$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa File: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (raw, json) Hash identifier: d01l9OnJ+pfYZdY2fIYyG6SvALJso9LetSCLxyfXlr4= Subject key identifier: 91:9C:8C:63:D5:91:78:9E:D7:B7:D9:F5:4B:D3:6F:50:74:1F:72:60 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 7412F08A5DF76B32324EE7A28271EB4E0813D70A Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa Signing time: Fri 11 Aug 2023 09:00:02 +0000 ROA not before: Fri 11 Aug 2023 08:55:02 +0000 ROA not after: Fri 09 Aug 2024 09:00:02 +0000 asID: 140407 IP address blocks: 103.151.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:12:f0:8a:5d:f7:6b:32:32:4e:e7:a2:82:71:eb:4e:08:13:d7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Aug 11 08:55:02 2023 GMT Not After : Aug 9 09:00:02 2024 GMT Subject: CN=919C8C63D591789ED7B7D9F54BD36F50741F7260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8f:7a:42:b8:65:66:ea:ae:c7:a9:61:97:23: 1c:15:64:28:6b:2d:90:7b:c5:88:e8:2f:55:d8:69: 60:43:62:0a:a2:0f:a3:ce:03:cb:99:0c:88:6a:4d: f8:07:45:f3:06:94:c4:1e:47:09:cf:b2:09:d0:4f: 36:75:75:b4:86:a0:4c:65:d6:8c:a0:0a:8c:6b:71: d6:64:76:93:4f:5f:3b:7e:84:ee:ba:9c:2c:fd:6e: a5:a6:86:b0:34:c5:07:a7:13:eb:c5:39:3d:45:06: 45:6f:ef:fa:22:f1:65:00:22:62:49:69:d2:6d:c9: 83:c2:38:50:37:09:9f:ff:e4:c5:02:99:c8:6c:ab: ea:00:ae:8d:9d:13:72:19:f8:17:cf:d0:e9:67:a8: 5e:14:e5:1d:c1:4d:87:c4:4c:69:d6:c3:af:f1:06: 38:f8:23:7c:18:94:e7:e3:d1:ae:e3:61:dd:d9:46: 40:04:e4:e3:e0:ac:d6:2e:38:9e:14:43:a3:05:50: c0:1e:54:fb:a8:aa:6d:ba:c0:96:6f:92:72:93:ae: d3:fb:e7:c1:34:d0:0e:c7:57:c7:50:85:7d:0a:11: 10:7f:63:c7:ba:53:3e:43:cb:8d:49:95:82:be:ff: 15:9e:01:f6:5d:02:03:01:7a:3c:0d:cb:c6:04:ae: d0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9C:8C:63:D5:91:78:9E:D7:B7:D9:F5:4B:D3:6F:50:74:1F:72:60 X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.32.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:31:21:b3:66:41:f5:27:7b:82:7f:43:c9:1d:06:4a:cc:0f: a7:bc:e6:81:67:5b:57:e7:7d:02:c9:46:ee:f2:99:a3:60:8b: 80:de:e5:c6:d4:c5:e3:4c:74:42:a0:30:24:3d:98:a8:74:96: 7c:cb:7f:a8:a5:b3:31:b4:c7:b6:63:bb:69:16:f7:16:0c:45: df:b5:6e:c4:a6:bf:60:61:44:c7:26:ac:93:c2:53:b7:24:68: 6c:0f:49:fb:27:96:fd:95:cd:58:75:1d:0b:1f:e3:91:d8:ee: 27:e4:f8:d3:8a:62:45:37:a4:d4:b2:f7:dd:a1:48:02:3d:05: 01:9b:e8:f7:a0:86:04:38:61:b5:eb:38:dd:e1:70:29:a7:a6: 60:51:9e:a4:35:72:cd:34:1d:d3:81:f0:bc:a8:3b:dc:3d:12: e6:fa:03:a1:9a:e1:19:df:47:f1:07:ae:ee:63:75:3a:34:56: 57:ae:e2:13:30:65:07:63:be:85:97:99:b2:c4:59:d0:b6:ac: 22:de:70:85:6b:ef:f8:7f:28:ec:d5:a1:f0:72:e6:a7:ca:23: 33:37:08:05:f9:12:c3:1e:7f:02:0b:62:23:74:53:1e:40:ab: 77:95:b9:92:57:e7:56:7b:08:3c:78:19:6f:d2:9e:e4:73:a3: 9b:6b:fb:dc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdBLwil33azIyTueignHrTggT1wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yMzA4MTEwODU1MDJaFw0yNDA4MDkwOTAwMDJaMDMxMTAvBgNV BAMTKDkxOUM4QzYzRDU5MTc4OUVEN0I3RDlGNTRCRDM2RjUwNzQxRjcyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhj3pCuGVm6q7HqWGXIxwVZChr LZB7xYjoL1XYaWBDYgqiD6POA8uZDIhqTfgHRfMGlMQeRwnPsgnQTzZ1dbSGoExl 1oygCoxrcdZkdpNPXzt+hO66nCz9bqWmhrA0xQenE+vFOT1FBkVv7/oi8WUAImJJ adJtyYPCOFA3CZ//5MUCmchsq+oAro2dE3IZ+BfP0OlnqF4U5R3BTYfETGnWw6/x Bjj4I3wYlOfj0a7jYd3ZRkAE5OPgrNYuOJ4UQ6MFUMAeVPuoqm26wJZvknKTrtP7 58E00A7HV8dQhX0KERB/Y8e6Uz5Dy41JlYK+/xWeAfZdAgMBejwNy8YErtArAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkZyMY9WReJ7Xt9n1S9NvUHQfcmAwHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1OTZiY2M4LTM4Y2QtNDQzNy04 MGIxLTViYWU5Zjg1NzkzNy8wLzMxMzAzMzJlMzEzNTMxMmUzMzMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMwMzQzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5cgMA0GCSqG SIb3DQEBCwUAA4IBAQA9MSGzZkH1J3uCf0PJHQZKzA+nvOaBZ1tX530CyUbu8pmj YIuA3uXG1MXjTHRCoDAkPZiodJZ8y3+opbMxtMe2Y7tpFvcWDEXftW7Epr9gYUTH JqyTwlO3JGhsD0n7J5b9lc1YdR0LH+OR2O4n5PjTimJFN6TUsvfdoUgCPQUBm+j3 oIYEOGG16zjd4XApp6ZgUZ6kNXLNNB3TgfC8qDvcPRLm+gOhmuEZ30fxB67uY3U6 NFZXruITMGUHY76Fl5myxFnQtqwi3nCFa+/4fyjs1aHwcuanyiMzNwgF+RLDHn8C C2IjdFMeQKt3lbmSV+dWewg8eBlv0p7kc6Oba/vc -----END CERTIFICATE-----Generated at Sat Jun 22 05:13:18 2024 by rpki-client on console-fra.rpki-client.org