$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa File: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (raw, json) Hash identifier: 0+EzwHsPjCbV8QJ6bq8ccNZiZucHK/n8MBUE8T98GMc= Subject key identifier: 19:5F:37:C8:49:EB:23:0D:5C:3B:44:2F:6D:77:F5:E9:AD:5D:D5:23 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 4B289BCF5321A3EA23E546239FAD4275D5FD8BE1 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa Signing time: Sat 04 May 2024 16:12:47 +0000 ROA not before: Sat 04 May 2024 16:07:47 +0000 ROA not after: Sat 03 May 2025 16:12:47 +0000 asID: 133799 IP address blocks: 103.42.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 06:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:28:9b:cf:53:21:a3:ea:23:e5:46:23:9f:ad:42:75:d5:fd:8b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: May 4 16:07:47 2024 GMT Not After : May 3 16:12:47 2025 GMT Subject: CN=195F37C849EB230D5C3B442F6D77F5E9AD5DD523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:d7:4e:a0:4b:e8:3e:11:5f:e0:83:02:27: 72:4c:89:09:0c:cb:db:ca:a5:72:a0:bb:6a:a8:a4: 20:bc:cc:77:e0:db:71:bb:0a:cd:d8:df:02:6f:ee: 07:6c:aa:4f:fa:ab:48:33:90:3f:99:26:81:a3:25: 3f:31:34:85:35:c5:6f:3f:d6:9e:29:6d:ea:84:7b: 2d:6b:e9:ee:75:54:93:f5:d1:c6:8f:ef:2e:c6:d5: dc:dc:ef:86:c9:c1:4f:21:41:0e:09:b0:b1:a9:96: 50:32:09:fc:98:17:8b:a5:e9:2f:c9:94:db:55:de: 87:1a:0d:fc:9d:70:9c:a9:c8:27:53:41:31:dd:79: fc:91:fa:36:de:5c:39:a7:e8:a9:bb:87:77:49:03: e2:89:76:2f:78:19:c9:dd:c3:6f:f3:83:93:03:cf: da:a1:9e:ab:55:18:78:9b:76:af:fe:e4:76:56:ff: b0:b6:f1:2c:b1:be:2a:5f:ac:6a:54:95:33:62:23: 21:d5:34:42:72:bb:ad:0c:03:4f:8f:f1:51:0e:bd: 07:a8:3c:ed:29:b8:32:67:11:5e:58:49:6d:9f:44: d1:0e:b5:e0:dd:cc:a1:00:5f:e3:f2:08:b7:e0:0f: db:4d:ad:e3:e3:24:af:0f:d1:8e:2f:2b:90:ff:48: 95:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5F:37:C8:49:EB:23:0D:5C:3B:44:2F:6D:77:F5:E9:AD:5D:D5:23 X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.253.0/24 Signature Algorithm: sha256WithRSAEncryption 02:4d:41:ee:2d:61:c7:a6:52:b3:1b:96:7b:f7:ad:83:27:79: b3:53:35:2a:a3:b1:63:c1:ae:00:2b:68:63:7e:13:fa:f7:5c: f2:a3:8b:44:26:1b:4e:c3:1e:92:39:28:65:74:7d:63:17:91: b1:29:6b:b2:97:01:76:20:eb:08:80:9c:a1:37:58:8d:6b:5a: 14:91:fd:dc:40:87:1a:75:1f:e8:83:2f:db:bf:d5:5c:9d:b6: d3:f6:e8:30:ed:95:19:a3:13:11:6f:e8:0a:cf:27:23:e8:53: bb:de:a5:37:c9:bf:ca:ad:cd:40:f4:16:10:c4:2f:4d:62:23: 6a:f9:c9:45:d5:d0:37:b2:ab:0b:02:b0:40:6c:92:d2:d2:58: 56:bd:26:6c:80:9f:6e:9b:2a:56:d1:90:30:03:4a:5a:44:42: 28:ed:23:b9:7c:e1:de:16:6a:b0:d3:4f:45:e8:9f:9e:2b:ec: 5f:53:be:6d:8c:0f:c0:e4:e4:b9:b1:ed:2f:87:cd:64:4a:83: 95:b7:f9:49:e2:a5:55:4c:cd:28:21:b2:dc:36:1d:1b:a8:d7: 9d:76:fc:24:84:80:a5:a9:e2:f0:57:c7:63:5f:1c:26:0b:7c: c1:79:85:5f:d8:ee:ed:0f:e9:e7:a9:57:af:c0:28:11:ce:80: 1b:70:6f:cd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSyibz1Mho+oj5UYjn61CddX9i+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNDA1MDQxNjA3NDdaFw0yNTA1MDMxNjEyNDdaMDMxMTAvBgNV BAMTKDE5NUYzN0M4NDlFQjIzMEQ1QzNCNDQyRjZENzdGNUU5QUQ1REQ1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxNdOoEvoPhFf4IMCJ3JMiQkM y9vKpXKgu2qopCC8zHfg23G7Cs3Y3wJv7gdsqk/6q0gzkD+ZJoGjJT8xNIU1xW8/ 1p4pbeqEey1r6e51VJP10caP7y7G1dzc74bJwU8hQQ4JsLGpllAyCfyYF4ul6S/J lNtV3ocaDfydcJypyCdTQTHdefyR+jbeXDmn6Km7h3dJA+KJdi94Gcndw2/zg5MD z9qhnqtVGHibdq/+5HZW/7C28SyxvipfrGpUlTNiIyHVNEJyu60MA0+P8VEOvQeo PO0puDJnEV5YSW2fRNEOteDdzKEAX+PyCLfgD9tNrePjJK8P0Y4vK5D/SJWLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGV83yEnrIw1cO0QvbXf16a1d1SMwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzAzMzJlMzQzMjJlMzIzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyr9MA0GCSqG SIb3DQEBCwUAA4IBAQACTUHuLWHHplKzG5Z7962DJ3mzUzUqo7Fjwa4AK2hjfhP6 91zyo4tEJhtOwx6SOShldH1jF5GxKWuylwF2IOsIgJyhN1iNa1oUkf3cQIcadR/o gy/bv9VcnbbT9ugw7ZUZoxMRb+gKzycj6FO73qU3yb/Krc1A9BYQxC9NYiNq+clF 1dA3sqsLArBAbJLS0lhWvSZsgJ9umypW0ZAwA0paREIo7SO5fOHeFmqw009F6J+e K+xfU75tjA/A5OS5se0vh81kSoOVt/lJ4qVVTM0oIbLcNh0bqNeddvwkhIClqeLw V8djXxwmC3zBeYVf2O7tD+nnqVevwCgRzoAbcG/N -----END CERTIFICATE-----Generated at Fri Sep 27 12:52:46 2024 by rpki-client on console-ams.rpki-client.org