$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa File: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (raw, json) Hash identifier: 0+AKGvkqe3yPdpTOBe1yYju8yoZN5zcfBbZcccA3J7o= Subject key identifier: 9A:31:75:A8:EC:25:19:A9:0B:B2:AA:BF:EA:3D:6E:F4:A2:F6:F5:97 Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB Certificate serial: 7725AF1CA922B76965AFC7B6814C9417B0F891B2 Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa Signing time: Sat 23 Mar 2024 04:00:02 +0000 ROA not before: Sat 23 Mar 2024 03:55:02 +0000 ROA not after: Sat 22 Mar 2025 04:00:02 +0000 asID: 64315 IP address blocks: 103.119.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:25:af:1c:a9:22:b7:69:65:af:c7:b6:81:4c:94:17:b0:f8:91:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB Validity Not Before: Mar 23 03:55:02 2024 GMT Not After : Mar 22 04:00:02 2025 GMT Subject: CN=9A3175A8EC2519A90BB2AABFEA3D6EF4A2F6F597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:0c:d3:58:b4:c3:12:ef:88:70:ea:88:51: 8e:5e:fe:69:2d:83:6d:1d:cc:16:37:97:83:7c:ee: d9:37:c4:3c:98:19:82:8f:87:e3:5c:27:cc:21:0f: 22:ae:05:66:63:bf:a5:c8:2d:66:11:b3:c5:37:e6: 53:45:eb:33:77:1a:2a:b5:ec:66:95:11:30:59:80: 2e:12:e9:de:6b:e7:14:45:6f:4f:94:99:18:2a:26: 98:b6:5f:5e:12:31:33:a3:c2:2d:5f:11:b0:a5:2d: a3:e2:e1:3c:5a:89:6a:89:fa:25:1e:ad:42:f4:38: 48:e1:d1:a0:49:a6:75:b0:3a:92:cb:66:73:33:2d: 89:cc:b0:5c:63:09:a7:ac:cc:45:5b:cc:24:2a:74: a8:89:81:dd:b0:e9:94:93:63:f7:91:18:9e:4f:e2: 5d:3d:32:28:ff:83:ef:47:0d:09:13:68:2f:f4:aa: 3e:a4:18:56:c8:6a:88:b9:8d:d2:c3:6a:3d:db:47: ec:d4:45:1a:31:b4:1a:26:0b:f0:ae:32:56:60:96: 7e:9b:95:79:ca:02:51:2b:26:b8:7f:a2:4a:06:d9: 9f:26:2d:57:4b:da:dd:ec:fb:8a:fd:d8:1e:2e:9e: 37:5b:91:7e:f9:50:1d:84:a5:0b:15:99:3f:ee:f5: e1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:31:75:A8:EC:25:19:A9:0B:B2:AA:BF:EA:3D:6E:F4:A2:F6:F5:97 X509v3 Authority Key Identifier: keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.119.231.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:55:42:86:5a:bf:a8:92:d7:45:39:35:01:30:3d:41:f8:4a: 08:d8:1b:94:3b:04:cf:8c:f7:f7:27:ac:48:ca:15:3c:19:df: 4c:83:7d:03:6c:0f:06:c5:92:25:8c:95:b5:91:2f:e6:74:45: 75:47:fb:f6:09:3a:44:74:f0:5d:14:f3:3c:13:d7:c3:b0:51: 57:40:45:47:07:6d:b2:2e:4f:f5:7a:e8:a6:f4:e9:54:85:42: f4:9a:e9:15:6a:8f:0c:b3:e0:20:7f:9f:99:93:69:c8:93:44: ad:07:8a:c1:a0:58:0c:97:07:60:98:2a:24:f2:2f:34:9c:8f: a5:fe:3a:cb:81:9a:42:6a:5b:7e:70:dc:30:d4:68:ac:9f:8f: 28:08:38:cf:42:e6:c4:8b:58:08:31:83:ae:f9:c5:26:b5:30: 1a:b6:ae:d0:72:b9:32:ad:52:67:85:b1:05:24:07:ee:19:82: e2:ad:ab:b5:93:d7:f0:32:72:ba:f4:d9:9a:64:d3:c1:06:c5: e6:26:27:d0:f5:af:e7:d5:18:41:f3:d6:89:9f:09:aa:a7:9c: c3:49:ef:d9:5a:80:62:39:8f:26:10:25:bf:47:b9:ed:63:f6: fa:86:45:77:66:33:b5:87:88:1d:b6:85:f3:2f:6a:82:7b:ee: 7f:23:76:1b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdyWvHKkit2llr8e2gUyUF7D4kbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB NkY2OTBBQjAeFw0yNDAzMjMwMzU1MDJaFw0yNTAzMjIwNDAwMDJaMDMxMTAvBgNV BAMTKDlBMzE3NUE4RUMyNTE5QTkwQkIyQUFCRkVBM0Q2RUY0QTJGNkY1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWwzTWLTDEu+IcOqIUY5e/mkt g20dzBY3l4N87tk3xDyYGYKPh+NcJ8whDyKuBWZjv6XILWYRs8U35lNF6zN3Giq1 7GaVETBZgC4S6d5r5xRFb0+UmRgqJpi2X14SMTOjwi1fEbClLaPi4TxaiWqJ+iUe rUL0OEjh0aBJpnWwOpLLZnMzLYnMsFxjCaeszEVbzCQqdKiJgd2w6ZSTY/eRGJ5P 4l09Mij/g+9HDQkTaC/0qj6kGFbIaoi5jdLDaj3bR+zURRoxtBomC/CuMlZgln6b lXnKAlErJrh/okoG2Z8mLVdL2t3s+4r92B4unjdbkX75UB2EpQsVmT/u9eEVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmjF1qOwlGakLsqq/6j1u9KL29ZcwHwYDVR0j BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2 OTBBQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4ODNlM2JlLTU3ZTItNDEyNS1h MGM1LTlhOWVhNTAxYmYwNS8wLzMxMzAzMzJlMzEzMTM5MmUzMjMzMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjM0MzMzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3fnMA0GCSqG SIb3DQEBCwUAA4IBAQB7VUKGWr+oktdFOTUBMD1B+EoI2BuUOwTPjPf3J6xIyhU8 Gd9Mg30DbA8GxZIljJW1kS/mdEV1R/v2CTpEdPBdFPM8E9fDsFFXQEVHB22yLk/1 euim9OlUhUL0mukVao8Ms+Agf5+Zk2nIk0StB4rBoFgMlwdgmCok8i80nI+l/jrL gZpCalt+cNww1Gisn48oCDjPQubEi1gIMYOu+cUmtTAatq7QcrkyrVJnhbEFJAfu GYLirau1k9fwMnK69NmaZNPBBsXmJifQ9a/n1RhB89aJnwmqp5zDSe/ZWoBiOY8m ECW/R7ntY/b6hkV3ZjO1h4gdtoXzL2qCe+5/I3Yb -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org