCAFPOB7T3QPkQwDiwxCaVKXCX3KFt 7C5/rAGyydY9ULwXmHVjnPbO1FPw558xWaEZLvTgFyQQEZT7k+9/CSxwQLmZZ688 bERga0zsHTTD2cAbU17n2cmNab7FSyKzdN3JaLDRCMi7PMxReDS4sXGlLEqCPqCw 6CYS7+LM/ckUD5RAU03Ydg58VIto6o6KCFkLW+RZ8NCSzIfgLTDkPMS/G6NjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUXJKGTWUuEAE1FYw2Wafl67RR6BMwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZGMxZGQ4LTZkMjUtNDdjNy1h YWE0LWJkZGYxYjlkNjc3ZS8wLzMxMzAzMzJlMzEzNDMyMmUzMjM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ47+MA0GCSqG SIb3DQEBCwUAA4IBAQBXB6KVqkWq8MIdmCUEgyk3IiXdU4tAnSMhwFol1FCNBkzx Dh3JFm7beIvV4G5QM8FwEuTIxZ+k+hZhfZUlsfVi+nxEOubZvK1OmlRd2SpNMO+g UPc4zX5Yw9WSD/Yw7fbzGMQfMuU3vyBG0FFsNtvlQotl0w6YmUFK1FvHG8GyyqFO klPvkFzIvIR9brtBinGxCk+xxm9Jzar794aaXe6MKe2Tvh7DdaZhCz6kpwb4N4YY 2YSs1X0XW6JIeFQSM0s8+pnh86qdV8MkIKkFxZTOrXMSGctPHFjzsGvk97dwTLyW XP6rUJGuGvdkvXUg7pyJhwIkRTWNObnR54KmPk92 -----END CERTIFICATE-----Generated at Fri May 17 03:49:31 2024 by rpki-client on console-fra.rpki-client.org