$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa File: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (raw, json) Hash identifier: 0nnrthSodd/iAtSNDBAnyGy/g6P5ZNfY793nrMonBM0= Subject key identifier: CE:47:6F:D6:95:3F:8D:DD:BA:24:20:AB:F7:A3:3F:B4:55:71:20:AF Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Certificate serial: 61A165C5E68A4F164D929378B97699BBAE87F5D0 Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa Signing time: Tue 16 Jan 2024 09:02:51 +0000 ROA not before: Tue 16 Jan 2024 08:57:51 +0000 ROA not after: Tue 14 Jan 2025 09:02:51 +0000 asID: 139424 IP address blocks: 103.144.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 09:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a1:65:c5:e6:8a:4f:16:4d:92:93:78:b9:76:99:bb:ae:87:f5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Validity Not Before: Jan 16 08:57:51 2024 GMT Not After : Jan 14 09:02:51 2025 GMT Subject: CN=CE476FD6953F8DDDBA2420ABF7A33FB4557120AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:06:6b:02:95:fa:5f:a7:99:ce:4b:43:f0: b7:78:12:42:1b:fd:f6:d5:df:0d:63:80:aa:c3:16: 83:eb:03:e5:4e:8d:bc:6e:15:ee:14:c8:58:7e:0b: f7:d5:7d:38:c8:d2:cd:af:f0:0c:b3:8b:df:ca:3a: 5a:e5:68:aa:d4:c0:4f:e3:ff:0b:d3:30:4c:a3:b0: be:b7:02:67:85:7e:7b:96:2e:e9:ca:2e:fa:fb:40: e6:95:ba:c9:71:94:fa:35:75:aa:15:3c:12:2f:1a: 39:0b:83:96:bd:05:e4:d3:93:79:a9:0f:79:c5:c6: d9:71:c1:63:93:aa:f2:69:80:7e:6f:d1:9b:ad:5f: dc:bf:17:7d:b5:e4:b6:41:d9:4e:d9:7b:b0:0f:3c: 55:d4:a9:25:5e:c1:7f:fc:f9:40:02:c1:d4:70:d6: b9:a4:20:3f:41:09:55:47:6a:a7:6a:0a:89:07:a2: 54:99:27:34:0f:29:99:45:86:c8:67:91:0a:12:44: e3:11:c9:04:8c:cc:95:66:61:27:8e:f1:4c:75:28: 85:4e:30:c6:32:28:d1:57:db:23:05:77:6b:fa:df: 55:34:1c:41:8a:c7:4d:e2:47:2e:9c:aa:58:ae:40: 34:7e:81:5c:7b:46:81:6d:06:81:10:a9:ae:ba:71: d3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:47:6F:D6:95:3F:8D:DD:BA:24:20:AB:F7:A3:3F:B4:55:71:20:AF X509v3 Authority Key Identifier: keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.38.0/23 Signature Algorithm: sha256WithRSAEncryption 06:70:a0:4a:e8:b4:3d:3d:14:bb:48:7a:a1:7b:e9:56:ab:90: 53:f0:78:c1:86:97:15:34:4a:85:8e:a9:59:9a:f6:37:35:8e: 6c:72:f9:91:11:4f:05:4f:b5:9f:7a:0f:b2:d2:77:26:a7:c1: fb:55:dc:7e:2b:b1:06:53:c3:ad:cd:97:41:5f:40:18:9a:c6: cf:90:71:aa:ab:60:db:31:d9:10:06:a9:93:6b:59:ad:6e:1c: 92:4c:e3:d5:e4:7b:42:2f:36:63:e1:fe:e3:b5:ab:56:fd:5a: 00:07:6b:c4:9c:0f:61:f7:63:25:88:82:dc:ed:cd:25:6b:8f: 88:cc:fa:94:26:06:3f:45:2f:92:9a:01:82:e0:a8:82:da:e8: 37:af:74:a0:3f:5c:b3:fb:7c:28:44:db:5b:b6:b1:c6:ca:16: f4:fd:bd:33:7f:4e:f5:2e:9f:da:b0:d0:c8:82:4e:4c:a3:28: 2e:18:94:b8:62:91:c6:57:7c:e9:cc:31:fc:de:ed:ba:9e:ff: 27:a8:18:3d:f9:e4:c2:04:af:15:b5:53:06:79:6f:70:b8:8d: 69:c6:e6:79:87:04:ee:89:58:38:0a:e4:28:53:30:09:e4:68: cf:28:0b:25:b7:6f:2b:76:fd:21:78:45:45:32:c3:95:fa:d2: 32:ec:73:ef -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYaFlxeaKTxZNkpN4uXaZu66H9dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMw Mzc3MDExQTAeFw0yNDAxMTYwODU3NTFaFw0yNTAxMTQwOTAyNTFaMDMxMTAvBgNV BAMTKENFNDc2RkQ2OTUzRjhERERCQTI0MjBBQkY3QTMzRkI0NTU3MTIwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArQZrApX6X6eZzktD8Ld4EkIb /fbV3w1jgKrDFoPrA+VOjbxuFe4UyFh+C/fVfTjI0s2v8Ayzi9/KOlrlaKrUwE/j /wvTMEyjsL63AmeFfnuWLunKLvr7QOaVuslxlPo1daoVPBIvGjkLg5a9BeTTk3mp D3nFxtlxwWOTqvJpgH5v0ZutX9y/F3215LZB2U7Ze7APPFXUqSVewX/8+UACwdRw 1rmkID9BCVVHaqdqCokHolSZJzQPKZlFhshnkQoSROMRyQSMzJVmYSeO8Ux1KIVO MMYyKNFX2yMFd2v631U0HEGKx03iRy6cqliuQDR+gVx7RoFtBoEQqa66cdOJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzkdv1pU/jd26JCCr96M/tFVxIK8wHwYDVR0j BBgwFoAUUH284N5zw4w+6XWuI/t8DAN3ARowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWIwYTU5YS02MWJhLTQ2MmUtYTgyYS1hMjAyYjdmYjgwZjAvMC81MDdEQkNFMERF NzNDMzhDM0VFOTc1QUUyM0ZCN0MwQzAzNzcwMTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMwMzc3 MDExQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYjBhNTlhLTYxYmEtNDYyZS1h ODJhLWEyMDJiN2ZiODBmMC8wLzMxMzAzMzJlMzEzNDM0MmUzMzM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM5MzQzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5AmMA0GCSqG SIb3DQEBCwUAA4IBAQAGcKBK6LQ9PRS7SHqhe+lWq5BT8HjBhpcVNEqFjqlZmvY3 NY5scvmREU8FT7Wfeg+y0ncmp8H7Vdx+K7EGU8OtzZdBX0AYmsbPkHGqq2DbMdkQ BqmTa1mtbhySTOPV5HtCLzZj4f7jtatW/VoAB2vEnA9h92MliILc7c0la4+IzPqU JgY/RS+SmgGC4KiC2ug3r3SgP1yz+3woRNtbtrHGyhb0/b0zf071Lp/asNDIgk5M oyguGJS4YpHGV3zpzDH83u26nv8nqBg9+eTCBK8VtVMGeW9wuI1pxuZ5hwTuiVg4 CuQoUzAJ5GjPKAslt28rdv0heEVFMsOV+tIy7HPv -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:38 2024 by rpki-client on console-ams.rpki-client.org