$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa File: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (raw, json) Hash identifier: qlOeA5YidKv3/GP/mXvGGT1Y0qiUqdI9yWF4RzRDN/o= Subject key identifier: 41:DD:FD:28:B4:80:8A:A0:9D:07:D5:F3:EA:A7:45:F7:36:A9:A7:59 Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 28DA826A22CD2C19B60BC1451C330CA12ABFEFC8 Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa Signing time: Mon 31 Jul 2023 00:13:37 +0000 ROA not before: Mon 31 Jul 2023 00:08:37 +0000 ROA not after: Mon 29 Jul 2024 00:13:37 +0000 asID: 136843 IP address blocks: 103.101.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 07:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:da:82:6a:22:cd:2c:19:b6:0b:c1:45:1c:33:0c:a1:2a:bf:ef:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: Jul 31 00:08:37 2023 GMT Not After : Jul 29 00:13:37 2024 GMT Subject: CN=41DDFD28B4808AA09D07D5F3EAA745F736A9A759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:8e:b8:1c:61:0a:21:0b:15:88:2f:e3:3a: aa:45:55:5f:c0:4c:9e:50:5c:ee:11:b8:75:c0:8f: bc:22:18:c5:ac:fe:cf:0f:ad:ff:1a:20:fa:7d:00: ea:56:e6:26:e3:aa:00:d2:6a:80:e4:89:d9:b0:dd: df:f2:c6:ea:34:97:73:18:cc:a1:ef:c7:92:9c:91: b7:67:c2:11:3b:0b:0c:5f:9d:7f:70:1a:03:38:a8: 1e:ae:27:0b:8b:ae:84:fa:30:d9:b2:97:e7:3e:02: d3:a8:99:70:bb:1e:3c:b9:15:fe:9b:bf:3c:d4:0f: f2:e7:4b:f5:85:72:9c:1d:f6:89:11:6f:e9:66:6d: 6a:e7:6d:0f:e8:b3:e3:36:d8:94:27:4e:9c:a5:63: cd:de:5f:15:7f:36:bc:34:49:f9:51:a8:3f:9e:1e: 2e:a8:d7:22:c9:8d:b0:2b:90:f8:14:b8:96:a2:13: c8:cb:75:95:c6:35:52:7e:47:17:88:bf:93:e3:f0: 33:b9:ed:42:2d:ff:a4:46:4a:70:56:ab:89:37:a8: 22:ff:4f:3d:21:13:7e:fc:38:96:00:30:f7:44:cf: a8:bb:1e:24:3b:6b:b6:e8:ed:d6:77:a6:ac:fd:19: f9:d8:5a:d8:98:51:4c:af:7d:ef:3d:0d:53:45:04: 52:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DD:FD:28:B4:80:8A:A0:9D:07:D5:F3:EA:A7:45:F7:36:A9:A7:59 X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.52.0/24 Signature Algorithm: sha256WithRSAEncryption 64:6a:4e:b8:3d:99:40:57:77:ff:4d:f6:88:9c:a9:54:73:fa: 8e:bd:31:d5:c6:00:62:29:c9:3d:2f:2e:e0:ab:a7:f9:cc:2b: 68:d9:a0:26:7e:5f:cf:7a:c4:22:bb:1a:6a:39:88:c9:e6:97: 7e:72:ea:de:bc:2b:b3:75:7c:2f:02:7e:4d:75:90:1c:9d:6f: d6:1b:a6:3f:56:56:f1:e8:4e:d8:0f:2e:ee:14:53:ab:56:a5: 2c:3a:73:6b:b5:00:b2:69:fc:d4:69:af:49:31:6a:c3:a9:11: 77:77:28:33:b8:f5:6b:59:0c:23:e1:12:cd:d3:83:73:07:6f: 0b:1c:d7:6e:9f:db:a7:c5:c4:fc:3f:80:fa:5b:4b:d9:6d:ea: 31:bf:6d:96:4a:a9:8c:2d:48:82:95:87:7d:73:a6:c6:e3:34: 67:94:3e:49:ad:c4:a0:7f:d5:29:62:3d:02:91:41:55:19:d8: d1:90:da:79:47:3a:70:9e:00:f2:3d:fd:24:e0:84:02:ad:4e: 93:70:96:78:66:97:6a:73:49:dd:17:a4:81:b7:13:be:99:f8: 33:dd:d8:89:3d:ca:68:d4:5e:cf:67:13:59:f2:3e:71:8a:3b: b5:b9:69:d1:04:82:16:be:5f:20:68:ef:ce:6d:c8:c2:21:09: 94:91:aa:e2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKNqCaiLNLBm2C8FFHDMMoSq/78gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yMzA3MzEwMDA4MzdaFw0yNDA3MjkwMDEzMzdaMDMxMTAvBgNV BAMTKDQxRERGRDI4QjQ4MDhBQTA5RDA3RDVGM0VBQTc0NUY3MzZBOUE3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvGI64HGEKIQsViC/jOqpFVV/A TJ5QXO4RuHXAj7wiGMWs/s8Prf8aIPp9AOpW5ibjqgDSaoDkidmw3d/yxuo0l3MY zKHvx5KckbdnwhE7CwxfnX9wGgM4qB6uJwuLroT6MNmyl+c+AtOomXC7Hjy5Ff6b vzzUD/LnS/WFcpwd9okRb+lmbWrnbQ/os+M22JQnTpylY83eXxV/Nrw0SflRqD+e Hi6o1yLJjbArkPgUuJaiE8jLdZXGNVJ+RxeIv5Pj8DO57UIt/6RGSnBWq4k3qCL/ Tz0hE378OJYAMPdEz6i7HiQ7a7bo7dZ3pqz9GfnYWtiYUUyvfe89DVNFBFJ9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQd39KLSAiqCdB9Xz6qdF9zapp1kwHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhMGI0ZjE1LTc3MjAtNGYyYS04 MzQzLThlMzdmYWU4N2E1NC8wLzMxMzAzMzJlMzEzMDMxMmUzNTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2U0MA0GCSqG SIb3DQEBCwUAA4IBAQBkak64PZlAV3f/TfaInKlUc/qOvTHVxgBiKck9Ly7gq6f5 zCto2aAmfl/PesQiuxpqOYjJ5pd+curevCuzdXwvAn5NdZAcnW/WG6Y/Vlbx6E7Y Dy7uFFOrVqUsOnNrtQCyafzUaa9JMWrDqRF3dygzuPVrWQwj4RLN04NzB28LHNdu n9unxcT8P4D6W0vZbeoxv22WSqmMLUiClYd9c6bG4zRnlD5JrcSgf9UpYj0CkUFV GdjRkNp5RzpwngDyPf0k4IQCrU6TcJZ4Zpdqc0ndF6SBtxO+mfgz3diJPcpo1F7P ZxNZ8j5xiju1uWnRBIIWvl8gaO/ObcjCIQmUkari -----END CERTIFICATE-----Generated at Fri May 31 10:00:19 2024 by rpki-client on console-ams.rpki-client.org