$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa File: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (raw, json) Hash identifier: 4vp0Qpf0MLP4khTVs9MQwOQui0ZXjUZqWXi8G+NFZc8= Subject key identifier: FF:69:43:91:CD:52:E9:09:4C:CD:38:55:91:70:73:D9:D2:D2:28:D3 Certificate issuer: /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Certificate serial: 3B46158815111E95D6408665E1F806262A473696 Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa Signing time: Wed 24 Jul 2024 14:00:00 +0000 ROA not before: Wed 24 Jul 2024 13:55:00 +0000 ROA not after: Wed 23 Jul 2025 14:00:00 +0000 asID: 38505 IP address blocks: 103.233.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:46:15:88:15:11:1e:95:d6:40:86:65:e1:f8:06:26:2a:47:36:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Validity Not Before: Jul 24 13:55:00 2024 GMT Not After : Jul 23 14:00:00 2025 GMT Subject: CN=FF694391CD52E9094CCD3855917073D9D2D228D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0d:64:7a:bc:64:79:32:65:b6:9d:65:c9:74: 49:90:6a:5e:cd:f4:3b:08:71:f8:85:19:e7:c1:e3: 64:45:e3:c9:c0:c4:00:9b:c8:56:57:cf:2c:ec:db: 8f:d0:25:2c:d3:19:54:48:40:d0:89:fd:35:b4:c8: e3:d5:3a:fb:5a:74:49:99:32:6f:bf:01:cb:e6:48: 31:c3:b0:50:c9:f7:a0:bb:d0:2d:f0:b7:02:2b:44: 9e:bd:76:d8:35:f8:9e:04:8e:8b:46:08:b6:74:7b: 49:a1:83:bd:34:4b:a0:c1:fa:86:23:85:3b:0b:22: c1:e4:87:48:e2:2d:86:36:cc:25:4a:c3:93:6e:d8: d4:5b:72:65:d0:7b:31:dc:5d:d7:a4:bf:34:2e:f9: 07:36:1a:ea:8b:d0:d6:ef:16:e8:71:49:85:2d:14: e5:3d:f5:f1:72:b7:a1:9b:e4:84:db:80:93:0c:38: f8:48:0b:3f:f3:b3:7f:d2:9f:cb:c8:08:81:5d:1b: 50:23:c8:40:5d:e6:1b:b1:30:d1:2d:08:50:83:7c: ca:85:e1:a9:59:fa:f1:f1:3b:94:ba:41:05:a8:9d: 77:7d:70:e8:5a:be:21:74:e3:f0:2d:7f:91:5d:08: 32:1f:41:c4:dd:cc:9d:4e:da:c2:56:7f:77:4e:93: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:69:43:91:CD:52:E9:09:4C:CD:38:55:91:70:73:D9:D2:D2:28:D3 X509v3 Authority Key Identifier: keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.233.142.0/23 Signature Algorithm: sha256WithRSAEncryption 02:ea:f2:99:5d:ef:89:29:dd:50:22:54:35:25:b1:45:fe:6a: 61:74:a2:b3:8d:65:e9:66:ad:5c:c1:db:44:cd:1c:48:bd:4a: c5:e3:65:05:15:27:57:3f:15:fb:dd:f3:25:70:da:82:2a:e2: 14:db:e9:4f:ad:3d:1e:f8:d0:2b:80:cd:3b:31:9b:f7:9f:6e: f4:18:98:9a:c6:86:0b:bc:2d:ba:a8:d6:c8:a2:b3:40:5a:3a: db:ff:42:e3:00:71:e3:da:19:54:3a:de:87:52:83:e2:1f:f1: 36:3f:46:d7:3f:42:a8:3f:86:57:39:06:8d:c7:06:bd:e5:18: b6:6c:2c:66:2c:f1:0e:27:24:93:0c:c6:69:4f:7a:ec:f4:8b: bf:de:93:b8:54:69:64:d2:93:f8:79:a1:de:4a:32:7a:a5:1c: 4d:50:25:9a:71:38:ad:4e:d4:4a:fd:05:c0:4b:e5:31:58:24: 89:8f:40:cb:76:35:b0:e5:dd:15:60:0b:7d:99:07:ca:6c:1b: 1a:38:a9:27:e5:e6:a5:5d:3f:5f:28:e9:db:f9:41:ca:26:f0: 5a:0c:7f:1c:e8:8d:e9:56:ab:ce:99:46:14:23:f7:ea:ff:dc: a5:db:58:76:93:17:c5:62:7a:7c:8a:47:6e:ae:04:10:9b:13: cf:f2:06:8b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUO0YViBURHpXWQIZl4fgGJipHNpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVE MTFEMzNBNjAeFw0yNDA3MjQxMzU1MDBaFw0yNTA3MjMxNDAwMDBaMDMxMTAvBgNV BAMTKEZGNjk0MzkxQ0Q1MkU5MDk0Q0NEMzg1NTkxNzA3M0Q5RDJEMjI4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuDWR6vGR5MmW2nWXJdEmQal7N 9DsIcfiFGefB42RF48nAxACbyFZXzyzs24/QJSzTGVRIQNCJ/TW0yOPVOvtadEmZ Mm+/AcvmSDHDsFDJ96C70C3wtwIrRJ69dtg1+J4EjotGCLZ0e0mhg700S6DB+oYj hTsLIsHkh0jiLYY2zCVKw5Nu2NRbcmXQezHcXdekvzQu+Qc2GuqL0NbvFuhxSYUt FOU99fFyt6Gb5ITbgJMMOPhICz/zs3/Sn8vICIFdG1AjyEBd5huxMNEtCFCDfMqF 4alZ+vHxO5S6QQWonXd9cOhaviF04/Atf5FdCDIfQcTdzJ1O2sJWf3dOkx2HAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/2lDkc1S6QlMzThVkXBz2dLSKNMwHwYDVR0j BBgwFoAUg9OYbFy9Vr0M6QPRtR6tZdEdM6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2QwNzg2ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC84M0QzOTg2QzVD QkQ1NkJEMENFOTAzRDFCNTFFQUQ2NUQxMUQzM0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVEMTFE MzNBNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzZDA3ODZkLTNkM2UtNDViNy05 NjY1LThkNDc0ZmQxNGFlYS8wLzMxMzAzMzJlMzIzMzMzMmUzMTM0MzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzUzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+mOMA0GCSqG SIb3DQEBCwUAA4IBAQAC6vKZXe+JKd1QIlQ1JbFF/mphdKKzjWXpZq1cwdtEzRxI vUrF42UFFSdXPxX73fMlcNqCKuIU2+lPrT0e+NArgM07MZv3n270GJiaxoYLvC26 qNbIorNAWjrb/0LjAHHj2hlUOt6HUoPiH/E2P0bXP0KoP4ZXOQaNxwa95Ri2bCxm LPEOJySTDMZpT3rs9Iu/3pO4VGlk0pP4eaHeSjJ6pRxNUCWacTitTtRK/QXAS+Ux WCSJj0DLdjWw5d0VYAt9mQfKbBsaOKkn5ealXT9fKOnb+UHKJvBaDH8c6I3pVqvO mUYUI/fq/9yl21h2kxfFYnp8ikdurgQQmxPP8gaL -----END CERTIFICATE-----Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org