$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa File: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (raw, json) Hash identifier: F9M4JE/BbL7KPtInfZ2De6C86BPHzRjVLxJovHmyJzk= Subject key identifier: E1:A2:B9:1B:B1:31:9E:FD:FB:D9:33:9E:54:B1:03:78:43:4B:08:64 Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 200EF1941BD6AF5D84F75C3B9481A74DE4304FBE Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa Signing time: Sat 17 Aug 2024 14:00:02 +0000 ROA not before: Sat 17 Aug 2024 13:55:02 +0000 ROA not after: Sat 16 Aug 2025 14:00:02 +0000 asID: 141985 IP address blocks: 103.167.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Feb 2025 04:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0e:f1:94:1b:d6:af:5d:84:f7:5c:3b:94:81:a7:4d:e4:30:4f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Aug 17 13:55:02 2024 GMT Not After : Aug 16 14:00:02 2025 GMT Subject: CN=E1A2B91BB1319EFDFBD9339E54B10378434B0864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:25:db:39:c3:9c:cc:72:d5:22:12:f1:97: dd:93:e5:eb:8a:46:98:41:ce:e7:61:bd:b8:31:c1: 6b:9d:f1:fa:ac:72:ae:67:97:6e:12:af:e8:d5:6b: 4f:0d:55:18:83:3c:a6:d8:49:f6:d0:fe:0f:e4:18: 34:de:47:4f:b8:b1:b6:0d:46:44:2b:03:01:00:11: 4a:0f:a2:5b:56:a2:aa:dc:ed:6d:55:3a:79:ae:fe: a8:15:40:8b:41:17:50:51:a5:a9:8c:dc:92:47:6b: 5e:75:75:5a:cf:e7:16:a9:0a:ba:f8:2b:f5:e8:f4: 66:c7:70:e6:b8:55:ca:d5:93:07:fb:bb:21:90:af: 5c:99:45:11:35:e7:c9:13:2e:97:84:b3:4f:8b:12: 1c:8b:df:1c:d9:22:f4:72:45:4a:93:2d:2c:0c:68: 02:55:bd:1b:a1:f5:59:44:48:5a:1d:f2:41:03:8b: a2:d9:5a:a6:d1:e1:2b:31:6a:fb:8f:3a:e6:bc:c8: e7:08:1e:ca:14:26:26:bf:03:c3:d8:0c:85:91:7c: eb:b6:34:9d:c3:a7:67:ea:6c:89:26:55:5a:a4:8b: 46:f5:c2:bb:59:8e:7a:09:6f:fc:4f:aa:97:14:ca: 71:47:43:e7:ed:43:43:42:85:db:38:a6:22:34:88: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A2:B9:1B:B1:31:9E:FD:FB:D9:33:9E:54:B1:03:78:43:4B:08:64 X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.168.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:14:9f:13:57:00:b9:b9:2c:3d:bd:e9:ad:5a:3f:6f:14:f4: cc:73:c6:09:f1:ef:9e:b0:8a:47:90:cb:41:8f:e4:4a:d5:4f: 01:04:f2:0f:4b:24:60:38:76:d5:48:f8:ce:32:f2:30:77:e9: 55:ba:57:7f:34:6c:a7:91:ac:5d:06:e8:69:e9:ad:61:5f:54: ff:14:d1:65:bf:0a:b3:3c:40:e6:68:ba:d8:5b:86:49:d5:19: 42:f1:8b:9e:ed:43:91:06:c3:54:69:0e:85:51:41:14:ee:f7: d2:f5:bf:18:af:7c:39:53:4f:d6:eb:84:b5:a2:83:f2:49:61: bb:3b:30:01:88:db:96:19:67:18:2a:6b:54:4e:03:3f:30:3e: f0:b1:bc:4e:f1:8d:f7:16:74:ad:24:cd:32:fa:d3:53:63:45: 87:ec:40:8d:17:04:0a:96:1f:6d:73:93:0d:1a:f4:06:36:0f: 7c:e3:f0:b3:d2:b3:6d:eb:5b:c9:8a:fc:3e:e0:b4:11:7e:72: 92:39:a5:72:d8:69:d1:36:0f:ba:85:05:41:78:5f:57:14:08: 3d:19:2a:87:d3:6f:ba:04:6a:20:8d:56:1e:73:5b:b1:6a:4d: d4:5d:91:ce:13:5c:d0:25:9f:22:d0:6a:e6:37:e0:d9:c4:c4: 54:b6:6f:40 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIA7xlBvWr12E91w7lIGnTeQwT74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNDA4MTcxMzU1MDJaFw0yNTA4MTYxNDAwMDJaMDMxMTAvBgNV BAMTKEUxQTJCOTFCQjEzMTlFRkRGQkQ5MzM5RTU0QjEwMzc4NDM0QjA4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtyXbOcOczHLVIhLxl92T5euK RphBzudhvbgxwWud8fqscq5nl24Sr+jVa08NVRiDPKbYSfbQ/g/kGDTeR0+4sbYN RkQrAwEAEUoPoltWoqrc7W1VOnmu/qgVQItBF1BRpamM3JJHa151dVrP5xapCrr4 K/Xo9GbHcOa4VcrVkwf7uyGQr1yZRRE158kTLpeEs0+LEhyL3xzZIvRyRUqTLSwM aAJVvRuh9VlESFod8kEDi6LZWqbR4SsxavuPOua8yOcIHsoUJia/A8PYDIWRfOu2 NJ3Dp2fqbIkmVVqki0b1wrtZjnoJb/xPqpcUynFHQ+ftQ0NChds4piI0iC+nAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU4aK5G7Exnv372TOeVLEDeENLCGQwHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkNGI2MTJmLWY5MjQtNGVjMi1i MWYxLWExMzA1ZDIzZDUzYS8wLzMxMzAzMzJlMzEzNjM3MmUzMTM2MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM4MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnp6gwDQYJ KoZIhvcNAQELBQADggEBAJwUnxNXALm5LD296a1aP28U9Mxzxgnx756wikeQy0GP 5ErVTwEE8g9LJGA4dtVI+M4y8jB36VW6V380bKeRrF0G6GnprWFfVP8U0WW/CrM8 QOZouthbhknVGULxi57tQ5EGw1RpDoVRQRTu99L1vxivfDlTT9brhLWig/JJYbs7 MAGI25YZZxgqa1ROAz8wPvCxvE7xjfcWdK0kzTL601NjRYfsQI0XBAqWH21zkw0a 9AY2D3zj8LPSs23rW8mK/D7gtBF+cpI5pXLYadE2D7qFBUF4X1cUCD0ZKofTb7oE aiCNVh5zW7FqTdRdkc4TXNAlnyLQauY34NnExFS2b0A= -----END CERTIFICATE-----Generated at Fri Feb 21 11:17:41 2025 by rpki-client