$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa File: 3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (raw, json) Hash identifier: +gs5+Nx7qs8vwV/D6rimxcGP7Tpiqwuj+1TERrenHqo= Subject key identifier: C3:02:57:06:55:60:2B:85:B4:C4:19:94:CE:5A:58:91:AB:B1:34:63 Certificate issuer: /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Certificate serial: 5E128E64D50DDDDA13F411BE74CA679DB2168641 Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa Signing time: Mon 31 Jul 2023 00:08:29 +0000 ROA not before: Mon 31 Jul 2023 00:03:29 +0000 ROA not after: Mon 29 Jul 2024 00:08:29 +0000 asID: 17538 IP address blocks: 103.151.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:12:8e:64:d5:0d:dd:da:13:f4:11:be:74:ca:67:9d:b2:16:86:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Validity Not Before: Jul 31 00:03:29 2023 GMT Not After : Jul 29 00:08:29 2024 GMT Subject: CN=C302570655602B85B4C41994CE5A5891ABB13463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:74:42:94:0f:8f:dc:08:26:60:1d:63:b2: d2:af:b0:6c:56:db:cc:5c:d7:27:66:84:e0:b0:71: 93:06:40:f5:52:5b:96:99:c8:1d:fd:20:ef:56:c9: db:4e:9f:46:b6:40:9a:a0:83:ce:f6:cd:1b:bc:9c: b5:d9:f1:0d:14:3d:8a:34:e6:f3:94:91:f1:45:90: cf:e2:e3:1c:15:47:51:ac:0a:e8:8d:25:e9:97:6b: e1:a4:8a:54:7b:5c:76:73:31:12:41:a1:b0:92:82: bf:5d:cc:95:45:9e:53:64:f7:6e:d2:5c:38:1e:4f: cb:f9:bd:a1:ed:f4:40:df:8b:c1:0e:69:02:89:22: 79:90:cf:e5:1f:b2:66:57:ff:a0:e9:0b:d3:26:f7: 3e:85:a3:cc:61:9f:85:a6:5c:0f:2e:d4:20:88:80: 17:07:44:49:35:42:94:26:80:00:2b:3b:91:60:11: e7:ef:da:68:a4:ee:7b:2b:86:7f:69:b5:23:b3:ae: ce:ef:2f:4d:3c:08:78:5a:78:46:d3:af:cd:84:f4: ce:8d:af:62:b0:fe:e3:c6:3b:9b:e9:b4:48:b8:5f: 02:19:cf:76:15:35:17:c8:2b:a9:f3:06:5d:84:bf: 11:1d:14:5a:41:0d:42:50:5e:1e:26:29:29:87:e7: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:02:57:06:55:60:2B:85:B4:C4:19:94:CE:5A:58:91:AB:B1:34:63 X509v3 Authority Key Identifier: keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.94.0/24 Signature Algorithm: sha256WithRSAEncryption 86:83:81:9a:1d:27:1c:65:f5:df:c5:d6:e8:72:3b:12:3e:5c: ea:06:de:61:95:03:89:a0:17:ec:89:5a:2f:ff:b2:31:15:3d: 20:80:51:33:5b:f9:ff:b3:84:d8:ed:c2:dd:c0:65:2e:43:d7: e7:5d:2c:a0:53:b9:39:3c:7f:40:3e:a9:bb:c4:ce:b8:8d:4d: 1e:82:6f:64:6e:6e:10:0d:d4:ab:42:69:7b:37:66:ce:82:96: f3:3a:f9:d9:ab:19:c9:99:df:10:bf:bf:8b:77:be:fd:2c:fc: b6:bb:00:62:7e:7b:ae:da:0a:32:e3:b0:99:25:0f:8e:7f:74: cd:50:e3:a3:5a:24:57:90:08:0e:c3:5f:25:ca:15:20:3c:3c: 62:72:80:44:7f:68:b0:25:67:2e:f9:6d:0f:e1:43:09:0f:dc: f5:2b:53:04:cc:d5:9a:8d:ec:d4:e3:56:15:1b:f5:12:2d:c1: f9:b2:85:97:3b:2b:2f:2f:3e:31:ed:61:e2:1f:cd:94:49:3f: 46:cc:9e:40:26:67:df:c7:00:01:8f:8d:e9:11:01:a8:c4:64: 40:d1:b9:e1:0d:0c:2f:ad:1b:b2:de:cc:40:ff:4f:ad:ab:37: 24:17:72:65:19:d1:68:7d:6a:79:f8:53:3e:e7:47:60:6c:58: 91:bd:e2:82 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXhKOZNUN3doT9BG+dMpnnbIWhkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYz OTRCQThFOTAeFw0yMzA3MzEwMDAzMjlaFw0yNDA3MjkwMDA4MjlaMDMxMTAvBgNV BAMTKEMzMDI1NzA2NTU2MDJCODVCNEM0MTk5NENFNUE1ODkxQUJCMTM0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+nRClA+P3AgmYB1jstKvsGxW 28xc1ydmhOCwcZMGQPVSW5aZyB39IO9WydtOn0a2QJqgg872zRu8nLXZ8Q0UPYo0 5vOUkfFFkM/i4xwVR1GsCuiNJemXa+GkilR7XHZzMRJBobCSgr9dzJVFnlNk927S XDgeT8v5vaHt9EDfi8EOaQKJInmQz+UfsmZX/6DpC9Mm9z6Fo8xhn4WmXA8u1CCI gBcHREk1QpQmgAArO5FgEefv2mik7nsrhn9ptSOzrs7vL008CHhaeEbTr82E9M6N r2Kw/uPGO5vptEi4XwIZz3YVNRfIK6nzBl2EvxEdFFpBDUJQXh4mKSmH544ZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwwJXBlVgK4W0xBmUzlpYkauxNGMwHwYDVR0j BBgwFoAUanX5XqEcP5hMXGEP6SIgJjlLqOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTQzMzkzNC0zODQ0LTQ2NTMtOGZhYy0xODU4YjI4MjNkMWMvMC82QTc1Rjk1RUEx MUMzRjk4NEM1QzYxMEZFOTIyMjAyNjM5NEJBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE3NUY5NUVBMTFDM0Y5ODRDNUM2MTBGRTkyMjIwMjYzOTRC QThFOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhNDMzOTM0LTM4NDQtNDY1My04 ZmFjLTE4NThiMjgyM2QxYy8wLzMxMzAzMzJlMzEzNTMxMmUzOTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeXXjANBgkqhkiG 9w0BAQsFAAOCAQEAhoOBmh0nHGX138XW6HI7Ej5c6gbeYZUDiaAX7IlaL/+yMRU9 IIBRM1v5/7OE2O3C3cBlLkPX510soFO5OTx/QD6pu8TOuI1NHoJvZG5uEA3Uq0Jp ezdmzoKW8zr52asZyZnfEL+/i3e+/Sz8trsAYn57rtoKMuOwmSUPjn90zVDjo1ok V5AIDsNfJcoVIDw8YnKARH9osCVnLvltD+FDCQ/c9StTBMzVmo3s1ONWFRv1Ei3B +bKFlzsrLy8+Me1h4h/NlEk/RsyeQCZn38cAAY+N6REBqMRkQNG54Q0ML60bst7M QP9Pras3JBdyZRnRaH1qefhTPudHYGxYkb3igg== -----END CERTIFICATE-----Generated at Sun May 5 23:29:27 2024 by rpki-client on console-ams.rpki-client.org