$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa File: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (raw, json) Hash identifier: CRH91pnQF8fI/+ZJl8QrRdjAOwvwwg64ikjgJxdlwPQ= Subject key identifier: 15:D4:02:02:2A:57:25:03:E5:C1:E6:99:CF:8A:16:66:46:7A:FC:D4 Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Certificate serial: 7FC513253F7038C01780B977CF527A0DA4CF1D2E Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa Signing time: Fri 12 Jan 2024 03:00:01 +0000 ROA not before: Fri 12 Jan 2024 02:55:01 +0000 ROA not after: Fri 10 Jan 2025 03:00:01 +0000 asID: 142321 IP address blocks: 103.168.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c5:13:25:3f:70:38:c0:17:80:b9:77:cf:52:7a:0d:a4:cf:1d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Validity Not Before: Jan 12 02:55:01 2024 GMT Not After : Jan 10 03:00:01 2025 GMT Subject: CN=15D402022A572503E5C1E699CF8A1666467AFCD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:de:7e:fb:96:cc:67:17:07:e9:fe:e1:2f: 7c:d3:fc:80:21:ee:a2:da:64:79:82:00:de:b3:3c: e3:1f:82:96:8f:84:1f:a8:1b:92:78:8a:ec:ef:e3: 84:cc:16:02:ec:d2:f9:63:b2:2c:55:b1:56:4b:4a: fe:0c:5e:bb:a4:4e:e5:53:d6:e1:ee:7b:1d:3a:73: 16:bf:44:9a:c3:b3:5c:52:10:2f:8e:a0:79:ce:eb: e4:50:14:82:7b:46:0d:86:54:be:72:97:85:2e:e7: 27:e3:65:26:9d:11:31:b1:1f:4c:c8:32:da:59:e2: 54:25:5a:ae:18:e5:11:e6:c0:2e:2c:e7:6a:f0:0a: 06:be:50:59:8a:5a:ed:6d:23:f2:45:6f:81:8e:c2: 6f:c3:2e:f5:6b:d0:28:08:58:86:64:e7:a3:d3:5b: 87:d6:de:34:c9:b9:df:c5:ce:ef:43:00:c2:f3:18: e2:e0:5f:9f:dd:36:59:0b:e7:dd:66:53:93:8d:c0: 8e:f8:16:04:95:45:ea:f2:28:3d:d7:50:c4:6f:ac: a7:e0:ed:cb:fb:35:62:3b:8a:81:58:56:ef:4e:93: 31:aa:4f:39:84:48:12:fb:12:cf:cc:ec:2e:9b:0a: 56:a0:7e:a5:69:1e:1b:03:85:e3:7b:97:83:60:38: b1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D4:02:02:2A:57:25:03:E5:C1:E6:99:CF:8A:16:66:46:7A:FC:D4 X509v3 Authority Key Identifier: keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.185.0/24 Signature Algorithm: sha256WithRSAEncryption c1:e7:b0:79:de:71:16:c9:36:4e:e6:45:98:f0:e8:17:55:5b: 8c:3d:13:02:83:12:9c:a7:70:21:01:f4:d4:57:0f:43:ba:b0: 6c:8e:e6:11:2d:b6:f7:f8:33:38:cd:a7:e1:04:d1:a3:04:97: c6:ea:11:63:16:d9:7f:5c:95:7b:5d:30:b8:fd:a5:4e:a9:65: c1:38:b8:d2:e6:20:a9:c0:66:31:7c:08:49:45:af:a7:55:78: 0c:44:8e:89:78:bd:1c:e1:c3:bd:19:b2:08:cf:40:93:c8:51: 82:b1:d6:fd:8e:ef:e5:7a:a7:94:d1:88:76:ca:68:69:21:ba: 6c:9f:29:5a:4f:b2:b7:e5:43:15:e9:30:21:a6:3f:99:4a:5e: 55:a7:a7:23:aa:c6:fe:d9:bb:d9:20:a3:70:9a:29:7d:0a:42: 8f:e7:42:8b:71:46:8b:37:b4:90:6a:64:50:27:71:97:8d:6e: cf:8e:9a:e1:46:ba:7b:6c:bf:45:45:a6:28:47:d1:de:af:75: 0d:16:b4:11:59:0f:f7:c5:93:5d:4a:eb:28:8a:a9:da:99:79: 48:8f:02:4f:42:10:b5:93:70:a4:f5:52:ff:30:16:94:3d:d8: 41:c4:51:79:f7:d3:13:f8:64:e1:77:40:1c:ee:ae:ad:cb:4d: ad:7b:b8:18 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUf8UTJT9wOMAXgLl3z1J6DaTPHS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC OTgzMzRGMTAeFw0yNDAxMTIwMjU1MDFaFw0yNTAxMTAwMzAwMDFaMDMxMTAvBgNV BAMTKDE1RDQwMjAyMkE1NzI1MDNFNUMxRTY5OUNGOEExNjY2NDY3QUZDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gN5++5bMZxcH6f7hL3zT/IAh 7qLaZHmCAN6zPOMfgpaPhB+oG5J4iuzv44TMFgLs0vljsixVsVZLSv4MXrukTuVT 1uHuex06cxa/RJrDs1xSEC+OoHnO6+RQFIJ7Rg2GVL5yl4Uu5yfjZSadETGxH0zI MtpZ4lQlWq4Y5RHmwC4s52rwCga+UFmKWu1tI/JFb4GOwm/DLvVr0CgIWIZk56PT W4fW3jTJud/Fzu9DAMLzGOLgX5/dNlkL591mU5ONwI74FgSVReryKD3XUMRvrKfg 7cv7NWI7ioFYVu9OkzGqTzmESBL7Es/M7C6bClagfqVpHhsDheN7l4NgOLE9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUFdQCAipXJQPlweaZz4oWZkZ6/NQwHwYDVR0j BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz MzRGMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4ZTc4ZWUwLTAwMDItNGE2Ny1h NzM5LTMwMzNkNWI1YmE2MS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM4MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzMyMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqLkwDQYJ KoZIhvcNAQELBQADggEBAMHnsHnecRbJNk7mRZjw6BdVW4w9EwKDEpyncCEB9NRX D0O6sGyO5hEttvf4MzjNp+EE0aMEl8bqEWMW2X9clXtdMLj9pU6pZcE4uNLmIKnA ZjF8CElFr6dVeAxEjol4vRzhw70ZsgjPQJPIUYKx1v2O7+V6p5TRiHbKaGkhumyf KVpPsrflQxXpMCGmP5lKXlWnpyOqxv7Zu9kgo3CaKX0KQo/nQotxRos3tJBqZFAn cZeNbs+OmuFGuntsv0VFpihH0d6vdQ0WtBFZD/fFk11K6yiKqdqZeUiPAk9CELWT cKT1Uv8wFpQ92EHEUXn30xP4ZOF3QBzurq3LTa17uBg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org