$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa File: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (raw, json) Hash identifier: kmowja6DMUn+Zx/MaK6HGxlNLXUwdV8SkhDsphIdbRA= Subject key identifier: 73:66:36:A2:F7:AC:ED:9B:BD:93:DB:97:7E:F6:EC:EA:B3:50:BB:DE Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Certificate serial: 5F6287B9AE02E7024902D73C412B7C79C9FEA24D Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa Signing time: Sat 27 Jan 2024 23:02:27 +0000 ROA not before: Sat 27 Jan 2024 22:57:27 +0000 ROA not after: Sat 25 Jan 2025 23:02:27 +0000 asID: 151595 IP address blocks: 103.42.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:62:87:b9:ae:02:e7:02:49:02:d7:3c:41:2b:7c:79:c9:fe:a2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Validity Not Before: Jan 27 22:57:27 2024 GMT Not After : Jan 25 23:02:27 2025 GMT Subject: CN=736636A2F7ACED9BBD93DB977EF6ECEAB350BBDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:91:d1:87:09:dc:c5:4f:aa:22:63:e8:6c: f4:c6:80:ad:72:54:7a:88:85:5e:86:c9:43:cf:8b: 97:c7:44:8a:e4:1a:59:e4:0d:f7:8b:41:81:ed:9d: 46:18:d6:65:31:f4:10:ac:4a:68:22:61:40:74:ee: fa:c2:68:99:16:09:95:4c:2a:08:97:76:80:10:b5: 25:96:6d:a3:9f:e7:63:52:ba:bc:d2:36:c6:0c:56: 7b:c8:99:80:12:3a:7f:22:53:64:2c:fc:50:67:fb: 2f:5b:97:cc:cd:0d:77:52:92:36:92:28:71:e0:27: f5:ba:1e:9c:c5:aa:db:21:8a:e9:a8:89:ec:2d:a9: f4:84:ee:f3:36:cd:96:7a:ab:fb:46:ac:b7:ad:62: b3:8a:ed:09:8b:70:ee:89:3e:b3:fb:32:d4:1f:62: 8e:b1:9f:5c:70:6c:ff:be:a4:20:ae:b6:80:b2:5e: 50:fa:3d:59:f1:e7:af:b4:fe:3c:d8:16:1d:33:c8: 1b:d7:23:d4:15:39:6d:a2:cb:7f:57:8e:e2:92:40: 57:94:02:0d:ac:fc:0b:b2:b1:b8:71:c8:f2:7b:03: d5:63:f3:75:f7:f9:65:44:95:6a:80:2a:8d:39:5a: 12:ab:80:a7:8f:b8:4a:e1:f1:bd:3b:fb:b1:5f:ef: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:66:36:A2:F7:AC:ED:9B:BD:93:DB:97:7E:F6:EC:EA:B3:50:BB:DE X509v3 Authority Key Identifier: keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.243.0/24 Signature Algorithm: sha256WithRSAEncryption cf:3d:2d:6a:27:d0:b4:27:50:c2:c4:94:ce:b4:ad:35:3d:cb: 60:a3:5b:fd:f2:59:a5:47:83:b7:3b:3f:17:5b:51:1e:dc:8f: 98:fe:dc:61:36:aa:4d:e3:bf:01:c1:fd:70:90:a2:bf:24:ec: aa:6e:41:e9:ff:d1:10:9b:6b:46:e9:7b:74:78:ae:f7:cd:f8: 6d:88:ef:68:b9:8f:69:eb:71:c2:83:e1:10:1c:92:cb:cf:62: f8:47:fe:d4:77:32:92:d9:37:74:5b:5e:67:52:6e:e2:61:a9: f2:e5:27:bf:90:d1:3c:e8:91:26:8c:3f:4f:1d:1e:4f:6b:e5: c1:c0:87:de:7f:34:70:d5:27:89:1c:cf:4e:46:ab:1e:e8:c6: f0:a9:64:46:c2:58:13:8c:73:da:3b:ab:d0:62:f6:61:84:66: e2:7b:ba:8b:5d:ba:7c:ed:2b:e1:80:6b:53:bb:8b:41:e8:37: ae:d2:c2:cc:30:e1:f8:54:4f:7f:a8:fd:ab:91:a0:87:7e:dd: bb:be:6c:d3:3d:89:59:38:f1:09:ee:93:84:50:a0:80:cf:f7: ad:bc:ee:39:83:45:f3:14:f9:78:33:81:a0:42:06:a4:de:98: ca:e4:66:9e:b3:9c:90:06:a2:5a:8d:18:b1:65:ca:eb:f1:1d: 26:84:69:90 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUX2KHua4C5wJJAtc8QSt8ecn+ok0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0 NzU3QzQwMDAeFw0yNDAxMjcyMjU3MjdaFw0yNTAxMjUyMzAyMjdaMDMxMTAvBgNV BAMTKDczNjYzNkEyRjdBQ0VEOUJCRDkzREI5NzdFRjZFQ0VBQjM1MEJCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfpHRhwncxU+qImPobPTGgK1y VHqIhV6GyUPPi5fHRIrkGlnkDfeLQYHtnUYY1mUx9BCsSmgiYUB07vrCaJkWCZVM KgiXdoAQtSWWbaOf52NSurzSNsYMVnvImYASOn8iU2Qs/FBn+y9bl8zNDXdSkjaS KHHgJ/W6HpzFqtshiumoiewtqfSE7vM2zZZ6q/tGrLetYrOK7QmLcO6JPrP7MtQf Yo6xn1xwbP++pCCutoCyXlD6PVnx56+0/jzYFh0zyBvXI9QVOW2iy39XjuKSQFeU Ag2s/AuysbhxyPJ7A9Vj83X3+WVElWqAKo05WhKrgKePuErh8b07+7Ff7x/pAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUc2Y2oves7Zu9k9uXfvbs6rNQu94wHwYDVR0j BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3 QzQwMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmOTNiODE2LWU3YmUtNDY0Yy04 Nzg1LTQ5OGJmODRkMzczNS8wLzMxMzAzMzJlMzQzMjJlMzIzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyrzMA0GCSqG SIb3DQEBCwUAA4IBAQDPPS1qJ9C0J1DCxJTOtK01Pctgo1v98lmlR4O3Oz8XW1Ee 3I+Y/txhNqpN478Bwf1wkKK/JOyqbkHp/9EQm2tG6Xt0eK73zfhtiO9ouY9p63HC g+EQHJLLz2L4R/7UdzKS2Td0W15nUm7iYany5Se/kNE86JEmjD9PHR5Pa+XBwIfe fzRw1SeJHM9ORqse6MbwqWRGwlgTjHPaO6vQYvZhhGbie7qLXbp87SvhgGtTu4tB 6Deu0sLMMOH4VE9/qP2rkaCHft27vmzTPYlZOPEJ7pOEUKCAz/etvO45g0XzFPl4 M4GgQgak3pjK5Gaes5yQBqJajRixZcrr8R0mhGmQ -----END CERTIFICATE-----Generated at Fri Jun 21 16:09:57 2024 by rpki-client on console-fra.rpki-client.org