$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa File: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (raw, json) Hash identifier: sJlpSAXpnAOAavNq3mzp6a49Bmd3VaX73BDvee/Ceuc= Subject key identifier: D1:22:98:55:DA:9B:EF:D2:28:DA:A1:F9:74:2C:48:31:79:01:8C:2A Certificate issuer: /CN=C00163880F235714759920507217F2A7D557C953 Certificate serial: 2E7611A61DE72762A9221F128D63E5319237266E Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa Signing time: Sat 20 Jan 2024 17:10:07 +0000 ROA not before: Sat 20 Jan 2024 17:05:07 +0000 ROA not after: Sat 18 Jan 2025 17:10:07 +0000 asID: 149746 IP address blocks: 103.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:76:11:a6:1d:e7:27:62:a9:22:1f:12:8d:63:e5:31:92:37:26:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00163880F235714759920507217F2A7D557C953 Validity Not Before: Jan 20 17:05:07 2024 GMT Not After : Jan 18 17:10:07 2025 GMT Subject: CN=D1229855DA9BEFD228DAA1F9742C483179018C2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:c3:6d:9c:23:9a:01:8d:d5:94:b3:98:bd: d8:08:38:16:60:63:2d:e8:9d:00:73:f3:4e:37:e3: b1:51:50:52:c1:6d:96:1b:76:e3:fd:07:8a:96:d5: 7d:0b:70:b1:cb:66:f7:76:37:e3:c7:6d:89:39:25: b0:0d:f1:12:e9:7b:ce:92:6a:75:f1:99:6e:3a:5c: 27:da:dc:45:0d:f2:f5:75:dc:57:a6:07:f1:1d:e3: da:7c:0c:e4:fc:79:15:99:f3:e4:74:5a:ae:e2:4b: c8:0d:5e:11:57:6d:69:c4:a6:2d:94:35:a7:f8:bf: 32:50:ec:02:42:d7:78:c7:b1:32:04:8d:06:9b:07: da:5c:92:44:ed:b3:dc:e0:c8:75:8f:2c:77:70:b6: ff:dc:f4:e6:57:8c:d7:5a:c3:99:8f:ec:bc:8b:1f: 2a:c7:26:c2:df:24:bd:82:d9:0e:9b:60:19:d5:d7: 6c:b9:fd:65:cc:32:4b:06:2f:9e:29:ac:3b:2d:3f: 7f:86:76:27:8e:11:29:42:e1:94:d1:b0:3c:b0:b0: 52:47:5d:7c:08:10:6f:58:37:b9:6e:72:b7:59:58: 2c:bc:af:c8:d8:75:c6:ee:87:35:b6:c8:54:0c:17: ee:a3:ef:7a:eb:5c:d2:18:75:49:c1:6b:36:fd:18: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:22:98:55:DA:9B:EF:D2:28:DA:A1:F9:74:2C:48:31:79:01:8C:2A X509v3 Authority Key Identifier: keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.242.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:f2:5e:91:3f:2b:d8:6e:6f:37:54:eb:f5:4c:3c:76:15:f0: bc:74:10:d0:f6:01:ea:91:55:ee:4a:1e:25:09:c0:35:12:7b: ba:59:c0:08:76:cd:a1:ae:84:0c:8c:38:32:ee:13:9f:9e:4a: 38:6d:0b:e8:8c:42:22:fd:19:00:29:e8:e3:d2:f6:0c:ee:12: 3a:b5:b5:f7:93:fb:70:33:81:dd:71:f9:e6:22:1f:7b:4a:02: f7:fc:eb:38:dd:53:7c:c4:5f:6c:94:cc:31:8b:c8:60:8d:9b: 98:9e:40:e5:83:30:71:17:ca:19:c6:9a:95:3f:97:46:c4:9f: d9:7b:f9:c1:0d:ec:33:36:8d:09:2e:8a:5c:f6:3b:5e:40:de: fa:25:8f:a5:b0:5b:2c:84:71:8c:5a:ac:0b:25:b5:c9:2e:b2: 16:8c:0d:a5:22:64:a2:c1:9b:80:cc:68:10:81:ad:c4:4a:04: 6f:b9:30:af:03:86:f6:e4:f4:d7:d2:67:74:04:27:e0:95:47: 04:e5:1d:5a:2f:b1:1c:ac:e4:83:dc:be:bf:ac:36:40:a0:f6: fe:94:ea:1f:48:7f:72:17:12:d6:25:1f:b6:3f:5f:af:0e:12: b2:c7:a6:c4:71:d0:99:92:bf:be:f3:41:e8:e7:ea:7a:6c:61: 11:8d:a9:d1 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULnYRph3nJ2KpIh8SjWPlMZI3Jm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE NTU3Qzk1MzAeFw0yNDAxMjAxNzA1MDdaFw0yNTAxMTgxNzEwMDdaMDMxMTAvBgNV BAMTKEQxMjI5ODU1REE5QkVGRDIyOERBQTFGOTc0MkM0ODMxNzkwMThDMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqK8NtnCOaAY3VlLOYvdgIOBZg Yy3onQBz804347FRUFLBbZYbduP9B4qW1X0LcLHLZvd2N+PHbYk5JbAN8RLpe86S anXxmW46XCfa3EUN8vV13FemB/Ed49p8DOT8eRWZ8+R0Wq7iS8gNXhFXbWnEpi2U Naf4vzJQ7AJC13jHsTIEjQabB9pckkTts9zgyHWPLHdwtv/c9OZXjNdaw5mP7LyL HyrHJsLfJL2C2Q6bYBnV12y5/WXMMksGL54prDstP3+GdieOESlC4ZTRsDywsFJH XXwIEG9YN7lucrdZWCy8r8jYdcbuhzW2yFQMF+6j73rrXNIYdUnBazb9GISLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU0SKYVdqb79Io2qH5dCxIMXkBjCowHwYDVR0j BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3 Qzk1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04 MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzAzMzJlMzIzNTM1MmUzMjM0MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn//IwDQYJ KoZIhvcNAQELBQADggEBADzyXpE/K9hubzdU6/VMPHYV8Lx0END2AeqRVe5KHiUJ wDUSe7pZwAh2zaGuhAyMODLuE5+eSjhtC+iMQiL9GQAp6OPS9gzuEjq1tfeT+3Az gd1x+eYiH3tKAvf86zjdU3zEX2yUzDGLyGCNm5ieQOWDMHEXyhnGmpU/l0bEn9l7 +cEN7DM2jQkuilz2O15A3volj6WwWyyEcYxarAsltckushaMDaUiZKLBm4DMaBCB rcRKBG+5MK8Dhvbk9NfSZ3QEJ+CVRwTlHVovsRys5IPcvr+sNkCg9v6U6h9If3IX EtYlH7Y/X68OErLHpsRx0JmSv77zQejn6npsYRGNqdE= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:29 2024 by rpki-client on console-fra.rpki-client.org