$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa File: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (raw, json) Hash identifier: /h2ooj97okLRbG64oxpX50CMxq6SPep2HGeG0logDLo= Subject key identifier: 55:C3:FA:E7:C2:BC:2D:15:EE:11:5A:64:96:3D:53:8A:80:AC:A3:AC Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 191917C876CCF9D490841B09740BC56B50478564 Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa Signing time: Mon 31 Jul 2023 00:02:21 +0000 ROA not before: Sun 30 Jul 2023 23:57:21 +0000 ROA not after: Mon 29 Jul 2024 00:02:21 +0000 asID: 139440 IP address blocks: 103.145.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 12:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:19:17:c8:76:cc:f9:d4:90:84:1b:09:74:0b:c5:6b:50:47:85:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Jul 30 23:57:21 2023 GMT Not After : Jul 29 00:02:21 2024 GMT Subject: CN=55C3FAE7C2BC2D15EE115A64963D538A80ACA3AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d6:78:1f:f8:98:28:e8:9c:8c:75:00:35:5a: 97:4d:94:cc:3d:d7:7e:0d:b6:cd:5c:a2:fa:77:f5: 7d:09:35:48:e0:86:57:10:71:c2:cf:72:e7:85:2f: 1c:ea:fa:ff:a5:c8:38:04:d6:79:f3:2a:eb:a9:a4: de:cf:41:d0:c0:cc:73:8d:92:8e:7b:72:2b:48:69: 72:46:4e:9a:9e:50:7c:bb:2d:f2:b4:67:bc:b3:50: d7:1b:38:71:3f:a5:ab:0f:f6:53:1b:7e:74:8f:02: ef:ff:91:06:5d:b1:a5:89:ba:e0:ef:9c:9a:94:9a: 88:a2:c2:f8:bb:db:b6:c2:cc:f3:3c:2a:ae:8c:93: 0a:c3:f1:48:fb:ed:85:f5:5b:2f:98:2b:37:91:c8: d4:e6:14:7d:c7:89:86:05:a5:d2:ca:d9:e6:ad:95: 9e:dd:47:17:27:fe:ca:df:9a:86:0c:1a:01:dc:3b: 34:8f:61:a0:43:c9:36:48:b7:91:92:ff:0c:1d:e7: ef:f8:8a:0a:52:dd:e9:47:0e:a9:fd:bc:f6:4a:af: 19:2f:aa:f9:d1:86:39:2b:08:30:52:44:1d:ad:11: a3:15:db:11:8f:31:9a:72:89:5f:7b:a9:f5:c8:cb: 91:d7:e6:7e:ba:5e:d6:be:3f:6c:7b:65:d0:b9:95: ec:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C3:FA:E7:C2:BC:2D:15:EE:11:5A:64:96:3D:53:8A:80:AC:A3:AC X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.66.0/23 Signature Algorithm: sha256WithRSAEncryption 69:e3:78:77:8f:96:2d:d0:d9:28:aa:5b:5a:ac:9c:22:d0:ad: f6:9c:eb:4c:4d:3d:2e:db:96:c6:91:c4:3e:2d:e7:b8:ce:40: 8f:cc:1c:2f:6e:a0:88:2c:20:65:21:d8:f3:2d:ed:ff:88:bd: 2a:7f:ea:e0:ee:b8:5b:58:69:82:c2:7b:bb:bf:2c:5e:fb:3a: 00:94:fa:9c:df:8a:42:b8:34:2a:13:7b:a1:4a:43:7f:82:8b: ed:66:aa:66:2b:da:5e:5b:ab:1f:05:83:de:29:92:9e:3d:95: 63:d8:6f:f2:af:ec:a9:56:79:57:24:b7:ea:69:0d:99:60:30: 99:ce:8a:20:bc:7e:f1:b7:67:ad:80:0a:d0:3c:14:3e:ba:d1: 73:06:e7:91:68:ce:f2:7e:a8:e0:39:a1:6f:17:29:ed:5c:48: 17:58:07:02:6c:54:b8:85:e2:d8:aa:42:36:f2:d1:08:49:04: f3:b7:61:86:7a:a7:e9:34:d7:46:19:c3:c3:f8:41:b4:a9:db: 83:6c:4c:d7:cb:5f:3e:2a:98:1a:b0:df:59:cf:db:92:b4:e7: 74:2b:dd:e7:6d:e9:13:0a:16:f9:cc:fc:e7:60:6a:2c:2e:3c: 6e:21:88:d0:79:94:d3:d2:12:a1:a2:ee:7d:50:3f:a8:e1:56: 8f:30:5f:cd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGRkXyHbM+dSQhBsJdAvFa1BHhWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yMzA3MzAyMzU3MjFaFw0yNDA3MjkwMDAyMjFaMDMxMTAvBgNV BAMTKDU1QzNGQUU3QzJCQzJEMTVFRTExNUE2NDk2M0Q1MzhBODBBQ0EzQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt1ngf+Jgo6JyMdQA1WpdNlMw9 134Nts1covp39X0JNUjghlcQccLPcueFLxzq+v+lyDgE1nnzKuuppN7PQdDAzHON ko57citIaXJGTpqeUHy7LfK0Z7yzUNcbOHE/pasP9lMbfnSPAu//kQZdsaWJuuDv nJqUmoiiwvi727bCzPM8Kq6MkwrD8Uj77YX1Wy+YKzeRyNTmFH3HiYYFpdLK2eat lZ7dRxcn/srfmoYMGgHcOzSPYaBDyTZIt5GS/wwd5+/4igpS3elHDqn9vPZKrxkv qvnRhjkrCDBSRB2tEaMV2xGPMZpyiV97qfXIy5HX5n66Xta+P2x7ZdC5lezbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVcP658K8LRXuEVpklj1TioCso6wwHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMTkxMWI5LTFkMmYtNGJiNC05 ZDc1LTlhYTNjMzUxMDBlOC8wLzMxMzAzMzJlMzEzNDM1MmUzNjM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5FCMA0GCSqG SIb3DQEBCwUAA4IBAQBp43h3j5Yt0NkoqltarJwi0K32nOtMTT0u25bGkcQ+Lee4 zkCPzBwvbqCILCBlIdjzLe3/iL0qf+rg7rhbWGmCwnu7vyxe+zoAlPqc34pCuDQq E3uhSkN/govtZqpmK9peW6sfBYPeKZKePZVj2G/yr+ypVnlXJLfqaQ2ZYDCZzoog vH7xt2etgArQPBQ+utFzBueRaM7yfqjgOaFvFyntXEgXWAcCbFS4heLYqkI28tEI SQTzt2GGeqfpNNdGGcPD+EG0qduDbEzXy18+KpgasN9Zz9uStOd0K93nbekTChb5 zPznYGosLjxuIYjQeZTT0hKhou59UD+o4VaPMF/N -----END CERTIFICATE-----Generated at Fri Jun 21 07:24:10 2024 by rpki-client on console-fra.rpki-client.org