$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa File: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (raw, json) Hash identifier: z/QAu9qQ8joc0Uuo1hipqWaqLIWI1/i6H6/0usLQwN0= Subject key identifier: F8:25:B3:4F:DC:DD:A7:E8:69:7B:CC:CD:43:4E:E0:DD:5A:E0:82:75 Certificate issuer: /CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Certificate serial: 17C23940EF5FBD00126E8ECA6507D545583443D2 Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa Signing time: Tue 17 Oct 2023 12:00:01 +0000 ROA not before: Tue 17 Oct 2023 11:55:01 +0000 ROA not after: Tue 15 Oct 2024 12:00:01 +0000 asID: 150234 IP address blocks: 103.19.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c2:39:40:ef:5f:bd:00:12:6e:8e:ca:65:07:d5:45:58:34:43:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Validity Not Before: Oct 17 11:55:01 2023 GMT Not After : Oct 15 12:00:01 2024 GMT Subject: CN=F825B34FDCDDA7E8697BCCCD434EE0DD5AE08275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:07:0e:01:59:dc:94:a0:7b:30:79:de:42:58: ee:4c:42:69:4f:c6:14:8f:03:bf:e1:39:11:1e:83: a0:36:95:bc:5f:80:3f:bc:31:0a:1a:de:64:7a:3b: 09:2c:92:c8:7d:f7:8c:a9:71:d3:ea:27:88:e7:5c: bf:ab:45:81:9e:98:07:36:79:ca:63:ff:4f:a9:35: b1:84:fa:ff:96:b3:76:2e:31:6f:58:15:57:30:c2: 54:4a:b0:89:7a:72:d4:e0:f5:9c:69:ed:30:d9:35: 04:39:83:9b:23:81:4b:d1:49:fd:cc:df:ee:f7:f7: 5a:75:7f:ce:56:1a:f1:e6:ad:42:2a:43:57:c7:f2: a3:bc:4c:77:f2:48:ad:68:13:ff:48:2f:13:fb:33: 24:f3:72:af:80:af:71:49:b4:d6:14:0b:65:7b:ba: e0:66:da:2e:8e:35:36:bc:a7:9d:f5:d3:0b:27:c8: 5c:07:fb:94:9f:4f:9e:fb:38:58:19:52:80:8a:ea: a3:ba:75:29:a4:44:c8:61:08:ab:d6:09:fd:f7:f3: 21:97:9b:fa:6a:62:e8:e1:dc:c4:cb:56:f4:a0:3b: 57:e5:aa:c4:81:8c:64:4b:99:4c:ec:79:15:92:c1: ce:e7:1f:70:16:21:dd:db:5d:60:73:b9:d1:d2:53: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:25:B3:4F:DC:DD:A7:E8:69:7B:CC:CD:43:4E:E0:DD:5A:E0:82:75 X509v3 Authority Key Identifier: keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.156.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:37:e8:6b:ed:ec:4a:00:6e:c5:c9:be:bd:f5:0b:01:c9:a9: 15:96:19:cd:db:21:b7:bb:46:2c:d1:26:68:fa:b2:de:93:41: b5:9d:dc:aa:fc:61:1b:29:cb:df:a7:57:1d:92:96:3f:f6:be: ad:d1:91:37:b2:69:9d:6b:45:75:7b:68:67:bf:9d:fd:a5:6f: e0:f7:50:d5:a2:03:c2:81:fb:03:e5:48:f6:46:46:5f:7d:99: 62:ce:3b:84:eb:ff:45:e3:64:ce:b6:80:dd:85:00:3c:31:1a: 5f:90:3d:70:45:a8:5c:52:34:25:8e:0e:5a:5e:8d:b3:e6:18: c4:8a:f3:6d:1c:cd:49:d6:db:fa:86:50:28:b2:d4:58:a5:b0: 44:ce:02:24:ff:c9:a5:5a:ea:bb:56:13:6d:b2:b6:a0:8b:ee: 82:92:5e:d4:42:23:79:53:c1:83:d7:ec:db:d7:81:ab:a7:a1: 4b:44:ed:2a:39:80:34:73:1f:aa:9b:9d:bd:93:ea:f4:86:0c: 64:cc:5d:09:fb:dc:15:42:95:d2:98:32:71:41:f2:47:17:6a: 43:37:4b:30:15:55:2e:4d:4d:c4:72:e4:ad:2b:a4:32:d0:6e: 7e:68:6b:f5:79:43:cb:56:43:18:b9:da:c1:26:11:5d:e3:18: 82:51:5e:43 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUF8I5QO9fvQASbo7KZQfVRVg0Q9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAw RDUxMDE5MDAeFw0yMzEwMTcxMTU1MDFaFw0yNDEwMTUxMjAwMDFaMDMxMTAvBgNV BAMTKEY4MjVCMzRGRENEREE3RTg2OTdCQ0NDRDQzNEVFMERENUFFMDgyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWBw4BWdyUoHswed5CWO5MQmlP xhSPA7/hOREeg6A2lbxfgD+8MQoa3mR6Owksksh994ypcdPqJ4jnXL+rRYGemAc2 ecpj/0+pNbGE+v+Ws3YuMW9YFVcwwlRKsIl6ctTg9Zxp7TDZNQQ5g5sjgUvRSf3M 3+7391p1f85WGvHmrUIqQ1fH8qO8THfySK1oE/9ILxP7MyTzcq+Ar3FJtNYUC2V7 uuBm2i6ONTa8p5310wsnyFwH+5SfT577OFgZUoCK6qO6dSmkRMhhCKvWCf338yGX m/pqYujh3MTLVvSgO1flqsSBjGRLmUzseRWSwc7nH3AWId3bXWBzudHSU8U1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+CWzT9zdp+hpe8zNQ07g3VrggnUwHwYDVR0j BBgwFoAUG0Kyu1Z08jRodEYUzfmwsA1RAZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ0MjUyYi1kMzBlLTRiZGMtODMyZi1iMzhiMDVjN2EwMzUvMC8xQjQyQjJCQjU2 NzRGMjM0Njg3NDQ2MTRDREY5QjBCMDBENTEwMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAwRDUx MDE5MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIxNDQyNTJiLWQzMGUtNGJkYy04 MzJmLWIzOGIwNWM3YTAzNS8wLzMxMzAzMzJlMzEzOTJlMzEzNTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxOcMA0GCSqG SIb3DQEBCwUAA4IBAQBLN+hr7exKAG7Fyb699QsByakVlhnN2yG3u0Ys0SZo+rLe k0G1ndyq/GEbKcvfp1cdkpY/9r6t0ZE3smmda0V1e2hnv539pW/g91DVogPCgfsD 5Uj2RkZffZlizjuE6/9F42TOtoDdhQA8MRpfkD1wRahcUjQljg5aXo2z5hjEivNt HM1J1tv6hlAostRYpbBEzgIk/8mlWuq7VhNtsragi+6Ckl7UQiN5U8GD1+zb14Gr p6FLRO0qOYA0cx+qm529k+r0hgxkzF0J+9wVQpXSmDJxQfJHF2pDN0swFVUuTU3E cuStK6Qy0G5+aGv1eUPLVkMYudrBJhFd4xiCUV5D -----END CERTIFICATE-----Generated at Sun Jun 2 10:44:52 2024 by rpki-client on console-ams.rpki-client.org