$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa File: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: 0C8pRCsymjTTrJFNZEJzyFd4IOGqdzBKqs9DQmpJI/s= Subject key identifier: 48:94:92:86:1F:53:72:12:46:B0:92:BE:D1:D7:70:AA:F9:36:41:B6 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 15BCEB3BA710868BCCDDB7D23C2D8780A3DA60B3 Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa Signing time: Fri 02 Aug 2024 09:02:25 +0000 ROA not before: Fri 02 Aug 2024 08:57:25 +0000 ROA not after: Fri 01 Aug 2025 09:02:25 +0000 asID: 17995 IP address blocks: 103.162.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:bc:eb:3b:a7:10:86:8b:cc:dd:b7:d2:3c:2d:87:80:a3:da:60:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Aug 2 08:57:25 2024 GMT Not After : Aug 1 09:02:25 2025 GMT Subject: CN=489492861F53721246B092BED1D770AAF93641B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:69:54:96:c5:24:e6:8e:c0:9a:89:cc:cb: c0:b8:4e:6f:30:15:58:d9:96:23:77:33:b1:87:0c: 1c:8f:bb:cb:fb:bb:69:d6:b1:63:6b:bc:3c:8f:5a: 97:6b:82:30:25:f7:a3:af:5f:b3:63:dd:e0:d6:a0: db:71:c9:53:c4:ea:bd:ba:6e:0a:71:27:f4:d1:b3: cf:b7:55:fb:a4:42:cb:ac:43:37:ae:39:cd:91:11: ff:7e:53:5a:3e:2d:0b:40:ef:73:4d:f8:cf:dd:ce: 17:49:4b:c2:a9:20:1b:40:bf:cb:cb:91:fb:ac:06: f2:9f:01:50:23:e7:3d:2b:cc:f8:45:c9:63:98:5d: 47:3b:61:c6:3c:43:87:11:e4:9a:a3:df:aa:56:6e: c9:90:fb:ac:8c:f5:4a:62:7e:b8:36:1c:b9:06:f3: a1:61:24:ff:f3:81:71:13:3b:34:7c:61:cd:ae:2d: 17:51:da:3b:a1:32:63:69:b6:45:2d:f8:5c:ed:1b: 9c:92:19:01:3f:9f:9e:75:f1:ae:04:76:cf:30:58: bf:99:df:d7:71:28:29:98:cd:28:65:9d:d0:85:7b: be:de:c1:d8:1b:91:c2:85:9d:f4:28:58:a4:ad:83: 41:24:48:47:e1:5e:f2:d3:8d:82:e9:fc:50:9b:f8: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:94:92:86:1F:53:72:12:46:B0:92:BE:D1:D7:70:AA:F9:36:41:B6 X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.122.0/23 Signature Algorithm: sha256WithRSAEncryption 83:2d:97:1c:23:bd:f7:e4:d3:24:89:8d:f7:8c:67:2b:74:3b: 72:6d:19:45:5c:35:77:57:b7:13:4d:69:90:a8:d7:ee:f8:5c: 56:20:fc:73:b3:1b:71:f0:68:26:68:2a:9c:ba:9d:24:ce:36: 07:ba:09:a7:fa:e5:a8:ee:4b:8d:28:44:a5:d1:f0:4f:21:c2: 9e:6e:db:be:91:5a:e0:9f:84:39:b9:e4:b5:74:ff:73:2f:7e: d7:6a:ee:83:b9:78:f4:6c:38:35:95:0f:f5:cd:aa:d1:0d:f9: 80:6f:7a:91:65:42:9b:3f:86:7c:2e:ec:98:b8:ba:7b:6e:3e: e4:80:76:46:48:c9:c3:ae:39:af:b9:5d:a1:3a:7f:39:4c:6e: e3:04:a9:4d:0e:80:05:aa:c2:5d:c7:b7:1e:9b:1d:88:6c:0a: 08:88:93:56:b3:52:89:c8:59:4b:c3:81:3d:01:44:f5:cb:9a: 41:59:01:9f:8c:64:a7:60:46:fe:64:09:5b:7e:fa:50:97:46: 80:0e:bd:91:66:81:1b:59:12:19:a1:be:0d:73:54:26:50:31: e0:c6:7c:e6:3a:8e:69:3a:66:90:e8:2d:35:4e:32:29:67:71: 7d:6f:9e:73:dd:ed:b1:e4:c9:f7:7c:4a:ff:ff:88:19:4e:7a: 15:67:30:50 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFbzrO6cQhovM3bfSPC2HgKPaYLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNDA4MDIwODU3MjVaFw0yNTA4MDEwOTAyMjVaMDMxMTAvBgNV BAMTKDQ4OTQ5Mjg2MUY1MzcyMTI0NkIwOTJCRUQxRDc3MEFBRjkzNjQxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotGlUlsUk5o7AmonMy8C4Tm8w FVjZliN3M7GHDByPu8v7u2nWsWNrvDyPWpdrgjAl96OvX7Nj3eDWoNtxyVPE6r26 bgpxJ/TRs8+3VfukQsusQzeuOc2REf9+U1o+LQtA73NN+M/dzhdJS8KpIBtAv8vL kfusBvKfAVAj5z0rzPhFyWOYXUc7YcY8Q4cR5Jqj36pWbsmQ+6yM9Upifrg2HLkG 86FhJP/zgXETOzR8Yc2uLRdR2juhMmNptkUt+FztG5ySGQE/n5518a4Eds8wWL+Z 39dxKCmYzShlndCFe77ewdgbkcKFnfQoWKStg0EkSEfhXvLTjYLp/FCb+GubAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSJSShh9TchJGsJK+0ddwqvk2QbYwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxYjNmZTQ1LWI1ODgtNGJiNy1h ZTkwLTkxZjU3ZjU5M2NiNS8wLzMxMzAzMzJlMzEzNjMyMmUzMTMyMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6J6MA0GCSqG SIb3DQEBCwUAA4IBAQCDLZccI7335NMkiY33jGcrdDtybRlFXDV3V7cTTWmQqNfu +FxWIPxzsxtx8GgmaCqcup0kzjYHugmn+uWo7kuNKESl0fBPIcKebtu+kVrgn4Q5 ueS1dP9zL37Xau6DuXj0bDg1lQ/1zarRDfmAb3qRZUKbP4Z8LuyYuLp7bj7kgHZG SMnDrjmvuV2hOn85TG7jBKlNDoAFqsJdx7cemx2IbAoIiJNWs1KJyFlLw4E9AUT1 y5pBWQGfjGSnYEb+ZAlbfvpQl0aADr2RZoEbWRIZob4Nc1QmUDHgxnzmOo5pOmaQ 6C01TjIpZ3F9b55z3e2x5Mn3fEr//4gZTnoVZzBQ -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org