$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa File: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (raw, json) Hash identifier: dOSwIab4DipRsGMw2fmXCp8oC5CSGZ+c+pbbDEgoGbA= Subject key identifier: 0B:AE:8E:FF:23:6B:67:D0:A6:B5:66:AA:B1:3A:C8:C5:3E:93:67:0C Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 43CE3406151A47B12D7DDC6BCF1CD19AB64CB71A Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa Signing time: Wed 17 Apr 2024 10:13:19 +0000 ROA not before: Wed 17 Apr 2024 10:08:19 +0000 ROA not after: Wed 16 Apr 2025 10:13:19 +0000 asID: 138855 IP address blocks: 103.170.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ce:34:06:15:1a:47:b1:2d:7d:dc:6b:cf:1c:d1:9a:b6:4c:b7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Apr 17 10:08:19 2024 GMT Not After : Apr 16 10:13:19 2025 GMT Subject: CN=0BAE8EFF236B67D0A6B566AAB13AC8C53E93670C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:14:77:03:4f:e9:34:0d:4f:2d:fd:47:c8: 4d:4e:68:6c:3a:20:b9:29:a5:28:10:93:34:fd:01: 6d:4c:47:cd:ee:13:dc:33:c6:ea:3f:1e:7e:15:21: 38:c6:af:40:43:9d:76:9d:58:4b:4f:2b:5c:60:d2: 53:ce:db:23:ed:1f:d8:85:0f:5a:cc:69:80:d5:39: 0f:03:31:08:d1:b6:6e:a0:12:95:2e:10:74:66:df: 00:9b:80:04:12:49:a7:84:9c:9b:27:88:a4:36:f1: 37:bf:e9:f6:1b:54:f3:7b:53:9f:c2:15:34:b5:5f: 6d:d2:19:19:ef:f0:c2:b8:82:1f:7e:0f:72:1b:db: a1:d1:17:9a:a0:c3:39:3b:b9:ee:aa:5e:80:35:e5: a5:37:a2:8f:00:32:d5:4e:bf:16:3e:0f:b3:99:be: 24:89:d7:a2:7b:6d:b7:ee:86:ed:6e:c7:04:6a:ba: b0:4c:2a:f9:33:84:bb:18:12:b1:ac:fb:67:21:2a: 6a:85:7f:f6:ee:41:7f:20:63:01:9a:76:78:60:76: e9:8d:29:14:93:1c:73:b5:f1:a6:96:6a:5f:39:cc: eb:0f:39:f9:e6:87:f1:5a:a6:ed:59:99:69:a4:d1: 88:20:7d:e1:e6:0f:f4:f6:33:a4:df:a7:9b:5c:d6: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AE:8E:FF:23:6B:67:D0:A6:B5:66:AA:B1:3A:C8:C5:3E:93:67:0C X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.234.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:2a:11:81:18:ba:bb:81:8a:01:c3:64:01:b6:69:83:f1:3d: ac:28:db:a0:27:73:94:ae:5d:cd:de:b2:66:6d:c9:62:5c:66: 05:85:1c:5b:dd:49:eb:f6:2b:2e:fa:ad:be:4a:2a:3e:0c:58: 60:44:86:56:f2:cc:42:bd:e8:e2:d3:91:f9:24:67:5e:7c:d9: 8c:a4:e5:c0:0b:2b:dc:1a:45:cf:ca:08:66:70:e7:af:1a:ea: ac:92:fb:69:ea:08:5c:4c:aa:55:7f:02:40:5a:1a:74:7e:25: 70:9b:da:b6:6d:fc:24:f9:dc:6c:af:b3:d7:cf:90:37:5c:de: 0d:eb:82:7b:3b:61:86:95:b3:34:95:04:7c:e6:2f:d5:cc:5f: 07:da:bf:0c:83:65:be:7a:68:9a:60:cc:c8:34:00:9e:48:5b: e5:be:99:ae:d2:71:e0:1f:24:33:07:28:ce:a8:00:3a:6c:a1: c8:52:27:a2:9c:93:b6:e2:0c:43:2c:0a:41:9f:ff:2b:54:68: dd:f5:aa:21:27:4c:10:e4:b0:5e:b0:ec:19:a6:71:7f:8b:6d: 37:d8:9b:b5:59:f4:d3:96:07:b4:5d:b4:5d:5c:7f:c3:28:31: 35:96:b5:30:09:e2:a4:83:f3:cd:1e:51:c7:41:e4:d8:58:6b: b9:37:3f:be -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQ840BhUaR7EtfdxrzxzRmrZMtxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNDA0MTcxMDA4MTlaFw0yNTA0MTYxMDEzMTlaMDMxMTAvBgNV BAMTKDBCQUU4RUZGMjM2QjY3RDBBNkI1NjZBQUIxM0FDOEM1M0U5MzY3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPRR3A0/pNA1PLf1HyE1OaGw6 ILkppSgQkzT9AW1MR83uE9wzxuo/Hn4VITjGr0BDnXadWEtPK1xg0lPO2yPtH9iF D1rMaYDVOQ8DMQjRtm6gEpUuEHRm3wCbgAQSSaeEnJsniKQ28Te/6fYbVPN7U5/C FTS1X23SGRnv8MK4gh9+D3Ib26HRF5qgwzk7ue6qXoA15aU3oo8AMtVOvxY+D7OZ viSJ16J7bbfuhu1uxwRqurBMKvkzhLsYErGs+2chKmqFf/buQX8gYwGadnhgdumN KRSTHHO18aaWal85zOsPOfnmh/Fapu1ZmWmk0YggfeHmD/T2M6Tfp5tc1qchAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUC66O/yNrZ9CmtWaqsTrIxT6TZwwwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNDRkNTc2LTM4MTgtNDlkNi04 NjYyLWY4ZGY4OWFiMjg2My8wLzMxMzAzMzJlMzEzNzMwMmUzMjMzMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM1MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnquowDQYJ KoZIhvcNAQELBQADggEBAF0qEYEYuruBigHDZAG2aYPxPawo26Anc5SuXc3esmZt yWJcZgWFHFvdSev2Ky76rb5KKj4MWGBEhlbyzEK96OLTkfkkZ1582Yyk5cALK9wa Rc/KCGZw568a6qyS+2nqCFxMqlV/AkBaGnR+JXCb2rZt/CT53Gyvs9fPkDdc3g3r gns7YYaVszSVBHzmL9XMXwfavwyDZb56aJpgzMg0AJ5IW+W+ma7SceAfJDMHKM6o ADpsochSJ6Kck7biDEMsCkGf/ytUaN31qiEnTBDksF6w7BmmcX+LbTfYm7VZ9NOW B7RdtF1cf8MoMTWWtTAJ4qSD880eUcdB5NhYa7k3P74= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org