$ rpki-client -vvf repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa File: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (raw, json) Hash identifier: lHsO8pPCIlzm+wACLiVWenTFZh6dIKgGdgjBJwTAiMY= Subject key identifier: 01:3A:01:D1:64:9F:E9:55:5F:6A:16:79:68:52:A4:DE:65:47:EF:33 Certificate issuer: /CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Certificate serial: 233CA6F5A71B24CFD06BD1604733F54AE225506B Authority key identifier: A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa Signing time: Fri 31 May 2024 19:00:02 +0000 ROA not before: Fri 31 May 2024 18:55:02 +0000 ROA not after: Fri 30 May 2025 19:00:02 +0000 asID: 142340 IP address blocks: 103.169.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:3c:a6:f5:a7:1b:24:cf:d0:6b:d1:60:47:33:f5:4a:e2:25:50:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Validity Not Before: May 31 18:55:02 2024 GMT Not After : May 30 19:00:02 2025 GMT Subject: CN=013A01D1649FE9555F6A16796852A4DE6547EF33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:02:63:b2:08:eb:52:88:1f:20:7a:a3:3e: 3e:3e:cf:03:9f:08:ed:53:3c:d7:66:5b:ea:c8:42: f1:c9:1a:02:40:41:59:02:14:b3:4e:e7:d8:ea:b1: 1a:b8:fa:22:b0:d2:87:6b:dc:6e:5d:8b:a6:fb:dd: db:f1:08:97:6a:a3:09:9b:9a:20:d0:72:1e:73:40: bf:f2:71:f7:e8:10:bd:75:a2:d9:58:a8:af:ff:f9: 1b:1b:8b:58:b2:be:a1:04:cb:0d:d9:5b:b5:ea:f2: 8d:8a:72:71:a9:bb:f8:bb:81:15:e3:56:07:7d:95: 82:7d:1f:07:0f:e6:01:23:61:4f:e0:84:f0:b5:0d: f2:cf:2f:2a:c8:fe:f6:57:54:5b:0a:33:da:ea:e0: b7:77:58:84:02:f5:be:d4:25:7d:cb:d9:b7:e7:e1: 2d:25:54:fe:89:0d:fd:43:1c:9d:0c:a4:9a:12:e6: 00:9b:f5:56:1c:4e:d4:48:42:bc:fc:62:f5:6f:db: d4:3f:d4:09:06:26:f1:e8:2c:83:60:ef:d3:da:ca: bc:46:9b:f2:07:fa:87:f8:88:55:71:2d:9a:af:79: 04:f7:c3:9e:b9:3c:82:65:c9:02:c2:0d:4a:dc:65: db:9a:65:61:f7:7c:34:b6:44:6c:aa:78:cb:52:ba: 88:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3A:01:D1:64:9F:E9:55:5F:6A:16:79:68:52:A4:DE:65:47:EF:33 X509v3 Authority Key Identifier: keyid:A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.130.0/23 Signature Algorithm: sha256WithRSAEncryption 55:c4:99:ea:e2:0f:e1:bd:76:89:3e:ce:d1:1c:1c:cb:90:b2: 50:a6:26:d1:c8:9c:6f:18:33:e6:96:d4:09:dc:e1:67:43:3f: 03:37:28:d4:c2:4b:81:cc:eb:25:8b:23:1f:85:e9:42:62:30: 9e:b4:c0:ca:b5:40:fd:f2:ca:43:1f:87:af:ba:fc:f0:61:35: c9:1b:6e:6b:57:71:0c:fc:5d:e9:c1:b1:7a:24:1e:4c:f4:81: 6e:cd:ff:96:06:8d:ff:7b:a1:07:11:36:a0:76:28:8b:3f:6c: e1:12:16:f5:2d:ae:ed:34:07:e2:1d:bd:82:59:ec:3b:7f:2b: c4:f3:8d:a4:29:cf:70:d1:c5:50:65:89:fe:5c:52:74:6c:8f: 16:04:41:0c:c4:e0:f9:75:34:55:0f:b3:dd:e8:05:ec:e0:8f: 89:84:c2:27:23:75:ee:f6:1b:67:da:d5:1d:8b:b0:8e:c4:a3: fa:b9:ce:2a:17:73:55:0f:05:49:87:7d:e8:5d:99:dc:0b:3f: 40:39:c9:09:00:19:50:80:fc:a2:e4:ed:03:e7:bf:5e:bb:c2: d4:51:55:42:ff:66:84:33:cf:31:e3:c8:c8:22:7f:c7:fd:85: 54:fb:aa:f8:b6:f9:f3:a8:aa:d8:7a:07:54:ad:f9:b9:65:b3: 38:88:1b:f7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIzym9acbJM/Qa9FgRzP1SuIlUGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0Uw RjE4QTg0QjAeFw0yNDA1MzExODU1MDJaFw0yNTA1MzAxOTAwMDJaMDMxMTAvBgNV BAMTKDAxM0EwMUQxNjQ5RkU5NTU1RjZBMTY3OTY4NTJBNERFNjU0N0VGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPAJjsgjrUogfIHqjPj4+zwOf CO1TPNdmW+rIQvHJGgJAQVkCFLNO59jqsRq4+iKw0odr3G5di6b73dvxCJdqowmb miDQch5zQL/ycffoEL11otlYqK//+Rsbi1iyvqEEyw3ZW7Xq8o2KcnGpu/i7gRXj Vgd9lYJ9HwcP5gEjYU/ghPC1DfLPLyrI/vZXVFsKM9rq4Ld3WIQC9b7UJX3L2bfn 4S0lVP6JDf1DHJ0MpJoS5gCb9VYcTtRIQrz8YvVv29Q/1AkGJvHoLINg79PayrxG m/IH+of4iFVxLZqveQT3w565PIJlyQLCDUrcZduaZWH3fDS2RGyqeMtSuoiRAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUAToB0WSf6VVfahZ5aFKk3mVH7zMwHwYDVR0j BBgwFoAUqcxboeB/lYCqshnefWgbPg8YqEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTNmNjZhOC1hMGZmLTQ0ZmEtYmRhNi04ZTVmMjdkNjFiM2YvMC9BOUNDNUJBMUUw N0Y5NTgwQUFCMjE5REU3RDY4MUIzRTBGMThBODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0UwRjE4 QTg0Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllM2Y2NmE4LWEwZmYtNDRmYS1i ZGE2LThlNWYyN2Q2MWIzZi8wLzMxMzAzMzJlMzEzNjM5MmUzMTMzMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqYIwDQYJ KoZIhvcNAQELBQADggEBAFXEmeriD+G9dok+ztEcHMuQslCmJtHInG8YM+aW1Anc 4WdDPwM3KNTCS4HM6yWLIx+F6UJiMJ60wMq1QP3yykMfh6+6/PBhNckbbmtXcQz8 XenBsXokHkz0gW7N/5YGjf97oQcRNqB2KIs/bOESFvUtru00B+IdvYJZ7Dt/K8Tz jaQpz3DRxVBlif5cUnRsjxYEQQzE4Pl1NFUPs93oBezgj4mEwicjde72G2fa1R2L sI7Eo/q5zioXc1UPBUmHfehdmdwLP0A5yQkAGVCA/KLk7QPnv167wtRRVUL/ZoQz zzHjyMgif8f9hVT7qvi2+fOoqth6B1St+bllsziIG/c= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:24 2024 by rpki-client on console-ams.rpki-client.org