$ rpki-client -vvf repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa File: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (raw, json) Hash identifier: 8ov32JUxJG6I1l4jMSrDdb5LNdhBdeIl74d7Kd35C5E= Subject key identifier: 18:5B:4D:19:66:8B:F7:3B:F6:90:02:45:08:2F:3F:A8:47:70:B0:6F Certificate issuer: /CN=1762D22131EE967D86536D2B475A9A8C08CE6003 Certificate serial: 6355D756ABF4A9E0EDD88279EF89A63253C4626D Authority key identifier: 17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa Signing time: Wed 19 Jul 2023 05:00:00 +0000 ROA not before: Wed 19 Jul 2023 04:55:00 +0000 ROA not after: Wed 17 Jul 2024 05:00:00 +0000 asID: 131111 IP address blocks: 103.159.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Apr 2024 23:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:55:d7:56:ab:f4:a9:e0:ed:d8:82:79:ef:89:a6:32:53:c4:62:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1762D22131EE967D86536D2B475A9A8C08CE6003 Validity Not Before: Jul 19 04:55:00 2023 GMT Not After : Jul 17 05:00:00 2024 GMT Subject: CN=185B4D19668BF73BF6900245082F3FA84770B06F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:33:d9:a2:ab:56:20:d6:0b:37:0b:22:9e:8f: f6:c6:0a:81:06:e1:b1:75:11:1f:52:38:eb:10:15: fb:12:ba:f2:2c:b8:21:3a:1e:c9:c3:f3:7a:51:c7: 71:d3:fe:33:15:26:63:08:53:58:cf:08:80:95:aa: cf:cd:ed:40:6c:aa:01:a4:95:3d:a8:cc:c6:ba:8a: 42:f7:39:4f:46:56:8e:d8:9c:0d:3f:3f:c8:aa:ec: 29:21:e9:be:00:7d:7d:91:41:d5:29:eb:78:18:c3: ef:6f:52:5b:67:63:4a:f9:29:a6:c0:81:a0:ae:25: e6:35:26:fa:48:63:d9:2a:b4:3f:78:dc:93:d2:4f: 1a:14:95:6a:9f:a7:dc:12:eb:37:0c:f4:9d:cb:71: 6e:b3:45:5b:d3:3c:9e:95:d3:97:f0:b3:c4:96:a9: 57:ab:bf:15:8b:69:b8:58:72:f2:62:05:01:4d:87: 0f:b8:52:e2:b2:6a:9a:35:3d:e5:da:56:fa:a4:6a: 3c:de:c4:a5:e6:13:89:4b:64:15:e2:cc:f7:6e:e0: 58:81:52:0c:9d:05:b8:f3:10:11:93:0a:da:1d:c4: ed:7d:9c:c4:9d:af:d6:ed:4c:03:e2:5b:5d:27:46: d5:71:8e:a0:25:ad:db:f0:72:59:9f:9f:87:b5:59: bc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5B:4D:19:66:8B:F7:3B:F6:90:02:45:08:2F:3F:A8:47:70:B0:6F X509v3 Authority Key Identifier: keyid:17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.204.0/23 Signature Algorithm: sha256WithRSAEncryption 05:14:cf:58:80:ea:3f:59:69:52:01:90:b3:0b:cb:a1:ac:15: 3d:ac:fb:71:f9:b6:8a:72:3a:cd:99:19:bc:03:06:4a:ad:de: 2d:a8:9b:9b:6b:34:76:3d:e9:22:0e:b6:15:85:9b:d3:ec:0b: e6:88:43:1a:0b:d4:58:4e:93:53:0b:d3:f3:11:9b:aa:f0:fd: 48:13:1e:16:73:a9:64:a6:4f:63:2c:16:d7:c4:1e:9d:c1:c8: 89:fa:23:e1:89:a6:d6:fa:4c:3b:54:b0:8e:05:71:26:3e:ac: cd:8a:61:d7:27:01:33:93:23:e2:a2:de:a7:46:1d:26:fd:40: e2:02:5f:c7:0f:cc:6c:9c:39:b4:f8:11:dd:a6:31:48:59:94: db:6b:9d:4c:42:a6:cb:aa:5f:53:2b:77:2b:a4:af:30:3e:4d: e5:75:a3:5d:dd:f1:27:25:f9:04:36:ff:9e:9f:80:c8:b9:0a: 73:63:e3:56:89:f2:0d:23:66:d6:c5:b8:df:8a:93:41:1f:0f: 20:05:de:8b:16:6a:d2:d6:66:b6:59:d4:8c:51:5b:e2:04:80: 98:fc:15:96:85:82:a3:ed:33:4e:38:40:b9:cb:74:c3:1f:5a: 04:bb:b7:48:3c:d7:a5:58:4d:0f:ef:ea:75:ee:ea:57:c1:18: 02:df:c5:a0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUY1XXVqv0qeDt2IJ574mmMlPEYm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMw OENFNjAwMzAeFw0yMzA3MTkwNDU1MDBaFw0yNDA3MTcwNTAwMDBaMDMxMTAvBgNV BAMTKDE4NUI0RDE5NjY4QkY3M0JGNjkwMDI0NTA4MkYzRkE4NDc3MEIwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSM9miq1Yg1gs3CyKej/bGCoEG 4bF1ER9SOOsQFfsSuvIsuCE6HsnD83pRx3HT/jMVJmMIU1jPCICVqs/N7UBsqgGk lT2ozMa6ikL3OU9GVo7YnA0/P8iq7Ckh6b4AfX2RQdUp63gYw+9vUltnY0r5KabA gaCuJeY1JvpIY9kqtD943JPSTxoUlWqfp9wS6zcM9J3LcW6zRVvTPJ6V05fws8SW qVervxWLabhYcvJiBQFNhw+4UuKyapo1PeXaVvqkajzexKXmE4lLZBXizPdu4FiB UgydBbjzEBGTCtodxO19nMSdr9btTAPiW10nRtVxjqAlrdvwclmfn4e1WbxVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUGFtNGWaL9zv2kAJFCC8/qEdwsG8wHwYDVR0j BBgwFoAUF2LSITHuln2GU20rR1qajAjOYAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjBmYTE0YS1hYWFjLTQwZjQtOWM4NC02OTI1Nzg2OGYyY2IvMC8xNzYyRDIyMTMx RUU5NjdEODY1MzZEMkI0NzVBOUE4QzA4Q0U2MDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMwOENF NjAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyMGZhMTRhLWFhYWMtNDBmNC05 Yzg0LTY5MjU3ODY4ZjJjYi8wLzMxMzAzMzJlMzEzNTM5MmUzMjMwMzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn8wwDQYJ KoZIhvcNAQELBQADggEBAAUUz1iA6j9ZaVIBkLMLy6GsFT2s+3H5topyOs2ZGbwD Bkqt3i2om5trNHY96SIOthWFm9PsC+aIQxoL1FhOk1ML0/MRm6rw/UgTHhZzqWSm T2MsFtfEHp3ByIn6I+GJptb6TDtUsI4FcSY+rM2KYdcnATOTI+Ki3qdGHSb9QOIC X8cPzGycObT4Ed2mMUhZlNtrnUxCpsuqX1MrdyukrzA+TeV1o13d8Scl+QQ2/56f gMi5CnNj41aJ8g0jZtbFuN+Kk0EfDyAF3osWatLWZrZZ1IxRW+IEgJj8FZaFgqPt M044QLnLdMMfWgS7t0g816VYTQ/v6nXu6lfBGALfxaA= -----END CERTIFICATE-----Generated at Tue Apr 23 18:36:35 2024 by rpki-client on console-ams.rpki-client.org