$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa File: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (raw, json) Hash identifier: bcb8ETQxI9OLPd2+ZZ5YZBTV5uhcRb0JH1Q8izlXLhc= Subject key identifier: 45:B0:C1:ED:D4:F3:EA:2B:20:F6:DB:C2:93:5D:3C:FE:74:D7:4A:F8 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 3522EF13BCF79A144AE850D8928CCFC2B297E333 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa Signing time: Thu 18 Jan 2024 01:39:14 +0000 ROA not before: Thu 18 Jan 2024 01:34:14 +0000 ROA not after: Thu 16 Jan 2025 01:39:14 +0000 asID: 141965 IP address blocks: 103.165.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 20:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:22:ef:13:bc:f7:9a:14:4a:e8:50:d8:92:8c:cf:c2:b2:97:e3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Jan 18 01:34:14 2024 GMT Not After : Jan 16 01:39:14 2025 GMT Subject: CN=45B0C1EDD4F3EA2B20F6DBC2935D3CFE74D74AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:c9:19:a7:b7:f0:20:ac:ec:22:3c:42:ad: fe:f0:26:58:ac:07:ea:36:26:16:f5:ea:d8:4f:61: bb:d2:9c:c9:99:10:34:dd:58:e4:a4:4e:dd:2c:c8: a9:af:4e:76:81:71:fa:e3:10:19:20:08:ff:f9:18: 89:69:5e:6f:ea:f2:5d:96:9d:39:b7:89:e4:c2:5d: a0:e3:d9:13:fd:67:bc:fa:c3:63:66:4e:9a:80:1f: 68:60:cf:00:bc:37:50:c5:b5:52:12:e3:89:4d:7d: a9:2d:f2:81:5a:12:5b:fe:59:62:d3:36:a2:02:20: 18:c1:fa:23:dd:35:05:f9:9f:c6:df:03:7c:23:0d: da:1e:c5:01:f0:8a:34:36:25:c5:97:7e:ec:a7:bc: 07:be:62:e8:aa:26:09:48:47:46:50:ae:c5:3a:30: bc:89:68:fb:e1:c5:20:53:df:15:8b:d8:d2:8e:25: db:a2:af:7a:8b:0d:10:30:2b:67:46:a5:d5:d0:f6: 7c:f0:61:62:22:27:dd:d5:8e:9b:a9:c1:3b:35:8f: 28:8d:f8:98:0b:85:63:05:78:c8:1f:de:e1:74:d9: b4:c0:3b:65:ac:5b:da:4a:e0:cd:15:41:09:b8:c4: 33:65:14:70:44:80:7f:42:22:ff:48:d0:1e:b3:21: 6a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B0:C1:ED:D4:F3:EA:2B:20:F6:DB:C2:93:5D:3C:FE:74:D7:4A:F8 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.154.0/24 Signature Algorithm: sha256WithRSAEncryption 11:34:c9:9b:d0:04:97:1f:82:5f:be:d9:13:dc:d6:6c:5c:f4: b3:2c:45:90:3a:9a:8a:e4:65:de:5b:d7:d2:9f:5b:78:1f:dc: 51:52:0e:3c:23:62:5d:2c:7d:d4:49:58:e6:b3:c8:a1:f2:86: 80:84:80:33:67:2b:a5:7a:79:b0:be:21:21:ce:7f:18:b4:36: de:1c:8a:77:a6:7f:7e:1c:f4:03:1b:96:35:5c:68:24:3f:47: 9d:64:9b:ea:be:4d:b8:70:d0:91:7f:d6:47:69:be:31:67:92: 1b:76:11:ce:b5:8b:f5:c1:64:d9:2e:38:8b:54:0e:c2:ae:68: 64:b9:d6:e6:2e:8d:32:1a:4a:77:6c:24:28:f7:1c:58:aa:dc: 9d:48:ba:15:ed:da:66:86:4d:e1:b6:89:b3:72:17:b9:4b:90: 6d:9e:c6:2a:b3:1e:54:82:74:07:fb:f2:1c:bb:59:1f:6b:0b: e7:00:60:9f:cc:a1:86:ec:42:ed:61:69:7e:31:94:d0:50:65: 50:95:c2:a3:d5:2d:04:f5:d5:e9:68:4e:56:5d:f1:19:eb:99: 9f:55:c7:a5:17:fb:cf:de:6a:68:7d:42:98:5c:6c:47:a3:41: a8:be:b3:45:c7:f6:08:e1:70:3c:7d:37:a9:1f:e7:bb:97:8a: 11:dd:fc:c1 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNSLvE7z3mhRK6FDYkozPwrKX4zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNDAxMTgwMTM0MTRaFw0yNTAxMTYwMTM5MTRaMDMxMTAvBgNV BAMTKDQ1QjBDMUVERDRGM0VBMkIyMEY2REJDMjkzNUQzQ0ZFNzRENzRBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKckZp7fwIKzsIjxCrf7wJlis B+o2Jhb16thPYbvSnMmZEDTdWOSkTt0syKmvTnaBcfrjEBkgCP/5GIlpXm/q8l2W nTm3ieTCXaDj2RP9Z7z6w2NmTpqAH2hgzwC8N1DFtVIS44lNfakt8oFaElv+WWLT NqICIBjB+iPdNQX5n8bfA3wjDdoexQHwijQ2JcWXfuynvAe+YuiqJglIR0ZQrsU6 MLyJaPvhxSBT3xWL2NKOJduir3qLDRAwK2dGpdXQ9nzwYWIiJ93VjpupwTs1jyiN +JgLhWMFeMgf3uF02bTAO2WsW9pK4M0VQQm4xDNlFHBEgH9CIv9I0B6zIWq/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQURbDB7dTz6isg9tvCk108/nTXSvgwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjZjM1YTQ3LTJjY2UtNDg3Zi1h YTI3LWM5ZTlkZTYzNWJlYy8wLzMxMzAzMzJlMzEzNjM1MmUzMTM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM2MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpZowDQYJ KoZIhvcNAQELBQADggEBABE0yZvQBJcfgl++2RPc1mxc9LMsRZA6morkZd5b19Kf W3gf3FFSDjwjYl0sfdRJWOazyKHyhoCEgDNnK6V6ebC+ISHOfxi0Nt4cinemf34c 9AMbljVcaCQ/R51km+q+Tbhw0JF/1kdpvjFnkht2Ec61i/XBZNkuOItUDsKuaGS5 1uYujTIaSndsJCj3HFiq3J1IuhXt2maGTeG2ibNyF7lLkG2exiqzHlSCdAf78hy7 WR9rC+cAYJ/MoYbsQu1haX4xlNBQZVCVwqPVLQT11eloTlZd8RnrmZ9Vx6UX+8/e amh9QphcbEejQai+s0XH9gjhcDx9N6kf57uXihHd/ME= -----END CERTIFICATE-----Generated at Fri May 31 20:32:22 2024 by rpki-client on console-ams.rpki-client.org