$ rpki-client -vvf repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa File: 3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa (raw, json) Hash identifier: ZzG1au5AdtObdc35C0yqaf24jtKpQfsz8iY430BhnKA= Subject key identifier: 06:AF:DF:A2:A1:6E:B5:A9:B8:2C:16:86:62:DC:10:CB:89:29:3D:CB Certificate issuer: /CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53 Certificate serial: 5A5B32ACD74DDBA35BE95492E664BA80137173C5 Authority key identifier: AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa Signing time: Thu 11 Jan 2024 17:00:03 +0000 ROA not before: Thu 11 Jan 2024 16:55:03 +0000 ROA not after: Thu 09 Jan 2025 17:00:03 +0000 asID: 142354 IP address blocks: 103.169.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5b:32:ac:d7:4d:db:a3:5b:e9:54:92:e6:64:ba:80:13:71:73:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53 Validity Not Before: Jan 11 16:55:03 2024 GMT Not After : Jan 9 17:00:03 2025 GMT Subject: CN=06AFDFA2A16EB5A9B82C168662DC10CB89293DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cd:dd:cc:ab:84:9d:1e:8d:67:af:f7:6b:cd: c9:d6:fe:ff:e3:61:0b:b3:4e:a5:2f:c1:f9:8c:af: c8:45:ec:ab:6a:eb:72:eb:9e:ba:21:82:ce:8a:03: 59:14:71:f8:bf:5f:dc:67:a2:47:c6:01:b8:f0:3f: 1a:96:20:9d:1e:6f:b0:2e:69:3a:50:36:5f:8d:76: 64:64:94:19:96:33:85:47:cf:ee:b0:2b:93:9d:ae: e8:e8:33:b8:98:95:a6:ce:bf:0b:e3:b0:a1:ad:d8: e4:56:cb:b9:3c:bd:33:f9:7b:e5:ee:14:a7:22:8e: ce:c6:e2:f2:ff:e6:52:7f:ab:3f:55:e7:df:a4:f0: ed:e5:f4:57:8e:e3:f6:1a:0d:39:ae:ca:f3:19:fc: eb:e1:e8:08:04:ed:88:86:68:23:2a:82:17:5c:ff: 05:50:68:e0:6c:d0:53:db:c3:17:9a:13:c0:ee:b3: db:ef:3d:45:d1:5b:a7:31:4a:87:5f:b2:4a:4f:d1: 16:c1:65:1c:54:67:bb:69:df:77:87:8d:46:0b:a1: 2c:0e:71:18:40:5c:7c:67:fc:d3:62:14:4f:0b:22: d0:86:41:24:a3:ee:6a:eb:e9:0f:b6:56:eb:b6:b4: 8b:0e:a5:30:a6:a5:56:47:38:30:93:80:57:d4:e4: 8c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AF:DF:A2:A1:6E:B5:A9:B8:2C:16:86:62:DC:10:CB:89:29:3D:CB X509v3 Authority Key Identifier: keyid:AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232352e302f32342d3234203d3e20313432333534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.225.0/24 Signature Algorithm: sha256WithRSAEncryption ea:14:9a:be:de:c7:12:15:db:c2:cb:bd:8e:ee:bd:73:06:61: bd:c0:28:09:80:8e:bc:0e:c4:c8:94:15:92:ca:51:98:8e:71: 6a:d3:3b:87:1a:21:67:af:da:17:1f:57:05:ce:24:6b:2b:59: d3:df:3f:0b:7f:7e:63:31:32:c3:c4:83:ad:e6:b0:65:ca:77: 53:97:94:89:ff:f2:d0:e0:59:10:5f:5f:25:fb:ec:6d:aa:14: e0:da:fa:85:2b:a3:4d:8b:df:e5:aa:4c:4d:dc:2d:56:08:d4: 2e:4d:54:a3:b2:00:2c:1a:76:eb:bc:de:e3:78:48:59:44:e8: 12:d2:a4:5f:d8:ea:b3:e1:47:2c:dd:bc:9c:ce:18:29:d9:a2: f2:6b:9f:9a:ce:6a:e6:7b:28:fe:33:e1:6a:fc:8a:6f:37:4a: 9c:0d:b7:44:87:e3:62:52:a2:dc:1f:06:87:dc:28:81:46:56: dd:d3:5a:16:0d:b6:9a:be:32:09:76:a9:4f:3f:b7:c1:cd:7b: 41:19:0a:5f:49:31:ba:fb:26:7a:70:4d:e0:7c:46:b4:ad:e9: d1:7e:29:e8:2b:3f:42:63:ae:3e:fa:77:2c:a5:84:3f:07:06: de:3d:5c:78:ee:46:33:d5:4f:8c:e8:86:44:b7:65:7b:16:e4: b6:b1:42:62 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWlsyrNdN26Nb6VSS5mS6gBNxc8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyQTBGNkIzMDI0QkZGMTE0NThENzJDOEU1NjIzRkI3 NDg2N0Y1MzAeFw0yNDAxMTExNjU1MDNaFw0yNTAxMDkxNzAwMDNaMDMxMTAvBgNV BAMTKDA2QUZERkEyQTE2RUI1QTlCODJDMTY4NjYyREMxMENCODkyOTNEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbzd3Mq4SdHo1nr/drzcnW/v/j YQuzTqUvwfmMr8hF7Ktq63Lrnrohgs6KA1kUcfi/X9xnokfGAbjwPxqWIJ0eb7Au aTpQNl+NdmRklBmWM4VHz+6wK5OdrujoM7iYlabOvwvjsKGt2ORWy7k8vTP5e+Xu FKcijs7G4vL/5lJ/qz9V59+k8O3l9FeO4/YaDTmuyvMZ/Ovh6AgE7YiGaCMqghdc /wVQaOBs0FPbwxeaE8Dus9vvPUXRW6cxSodfskpP0RbBZRxUZ7tp33eHjUYLoSwO cRhAXHxn/NNiFE8LItCGQSSj7mrr6Q+2Vuu2tIsOpTCmpVZHODCTgFfU5IxPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUBq/foqFutam4LBaGYtwQy4kpPcswHwYDVR0j BBgwFoAUrSoPazAkv/EUWNcsjlYj+3SGf1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFmNGRlNS01MDM3LTQ5MTctOWE5My0wMTkyYzY5NTliZmIvMC9BRDJBMEY2QjMw MjRCRkYxMTQ1OEQ3MkM4RTU2MjNGQjc0ODY3RjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyQTBGNkIzMDI0QkZGMTE0NThENzJDOEU1NjIzRkI3NDg2 N0Y1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY2YWY0ZGU1LTUwMzctNDkxNy05 YTkzLTAxOTJjNjk1OWJmYi8wLzMxMzAzMzJlMzEzNjM5MmUzMjMyMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqeEwDQYJ KoZIhvcNAQELBQADggEBAOoUmr7exxIV28LLvY7uvXMGYb3AKAmAjrwOxMiUFZLK UZiOcWrTO4caIWev2hcfVwXOJGsrWdPfPwt/fmMxMsPEg63msGXKd1OXlIn/8tDg WRBfXyX77G2qFODa+oUro02L3+WqTE3cLVYI1C5NVKOyACwaduu83uN4SFlE6BLS pF/Y6rPhRyzdvJzOGCnZovJrn5rOauZ7KP4z4Wr8im83SpwNt0SH42JSotwfBofc KIFGVt3TWhYNtpq+Mgl2qU8/t8HNe0EZCl9JMbr7JnpwTeB8RrSt6dF+KegrP0Jj rj76dyylhD8HBt49XHjuRjPVT4zohkS3ZXsW5LaxQmI= -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:04 2024 by rpki-client on console-ams.rpki-client.org