$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa File: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (raw, json) Hash identifier: 78+7C8GIR1MWiri1t/fGp/Nyk0MxHGW8JI8NqcCmhnU= Subject key identifier: CB:53:A4:16:62:36:11:D8:0A:08:EE:DB:56:14:DC:EF:04:48:BA:D5 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 1C4F21ACFFF512E0F6C6FD18E2DF3D4DCA1736C7 Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa Signing time: Thu 21 Sep 2023 09:00:00 +0000 ROA not before: Thu 21 Sep 2023 08:55:00 +0000 ROA not after: Thu 19 Sep 2024 09:00:00 +0000 asID: 140028 IP address blocks: 103.146.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4f:21:ac:ff:f5:12:e0:f6:c6:fd:18:e2:df:3d:4d:ca:17:36:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Sep 21 08:55:00 2023 GMT Not After : Sep 19 09:00:00 2024 GMT Subject: CN=CB53A416623611D80A08EEDB5614DCEF0448BAD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:41:9b:e5:87:e9:a5:99:40:a7:7e:66:43: 28:54:f5:ff:9c:23:24:66:b8:67:69:48:97:8a:35: 73:e5:ab:ba:c8:b6:8c:3c:82:35:92:0b:95:1d:ac: c1:9c:e0:3e:46:53:09:62:b0:39:87:96:db:94:83: 95:45:89:49:5a:98:fc:c9:94:e9:64:43:30:60:7c: d2:58:f1:50:07:5f:2b:9f:f2:db:29:6f:f8:fc:ee: 38:db:c9:8f:f9:97:94:c9:9f:aa:c9:67:cf:ff:8b: e3:6d:b3:1c:25:56:82:7e:70:92:ba:3f:58:d6:2e: 97:fb:ae:ce:8a:f2:6e:2b:ad:37:8f:b9:a5:7a:87: cc:9b:dd:a2:c3:17:84:ec:44:29:13:5f:74:73:be: fc:b9:97:1b:b7:ac:5e:47:66:37:77:34:78:59:8e: 44:d0:13:e2:8c:9e:78:e3:f7:44:4e:48:c7:3c:c6: 0d:c1:57:25:39:86:fa:f8:54:74:97:f6:de:1b:60: a4:60:60:94:70:bf:86:f0:09:52:81:e3:c8:e6:98: 20:b1:3e:55:a7:1a:4b:15:eb:49:2b:1f:f3:c6:5a: b5:5d:6f:4d:b1:ce:43:f5:a5:a8:04:4c:04:f1:d0: 58:d8:27:7e:ae:83:b3:e1:65:e4:97:27:9b:eb:ec: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:53:A4:16:62:36:11:D8:0A:08:EE:DB:56:14:DC:EF:04:48:BA:D5 X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.128.0/24 Signature Algorithm: sha256WithRSAEncryption 74:66:90:d7:88:23:51:cd:31:fb:8f:16:ae:ac:6a:52:76:54: 9f:24:5f:af:f5:31:ff:fb:f2:b0:87:3b:2f:8b:6a:3a:dd:85: c4:fd:7b:dd:82:f8:37:3d:87:f6:4b:15:c8:0e:ba:a0:28:02: 2e:19:a2:1d:e3:5d:3b:eb:a8:67:8e:76:f6:51:36:73:fa:49: e8:0b:00:5b:32:f5:16:df:71:18:f2:c2:5d:09:83:a1:bc:b3: 43:49:a9:6e:13:a5:f9:ca:76:84:79:b8:31:33:00:82:ec:d7: da:38:c2:9d:34:4a:8d:46:8d:d3:2f:cc:25:d5:cb:59:8e:d6: aa:71:df:45:e8:14:65:2a:73:c2:5e:83:ba:8a:9b:15:c0:de: 23:21:99:13:21:bd:1e:04:59:f2:fe:62:cb:b4:69:c6:5f:f8: a0:26:1b:17:74:15:43:6d:21:a3:b2:8f:f2:f5:a7:7f:db:48: 26:dc:2f:f9:75:d3:7a:53:b7:30:91:80:24:db:18:e6:5d:b3: 90:05:82:50:ec:a3:57:04:2a:78:e2:7d:93:8e:84:9c:d0:11: 7b:1c:60:e3:79:38:31:6a:9c:bc:2a:92:06:f7:77:f0:b3:53: fe:33:b2:34:8b:b6:af:ef:04:04:84:fa:dd:ff:a7:3c:c5:3e: a2:fa:2a:c7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHE8hrP/1EuD2xv0Y4t89TcoXNscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yMzA5MjEwODU1MDBaFw0yNDA5MTkwOTAwMDBaMDMxMTAvBgNV BAMTKENCNTNBNDE2NjIzNjExRDgwQTA4RUVEQjU2MTREQ0VGMDQ0OEJBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhUGb5YfppZlAp35mQyhU9f+c IyRmuGdpSJeKNXPlq7rItow8gjWSC5UdrMGc4D5GUwlisDmHltuUg5VFiUlamPzJ lOlkQzBgfNJY8VAHXyuf8tspb/j87jjbyY/5l5TJn6rJZ8//i+NtsxwlVoJ+cJK6 P1jWLpf7rs6K8m4rrTePuaV6h8yb3aLDF4TsRCkTX3Rzvvy5lxu3rF5HZjd3NHhZ jkTQE+KMnnjj90ROSMc8xg3BVyU5hvr4VHSX9t4bYKRgYJRwv4bwCVKB48jmmCCx PlWnGksV60krH/PGWrVdb02xzkP1pagETATx0FjYJ36ug7PhZeSXJ5vr7It7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUy1OkFmI2EdgKCO7bVhTc7wRIutUwHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0MmFhMGE5LTQ1ODgtNGY4Ny1h Yjg5LWYzYjlkYzYxMDdiNi8wLzMxMzAzMzJlMzEzNDM2MmUzMTMyMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMyMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkoAwDQYJ KoZIhvcNAQELBQADggEBAHRmkNeII1HNMfuPFq6salJ2VJ8kX6/1Mf/78rCHOy+L ajrdhcT9e92C+Dc9h/ZLFcgOuqAoAi4Zoh3jXTvrqGeOdvZRNnP6SegLAFsy9Rbf cRjywl0Jg6G8s0NJqW4TpfnKdoR5uDEzAILs19o4wp00So1GjdMvzCXVy1mO1qpx 30XoFGUqc8Jeg7qKmxXA3iMhmRMhvR4EWfL+Ysu0acZf+KAmGxd0FUNtIaOyj/L1 p3/bSCbcL/l103pTtzCRgCTbGOZds5AFglDso1cEKnjifZOOhJzQEXscYON5ODFq nLwqkgb3d/CzU/4zsjSLtq/vBASE+t3/pzzFPqL6Ksc= -----END CERTIFICATE-----Generated at Sat Jun 1 15:52:57 2024 by rpki-client on console-ams.rpki-client.org