$ rpki-client -vvf repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa File: 3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa (raw, json) Hash identifier: kBG2q2NpoQNQY5u4bPq2Trzf/jU8kmYTusuU638oaHo= Subject key identifier: B4:BA:A0:71:CE:30:73:06:89:31:E1:14:6A:65:9B:99:51:CA:2D:3D Certificate issuer: /CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53 Certificate serial: 2E973FB9572A6B72179FC1D4EFDE3D29B90EE9D7 Authority key identifier: AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa Signing time: Mon 22 Jan 2024 16:00:01 +0000 ROA not before: Mon 22 Jan 2024 15:55:01 +0000 ROA not after: Mon 20 Jan 2025 16:00:01 +0000 asID: 142354 IP address blocks: 103.169.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:97:3f:b9:57:2a:6b:72:17:9f:c1:d4:ef:de:3d:29:b9:0e:e9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53 Validity Not Before: Jan 22 15:55:01 2024 GMT Not After : Jan 20 16:00:01 2025 GMT Subject: CN=B4BAA071CE3073068931E1146A659B9951CA2D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:53:78:84:ea:a3:6e:84:19:29:4f:fd:cb: da:fc:9d:b9:77:29:8a:b6:fb:0f:95:2d:17:50:b4: 0a:e4:36:d5:e5:c3:f4:13:ed:3d:37:ee:f6:4d:06: de:8d:f7:01:22:c7:dc:4f:0c:e5:1f:ab:4d:da:ad: d4:b4:37:8e:46:c5:f3:e7:2a:b6:3d:dc:69:c7:6a: 32:4c:1a:15:f1:9f:21:e6:01:3d:c8:41:9b:08:52: 08:ef:4f:35:08:cc:4e:68:f2:2e:f7:81:8c:27:2b: ff:53:b1:08:24:ba:91:1c:06:aa:ac:ea:60:3a:29: 53:c7:d2:f4:a3:bc:b6:62:94:a7:cd:cb:16:99:c4: 59:d8:e9:87:0c:11:36:34:73:60:2c:e7:c6:86:cc: 16:06:29:cc:0c:27:d1:f0:d4:09:f3:02:00:4a:81: 36:6b:50:c3:db:84:1c:d2:e5:3f:ff:34:89:3a:46: 85:49:84:97:b6:0a:fa:3f:93:58:19:a6:7f:1b:e6: 0d:2b:5c:c8:7d:15:c5:ba:55:ad:2d:67:4f:3a:b5: ae:37:99:3a:3b:20:af:8e:2f:6e:d1:9a:7c:89:c6: 38:44:86:67:d5:2a:7b:94:f1:c5:5d:e9:ad:76:6c: 11:ad:a0:3b:b5:82:e0:5b:fa:5f:12:c8:cf:67:3c: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BA:A0:71:CE:30:73:06:89:31:E1:14:6A:65:9B:99:51:CA:2D:3D X509v3 Authority Key Identifier: keyid:AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.224.0/23 Signature Algorithm: sha256WithRSAEncryption 12:18:e3:8a:ff:9e:f8:c0:d2:c5:b7:fc:e0:15:fb:cf:da:1b: 11:19:1d:9c:22:3e:a5:71:d8:c3:d1:e2:fe:f7:bc:aa:8e:fc: c2:39:81:bf:b6:09:35:ce:d5:8e:4f:0f:5f:38:9e:74:3a:63: 22:a1:cf:02:70:df:d6:00:30:d3:ff:5d:28:86:b1:56:eb:92: ed:aa:d7:06:40:0d:36:f4:ae:87:dc:a1:82:c3:d8:79:40:4d: 2e:7c:a5:12:32:76:dd:63:12:8c:a4:a1:49:2b:bd:9f:43:f0: c1:d2:8d:a0:54:03:a5:cc:bf:91:31:2b:54:a1:1a:6d:e9:38: 33:2c:06:1b:d1:90:79:2d:66:e0:e2:62:14:c2:2a:ea:dd:ae: cc:4c:e2:1e:15:71:ba:ed:5a:a7:dc:f0:06:a6:ad:9f:68:93: f5:65:1b:92:5f:42:7c:ef:d1:b1:95:32:47:c2:fc:b1:3a:75: 48:7c:d0:a5:5b:62:df:b8:43:18:aa:6d:b4:84:0c:ab:04:d5: ac:14:1d:2b:8b:98:82:4d:87:32:6a:d3:79:35:38:d1:69:68: f2:48:bc:40:c9:86:7c:3e:7e:1c:08:f3:7b:f8:0f:3b:ff:fc: 66:07:52:2b:5a:8d:ee:44:c7:7e:40:6b:03:9f:37:24:05:8e: 47:16:03:e6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULpc/uVcqa3IXn8HU7949KbkO6dcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyQTBGNkIzMDI0QkZGMTE0NThENzJDOEU1NjIzRkI3 NDg2N0Y1MzAeFw0yNDAxMjIxNTU1MDFaFw0yNTAxMjAxNjAwMDFaMDMxMTAvBgNV BAMTKEI0QkFBMDcxQ0UzMDczMDY4OTMxRTExNDZBNjU5Qjk5NTFDQTJEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUUFN4hOqjboQZKU/9y9r8nbl3 KYq2+w+VLRdQtArkNtXlw/QT7T037vZNBt6N9wEix9xPDOUfq03ardS0N45GxfPn KrY93GnHajJMGhXxnyHmAT3IQZsIUgjvTzUIzE5o8i73gYwnK/9TsQgkupEcBqqs 6mA6KVPH0vSjvLZilKfNyxaZxFnY6YcMETY0c2As58aGzBYGKcwMJ9Hw1AnzAgBK gTZrUMPbhBzS5T//NIk6RoVJhJe2Cvo/k1gZpn8b5g0rXMh9FcW6Va0tZ086ta43 mTo7IK+OL27RmnyJxjhEhmfVKnuU8cVd6a12bBGtoDu1guBb+l8SyM9nPNvrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUtLqgcc4wcwaJMeEUamWbmVHKLT0wHwYDVR0j BBgwFoAUrSoPazAkv/EUWNcsjlYj+3SGf1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFmNGRlNS01MDM3LTQ5MTctOWE5My0wMTkyYzY5NTliZmIvMC9BRDJBMEY2QjMw MjRCRkYxMTQ1OEQ3MkM4RTU2MjNGQjc0ODY3RjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyQTBGNkIzMDI0QkZGMTE0NThENzJDOEU1NjIzRkI3NDg2 N0Y1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY2YWY0ZGU1LTUwMzctNDkxNy05 YTkzLTAxOTJjNjk1OWJmYi8wLzMxMzAzMzJlMzEzNjM5MmUzMjMyMzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqeAwDQYJ KoZIhvcNAQELBQADggEBABIY44r/nvjA0sW3/OAV+8/aGxEZHZwiPqVx2MPR4v73 vKqO/MI5gb+2CTXO1Y5PD184nnQ6YyKhzwJw39YAMNP/XSiGsVbrku2q1wZADTb0 rofcoYLD2HlATS58pRIydt1jEoykoUkrvZ9D8MHSjaBUA6XMv5ExK1ShGm3pODMs BhvRkHktZuDiYhTCKurdrsxM4h4VcbrtWqfc8AamrZ9ok/VlG5JfQnzv0bGVMkfC /LE6dUh80KVbYt+4QxiqbbSEDKsE1awUHSuLmIJNhzJq03k1ONFpaPJIvEDJhnw+ fhwI83v4Dzv//GYHUitaje5Ex35AawOfNyQFjkcWA+Y= -----END CERTIFICATE-----Generated at Sat Jun 1 00:32:09 2024 by rpki-client on console-fra.rpki-client.org