$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa File: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (raw, json) Hash identifier: eaDHXompNyoJw9eDQUonpgv4Hhe2sKzjUb9sb9tjeJI= Subject key identifier: 15:CC:87:E9:D9:C2:19:0D:1C:DF:9E:00:9F:E3:E4:25:49:B0:A1:FF Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 02CB250A216E6E238526F61400EFDD29013ADDA0 Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa Signing time: Wed 20 Dec 2023 07:00:01 +0000 ROA not before: Wed 20 Dec 2023 06:55:01 +0000 ROA not after: Wed 18 Dec 2024 07:00:01 +0000 asID: 17440 IP address blocks: 103.209.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 01:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cb:25:0a:21:6e:6e:23:85:26:f6:14:00:ef:dd:29:01:3a:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Dec 20 06:55:01 2023 GMT Not After : Dec 18 07:00:01 2024 GMT Subject: CN=15CC87E9D9C2190D1CDF9E009FE3E42549B0A1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:07:75:16:84:ec:b6:af:73:69:26:c4:b4: 2f:81:72:13:17:13:3b:28:dd:db:37:db:a8:f1:67: 12:88:bd:78:48:a3:65:52:ab:34:ae:b2:d9:93:b2: 24:63:6e:a7:fd:f5:63:05:d9:b3:f4:4d:b9:45:4e: 63:4e:00:3b:61:7e:3e:dd:25:04:98:06:3a:94:24: d1:a7:10:fb:b7:13:0b:d9:a5:42:d1:ab:01:75:84: 59:16:32:19:bb:32:3a:ac:fe:26:9c:79:49:36:7b: 49:8c:26:5c:c1:6d:80:8e:5a:a3:b4:89:ab:e8:bd: df:1c:92:ed:11:a4:a2:23:72:d5:2b:62:d7:7b:92: 16:0d:c2:45:de:5f:d1:49:6b:32:c9:0e:b8:0b:6a: 66:49:3a:33:d3:fc:8d:cd:1a:83:7f:8c:1f:2e:dd: 65:ee:a0:2d:d6:91:e8:b4:45:35:b2:21:c7:5e:f8: 3c:9a:98:6d:f3:c9:b5:41:dd:1c:e5:25:12:0b:d5: a1:f8:f0:0f:75:b3:46:ce:8e:21:83:78:5f:93:33: 10:a8:33:9f:f2:a5:a4:27:c3:8e:27:47:14:43:c5: 96:9d:32:69:2b:bb:11:d5:56:6c:e3:b7:b1:f4:80: d9:aa:09:4f:6d:24:39:fa:a4:5b:68:44:43:b8:03: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CC:87:E9:D9:C2:19:0D:1C:DF:9E:00:9F:E3:E4:25:49:B0:A1:FF X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.248.0/22 Signature Algorithm: sha256WithRSAEncryption 86:60:c4:72:ba:26:0f:e2:82:3f:a1:cc:c7:a6:b8:ac:4a:32: 66:14:ff:02:07:a0:0d:57:66:33:90:bf:4e:6b:bc:b8:65:7c: e0:dd:d3:02:eb:c6:79:59:8e:8d:de:ec:c3:93:d9:b1:a9:2b: 3b:4a:1b:2c:c8:eb:3c:b6:82:95:9a:57:4c:cf:50:68:de:8f: 62:5e:1e:4a:fe:82:e1:d6:d5:0f:13:66:3a:a0:62:a3:0b:4e: 58:1c:2e:b9:ce:ed:f0:0c:54:b4:be:99:3e:a0:3f:d0:46:b5: 68:21:83:8c:a2:1c:cb:ac:6d:d8:9a:ae:0c:f1:24:1b:4e:a0: be:80:5f:9f:c2:7b:37:0f:1f:07:93:98:4b:90:d3:bd:c4:1a: a9:07:00:59:e5:d4:fb:20:ee:76:a1:1e:8f:7f:6c:bb:4c:76: 0b:1f:c8:13:98:6d:20:67:bb:2a:68:2a:31:cf:88:14:40:e3: 2b:be:c6:20:06:6b:c0:b3:0c:c1:8a:bb:b2:fe:ff:d4:a6:24: 86:6e:4f:7b:46:82:9c:02:bb:61:c3:08:ab:ac:86:d3:90:bc: 07:6c:f3:28:74:f5:5d:9b:41:f0:d4:e8:38:d2:3d:9e:5a:b4: c7:ba:c2:3c:6a:d4:a9:2f:9c:fa:f2:46:73:45:3d:a8:28:7e: 73:40:5e:86 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAsslCiFubiOFJvYUAO/dKQE63aAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yMzEyMjAwNjU1MDFaFw0yNDEyMTgwNzAwMDFaMDMxMTAvBgNV BAMTKDE1Q0M4N0U5RDlDMjE5MEQxQ0RGOUUwMDlGRTNFNDI1NDlCMEExRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Ygd1FoTstq9zaSbEtC+BchMX Ezso3ds326jxZxKIvXhIo2VSqzSustmTsiRjbqf99WMF2bP0TblFTmNOADthfj7d JQSYBjqUJNGnEPu3EwvZpULRqwF1hFkWMhm7Mjqs/iaceUk2e0mMJlzBbYCOWqO0 iavovd8cku0RpKIjctUrYtd7khYNwkXeX9FJazLJDrgLamZJOjPT/I3NGoN/jB8u 3WXuoC3Wkei0RTWyIcde+DyamG3zybVB3RzlJRIL1aH48A91s0bOjiGDeF+TMxCo M5/ypaQnw44nRxRDxZadMmkruxHVVmzjt7H0gNmqCU9tJDn6pFtoREO4A4xFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFcyH6dnCGQ0c354An+PkJUmwof8wHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjMDc0Y2Q4LTI4MzAtNGVhYi1i ZGQ0LWE4MDdlYzUxMTVkYS8wLzMxMzAzMzJlMzIzMDM5MmUzMjM0MzgyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMTM3MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ9H4MA0GCSqG SIb3DQEBCwUAA4IBAQCGYMRyuiYP4oI/oczHprisSjJmFP8CB6ANV2YzkL9Oa7y4 ZXzg3dMC68Z5WY6N3uzDk9mxqSs7ShssyOs8toKVmldMz1Bo3o9iXh5K/oLh1tUP E2Y6oGKjC05YHC65zu3wDFS0vpk+oD/QRrVoIYOMohzLrG3Ymq4M8SQbTqC+gF+f wns3Dx8Hk5hLkNO9xBqpBwBZ5dT7IO52oR6Pf2y7THYLH8gTmG0gZ7sqaCoxz4gU QOMrvsYgBmvAswzBiruy/v/UpiSGbk97RoKcArthwwirrIbTkLwHbPModPVdm0Hw 1Og40j2eWrTHusI8atSpL5z68kZzRT2oKH5zQF6G -----END CERTIFICATE-----Generated at Sat Jun 1 01:58:00 2024 by rpki-client on console-ams.rpki-client.org