$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa File: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (raw, json) Hash identifier: YoHGSDIPIgygMyXcj3zMqFTauxvWK6zCZBFW1pZGtAA= Subject key identifier: 94:54:67:00:0A:2C:A3:64:3F:93:F4:D4:44:3D:94:FE:43:A2:1A:94 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 0A5F91CB83FF9940169153D3C496B9991489B148 Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa Signing time: Wed 15 Nov 2023 09:00:02 +0000 ROA not before: Wed 15 Nov 2023 08:55:02 +0000 ROA not after: Wed 13 Nov 2024 09:00:02 +0000 asID: 141615 IP address blocks: 103.161.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 14:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5f:91:cb:83:ff:99:40:16:91:53:d3:c4:96:b9:99:14:89:b1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Nov 15 08:55:02 2023 GMT Not After : Nov 13 09:00:02 2024 GMT Subject: CN=945467000A2CA3643F93F4D4443D94FE43A21A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:41:3b:2d:00:c7:86:66:39:7e:d8:96:67: 30:d8:95:ee:c3:a8:30:43:e2:f2:df:33:92:cf:1a: 28:cb:19:fa:85:d5:b4:ff:db:c2:c6:f9:2e:c0:b8: 9a:3b:26:bf:c4:52:5d:27:6a:de:52:8c:6c:49:39: e1:8b:dd:be:b7:6c:a6:e9:1d:ac:c9:84:df:14:e6: 6c:10:75:01:92:96:32:0d:da:62:52:7f:02:fd:fa: 9a:e6:c6:d1:21:3f:f6:0a:25:b7:f9:0e:df:ac:6e: f3:ee:ae:dc:c1:4d:e4:6a:70:f4:0c:f8:1f:c1:88: af:01:68:63:8d:a5:7d:8c:d5:e1:17:97:27:61:30: 95:96:11:2e:73:b0:68:a3:63:f1:62:28:c7:df:cc: 73:cf:3b:21:69:4f:42:6f:e6:87:ea:ec:e1:88:f6: 26:bc:c4:2c:a1:88:19:a1:b4:1b:85:26:ab:51:e3: 3b:07:69:04:f2:d5:a1:ca:61:11:8e:ad:10:fd:e3: c2:5b:ec:4e:d0:68:da:b7:4d:d3:4e:ef:02:af:9d: d2:5f:92:0e:4e:8a:92:bd:1b:20:2d:8f:dc:11:a7: f5:42:45:f2:4f:50:47:1d:8e:e4:e9:20:8e:fe:d7: d5:99:2e:7b:27:9c:f3:7c:6c:96:c4:b6:43:2f:ec: 60:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:54:67:00:0A:2C:A3:64:3F:93:F4:D4:44:3D:94:FE:43:A2:1A:94 X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.111.0/24 Signature Algorithm: sha256WithRSAEncryption 58:63:43:c2:8e:88:3f:2b:ce:88:22:09:5b:76:28:3e:0c:25: b2:89:b3:f4:10:ca:a4:62:08:73:ee:92:e5:69:a4:38:db:65: 81:e0:ea:a4:3b:d4:8f:58:60:f7:29:59:65:47:1c:2f:43:7a: 37:c9:01:c6:f8:47:ef:30:42:5c:2d:3b:18:6d:9d:23:37:57: 0c:fe:fa:b5:15:d0:41:1c:5f:20:4f:be:cc:9b:7f:2c:3d:5c: ca:c2:18:91:ee:2b:04:2b:2f:26:fa:a6:08:a0:40:ee:3f:59: bb:5b:f7:99:78:26:fa:02:f5:af:9f:b4:f9:c6:c5:13:3b:30: 6b:58:0e:15:86:2d:3a:34:aa:68:46:2f:d8:a8:f6:07:8a:9b: b5:15:b8:89:5c:ac:06:f9:b8:c1:80:3d:a1:49:a1:83:b0:09: 57:4a:47:2d:ff:2c:4d:75:2b:8c:8c:8d:5e:42:84:54:dd:75: 83:61:54:7a:11:46:bb:1c:7a:0b:17:a9:cb:04:1c:98:79:84: bb:7d:cd:2e:4d:86:59:f4:9d:86:3c:b1:04:79:be:88:5d:be: e2:9e:24:0f:5c:fe:3f:b8:62:e4:82:12:c9:e6:05:3f:f2:d1: 6e:68:69:5d:6a:98:13:cd:7b:79:df:53:f7:41:a1:76:33:d5: 89:b4:40:f7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCl+Ry4P/mUAWkVPTxJa5mRSJsUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yMzExMTUwODU1MDJaFw0yNDExMTMwOTAwMDJaMDMxMTAvBgNV BAMTKDk0NTQ2NzAwMEEyQ0EzNjQzRjkzRjRENDQ0M0Q5NEZFNDNBMjFBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03kE7LQDHhmY5ftiWZzDYle7D qDBD4vLfM5LPGijLGfqF1bT/28LG+S7AuJo7Jr/EUl0nat5SjGxJOeGL3b63bKbp HazJhN8U5mwQdQGSljIN2mJSfwL9+prmxtEhP/YKJbf5Dt+sbvPurtzBTeRqcPQM +B/BiK8BaGONpX2M1eEXlydhMJWWES5zsGijY/FiKMffzHPPOyFpT0Jv5ofq7OGI 9ia8xCyhiBmhtBuFJqtR4zsHaQTy1aHKYRGOrRD948Jb7E7QaNq3TdNO7wKvndJf kg5OipK9GyAtj9wRp/VCRfJPUEcdjuTpII7+19WZLnsnnPN8bJbEtkMv7GD/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUlFRnAAoso2Q/k/TURD2U/kOiGpQwHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmNDA4ZTQ0LTNlOWMtNDVlNS1i Y2E0LTVkZmJkNGIyNzEzMC8wLzMxMzAzMzJlMzEzNjMxMmUzMTMxMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMxMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoW8wDQYJ KoZIhvcNAQELBQADggEBAFhjQ8KOiD8rzogiCVt2KD4MJbKJs/QQyqRiCHPukuVp pDjbZYHg6qQ71I9YYPcpWWVHHC9DejfJAcb4R+8wQlwtOxhtnSM3Vwz++rUV0EEc XyBPvsybfyw9XMrCGJHuKwQrLyb6pgigQO4/Wbtb95l4JvoC9a+ftPnGxRM7MGtY DhWGLTo0qmhGL9io9geKm7UVuIlcrAb5uMGAPaFJoYOwCVdKRy3/LE11K4yMjV5C hFTddYNhVHoRRrscegsXqcsEHJh5hLt9zS5Nhln0nYY8sQR5vohdvuKeJA9c/j+4 YuSCEsnmBT/y0W5oaV1qmBPNe3nfU/dBoXYz1Ym0QPc= -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:43 2024 by rpki-client on console-ams.rpki-client.org