$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32332d3233203d3e20313532303031.roa File: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (raw, json) Hash identifier: S0H9lMgSJKz3PvxlY2CRnB2k0aG/oZ8HH/1tlJbj2mc= Subject key identifier: E7:0F:36:93:95:8D:DE:71:BD:09:C4:9F:2F:EB:59:82:97:F0:17:0D Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Certificate serial: 065D5680E79EE01DE77992C4DA24BF5235893A1F Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32332d3233203d3e20313532303031.roa Signing time: Tue 09 Jan 2024 07:23:33 +0000 ROA not before: Tue 09 Jan 2024 07:18:33 +0000 ROA not after: Tue 07 Jan 2025 07:23:33 +0000 asID: 152001 IP address blocks: 103.67.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5d:56:80:e7:9e:e0:1d:e7:79:92:c4:da:24:bf:52:35:89:3a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Validity Not Before: Jan 9 07:18:33 2024 GMT Not After : Jan 7 07:23:33 2025 GMT Subject: CN=E70F3693958DDE71BD09C49F2FEB598297F0170D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:6b:8e:8b:88:3e:7b:e5:3b:bb:ef:0c:ef: 11:7e:85:21:90:fe:5a:aa:c5:5b:d8:33:5a:71:8d: 38:78:56:18:65:16:ec:72:27:c4:1f:57:5f:2a:0f: 63:a5:55:0a:c4:2f:d2:7d:1c:87:6b:56:f1:83:84: b1:52:87:dc:be:8d:3b:0d:dc:ad:82:91:50:91:14: ae:cd:27:94:9d:d4:d3:13:79:19:0d:27:87:cf:92: 7d:d1:5f:2a:00:9d:d2:4f:9e:67:4e:04:30:c6:0e: 6d:ff:5e:47:1b:4d:99:b0:f9:06:bc:a8:21:2c:fc: a6:95:03:2d:4f:f5:57:f9:5a:ea:66:af:47:41:09: 16:0b:12:e1:df:89:88:82:f9:e4:f9:d7:a7:be:bf: 96:26:1e:6d:84:f6:17:5a:00:f2:3d:05:0c:d0:6b: 97:43:cb:e8:db:c7:d7:84:1e:fb:5f:d4:ae:03:8f: ca:fe:80:81:e1:56:f0:75:cb:5d:4d:8f:4e:2c:cd: dd:a9:81:fd:31:85:0e:78:20:a0:13:ec:82:88:7a: 79:82:e3:69:2b:40:b3:e4:a0:ad:05:08:d1:32:2c: 63:3c:26:66:14:c7:70:0f:9d:ab:90:38:43:e9:62: 97:fe:6e:a5:76:6f:1e:38:ca:75:7f:2c:b0:73:80: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0F:36:93:95:8D:DE:71:BD:09:C4:9F:2F:EB:59:82:97:F0:17:0D X509v3 Authority Key Identifier: keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32332d3233203d3e20313532303031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.80.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:09:2f:80:2c:0e:ad:f5:7f:7c:35:94:5d:b2:6d:7d:b0:73: d1:a0:a8:a9:cc:c6:5b:89:40:a5:e0:86:3f:9d:48:2f:44:97: 2d:3f:82:2c:b3:37:b1:a7:70:94:f9:0a:3b:1f:24:c1:1b:fb: c3:c1:ff:ae:47:68:87:8c:86:02:13:c6:0c:56:32:49:b6:6d: 67:73:b1:f5:11:07:17:14:8f:53:b4:6d:a9:7c:42:d8:91:2b: d8:97:0d:52:6f:8c:30:67:51:db:97:cb:aa:6f:6b:bf:6a:0c: 81:0e:47:d7:5a:bc:a1:bc:a1:f0:ae:ce:62:b1:95:ff:3c:5d: c6:72:5d:6f:d6:c8:ba:da:62:1e:f6:9e:7c:48:43:8e:a7:22: fd:14:d0:af:b2:65:79:05:46:45:bc:3e:50:57:ab:80:30:4e: 95:35:df:b1:bc:4f:87:1c:1c:a6:bf:92:6a:b9:6e:43:d9:89: e2:79:68:cd:e3:49:81:fa:9f:4e:8b:a7:62:9e:47:87:af:3b: 41:a1:c6:3b:4d:11:8e:b8:5c:ce:34:71:69:3a:46:68:f2:c6: 02:7d:4f:a9:74:18:c6:bd:d4:d0:e2:3a:9e:98:34:75:f6:85: 0f:13:23:19:25:56:aa:09:d0:0a:1a:a3:7b:37:28:6c:cd:ff: f9:f6:20:39 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBl1WgOee4B3neZLE2iS/UjWJOh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVD NjE4Rjk3RTAeFw0yNDAxMDkwNzE4MzNaFw0yNTAxMDcwNzIzMzNaMDMxMTAvBgNV BAMTKEU3MEYzNjkzOTU4RERFNzFCRDA5QzQ5RjJGRUI1OTgyOTdGMDE3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvGuOi4g+e+U7u+8M7xF+hSGQ /lqqxVvYM1pxjTh4VhhlFuxyJ8QfV18qD2OlVQrEL9J9HIdrVvGDhLFSh9y+jTsN 3K2CkVCRFK7NJ5Sd1NMTeRkNJ4fPkn3RXyoAndJPnmdOBDDGDm3/XkcbTZmw+Qa8 qCEs/KaVAy1P9Vf5Wupmr0dBCRYLEuHfiYiC+eT516e+v5YmHm2E9hdaAPI9BQzQ a5dDy+jbx9eEHvtf1K4Dj8r+gIHhVvB1y11Nj04szd2pgf0xhQ54IKAT7IKIenmC 42krQLPkoK0FCNEyLGM8JmYUx3APnauQOEPpYpf+bqV2bx44ynV/LLBzgJC1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU5w82k5WN3nG9CcSfL+tZgpfwFw0wHwYDVR0j BBgwFoAUFoiakFOufrFpz4IunuZwpcYY+X4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTNmMmU5Yi0xMDY4LTRmYTktYmExZC01OWQwNzFhNDEyYTIvMC8xNjg4OUE5MDUz QUU3RUIxNjlDRjgyMkU5RUU2NzBBNUM2MThGOTdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVDNjE4 Rjk3RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlM2YyZTliLTEwNjgtNGZhOS1i YTFkLTU5ZDA3MWE0MTJhMi8wLzMxMzAzMzJlMzYzNzJlMzgzMDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMjMwMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdDUDANBgkqhkiG 9w0BAQsFAAOCAQEAOwkvgCwOrfV/fDWUXbJtfbBz0aCoqczGW4lApeCGP51IL0SX LT+CLLM3sadwlPkKOx8kwRv7w8H/rkdoh4yGAhPGDFYySbZtZ3Ox9REHFxSPU7Rt qXxC2JEr2JcNUm+MMGdR25fLqm9rv2oMgQ5H11q8obyh8K7OYrGV/zxdxnJdb9bI utpiHvaefEhDjqci/RTQr7JleQVGRbw+UFergDBOlTXfsbxPhxwcpr+SarluQ9mJ 4nlozeNJgfqfTounYp5Hh687QaHGO00RjrhczjRxaTpGaPLGAn1PqXQYxr3U0OI6 npg0dfaFDxMjGSVWqgnQChqjezcobM3/+fYgOQ== -----END CERTIFICATE-----Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org