$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa File: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (raw, json) Hash identifier: 2Te13nwELcKfxq0DNKKu6IHNtj0OQ7GRD+dYazNFcKQ= Subject key identifier: 52:62:D3:27:48:FD:A1:CD:3E:9E:89:FF:83:BF:2C:F8:AD:59:DC:09 Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162 Certificate serial: 5DD695616B68B094C832499DFCE433C89D04F07D Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa Signing time: Thu 11 Jan 2024 08:00:55 +0000 ROA not before: Thu 11 Jan 2024 07:55:55 +0000 ROA not after: Thu 09 Jan 2025 08:00:55 +0000 asID: 139449 IP address blocks: 103.145.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d6:95:61:6b:68:b0:94:c8:32:49:9d:fc:e4:33:c8:9d:04:f0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162 Validity Not Before: Jan 11 07:55:55 2024 GMT Not After : Jan 9 08:00:55 2025 GMT Subject: CN=5262D32748FDA1CD3E9E89FF83BF2CF8AD59DC09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9e:ab:13:a7:99:66:d4:43:59:65:04:b0:1b: 80:0e:9e:8d:57:66:48:f5:68:78:9d:86:a5:d1:bf: 6c:a2:45:03:ee:be:a9:a0:6a:98:86:46:d9:d3:f3: cc:ab:9b:c2:e7:f0:26:77:f8:5b:ee:fb:9a:d1:f4: 7c:8d:7b:a1:c0:38:d5:73:3e:fe:16:94:02:40:f3: ea:7d:9b:2d:2a:1a:b4:2b:18:c5:15:0e:a8:c2:ff: 9e:ab:5c:02:27:99:6d:28:02:3f:ac:c8:a5:9f:2f: 07:de:98:6d:14:6e:8f:86:4a:89:64:2c:be:9c:91: 2a:06:e9:49:48:24:63:39:cc:97:7a:c3:c3:05:27: 1a:22:3a:33:7a:f5:46:e8:7e:df:91:b5:62:f0:3e: 51:dc:07:72:f4:11:56:9e:56:43:58:5f:2d:c5:ed: c4:59:5f:1a:7a:6d:dd:a8:11:93:fe:6d:f6:9f:c5: 5d:a8:ed:db:9b:5c:16:65:a3:49:4f:d4:cd:89:83: 19:f3:24:4c:33:64:6e:48:cb:04:86:e3:c0:87:a9: 9c:2e:02:a0:9e:b4:65:b0:b8:05:c1:f2:12:60:92: 28:26:17:66:8c:0c:5b:cc:6c:97:1d:ed:a5:9e:1c: 66:ec:4d:30:b3:22:90:76:d3:a5:f3:6c:1b:76:1d: c8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:62:D3:27:48:FD:A1:CD:3E:9E:89:FF:83:BF:2C:F8:AD:59:DC:09 X509v3 Authority Key Identifier: keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.34.0/23 Signature Algorithm: sha256WithRSAEncryption 52:c6:1a:5d:3c:3f:67:8d:79:b4:34:a9:d1:4b:5d:d8:da:c9: 69:cc:80:36:f0:1c:94:6a:29:cf:cc:24:7f:f6:2f:d0:16:93: ce:e3:b0:87:69:67:1c:cc:73:57:7f:74:dd:e8:49:80:21:73: 8a:11:d5:0f:6f:9d:84:7e:64:1e:13:c7:70:5c:8e:3f:96:4d: bc:38:e2:37:af:d3:7d:05:c5:86:e4:e2:34:ee:5d:f7:26:8d: f6:47:6c:ec:b1:1c:8e:a4:56:29:37:75:6f:30:72:4c:b0:d2: 8a:88:97:c2:47:cc:b7:f4:cd:33:a3:ea:d6:42:6f:be:e2:b6: ab:37:f4:fd:40:fa:71:08:03:1e:b2:14:1f:7c:4d:75:3f:0e: 02:89:1d:6c:13:aa:99:c8:5f:06:e8:70:89:ea:e2:84:2c:b8: e7:74:0b:35:38:c5:bb:20:7d:98:b4:3a:7e:a3:39:13:d3:ea: 5a:04:c5:49:66:48:d6:16:2e:b3:8e:b0:f4:fc:ba:bc:0e:8b: 6e:b1:23:10:38:33:cd:1a:03:61:cc:c9:79:b2:71:e7:ed:46: a2:09:26:fb:71:a6:1d:31:37:2a:b9:91:d3:1d:13:56:df:e9: 9e:73:10:6c:51:0f:d7:63:13:56:05:39:be:33:0c:72:12:8c: 5a:8e:58:d2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXdaVYWtosJTIMkmd/OQzyJ0E8H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG RjVEMDE2MjAeFw0yNDAxMTEwNzU1NTVaFw0yNTAxMDkwODAwNTVaMDMxMTAvBgNV BAMTKDUyNjJEMzI3NDhGREExQ0QzRTlFODlGRjgzQkYyQ0Y4QUQ1OURDMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nqsTp5lm1ENZZQSwG4AOno1X Zkj1aHidhqXRv2yiRQPuvqmgapiGRtnT88yrm8Ln8CZ3+Fvu+5rR9HyNe6HAONVz Pv4WlAJA8+p9my0qGrQrGMUVDqjC/56rXAInmW0oAj+syKWfLwfemG0Ubo+GSolk LL6ckSoG6UlIJGM5zJd6w8MFJxoiOjN69Uboft+RtWLwPlHcB3L0EVaeVkNYXy3F 7cRZXxp6bd2oEZP+bfafxV2o7dubXBZlo0lP1M2JgxnzJEwzZG5IywSG48CHqZwu AqCetGWwuAXB8hJgkigmF2aMDFvMbJcd7aWeHGbsTTCzIpB206XzbBt2HcilAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUmLTJ0j9oc0+non/g78s+K1Z3AkwHwYDVR0j BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE MDE2Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5ZmJlMDg4LTBkODQtNDc4OS1i NDA1LTI1YzJlNzY5MzdmNi8wLzMxMzAzMzJlMzEzNDM1MmUzMzM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5EiMA0GCSqG SIb3DQEBCwUAA4IBAQBSxhpdPD9njXm0NKnRS13Y2slpzIA28ByUainPzCR/9i/Q FpPO47CHaWcczHNXf3Td6EmAIXOKEdUPb52EfmQeE8dwXI4/lk28OOI3r9N9BcWG 5OI07l33Jo32R2zssRyOpFYpN3VvMHJMsNKKiJfCR8y39M0zo+rWQm++4rarN/T9 QPpxCAMeshQffE11Pw4CiR1sE6qZyF8G6HCJ6uKELLjndAs1OMW7IH2YtDp+ozkT 0+paBMVJZkjWFi6zjrD0/Lq8DotusSMQODPNGgNhzMl5snHn7UaiCSb7caYdMTcq uZHTHRNW3+mecxBsUQ/XYxNWBTm+MwxyEoxajljS -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org