$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa File: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (raw, json) Hash identifier: ku+vPQGiaX/F6zeCMSlTl3/l2RtzzodJLc+Tdu2ddms= Subject key identifier: D2:6A:68:11:27:B3:27:E4:C3:02:45:F9:89:56:77:F2:19:23:70:57 Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 2029859375DD2E8EE891E54BE4DE7B020566BF13 Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa Signing time: Wed 25 Oct 2023 04:00:00 +0000 ROA not before: Wed 25 Oct 2023 03:55:00 +0000 ROA not after: Wed 23 Oct 2024 04:00:00 +0000 asID: 140444 IP address blocks: 103.153.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 17:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:29:85:93:75:dd:2e:8e:e8:91:e5:4b:e4:de:7b:02:05:66:bf:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Oct 25 03:55:00 2023 GMT Not After : Oct 23 04:00:00 2024 GMT Subject: CN=D26A681127B327E4C30245F9895677F219237057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:b8:fd:19:3d:c8:e7:a2:86:00:4f:55:47: c5:4d:4f:a7:eb:18:87:55:f2:06:c7:b7:2e:19:03: 7d:66:b1:06:55:8f:69:b0:af:7a:31:eb:4b:67:6f: f7:10:17:25:f1:9b:d4:34:85:0b:c6:ea:aa:90:ef: 42:41:14:cf:5e:da:6c:d0:63:50:91:19:b0:06:c1: c1:1e:7b:45:90:1d:bf:3f:4f:4e:66:13:d3:50:d4: 30:f6:03:39:38:34:ed:61:dd:1e:83:a9:66:08:61: 83:d7:f1:b1:dc:6d:a3:bf:06:af:bc:35:b5:1c:7d: 24:25:8b:2b:1c:a6:36:22:e4:aa:f0:2a:5a:89:3b: 50:94:a5:c7:1a:2c:76:d1:ac:cb:cb:e1:dd:2f:66: 4c:88:9d:f9:e1:d5:36:d1:d0:cc:81:88:81:b5:c3: 73:a2:ac:9a:7a:27:d5:d8:1e:b1:35:92:c4:d7:4f: 76:f8:ad:e3:5c:a6:42:8a:7a:2c:43:30:a7:0f:a2: 1d:48:39:95:6e:04:01:2b:82:06:c8:37:2e:f8:c3: ce:15:92:76:55:ca:71:87:70:c5:99:c2:6f:e2:fb: b5:97:0b:e7:80:1f:18:98:1d:09:37:1f:7b:ec:2d: ca:0d:6b:e8:2e:ce:72:30:39:6d:04:ca:79:e9:c1: 15:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6A:68:11:27:B3:27:E4:C3:02:45:F9:89:56:77:F2:19:23:70:57 X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.43.0/24 Signature Algorithm: sha256WithRSAEncryption 27:b1:70:08:d2:6c:13:26:22:2c:f0:c8:bd:45:35:8b:df:af: 03:03:22:99:18:d5:9a:0b:a8:df:b7:8d:6b:95:7d:43:22:c8: 9e:31:33:90:e4:8b:92:58:0f:dd:b7:61:1f:36:2e:3b:6e:b7: b7:37:e8:d4:5e:ea:34:19:b5:0e:a8:1f:ea:a6:3f:c8:8b:02: 79:a7:b4:04:20:da:d8:21:13:23:30:b8:4f:b8:0e:80:fa:b2: 83:98:73:44:71:50:88:e8:7e:26:9e:b8:d0:c1:22:0b:fd:fb: 71:c0:98:ba:23:18:b6:04:0b:72:c2:51:41:41:fa:1c:63:61: 93:48:ef:00:56:23:55:ba:fd:f6:e1:aa:bc:a3:82:f0:6d:69: 9d:ef:70:f8:8e:15:ae:fe:48:4f:89:2f:00:86:8d:a2:6e:4c: b9:37:c8:66:3d:a5:cb:9d:b4:27:37:05:ab:02:ce:87:31:67: 98:00:84:ff:51:15:0d:36:6f:5c:70:0c:0c:18:fe:81:22:ef: c5:d3:ce:f4:a5:e7:b8:dc:a9:07:27:43:13:e5:e6:0e:0a:20: bd:1c:8e:d0:39:85:41:7b:39:66:8c:62:79:69:de:46:d5:e8: 9f:da:89:2f:26:45:55:7c:ed:a9:81:ca:ca:32:06:66:b4:ba: 9d:9a:0e:01 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUICmFk3XdLo7okeVL5N57AgVmvxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yMzEwMjUwMzU1MDBaFw0yNDEwMjMwNDAwMDBaMDMxMTAvBgNV BAMTKEQyNkE2ODExMjdCMzI3RTRDMzAyNDVGOTg5NTY3N0YyMTkyMzcwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHP7j9GT3I56KGAE9VR8VNT6fr GIdV8gbHty4ZA31msQZVj2mwr3ox60tnb/cQFyXxm9Q0hQvG6qqQ70JBFM9e2mzQ Y1CRGbAGwcEee0WQHb8/T05mE9NQ1DD2Azk4NO1h3R6DqWYIYYPX8bHcbaO/Bq+8 NbUcfSQliyscpjYi5KrwKlqJO1CUpccaLHbRrMvL4d0vZkyInfnh1TbR0MyBiIG1 w3OirJp6J9XYHrE1ksTXT3b4reNcpkKKeixDMKcPoh1IOZVuBAErggbINy74w84V knZVynGHcMWZwm/i+7WXC+eAHxiYHQk3H3vsLcoNa+guznIwOW0EynnpwRW7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0mpoESezJ+TDAkX5iVZ38hkjcFcwHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3MTE1NTllLWQ1ZWMtNGMxOS1i MzM1LWVlMjlkZGZiYjlkNS8wLzMxMzAzMzJlMzEzNTMzMmUzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5krMA0GCSqG SIb3DQEBCwUAA4IBAQAnsXAI0mwTJiIs8Mi9RTWL368DAyKZGNWaC6jft41rlX1D IsieMTOQ5IuSWA/dt2EfNi47bre3N+jUXuo0GbUOqB/qpj/IiwJ5p7QEINrYIRMj MLhPuA6A+rKDmHNEcVCI6H4mnrjQwSIL/ftxwJi6Ixi2BAtywlFBQfocY2GTSO8A ViNVuv324aq8o4LwbWmd73D4jhWu/khPiS8Aho2ibky5N8hmPaXLnbQnNwWrAs6H MWeYAIT/URUNNm9ccAwMGP6BIu/F0870pee43KkHJ0MT5eYOCiC9HI7QOYVBezlm jGJ5ad5G1eif2okvJkVVfO2pgcrKMgZmtLqdmg4B -----END CERTIFICATE-----Generated at Fri May 31 17:43:04 2024 by rpki-client on console-fra.rpki-client.org