$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa File: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (raw, json) Hash identifier: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc= Subject key identifier: 36:62:86:36:73:88:4A:68:90:58:A8:DE:2B:D4:69:1F:EA:D5:92:E4 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 2D5BA38E21012015CB74FB86E93D2F5E374A52D9 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa Signing time: Wed 13 Nov 2024 14:00:02 +0000 ROA not before: Wed 13 Nov 2024 13:55:02 +0000 ROA not after: Wed 12 Nov 2025 14:00:02 +0000 asID: 141132 IP address blocks: 103.158.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5b:a3:8e:21:01:20:15:cb:74:fb:86:e9:3d:2f:5e:37:4a:52:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Nov 13 13:55:02 2024 GMT Not After : Nov 12 14:00:02 2025 GMT Subject: CN=3662863673884A689058A8DE2BD4691FEAD592E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:69:12:bb:b0:e5:73:35:4d:b5:4e:6f:45: e6:fe:6a:3d:13:99:40:2f:53:2b:32:d7:a7:58:e8: 8e:a7:da:56:c9:53:4d:23:27:3e:0b:84:ca:e7:79: 27:25:b5:28:1e:3e:c2:64:84:89:b3:d4:3c:d4:85: 84:21:a2:5f:f3:b9:fe:6c:54:9a:26:c5:44:1a:9e: 7c:1e:26:67:2a:31:39:ca:0a:29:f5:a9:96:dd:f8: d9:81:4d:08:fa:cc:e7:ff:05:c8:91:ce:b0:47:b6: 32:18:7f:2a:39:78:c0:3e:b0:56:6b:f1:ed:9a:48: a4:e5:18:c2:58:84:04:3c:a6:bc:6d:b2:30:e7:64: d4:2b:fb:34:e0:8a:24:64:ff:6f:9a:30:d9:24:c8: f4:57:b3:93:2e:d4:49:ea:f2:a7:c6:62:53:f8:fb: 6c:df:ec:1f:2d:ca:0d:e6:bb:bf:e5:91:b9:09:6a: f4:ef:87:bf:ea:db:96:c7:04:b7:1d:a3:eb:bb:3c: 9f:d5:9f:0f:08:36:d5:18:c5:79:18:68:7a:37:e5: a1:69:ee:04:93:40:dc:1e:3a:85:30:47:ee:96:ca: b7:4d:8c:14:c7:41:f3:c9:04:04:c5:af:04:90:60: 1c:56:f7:b2:4f:a3:25:78:d0:fd:c7:d1:5f:39:c4: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:62:86:36:73:88:4A:68:90:58:A8:DE:2B:D4:69:1F:EA:D5:92:E4 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.234.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:fe:46:d8:48:58:c5:ac:0f:d8:a1:9a:b1:20:d7:1d:ce:d6: e3:1f:1c:7e:7c:24:93:51:3d:f8:0b:2d:79:cd:15:4a:b0:97: 87:b7:c0:4a:34:29:7e:36:a1:b3:9e:39:0d:b0:6c:b7:77:84: 41:a1:57:ce:16:4b:15:17:24:a3:f2:be:64:b6:25:19:4b:33: e9:84:c0:51:7b:08:19:a2:bc:4e:8b:78:c0:16:e6:b0:bc:ef: ab:8a:db:bf:4a:05:e0:6f:8c:88:23:73:03:0a:a7:d0:12:a6: 61:0d:3a:25:c7:a6:99:97:36:d6:95:7a:e0:62:13:74:fa:96: a6:6f:77:93:f6:4f:c1:74:21:53:47:df:8f:53:45:15:fd:bf: 1d:d2:3a:a9:ae:27:7a:64:d8:38:bc:a9:3f:bc:e2:b9:7c:15: 62:d6:45:84:34:6d:c8:3f:e6:2a:e1:27:18:22:0a:34:76:9d: 4b:f7:81:e6:0b:df:b1:db:c6:f9:16:fa:99:90:e5:bc:f9:48: 89:d3:48:7d:99:24:33:13:7d:70:81:57:99:ee:75:18:49:4c: 29:4a:16:02:b7:bf:4b:43:43:18:03:7b:ba:f0:f3:13:cf:2a: ef:04:6b:3a:c9:6a:86:03:2a:bd:cd:09:c1:d6:c3:40:dd:f6: 02:53:94:73 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULVujjiEBIBXLdPuG6T0vXjdKUtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNDExMTMxMzU1MDJaFw0yNTExMTIxNDAwMDJaMDMxMTAvBgNV BAMTKDM2NjI4NjM2NzM4ODRBNjg5MDU4QThERTJCRDQ2OTFGRUFENTkyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa12kSu7DlczVNtU5vReb+aj0T mUAvUysy16dY6I6n2lbJU00jJz4LhMrneScltSgePsJkhImz1DzUhYQhol/zuf5s VJomxUQannweJmcqMTnKCin1qZbd+NmBTQj6zOf/BciRzrBHtjIYfyo5eMA+sFZr 8e2aSKTlGMJYhAQ8prxtsjDnZNQr+zTgiiRk/2+aMNkkyPRXs5Mu1Enq8qfGYlP4 +2zf7B8tyg3mu7/lkbkJavTvh7/q25bHBLcdo+u7PJ/Vnw8INtUYxXkYaHo35aFp 7gSTQNweOoUwR+6WyrdNjBTHQfPJBATFrwSQYBxW97JPoyV40P3H0V85xJ8DAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNmKGNnOISmiQWKjeK9RpH+rVkuQwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwMzZlMDdjLTgyODMtNDNkMy05 MTY0LTNlMGU2Y2FjZjQ5OS8wLzMxMzAzMzJlMzEzNTM4MmUzMjMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMzMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnuowDQYJ KoZIhvcNAQELBQADggEBAC7+RthIWMWsD9ihmrEg1x3O1uMfHH58JJNRPfgLLXnN FUqwl4e3wEo0KX42obOeOQ2wbLd3hEGhV84WSxUXJKPyvmS2JRlLM+mEwFF7CBmi vE6LeMAW5rC876uK279KBeBvjIgjcwMKp9ASpmENOiXHppmXNtaVeuBiE3T6lqZv d5P2T8F0IVNH349TRRX9vx3SOqmuJ3pk2Di8qT+84rl8FWLWRYQ0bcg/5irhJxgi CjR2nUv3geYL37HbxvkW+pmQ5bz5SInTSH2ZJDMTfXCBV5nudRhJTClKFgK3v0tD QxgDe7rw8xPPKu8EazrJaoYDKr3NCcHWw0Dd9gJTlHM= -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org