$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa File: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (raw, json) Hash identifier: P+YFIlA5HQxOZarwfNVZcytsk2bEQds3utjug9joblM= Subject key identifier: 09:75:B4:24:10:86:58:C7:C2:89:E1:08:5A:0B:87:EC:2B:13:58:C9 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 06DAEB653CB773902308EB58FBF54B17F6B77449 Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa Signing time: Sat 13 Jan 2024 04:00:02 +0000 ROA not before: Sat 13 Jan 2024 03:55:02 +0000 ROA not after: Sat 11 Jan 2025 04:00:02 +0000 asID: 132634 IP address blocks: 103.16.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:da:eb:65:3c:b7:73:90:23:08:eb:58:fb:f5:4b:17:f6:b7:74:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Jan 13 03:55:02 2024 GMT Not After : Jan 11 04:00:02 2025 GMT Subject: CN=0975B424108658C7C289E1085A0B87EC2B1358C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:d1:a3:a6:75:11:fb:ba:c1:60:4d:07:e9: 49:e6:99:74:51:2d:ae:94:f2:2b:7d:92:5d:33:cd: 9e:75:ea:14:11:f7:62:9d:93:a5:5a:ef:cf:7a:fc: 47:4e:16:2a:bb:6f:f6:23:14:a1:44:ca:2e:5b:b3: f0:7c:58:a8:d8:39:de:cb:59:bc:cc:c6:a3:ed:14: 61:0e:d3:ad:e5:c6:4a:4c:6c:c2:a1:d7:4d:c3:d7: 5d:86:1e:7e:9d:dc:be:ea:cc:ba:f0:bb:dd:7f:49: 0a:4b:af:88:cd:81:24:e1:97:16:b0:a1:dd:3d:11: 76:2d:d3:50:f7:3b:fc:32:e7:78:0d:b8:77:4a:26: 4d:f8:ef:d2:63:01:70:01:78:af:73:43:1b:d9:96: d1:eb:93:99:3e:9b:fa:7f:1e:ae:63:ec:c4:82:a0: e9:cd:36:a5:50:26:9e:ae:86:22:d6:34:06:b9:ff: 3c:a5:32:9b:18:05:be:05:ab:17:a6:38:dd:2f:f2: d7:3c:c2:69:78:bc:03:36:46:bb:72:3c:87:5e:a5: 49:fa:fa:95:a4:bb:a7:2c:23:bc:76:0e:0c:2a:ae: dc:76:17:e1:4e:5e:cb:9c:a3:79:c5:92:94:9f:24: 4a:4b:5d:b2:35:d5:ad:4d:1f:2c:b6:de:62:c9:35: 16:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:75:B4:24:10:86:58:C7:C2:89:E1:08:5A:0B:87:EC:2B:13:58:C9 X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.48.0/23 Signature Algorithm: sha256WithRSAEncryption 82:d0:c6:50:e3:87:f1:b6:5e:78:b7:b6:b8:cf:74:ad:ae:ea: 0a:00:05:08:3d:e6:a0:b8:45:6a:27:8e:98:ef:66:ab:33:19: a9:84:6b:7f:7e:73:5c:26:da:26:8a:9d:db:4c:da:b9:81:62: 92:ba:f3:a5:83:92:7b:54:c8:5b:9b:d1:a9:b2:76:e5:c9:cd: 50:2c:61:3e:8b:33:a1:2f:48:13:f9:ba:ce:88:e5:f9:0c:f7: d7:4b:7d:61:f6:7d:20:87:21:59:0d:82:af:ac:f5:5f:f0:6d: 60:d7:b9:3c:8c:8b:d6:38:1f:9a:8c:2e:01:2e:60:c0:d2:29: d6:63:59:df:19:32:bd:d4:4d:01:eb:ab:3a:b7:78:97:cf:a1: 26:18:97:49:95:40:52:57:d9:ae:2f:a7:a2:19:df:8e:47:b0: 72:ab:35:8a:2c:a8:eb:57:ae:18:d7:ca:cd:eb:d1:29:3d:d2: ea:8f:19:ff:09:19:80:fa:bc:1f:89:57:71:96:9e:9f:ac:82: 77:98:c5:e0:61:bf:b6:d5:6c:e1:77:5a:19:02:b0:a7:29:f4: c2:d9:72:99:9b:33:c6:17:fe:a8:37:d7:e3:f8:c2:ce:34:9f: 42:b1:db:40:6b:1d:0b:12:8a:15:97:20:24:a2:49:81:cd:4e: 80:dc:b4:e4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBtrrZTy3c5AjCOtY+/VLF/a3dEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNDAxMTMwMzU1MDJaFw0yNTAxMTEwNDAwMDJaMDMxMTAvBgNV BAMTKDA5NzVCNDI0MTA4NjU4QzdDMjg5RTEwODVBMEI4N0VDMkIxMzU4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XNGjpnUR+7rBYE0H6UnmmXRR La6U8it9kl0zzZ516hQR92Kdk6Va7896/EdOFiq7b/YjFKFEyi5bs/B8WKjYOd7L WbzMxqPtFGEO063lxkpMbMKh103D112GHn6d3L7qzLrwu91/SQpLr4jNgSThlxaw od09EXYt01D3O/wy53gNuHdKJk3479JjAXABeK9zQxvZltHrk5k+m/p/Hq5j7MSC oOnNNqVQJp6uhiLWNAa5/zylMpsYBb4FqxemON0v8tc8wml4vAM2RrtyPIdepUn6 +pWku6csI7x2Dgwqrtx2F+FOXsuco3nFkpSfJEpLXbI11a1NHyy23mLJNRa7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCXW0JBCGWMfCieEIWguH7CsTWMkwHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwZjdiZTA2LTk2NzItNDY0MS05 N2JkLTliZmRmOTU1ZGUxNy8wLzMxMzAzMzJlMzEzNjJlMzQzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcQMDANBgkqhkiG 9w0BAQsFAAOCAQEAgtDGUOOH8bZeeLe2uM90ra7qCgAFCD3moLhFaieOmO9mqzMZ qYRrf35zXCbaJoqd20zauYFikrrzpYOSe1TIW5vRqbJ25cnNUCxhPoszoS9IE/m6 zojl+Qz310t9YfZ9IIchWQ2Cr6z1X/BtYNe5PIyL1jgfmowuAS5gwNIp1mNZ3xky vdRNAeurOrd4l8+hJhiXSZVAUlfZri+nohnfjkewcqs1iiyo61euGNfKzevRKT3S 6o8Z/wkZgPq8H4lXcZaen6yCd5jF4GG/ttVs4XdaGQKwpyn0wtlymZszxhf+qDfX 4/jCzjSfQrHbQGsdCxKKFZcgJKJJgc1OgNy05A== -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org