$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa File: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (raw, json) Hash identifier: 2vMjvSW/G61d4NurhCLCys7Oq7mbjpupUkoTG9xO5fc= Subject key identifier: EF:78:33:3B:91:E3:3D:31:DA:C3:3D:3F:94:F5:C2:80:71:56:72:39 Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 58E2AACFD3359D1514580FD17798BF9B1EB8C3D9 Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa Signing time: Wed 21 Feb 2024 11:00:00 +0000 ROA not before: Wed 21 Feb 2024 10:55:00 +0000 ROA not after: Wed 19 Feb 2025 11:00:00 +0000 asID: 149340 IP address blocks: 103.178.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 11:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e2:aa:cf:d3:35:9d:15:14:58:0f:d1:77:98:bf:9b:1e:b8:c3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Feb 21 10:55:00 2024 GMT Not After : Feb 19 11:00:00 2025 GMT Subject: CN=EF78333B91E33D31DAC33D3F94F5C28071567239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:07:f9:b8:83:10:d7:2c:e4:e5:a4:92:36:0f: c5:29:44:ee:e2:c9:1b:e1:60:b8:36:42:7f:db:f8: 02:ec:7f:22:fb:d0:f3:61:bd:bd:df:9f:52:8b:62: b1:8b:11:f9:f6:32:0e:29:08:09:44:fe:85:81:39: 6b:3f:70:e8:3d:d3:ed:17:a0:0f:e0:f7:5a:a3:36: 29:bb:03:2c:86:b3:e4:bf:17:d3:4f:73:1f:8b:6e: 27:3b:52:20:dd:41:b7:b2:a2:21:4d:35:47:0b:ba: ad:f4:eb:41:04:23:67:30:7e:e6:2b:bf:4b:5f:90: f6:41:0d:e9:f2:06:e7:ec:f2:70:d1:71:a2:cf:51: 8c:d2:64:66:92:75:f4:08:c6:6f:4a:70:3b:97:42: 89:0f:6b:cd:ab:bb:7a:01:45:52:ba:e2:1b:d5:a5: ad:3d:b3:f8:2e:ba:b4:82:70:fc:ab:5c:4f:65:26: 86:58:67:ad:26:b8:56:aa:fb:c4:82:80:68:05:e7: 52:fe:9b:92:28:36:be:1a:eb:dc:a3:aa:7d:a5:97: 8a:c8:7f:5e:f3:ee:07:92:77:79:e3:88:43:1f:7d: 90:c3:25:f6:5b:6f:35:a9:43:d9:f0:cb:e3:8e:41: 4b:0f:c1:50:16:49:80:62:61:3a:27:42:9e:fe:b1: 3a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:78:33:3B:91:E3:3D:31:DA:C3:3D:3F:94:F5:C2:80:71:56:72:39 X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.146.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:d8:9f:b2:df:62:65:13:06:ea:e2:ef:6c:93:dd:0d:cb:ce: b4:23:0b:20:38:0f:ce:ab:86:30:61:ab:b6:c6:f7:04:a5:c4: f7:32:6a:9a:32:3b:8e:dd:3d:df:4c:0d:db:6d:95:66:88:6f: 13:24:a1:59:2e:b1:e3:cb:df:cd:27:48:ba:0b:84:73:0f:f5: 1c:4a:fe:79:e6:51:1e:a5:58:90:a9:fb:b3:d4:d7:cd:ff:fe: 06:5e:56:9d:c8:bd:99:bc:2b:14:13:c1:33:65:6d:0b:d1:03: 02:89:38:4b:a2:cb:c6:70:00:99:0b:f0:c3:aa:0a:e2:1e:ba: b0:0a:8b:34:25:3a:5a:b8:5e:2b:96:2a:ff:e8:47:aa:8b:65: c7:1b:1f:a0:0e:0f:23:62:3b:f6:5c:a4:f2:17:38:a6:27:43: 04:cf:52:1d:07:91:61:4e:27:cb:1f:e4:47:f3:3f:4c:99:eb: f9:7e:e3:c8:81:e5:36:ce:ae:6a:a5:f4:7d:68:e5:41:8a:f9: 18:11:22:91:6c:15:05:24:64:69:f7:4e:10:9a:d2:f1:16:27: 05:c9:df:b6:50:fa:83:69:ed:5e:38:ec:4b:fc:ff:66:2c:c3: 73:06:81:9f:97:76:1c:ea:37:8c:f9:98:06:83:4d:4a:5f:e1: 25:67:d3:a5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWOKqz9M1nRUUWA/Rd5i/mx64w9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNDAyMjExMDU1MDBaFw0yNTAyMTkxMTAwMDBaMDMxMTAvBgNV BAMTKEVGNzgzMzNCOTFFMzNEMzFEQUMzM0QzRjk0RjVDMjgwNzE1NjcyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2B/m4gxDXLOTlpJI2D8UpRO7i yRvhYLg2Qn/b+ALsfyL70PNhvb3fn1KLYrGLEfn2Mg4pCAlE/oWBOWs/cOg90+0X oA/g91qjNim7AyyGs+S/F9NPcx+Lbic7UiDdQbeyoiFNNUcLuq3060EEI2cwfuYr v0tfkPZBDenyBufs8nDRcaLPUYzSZGaSdfQIxm9KcDuXQokPa82ru3oBRVK64hvV pa09s/guurSCcPyrXE9lJoZYZ60muFaq+8SCgGgF51L+m5IoNr4a69yjqn2ll4rI f17z7geSd3njiEMffZDDJfZbbzWpQ9nwy+OOQUsPwVAWSYBiYTonQp7+sTpzAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU73gzO5HjPTHawz0/lPXCgHFWcjkwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYWI4MDQyLTBlMWMtNDNiMS1i NzAzLTYzNDM4YmUyMzI1Yi8wLzMxMzAzMzJlMzEzNzM4MmUzMTM0MzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnspIwDQYJ KoZIhvcNAQELBQADggEBAJzYn7LfYmUTBuri72yT3Q3LzrQjCyA4D86rhjBhq7bG 9wSlxPcyapoyO47dPd9MDdttlWaIbxMkoVkusePL380nSLoLhHMP9RxK/nnmUR6l WJCp+7PU183//gZeVp3IvZm8KxQTwTNlbQvRAwKJOEuiy8ZwAJkL8MOqCuIeurAK izQlOlq4XiuWKv/oR6qLZccbH6AODyNiO/ZcpPIXOKYnQwTPUh0HkWFOJ8sf5Efz P0yZ6/l+48iB5TbOrmql9H1o5UGK+RgRIpFsFQUkZGn3ThCa0vEWJwXJ37ZQ+oNp 7V447Ev8/2Ysw3MGgZ+XdhzqN4z5mAaDTUpf4SVn06U= -----END CERTIFICATE-----Generated at Mon Nov 25 10:55:38 2024 by rpki-client on console-ams.rpki-client.org