$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa File: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: nrlkcOKrmAXnnZG+jpttMgPOV2O+KVOywRlq1beQm1o= Subject key identifier: 52:BB:D7:77:F2:23:D7:1A:1A:68:1D:E6:16:ED:0B:84:1A:37:32:C7 Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Certificate serial: 2377BCF92C0851AF8DB3B907B5176CCE35DA7E2E Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa Signing time: Fri 31 May 2024 01:00:02 +0000 ROA not before: Fri 31 May 2024 00:55:02 +0000 ROA not after: Fri 30 May 2025 01:00:02 +0000 asID: 45305 IP address blocks: 103.190.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:77:bc:f9:2c:08:51:af:8d:b3:b9:07:b5:17:6c:ce:35:da:7e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Validity Not Before: May 31 00:55:02 2024 GMT Not After : May 30 01:00:02 2025 GMT Subject: CN=52BBD777F223D71A1A681DE616ED0B841A3732C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:f2:a1:0c:4f:04:2f:b2:c2:e7:6f:6e:cb: 25:95:32:66:93:59:ae:e8:1f:ff:a8:85:ad:b6:b9: d6:cc:66:c4:96:e0:12:17:29:bb:64:10:6f:3d:20: ba:4d:af:54:31:be:95:75:99:71:f7:d2:92:d7:42: 2f:b3:95:84:b3:52:09:70:66:97:87:fc:8c:62:12: 97:80:c5:5b:f0:86:cf:bf:bf:0f:aa:a5:c0:55:e1: cf:82:77:c9:98:45:3d:55:ab:15:4b:2c:3f:b1:13: a6:23:c1:d0:58:2b:4c:da:f6:55:18:9b:c0:8f:af: 56:17:d6:0b:5b:2c:db:91:3c:23:f8:ec:9c:c2:4a: d3:05:8b:d7:97:6c:3b:d9:d5:69:22:a6:75:a8:6d: fc:f0:29:c0:2a:4f:e2:ba:16:93:46:13:7c:e0:de: ba:26:b4:f1:33:9c:1f:c0:12:62:06:02:28:c5:43: c0:7a:90:80:c8:57:db:1e:5b:a3:3b:12:8e:f7:01: 12:11:7a:79:ca:5d:59:b4:8a:4e:18:30:b5:c6:cb: 07:54:94:7d:80:35:4c:cd:59:72:11:8d:74:e7:a8: e4:3f:46:0a:8f:de:03:f0:14:e6:db:6c:b0:af:ab: 22:f8:37:c9:03:a6:f2:da:26:d9:44:e0:bc:b4:44: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BB:D7:77:F2:23:D7:1A:1A:68:1D:E6:16:ED:0B:84:1A:37:32:C7 X509v3 Authority Key Identifier: keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.114.0/24 Signature Algorithm: sha256WithRSAEncryption 32:03:54:a2:f0:3e:53:77:bc:af:10:a1:a0:0a:30:d2:21:e2: 72:25:c4:27:14:c7:4b:6f:1f:34:02:d5:58:ae:eb:04:a7:f9: 21:35:a7:fd:3e:fd:53:f8:c1:1f:76:bb:04:17:65:74:b3:15: e4:8a:8d:1d:3b:f5:c6:cc:8f:c1:3e:76:fc:ad:71:aa:0e:2f: a8:5f:58:30:63:a6:8f:a2:75:df:b9:a9:ad:28:fd:e4:2c:ae: 9b:14:0e:fc:7a:bc:65:63:30:8e:1e:f3:f9:47:c5:f6:d3:c6: 4d:40:01:6d:50:48:89:d9:39:81:41:cf:3b:a9:33:2e:44:0d: 47:46:e2:92:57:1b:09:11:c2:ff:79:76:72:a1:00:f7:6b:6b: 35:c5:54:63:0b:ca:e9:d3:a4:de:3f:05:22:f4:6a:b4:fd:68: e9:f8:9c:81:c4:94:49:a0:af:02:2d:64:66:50:48:87:6d:2a: 83:96:d7:b3:a5:42:22:bf:36:f0:f0:94:3a:20:05:35:c9:d6: aa:f2:fe:9c:a1:bd:e1:54:ea:14:80:9b:a2:89:d3:56:4d:9a: 54:f4:9f:8e:60:41:21:90:7b:d6:04:63:16:51:57:71:ef:f8: 4a:b3:89:c3:77:ad:d6:7b:51:80:f9:90:3c:72:43:e3:17:74: f4:a5:48:f3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUI3e8+SwIUa+Ns7kHtRdszjXafi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0 MDhCQTkzRDAeFw0yNDA1MzEwMDU1MDJaFw0yNTA1MzAwMTAwMDJaMDMxMTAvBgNV BAMTKDUyQkJENzc3RjIyM0Q3MUExQTY4MURFNjE2RUQwQjg0MUEzNzMyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2PKhDE8EL7LC529uyyWVMmaT Wa7oH/+oha22udbMZsSW4BIXKbtkEG89ILpNr1QxvpV1mXH30pLXQi+zlYSzUglw ZpeH/IxiEpeAxVvwhs+/vw+qpcBV4c+Cd8mYRT1VqxVLLD+xE6YjwdBYK0za9lUY m8CPr1YX1gtbLNuRPCP47JzCStMFi9eXbDvZ1WkipnWobfzwKcAqT+K6FpNGE3zg 3romtPEznB/AEmIGAijFQ8B6kIDIV9seW6M7Eo73ARIRennKXVm0ik4YMLXGywdU lH2ANUzNWXIRjXTnqOQ/RgqP3gPwFObbbLCvqyL4N8kDpvLaJtlE4Ly0ROBLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUrvXd/Ij1xoaaB3mFu0LhBo3MscwHwYDVR0j BBgwFoAUiyN7K8BYG1Vt1bSwhH+cg0CLqT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmIwYmRkNS02ZTMwLTRhMTAtYjk5My03N2Q0ODI1MWYzYTEvMC84QjIzN0IyQkMw NTgxQjU1NkRENUI0QjA4NDdGOUM4MzQwOEJBOTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0MDhC QTkzRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyYjBiZGQ1LTZlMzAtNGExMC1i OTkzLTc3ZDQ4MjUxZjNhMS8wLzMxMzAzMzJlMzEzOTMwMmUzMTMxMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ75yMA0GCSqG SIb3DQEBCwUAA4IBAQAyA1Si8D5Td7yvEKGgCjDSIeJyJcQnFMdLbx80AtVYrusE p/khNaf9Pv1T+MEfdrsEF2V0sxXkio0dO/XGzI/BPnb8rXGqDi+oX1gwY6aPonXf uamtKP3kLK6bFA78erxlYzCOHvP5R8X208ZNQAFtUEiJ2TmBQc87qTMuRA1HRuKS VxsJEcL/eXZyoQD3a2s1xVRjC8rp06TePwUi9Gq0/Wjp+JyBxJRJoK8CLWRmUEiH bSqDltezpUIivzbw8JQ6IAU1ydaq8v6cob3hVOoUgJuiidNWTZpU9J+OYEEhkHvW BGMWUVdx7/hKs4nDd63We1GA+ZA8ckPjF3T0pUjz -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org