$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa File: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (raw, json) Hash identifier: nnNNsQQD5wM9j6TEAujIGZ3+Q+oS1ZWWXMIWFEpgM4w= Subject key identifier: BC:DB:F6:1D:7E:70:C3:BE:02:EE:08:3F:F5:5A:63:CB:D6:5D:DA:4C Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 1BB458347995614A083C8FD176A55CA48AC117EF Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa Signing time: Sat 20 Apr 2024 08:02:00 +0000 ROA not before: Sat 20 Apr 2024 07:57:00 +0000 ROA not after: Sat 19 Apr 2025 08:02:00 +0000 asID: 45718 IP address blocks: 103.31.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b4:58:34:79:95:61:4a:08:3c:8f:d1:76:a5:5c:a4:8a:c1:17:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Apr 20 07:57:00 2024 GMT Not After : Apr 19 08:02:00 2025 GMT Subject: CN=BCDBF61D7E70C3BE02EE083FF55A63CBD65DDA4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:c8:d0:a9:6d:6e:27:bd:f9:89:75:35:d5: 87:67:17:00:40:0d:40:3c:27:9a:91:bb:80:62:81: 84:bf:b6:8f:7f:ed:47:08:b2:5f:8d:df:77:2d:e8: 92:c5:37:b0:4d:e0:dd:b7:07:31:8b:96:5e:b5:62: 84:a7:a7:2d:bd:84:45:16:6e:8f:04:c1:08:18:96: af:90:72:58:7e:19:97:c5:e1:2b:09:93:e7:28:ec: 5e:90:eb:87:70:77:a2:be:72:37:89:ec:81:71:e4: ab:86:8a:49:8f:24:6c:55:4f:67:dc:49:96:be:9e: 20:69:f0:04:1c:6d:17:d5:63:dd:6d:96:b6:53:c4: fc:d9:f1:67:4f:39:30:72:96:f3:01:a4:38:9e:cf: 0e:1a:2a:63:b8:c4:11:69:30:14:35:ef:f5:54:48: ce:ec:fe:88:83:db:31:32:0e:96:00:a8:a6:00:b0: c9:56:32:07:e6:f5:dc:55:a2:ba:1e:2a:8d:f7:da: 83:48:a2:4d:13:06:d4:6b:f1:ae:b7:4f:6a:45:ee: 34:2a:44:db:1c:47:4e:a8:31:32:94:12:28:40:db: 7b:d0:60:c2:f6:16:fd:28:0a:51:e5:f9:d4:d4:d9: a1:50:82:6d:42:13:d6:39:f1:ed:6c:cc:07:02:c2: b8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DB:F6:1D:7E:70:C3:BE:02:EE:08:3F:F5:5A:63:CB:D6:5D:DA:4C X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.204.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:2a:67:95:65:bd:3f:79:fe:4f:49:61:cb:0a:cc:12:da:19: 55:99:97:3b:a9:2e:64:70:f7:06:b1:2b:aa:f9:9a:e0:d1:91: be:bb:59:f8:89:e1:9e:4c:bd:46:fc:bc:8b:d7:1f:1d:6d:df: 63:09:70:5e:a7:71:8c:00:fd:e1:4a:f9:90:45:26:9b:e6:db: 77:39:5a:00:75:20:c3:09:c0:4b:bd:00:99:b5:51:99:30:0a: a2:d3:3e:ca:f6:32:31:cc:26:cb:6d:da:de:c7:b5:54:64:01: bb:cf:e2:1c:18:4a:0e:20:d0:69:9c:45:d7:ec:eb:71:41:29: 1a:5a:77:6b:7f:66:7b:ef:46:87:78:f4:84:cc:ad:5a:39:ca: 93:ee:0e:f8:94:6c:41:ef:d3:59:0e:db:29:69:06:a7:75:91: d1:fb:75:76:4a:b0:b5:9f:72:cb:f0:f2:a2:63:69:23:e3:df: 08:d2:84:ef:52:77:f4:f8:0b:fc:cb:35:bc:73:0a:c0:05:51: 27:ce:bb:23:74:7f:f9:4b:1c:63:bc:a6:88:8c:f7:f1:00:3a: 66:47:0d:ba:b8:16:ef:67:93:5c:ce:0a:2c:27:70:ce:49:b8: 79:61:d8:03:2b:83:41:67:d0:23:48:13:3c:ac:1a:f7:90:98: 4a:08:5c:58 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUG7RYNHmVYUoIPI/RdqVcpIrBF+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNDA0MjAwNzU3MDBaFw0yNTA0MTkwODAyMDBaMDMxMTAvBgNV BAMTKEJDREJGNjFEN0U3MEMzQkUwMkVFMDgzRkY1NUE2M0NCRDY1RERBNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZWsjQqW1uJ735iXU11YdnFwBA DUA8J5qRu4BigYS/to9/7UcIsl+N33ct6JLFN7BN4N23BzGLll61YoSnpy29hEUW bo8EwQgYlq+Qclh+GZfF4SsJk+co7F6Q64dwd6K+cjeJ7IFx5KuGikmPJGxVT2fc SZa+niBp8AQcbRfVY91tlrZTxPzZ8WdPOTBylvMBpDiezw4aKmO4xBFpMBQ17/VU SM7s/oiD2zEyDpYAqKYAsMlWMgfm9dxVoroeKo332oNIok0TBtRr8a63T2pF7jQq RNscR06oMTKUEihA23vQYML2Fv0oClHl+dTU2aFQgm1CE9Y58e1szAcCwrilAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUvNv2HX5ww74C7gg/9Vpjy9Zd2kwwHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNDljMjEwLWYzNjUtNDMyZi1h N2NhLTBiNWViODZiMDFjNi8wLzMxMzAzMzJlMzMzMTJlMzIzMDM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNTM3MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcfzDANBgkqhkiG 9w0BAQsFAAOCAQEAXipnlWW9P3n+T0lhywrMEtoZVZmXO6kuZHD3BrErqvma4NGR vrtZ+Inhnky9Rvy8i9cfHW3fYwlwXqdxjAD94Ur5kEUmm+bbdzlaAHUgwwnAS70A mbVRmTAKotM+yvYyMcwmy23a3se1VGQBu8/iHBhKDiDQaZxF1+zrcUEpGlp3a39m e+9Gh3j0hMytWjnKk+4O+JRsQe/TWQ7bKWkGp3WR0ft1dkqwtZ9yy/DyomNpI+Pf CNKE71J39PgL/Ms1vHMKwAVRJ867I3R/+UscY7ymiIz38QA6ZkcNurgW72eTXM4K LCdwzkm4eWHYAyuDQWfQI0gTPKwa95CYSghcWA== -----END CERTIFICATE-----Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org