$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa File: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (raw, json) Hash identifier: ULwn2X/hM4Q5FWRKFhlmMhxFoOG81+KJc0tu7bMjlwI= Subject key identifier: AE:07:5E:2E:E5:AE:36:2E:4F:EC:41:22:32:C1:16:7D:A0:08:5C:19 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 5D8119712591B8F39868284A16BEEE8D53C3172B Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa Signing time: Sat 13 Jan 2024 10:00:01 +0000 ROA not before: Sat 13 Jan 2024 09:55:01 +0000 ROA not after: Sat 11 Jan 2025 10:00:01 +0000 asID: 132634 IP address blocks: 103.18.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:81:19:71:25:91:b8:f3:98:68:28:4a:16:be:ee:8d:53:c3:17:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Jan 13 09:55:01 2024 GMT Not After : Jan 11 10:00:01 2025 GMT Subject: CN=AE075E2EE5AE362E4FEC412232C1167DA0085C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9e:24:0a:6c:9b:95:a5:15:a3:e5:4c:52:e8: 05:6f:ba:d9:c3:22:27:99:06:c3:b6:fd:9a:5c:ab: fa:55:3a:d7:75:80:f2:77:52:59:0d:a5:38:8a:95: 13:55:f2:83:64:8d:09:10:c0:bc:59:85:ca:c0:90: 47:d7:5f:a8:db:73:8e:5a:34:0a:f6:67:5d:9b:64: a4:1d:01:36:09:97:df:12:a9:0c:fd:57:02:c7:94: 90:44:40:ce:f1:5f:7c:52:76:b1:b9:7b:52:b6:71: 2a:ef:16:64:52:9c:23:94:d1:f2:a8:36:f7:ab:b4: 45:c7:90:c4:9a:44:39:1f:d3:53:4d:f3:7a:a4:a0: f9:fc:4f:c8:ee:78:cc:c0:3b:79:8a:2c:40:80:fb: 01:5e:4d:e2:93:0a:54:34:c0:56:91:85:f3:04:a0: 32:2b:70:49:77:98:19:ca:8f:fb:00:fa:e8:c1:bb: 03:0f:dc:9a:22:0b:2a:78:18:3e:77:a8:fc:dd:94: 34:b4:c7:c0:96:b4:7c:c6:6d:29:8e:97:2e:5d:c1: 7d:55:8c:b5:73:d2:7b:10:b4:91:80:b2:27:4f:74: f4:b5:f5:39:74:b9:8e:e9:93:26:60:fd:ea:42:6e: e2:a2:b1:20:1c:c4:fa:ff:df:da:37:f2:05:3a:6e: 99:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:07:5E:2E:E5:AE:36:2E:4F:EC:41:22:32:C1:16:7D:A0:08:5C:19 X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.117.0/24 Signature Algorithm: sha256WithRSAEncryption 36:05:89:4b:d7:ae:3e:44:c9:45:3a:b2:1c:bb:1e:85:18:2e: 5a:a6:eb:e5:f6:d2:28:cd:c9:db:fb:ba:d6:60:a9:f3:b9:d6: b5:42:95:ce:30:46:c6:96:9d:d9:47:ed:fe:ed:60:5f:c7:0e: 99:84:94:a8:84:96:bf:30:12:37:0d:39:df:3b:17:6e:79:c8: d6:3e:6c:22:14:70:5a:13:b9:b9:48:df:55:0a:d5:39:4d:f4: 68:9a:52:3c:a0:80:d5:68:46:4f:e6:7b:a4:97:7a:7e:32:4f: 45:0d:32:45:e2:92:15:e8:6c:35:48:36:c2:e5:c2:c9:35:98: 51:da:45:09:cb:59:49:a6:78:20:c5:c4:e8:dc:e4:89:84:92: 23:47:f4:2d:88:48:c2:c5:bb:bc:d1:06:3d:f0:9b:5f:f0:7c: 6b:0e:ea:74:f4:8d:f6:35:f6:f4:c5:cb:06:9a:4e:55:07:cc: 95:f8:59:b4:3d:d4:0d:6a:d4:0c:34:9e:5d:7f:aa:db:ab:37: 01:e2:3f:bd:c6:5e:91:81:c4:aa:a0:1f:69:87:d1:42:f4:e4: 25:3c:9f:72:f3:08:0b:9f:62:91:6e:05:d7:ad:44:e7:c7:19: bd:c9:c8:e6:08:95:a0:13:d7:3b:56:5b:a4:93:ea:ff:49:3c: 22:10:72:c3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXYEZcSWRuPOYaChKFr7ujVPDFyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNDAxMTMwOTU1MDFaFw0yNTAxMTExMDAwMDFaMDMxMTAvBgNV BAMTKEFFMDc1RTJFRTVBRTM2MkU0RkVDNDEyMjMyQzExNjdEQTAwODVDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMniQKbJuVpRWj5UxS6AVvutnD IieZBsO2/Zpcq/pVOtd1gPJ3UlkNpTiKlRNV8oNkjQkQwLxZhcrAkEfXX6jbc45a NAr2Z12bZKQdATYJl98SqQz9VwLHlJBEQM7xX3xSdrG5e1K2cSrvFmRSnCOU0fKo NvertEXHkMSaRDkf01NN83qkoPn8T8jueMzAO3mKLECA+wFeTeKTClQ0wFaRhfME oDIrcEl3mBnKj/sA+ujBuwMP3JoiCyp4GD53qPzdlDS0x8CWtHzGbSmOly5dwX1V jLVz0nsQtJGAsidPdPS19Tl0uY7pkyZg/epCbuKisSAcxPr/39o38gU6bpllAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrgdeLuWuNi5P7EEiMsEWfaAIXBkwHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwZjdiZTA2LTk2NzItNDY0MS05 N2JkLTliZmRmOTU1ZGUxNy8wLzMxMzAzMzJlMzEzODJlMzEzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxJ1MA0GCSqG SIb3DQEBCwUAA4IBAQA2BYlL164+RMlFOrIcux6FGC5apuvl9tIozcnb+7rWYKnz uda1QpXOMEbGlp3ZR+3+7WBfxw6ZhJSohJa/MBI3DTnfOxduecjWPmwiFHBaE7m5 SN9VCtU5TfRomlI8oIDVaEZP5nukl3p+Mk9FDTJF4pIV6Gw1SDbC5cLJNZhR2kUJ y1lJpnggxcTo3OSJhJIjR/QtiEjCxbu80QY98Jtf8HxrDup09I32Nfb0xcsGmk5V B8yV+Fm0PdQNatQMNJ5df6rbqzcB4j+9xl6RgcSqoB9ph9FC9OQlPJ9y8wgLn2KR bgXXrUTnxxm9ycjmCJWgE9c7Vlukk+r/STwiEHLD -----END CERTIFICATE-----Generated at Fri Jun 21 19:32:08 2024 by rpki-client on console-ams.rpki-client.org