$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa File: 3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa (raw, json) Hash identifier: ZXxFqejLYLEgNsSFkI1jFUhBuMJpgG9+MM16Neht3k0= Subject key identifier: 02:C4:4F:F9:48:8A:E2:F8:2D:EC:62:23:09:74:C5:5D:B8:A7:FB:DB Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Certificate serial: 4FCC2CB260D778EF4F4CF0DF54E281C82DF8D1D2 Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa Signing time: Fri 15 Sep 2023 15:00:00 +0000 ROA not before: Fri 15 Sep 2023 14:55:00 +0000 ROA not after: Fri 13 Sep 2024 15:00:00 +0000 asID: 137316 IP address blocks: 103.109.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 02:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cc:2c:b2:60:d7:78:ef:4f:4c:f0:df:54:e2:81:c8:2d:f8:d1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Validity Not Before: Sep 15 14:55:00 2023 GMT Not After : Sep 13 15:00:00 2024 GMT Subject: CN=02C44FF9488AE2F82DEC62230974C55DB8A7FBDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7b:4e:e4:eb:7d:71:a6:ff:c6:00:0b:07:d6: b7:f7:f6:ca:4e:ee:09:69:6e:eb:e0:14:b1:44:53: ab:f4:83:f2:48:6f:a0:bc:ee:72:aa:5e:7d:be:ae: 73:43:40:16:36:66:34:ae:4b:a1:8a:72:f2:fc:01: d3:d2:60:83:18:b7:7b:09:25:08:ef:8f:d7:e0:36: dd:fe:cc:68:5c:4d:ef:ed:98:6c:70:b7:75:56:05: 33:97:77:a5:d8:b3:bb:c6:95:8e:b8:51:23:c2:42: 7d:35:86:e8:98:c5:9a:b5:fc:7d:a1:01:a0:d8:68: a8:1b:83:ca:5d:24:9c:b1:31:9b:3c:fa:b6:4f:9c: 6c:96:47:7a:02:94:45:d9:11:9c:22:c6:40:ab:1c: 71:b3:49:cc:0e:9e:9b:fd:5a:7d:50:c8:8b:e0:d2: f0:35:7d:0d:ba:ab:a8:b6:54:fc:3c:7f:17:9e:af: 71:a7:3b:e8:a1:05:b5:05:24:5f:be:3b:02:38:b4: 35:1d:4c:cc:28:23:2d:2b:9e:20:ad:56:99:25:cb: 4b:7f:b4:c4:0f:f6:8c:3d:6f:7d:8f:d4:6d:72:09: e7:8a:90:8d:36:2e:15:ab:33:d9:3b:70:48:cc:84: 13:e6:dd:c2:e7:57:c8:b7:98:87:50:16:99:12:4d: df:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C4:4F:F9:48:8A:E2:F8:2D:EC:62:23:09:74:C5:5D:B8:A7:FB:DB X509v3 Authority Key Identifier: keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3130332e3130392e3132342e302f32342d3234203d3e20313337333136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.124.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ee:17:24:ea:e7:78:f3:1f:85:43:a9:65:d8:42:ce:42:a9: ce:c8:4a:c3:08:a4:da:26:7e:82:78:4b:96:84:a1:f2:26:1a: 85:ac:05:12:01:b4:e4:b4:55:e4:49:6e:af:2e:10:53:ee:aa: 8a:b7:e9:a9:60:75:84:9d:94:4e:60:ad:09:ac:63:f8:26:ab: b5:94:12:29:1d:31:ff:30:b6:8d:56:cc:ef:8a:7c:10:8e:06: 1f:b0:9c:19:6d:7b:73:a6:7b:b9:90:1f:a4:ff:98:44:7b:53: 55:bd:6b:63:02:f2:9a:b4:8b:a1:27:75:17:84:de:34:12:44: 9c:03:b1:67:34:ea:26:1c:ff:03:d3:9c:67:9a:00:6f:63:6b: 48:16:fb:0c:46:50:21:e5:7a:ab:1a:5c:df:65:2e:d5:2d:6b: dc:ff:c7:40:a0:6b:6a:84:5c:19:11:4e:2b:ca:2c:c5:dc:4f: 4a:df:89:37:51:04:2f:67:83:33:30:1b:b3:9e:22:71:8a:db: 87:24:5d:36:5a:3c:e6:23:d3:e8:f4:ae:ff:a1:d0:48:3b:f7: ee:d5:6e:8f:2a:0e:bc:46:8a:3d:bc:bd:f6:0e:61:ba:09:83: 76:33:d1:42:48:a8:6a:30:c1:68:10:61:6b:42:66:05:fc:8e: a8:d5:e5:70 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUT8wssmDXeO9PTPDfVOKByC340dIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB NUEwNjY2RDAeFw0yMzA5MTUxNDU1MDBaFw0yNDA5MTMxNTAwMDBaMDMxMTAvBgNV BAMTKDAyQzQ0RkY5NDg4QUUyRjgyREVDNjIyMzA5NzRDNTVEQjhBN0ZCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3e07k631xpv/GAAsH1rf39spO 7glpbuvgFLFEU6v0g/JIb6C87nKqXn2+rnNDQBY2ZjSuS6GKcvL8AdPSYIMYt3sJ JQjvj9fgNt3+zGhcTe/tmGxwt3VWBTOXd6XYs7vGlY64USPCQn01huiYxZq1/H2h AaDYaKgbg8pdJJyxMZs8+rZPnGyWR3oClEXZEZwixkCrHHGzScwOnpv9Wn1QyIvg 0vA1fQ26q6i2VPw8fxeer3GnO+ihBbUFJF++OwI4tDUdTMwoIy0rniCtVpkly0t/ tMQP9ow9b32P1G1yCeeKkI02LhWrM9k7cEjMhBPm3cLnV8i3mIdQFpkSTd9BAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUAsRP+UiK4vgt7GIjCXTFXbin+9swHwYDVR0j BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3 MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw NjY2RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04 ODNiLTVlODllZTVmMmRmMy8wLzMxMzAzMzJlMzEzMDM5MmUzMTMyMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMxMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbXwwDQYJ KoZIhvcNAQELBQADggEBAFzuFyTq53jzH4VDqWXYQs5Cqc7ISsMIpNomfoJ4S5aE ofImGoWsBRIBtOS0VeRJbq8uEFPuqoq36algdYSdlE5grQmsY/gmq7WUEikdMf8w to1WzO+KfBCOBh+wnBlte3Ome7mQH6T/mER7U1W9a2MC8pq0i6EndReE3jQSRJwD sWc06iYc/wPTnGeaAG9ja0gW+wxGUCHleqsaXN9lLtUta9z/x0Cga2qEXBkRTivK LMXcT0rfiTdRBC9ngzMwG7OeInGK24ckXTZaPOYj0+j0rv+h0Eg79+7Vbo8qDrxG ij28vfYOYboJg3Yz0UJIqGowwWgQYWtCZgX8jqjV5XA= -----END CERTIFICATE-----Generated at Sun Jun 2 00:28:55 2024 by rpki-client on console-ams.rpki-client.org