$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa File: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (raw, json) Hash identifier: zrLpJ3puwjqb0TyQ3345fDGy5sUbZoMOoVZK2DyjcWo= Subject key identifier: 5B:95:56:D2:83:A5:E4:57:2A:DC:4C:9B:04:25:FC:1A:E5:87:66:C1 Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Certificate serial: 33D5BB328C4D4BA2E08ED971F50AAE709898D9F0 Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa Signing time: Sat 27 Apr 2024 10:00:01 +0000 ROA not before: Sat 27 Apr 2024 09:55:01 +0000 ROA not after: Sat 26 Apr 2025 10:00:01 +0000 asID: 138881 IP address blocks: 103.169.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d5:bb:32:8c:4d:4b:a2:e0:8e:d9:71:f5:0a:ae:70:98:98:d9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Validity Not Before: Apr 27 09:55:01 2024 GMT Not After : Apr 26 10:00:01 2025 GMT Subject: CN=5B9556D283A5E4572ADC4C9B0425FC1AE58766C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cf:99:41:d2:46:56:0b:92:8b:a3:2b:0c:6a: a2:5d:0f:20:48:37:16:73:b6:97:67:66:5d:aa:89: 2e:e9:54:c0:da:89:59:b1:59:6d:2d:ea:7e:dc:99: 91:24:a9:e5:5c:ed:2d:b5:18:9e:02:c2:7c:08:5f: 28:db:88:4e:64:52:ed:aa:18:69:b6:4a:6d:dc:05: a8:3b:bf:5e:f2:10:0d:46:13:84:c3:fd:06:16:34: a9:e6:96:18:3d:29:51:46:04:bc:fc:4e:f6:1d:69: b8:18:59:e0:c1:5f:59:1c:36:64:a2:eb:08:6a:19: b9:59:cf:77:90:19:22:ba:ef:64:4a:64:73:ef:fa: e6:0e:ee:ca:cf:fe:7a:92:a0:7e:59:2c:c2:31:e6: 60:cd:e7:36:c6:14:ef:a4:50:e8:f9:9b:ce:a9:25: c9:17:91:47:bd:44:dc:4a:9e:f2:ed:bb:79:90:04: d1:d8:70:80:40:ff:40:86:44:d1:27:b3:b5:74:b5: 9c:f2:b8:bb:c5:39:ab:f4:86:60:55:45:20:89:c9: d1:89:2a:b8:24:1f:15:03:1d:84:1d:0c:11:1f:a7: 9b:03:50:04:21:07:6b:73:7d:8f:03:a1:63:82:03: 54:37:ad:d2:c5:b9:04:41:e4:32:da:d3:54:e0:ba: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:95:56:D2:83:A5:E4:57:2A:DC:4C:9B:04:25:FC:1A:E5:87:66:C1 X509v3 Authority Key Identifier: keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.238.0/24 Signature Algorithm: sha256WithRSAEncryption 05:e1:99:6f:5a:3b:ba:a8:61:e0:5f:1e:7f:30:50:3a:43:b7: 43:93:43:05:7b:12:15:26:a2:f6:6a:ba:9f:cb:1a:0b:2e:f6: db:e3:b1:1d:b4:14:10:45:ca:83:8e:da:0c:63:cb:6a:9e:3f: 77:d6:6e:fc:9b:5a:33:97:8b:31:20:06:58:5c:68:59:fa:22: 45:a4:88:e5:9e:e8:54:52:5f:e6:26:35:f9:38:51:91:17:5c: dd:11:b1:c9:99:7c:42:ae:36:a0:eb:26:ba:5a:6e:82:8c:9d: ff:88:89:12:a5:ab:2e:3f:7e:69:b4:88:06:83:79:bc:56:82: 74:a8:1d:ae:ab:7a:40:b1:b3:a6:0c:03:31:11:1e:1f:32:6f: 0c:f3:98:aa:74:91:f3:f2:96:54:43:8c:0e:6d:dd:31:e1:2e: 36:ee:3f:4e:df:60:e3:bd:d6:82:fe:c9:25:af:2a:7c:6a:da: 1d:fe:e0:67:87:dd:75:f5:d1:61:45:dc:55:71:1a:27:03:be: 4a:35:1d:fb:2b:7e:21:05:31:bc:f8:b2:71:02:48:4c:74:b5: c8:3d:5e:4f:29:2a:e5:89:51:37:32:73:ba:41:16:35:e2:fe: d7:0e:ae:80:aa:69:49:ca:bd:5d:e7:09:72:2e:9f:bc:c9:87: 0d:f2:6c:d1 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUM9W7MoxNS6Lgjtlx9QqucJiY2fAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2 RTNENzNCODAeFw0yNDA0MjcwOTU1MDFaFw0yNTA0MjYxMDAwMDFaMDMxMTAvBgNV BAMTKDVCOTU1NkQyODNBNUU0NTcyQURDNEM5QjA0MjVGQzFBRTU4NzY2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDez5lB0kZWC5KLoysMaqJdDyBI NxZztpdnZl2qiS7pVMDaiVmxWW0t6n7cmZEkqeVc7S21GJ4CwnwIXyjbiE5kUu2q GGm2Sm3cBag7v17yEA1GE4TD/QYWNKnmlhg9KVFGBLz8TvYdabgYWeDBX1kcNmSi 6whqGblZz3eQGSK672RKZHPv+uYO7srP/nqSoH5ZLMIx5mDN5zbGFO+kUOj5m86p JckXkUe9RNxKnvLtu3mQBNHYcIBA/0CGRNEns7V0tZzyuLvFOav0hmBVRSCJydGJ KrgkHxUDHYQdDBEfp5sDUAQhB2tzfY8DoWOCA1Q3rdLFuQRB5DLa01Tguq25AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUW5VW0oOl5Fcq3EybBCX8GuWHZsEwHwYDVR0j BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE NzNCOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxMWNhNjIwLWRhY2UtNGE5Zi1i OGU4LWEzYTJlNTgxNTAwZS8wLzMxMzAzMzJlMzEzNjM5MmUzMjMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqe4wDQYJ KoZIhvcNAQELBQADggEBAAXhmW9aO7qoYeBfHn8wUDpDt0OTQwV7EhUmovZqup/L Ggsu9tvjsR20FBBFyoOO2gxjy2qeP3fWbvybWjOXizEgBlhcaFn6IkWkiOWe6FRS X+YmNfk4UZEXXN0RscmZfEKuNqDrJrpaboKMnf+IiRKlqy4/fmm0iAaDebxWgnSo Ha6rekCxs6YMAzERHh8ybwzzmKp0kfPyllRDjA5t3THhLjbuP07fYOO91oL+ySWv Knxq2h3+4GeH3XX10WFF3FVxGicDvko1HfsrfiEFMbz4snECSEx0tcg9Xk8pKuWJ UTcyc7pBFjXi/tcOroCqaUnKvV3nCXIun7zJhw3ybNE= -----END CERTIFICATE-----Generated at Mon May 6 10:23:56 2024 by rpki-client on console-ams.rpki-client.org