$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa File: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (raw, json) Hash identifier: m/GCL6WVyVOw/IIrqF3BhpSywnBpqzTxOo6jVUlRS3U= Subject key identifier: C1:F2:BC:26:5D:C6:E6:B1:0C:D9:69:F8:8A:EB:C0:42:C9:72:13:03 Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 18A4ECD30B9B57F1B6BDB45618A13E7B7F6419E6 Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa Signing time: Tue 07 May 2024 07:00:56 +0000 ROA not before: Tue 07 May 2024 06:55:56 +0000 ROA not after: Tue 06 May 2025 07:00:56 +0000 asID: 141062 IP address blocks: 103.155.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 01:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a4:ec:d3:0b:9b:57:f1:b6:bd:b4:56:18:a1:3e:7b:7f:64:19:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: May 7 06:55:56 2024 GMT Not After : May 6 07:00:56 2025 GMT Subject: CN=C1F2BC265DC6E6B10CD969F88AEBC042C9721303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:0c:ee:cf:ea:9a:03:93:ae:e5:a8:56:92: e3:40:3b:5b:11:4c:f2:3c:1d:d9:75:a7:b5:fa:e6: b7:58:dd:9a:ec:3a:22:d3:c8:45:28:fb:0b:ef:07: 32:3c:81:13:81:ed:99:8e:56:13:da:de:ff:21:32: e8:ca:53:a4:44:c6:93:46:82:29:51:3d:81:d3:65: f0:61:94:81:cd:fc:36:dc:4f:ea:86:23:a7:dc:0e: 46:b7:69:2e:9f:36:f6:48:1c:38:3a:a3:da:5b:f6: 04:4b:8e:5b:01:97:0e:19:3e:7b:90:cc:6d:70:ed: b7:c8:10:52:93:d9:43:a6:92:e1:07:a5:fc:af:bf: 54:22:f6:62:ba:da:46:8d:12:d8:06:2d:31:66:6f: 95:88:7c:12:6d:dc:db:cd:45:f2:96:c9:76:1b:82: 67:b4:71:7c:b9:84:75:66:ac:6e:14:d6:79:a7:55: 30:53:24:37:73:26:88:a2:89:08:70:3d:02:5a:2b: 50:59:45:8a:ec:75:2e:6c:ff:23:8c:5c:6e:c0:6e: 5a:b1:b1:05:4a:74:96:f9:18:08:86:03:64:0c:fc: 30:52:01:89:b6:ae:ed:ce:2e:78:08:a2:c6:64:07: e8:a3:8d:de:9d:92:d5:84:14:cc:92:2d:e6:81:e2: a9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F2:BC:26:5D:C6:E6:B1:0C:D9:69:F8:8A:EB:C0:42:C9:72:13:03 X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.157.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ee:08:36:8e:57:53:9f:07:1a:e6:72:bc:1e:46:4e:c5:66: 2b:1f:a8:82:38:6a:cf:30:75:31:dc:1c:ae:89:00:2a:f6:5f: 4e:58:53:5d:75:c1:3b:29:1b:16:b7:0d:73:4e:73:08:ee:e5: 1e:19:2e:28:33:d1:d4:22:98:92:cd:59:f1:03:4f:25:ec:f5: 46:79:c4:8d:1d:9f:a9:a5:11:a9:d9:41:7b:cd:59:c6:53:17: 40:80:e0:13:c5:df:13:1f:51:76:49:8a:e5:61:55:8b:8d:06: 67:a3:16:19:4d:5a:97:74:89:17:10:d6:56:46:4d:d8:f1:4b: 51:83:01:0b:38:0e:80:cd:26:c2:80:07:76:3f:90:d6:56:30: 86:dd:bc:dc:c9:24:72:81:81:bb:cf:05:b7:62:91:36:8f:fb: dd:5a:42:a6:d2:42:e8:ec:e4:b5:24:b3:66:b8:41:df:85:49: 7f:d9:83:4b:cb:22:b5:bd:ed:1f:52:ac:70:47:3a:d7:6e:a5: fd:0b:e9:ff:1d:4f:c4:e5:f3:b5:30:ea:f7:68:2b:22:a3:86: db:a5:d6:3a:ad:8a:6e:81:84:99:d4:08:b5:f0:0f:16:b1:36: 96:55:a9:a7:e1:eb:e4:86:d1:59:98:27:67:fc:53:9c:89:77: ba:54:14:31 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGKTs0wubV/G2vbRWGKE+e39kGeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNDA1MDcwNjU1NTZaFw0yNTA1MDYwNzAwNTZaMDMxMTAvBgNV BAMTKEMxRjJCQzI2NURDNkU2QjEwQ0Q5NjlGODhBRUJDMDQyQzk3MjEzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fQzuz+qaA5Ou5ahWkuNAO1sR TPI8Hdl1p7X65rdY3ZrsOiLTyEUo+wvvBzI8gROB7ZmOVhPa3v8hMujKU6RExpNG gilRPYHTZfBhlIHN/DbcT+qGI6fcDka3aS6fNvZIHDg6o9pb9gRLjlsBlw4ZPnuQ zG1w7bfIEFKT2UOmkuEHpfyvv1Qi9mK62kaNEtgGLTFmb5WIfBJt3NvNRfKWyXYb gme0cXy5hHVmrG4U1nmnVTBTJDdzJoiiiQhwPQJaK1BZRYrsdS5s/yOMXG7Ablqx sQVKdJb5GAiGA2QM/DBSAYm2ru3OLngIosZkB+ijjd6dktWEFMySLeaB4qn3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUwfK8Jl3G5rEM2Wn4iuvAQslyEwMwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkMTYxOWNiLWMwMWMtNDYxNC04 NjNlLWNlMjg4ZDdiYTc2NS8wLzMxMzAzMzJlMzEzNTM1MmUzMTM1MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM2MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm50wDQYJ KoZIhvcNAQELBQADggEBAAfuCDaOV1OfBxrmcrweRk7FZisfqII4as8wdTHcHK6J ACr2X05YU111wTspGxa3DXNOcwju5R4ZLigz0dQimJLNWfEDTyXs9UZ5xI0dn6ml EanZQXvNWcZTF0CA4BPF3xMfUXZJiuVhVYuNBmejFhlNWpd0iRcQ1lZGTdjxS1GD AQs4DoDNJsKAB3Y/kNZWMIbdvNzJJHKBgbvPBbdikTaP+91aQqbSQujs5LUks2a4 Qd+FSX/Zg0vLIrW97R9SrHBHOtdupf0L6f8dT8Tl87Uw6vdoKyKjhtul1jqtim6B hJnUCLXwDxaxNpZVqafh6+SG0VmYJ2f8U5yJd7pUFDE= -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:01 2024 by rpki-client on console-ams.rpki-client.org