$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa File: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (raw, json) Hash identifier: hheVf25fkMRdrlU3iCRM5+uIxV9AXxEYgDaEoOsODX8= Subject key identifier: 80:33:3A:29:7F:BF:9E:A4:C3:AC:85:74:1C:3E:66:6E:66:91:B1:B6 Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Certificate serial: 61531EE81C7E7556C80BFFFC73B57627E608488D Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa Signing time: Wed 29 May 2024 08:00:00 +0000 ROA not before: Wed 29 May 2024 07:55:00 +0000 ROA not after: Wed 28 May 2025 08:00:00 +0000 asID: 131111 IP address blocks: 103.54.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:53:1e:e8:1c:7e:75:56:c8:0b:ff:fc:73:b5:76:27:e6:08:48:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Validity Not Before: May 29 07:55:00 2024 GMT Not After : May 28 08:00:00 2025 GMT Subject: CN=80333A297FBF9EA4C3AC85741C3E666E6691B1B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:f5:ab:14:eb:92:6f:d3:30:3c:17:9b:f4: 2e:80:c0:27:bb:6d:2e:63:d8:0a:5f:31:b1:f2:50: 16:6b:a2:b6:ee:d2:d3:c1:f4:13:00:a5:69:43:30: bf:50:e9:c4:c4:69:40:45:04:ff:3a:07:0a:5c:5d: 97:8e:66:f2:d1:0d:d1:41:ba:19:48:52:8a:2c:fa: 62:58:ed:75:64:61:22:0a:83:2b:dd:b3:ec:61:fe: 9d:d6:22:fc:5a:52:fa:7d:c1:ff:8d:04:2b:80:df: 67:88:47:de:72:88:35:7e:55:7c:48:fd:55:ca:46: f2:33:b8:5a:cd:98:b0:ab:5c:27:81:5f:12:e6:d2: 03:6d:42:34:42:6c:f4:2a:b4:d8:6f:5d:9a:fb:fd: a1:3e:4d:cd:5f:15:71:5e:e5:b4:c7:87:b9:22:7e: 97:43:cf:3f:ec:93:bb:88:94:ee:49:0a:5c:03:57: ac:0c:88:ec:fe:c6:52:ec:6b:02:9d:83:24:f3:dc: 54:f8:cc:70:86:ca:0b:1d:66:fa:5a:0c:43:d9:7b: 77:72:5d:ff:72:f8:88:00:69:2e:17:60:10:b7:de: e8:f3:da:43:61:46:b5:c5:f8:d3:21:66:71:e6:58: 18:f9:98:57:46:00:06:39:ab:3e:2d:23:1c:83:33: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:33:3A:29:7F:BF:9E:A4:C3:AC:85:74:1C:3E:66:6E:66:91:B1:B6 X509v3 Authority Key Identifier: keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.216.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:8b:bc:2d:8b:83:c0:17:9f:f0:87:99:18:29:f7:3f:b9:78: e2:fa:57:b7:8c:c0:5d:fb:fa:22:c4:d6:a1:28:e4:8e:ec:e7: fd:70:be:ee:62:db:46:28:03:57:f7:da:63:34:1e:e5:9b:31: 6f:db:82:89:2c:0c:21:ae:cc:e5:cf:11:e1:fe:40:d2:49:8b: 17:ba:69:f0:df:c4:e6:a6:b0:9b:5d:68:7a:0f:14:ae:d9:a9: 80:3d:f4:26:cd:5a:e8:89:47:81:35:07:71:43:18:28:e0:1a: fe:43:ef:ef:dc:af:64:3c:4e:77:c9:97:9f:e7:cb:10:d1:93: b1:4e:f7:a6:3d:7c:0d:56:eb:b7:2e:4a:f4:0e:de:e7:4a:33: e9:1d:a5:f2:02:8a:50:62:ba:f0:5a:cd:b3:4a:08:e6:5f:82: c9:b2:f6:b8:8e:32:3e:f9:78:6f:6e:b8:04:38:8c:71:a0:48: 39:7d:52:f9:35:11:d6:04:ed:30:39:1d:5f:ce:92:b5:42:2a: 59:d6:2d:ca:91:dd:7c:14:6d:44:25:27:b4:e0:a1:09:22:d2: 8c:26:47:ab:f2:8f:b3:c7:a6:70:3a:0e:2d:1d:1c:46:db:41: 8f:5d:aa:61:9a:4f:70:bb:76:5e:64:78:54:61:c5:f0:d6:d9: cd:e1:cf:42 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYVMe6Bx+dVbIC//8c7V2J+YISI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4 RDFFQkFDODAeFw0yNDA1MjkwNzU1MDBaFw0yNTA1MjgwODAwMDBaMDMxMTAvBgNV BAMTKDgwMzMzQTI5N0ZCRjlFQTRDM0FDODU3NDFDM0U2NjZFNjY5MUIxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVPWrFOuSb9MwPBeb9C6AwCe7 bS5j2ApfMbHyUBZrorbu0tPB9BMApWlDML9Q6cTEaUBFBP86BwpcXZeOZvLRDdFB uhlIUoos+mJY7XVkYSIKgyvds+xh/p3WIvxaUvp9wf+NBCuA32eIR95yiDV+VXxI /VXKRvIzuFrNmLCrXCeBXxLm0gNtQjRCbPQqtNhvXZr7/aE+Tc1fFXFe5bTHh7ki fpdDzz/sk7uIlO5JClwDV6wMiOz+xlLsawKdgyTz3FT4zHCGygsdZvpaDEPZe3dy Xf9y+IgAaS4XYBC33ujz2kNhRrXF+NMhZnHmWBj5mFdGAAY5qz4tIxyDM8ShAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgDM6KX+/nqTDrIV0HD5mbmaRsbYwHwYDVR0j BBgwFoAUpTzhoXYjGLqRMKR8+hYCfo0eusgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzllYWQ4MS1hYzEyLTQ0NzktYjJmYi05OThlMDE4NTQ1NTEvMC9BNTNDRTFBMTc2 MjMxOEJBOTEzMEE0N0NGQTE2MDI3RThEMUVCQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4RDFF QkFDOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIzOWVhZDgxLWFjMTItNDQ3OS1i MmZiLTk5OGUwMTg1NDU1MS8wLzMxMzAzMzJlMzUzNDJlMzIzMTM2MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZzbYMA0GCSqG SIb3DQEBCwUAA4IBAQBNi7wti4PAF5/wh5kYKfc/uXji+le3jMBd+/oixNahKOSO 7Of9cL7uYttGKANX99pjNB7lmzFv24KJLAwhrszlzxHh/kDSSYsXumnw38TmprCb XWh6DxSu2amAPfQmzVroiUeBNQdxQxgo4Br+Q+/v3K9kPE53yZef58sQ0ZOxTvem PXwNVuu3Lkr0Dt7nSjPpHaXyAopQYrrwWs2zSgjmX4LJsva4jjI++XhvbrgEOIxx oEg5fVL5NRHWBO0wOR1fzpK1QipZ1i3Kkd18FG1EJSe04KEJItKMJker8o+zx6Zw Og4tHRxG20GPXaphmk9wu3ZeZHhUYcXw1tnN4c9C -----END CERTIFICATE-----Generated at Sat Nov 23 16:20:59 2024 by rpki-client on console-ams.rpki-client.org