$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa File: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (raw, json) Hash identifier: d0Be6bZOWZemelTRsDdXNo/0WYsjRk8hhGracsl2ZPw= Subject key identifier: 74:EC:54:60:77:BF:9D:57:49:CE:A5:4F:A3:01:AF:96:CF:A3:FB:C1 Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 7CF3527C95E7FBE1942C2182536EA1E21FAB9895 Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa Signing time: Tue 08 Oct 2024 08:00:01 +0000 ROA not before: Tue 08 Oct 2024 07:55:01 +0000 ROA not after: Tue 07 Oct 2025 08:00:01 +0000 asID: 141616 IP address blocks: 103.161.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 21:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f3:52:7c:95:e7:fb:e1:94:2c:21:82:53:6e:a1:e2:1f:ab:98:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Oct 8 07:55:01 2024 GMT Not After : Oct 7 08:00:01 2025 GMT Subject: CN=74EC546077BF9D5749CEA54FA301AF96CFA3FBC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:6d:cd:09:1a:56:f1:d0:55:da:37:0d:a7: 20:77:73:d9:04:19:88:b7:37:1c:fe:df:31:90:17: e0:1e:de:5e:3c:51:ed:99:27:8b:c2:cb:87:bc:13: 54:45:c0:01:2b:0d:65:7c:7a:77:cc:93:d1:5f:c8: df:e0:cf:a4:61:47:12:11:7f:ea:2c:c8:d9:cf:a8: d8:60:f1:ff:e2:f6:5e:b6:2b:43:26:a1:23:b7:42: ee:cb:8c:f0:32:75:1a:92:04:55:91:63:12:0a:ec: 95:fa:31:0c:5e:8d:72:33:33:4b:90:0f:d0:f9:8e: c3:59:e7:cb:e6:ab:99:95:ca:b9:7a:58:67:ab:4a: 12:ac:a4:e8:3d:a8:ef:0f:5f:bd:a9:39:aa:c3:29: a0:42:0b:34:85:f8:52:ee:58:a8:cc:00:b4:92:ed: eb:35:6d:d4:06:37:38:9a:b5:cb:05:8f:21:14:c0: 90:7a:6f:8d:56:2e:30:00:1a:d6:98:48:d6:7b:06: d5:46:54:ff:77:f2:2a:9a:0f:f9:34:8c:53:92:6e: 0c:c8:2a:6a:ee:eb:7e:a9:11:f4:c7:a2:93:94:1b: c8:f2:c7:44:52:59:34:f9:ca:7a:3c:13:83:5d:8e: ed:7d:75:49:0a:b9:2e:e3:61:ed:11:87:b1:a8:11: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EC:54:60:77:BF:9D:57:49:CE:A5:4F:A3:01:AF:96:CF:A3:FB:C1 X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.162.0/24 Signature Algorithm: sha256WithRSAEncryption 19:6f:3d:0d:a6:a2:dd:b7:3c:71:ac:da:80:6c:51:3d:01:f2: 9d:29:a7:1e:44:83:ae:b0:4e:c3:e3:1c:0c:79:7f:76:61:17: ae:5c:09:16:89:67:60:4f:12:32:35:5b:bb:0d:5e:3f:e2:78: c4:1b:a7:8b:10:00:5d:3c:aa:65:ec:73:92:e8:53:8d:27:f3: b1:d5:f3:60:87:f4:a3:a8:c0:3f:77:91:d5:fe:b9:c3:45:6f: 85:da:a9:e6:37:6d:19:1b:fa:de:38:96:15:25:79:72:7f:ff: bc:4f:77:cd:cb:fe:e1:f8:37:a7:65:fd:6f:57:1e:0a:7b:db: 0c:8a:b7:7d:ea:a4:be:91:6c:c9:88:48:18:0b:4c:be:82:9c: d0:88:ef:7d:ad:59:d3:09:66:68:4a:2a:e2:57:b6:e9:cb:fb: bb:33:68:89:05:b5:ab:02:60:17:05:b6:60:91:b4:26:ac:16: b5:7d:64:66:d3:30:0b:16:71:55:5b:b0:72:c5:02:9f:c3:fd: 1d:9b:ba:c9:05:06:52:05:ed:d0:d1:71:de:12:32:98:6b:89: de:22:66:8d:88:2e:ff:87:8c:3f:a7:d3:23:56:ea:1f:ed:8c: c7:70:d1:8d:a2:8b:c8:2d:c2:48:4a:b1:30:b6:ba:a8:cf:75: 2c:d8:8d:20 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUfPNSfJXn++GULCGCU26h4h+rmJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNDEwMDgwNzU1MDFaFw0yNTEwMDcwODAwMDFaMDMxMTAvBgNV BAMTKDc0RUM1NDYwNzdCRjlENTc0OUNFQTU0RkEzMDFBRjk2Q0ZBM0ZCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDO23NCRpW8dBV2jcNpyB3c9kE GYi3Nxz+3zGQF+Ae3l48Ue2ZJ4vCy4e8E1RFwAErDWV8enfMk9FfyN/gz6RhRxIR f+osyNnPqNhg8f/i9l62K0MmoSO3Qu7LjPAydRqSBFWRYxIK7JX6MQxejXIzM0uQ D9D5jsNZ58vmq5mVyrl6WGerShKspOg9qO8PX72pOarDKaBCCzSF+FLuWKjMALSS 7es1bdQGNziatcsFjyEUwJB6b41WLjAAGtaYSNZ7BtVGVP938iqaD/k0jFOSbgzI Kmru636pEfTHopOUG8jyx0RSWTT5yno8E4Ndju19dUkKuS7jYe0Rh7GoEQBrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUdOxUYHe/nVdJzqVPowGvls+j+8EwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMDk0ZDNlLTA4OWMtNGM2OC04 MGEyLTU2YjVjYmZjMTAzZC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM2MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMxMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoaIwDQYJ KoZIhvcNAQELBQADggEBABlvPQ2mot23PHGs2oBsUT0B8p0ppx5Eg66wTsPjHAx5 f3ZhF65cCRaJZ2BPEjI1W7sNXj/ieMQbp4sQAF08qmXsc5LoU40n87HV82CH9KOo wD93kdX+ucNFb4XaqeY3bRkb+t44lhUleXJ//7xPd83L/uH4N6dl/W9XHgp72wyK t33qpL6RbMmISBgLTL6CnNCI732tWdMJZmhKKuJXtunL+7szaIkFtasCYBcFtmCR tCasFrV9ZGbTMAsWcVVbsHLFAp/D/R2buskFBlIF7dDRcd4SMphrid4iZo2ILv+H jD+n0yNW6h/tjMdw0Y2ii8gtwkhKsTC2uqjPdSzYjSA= -----END CERTIFICATE-----Generated at Fri Feb 21 11:14:07 2025 by rpki-client