$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa File: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (raw, json) Hash identifier: MMwZ/tilEggX11mDl6b6gvMZ4T/E8ksA0O6z2RJ54Yg= Subject key identifier: 10:15:3B:9A:0C:98:50:1D:F9:A7:AA:44:3F:60:E1:4F:26:3A:B6:84 Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 2F6C7255577BD99A4D324A11DD5A5A2A61D7F184 Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa Signing time: Tue 31 Oct 2023 04:00:22 +0000 ROA not before: Tue 31 Oct 2023 03:55:22 +0000 ROA not after: Tue 29 Oct 2024 04:00:22 +0000 asID: 17769 IP address blocks: 103.147.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6c:72:55:57:7b:d9:9a:4d:32:4a:11:dd:5a:5a:2a:61:d7:f1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Oct 31 03:55:22 2023 GMT Not After : Oct 29 04:00:22 2024 GMT Subject: CN=10153B9A0C98501DF9A7AA443F60E14F263AB684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:a4:37:00:09:b8:2e:e7:70:18:6e:08:a6: c2:d3:23:63:b4:48:9c:21:ce:83:e9:af:95:22:a6: 58:26:63:26:dd:d2:0b:84:15:f0:5e:87:56:64:31: a4:ca:53:67:66:c5:e3:1d:49:d4:fe:54:3a:ce:e5: 4f:27:02:cc:3d:ca:b2:2f:65:98:53:8e:f4:91:e9: 3b:58:3e:7e:78:d0:cd:1d:a6:7d:c0:50:da:6f:83: ca:8e:04:8c:54:ad:1f:18:d9:d9:56:09:0c:36:4e: 49:84:4c:b4:82:00:0e:51:ac:fb:c9:f7:9c:ea:09: a5:9d:3e:c0:b5:7d:8a:bd:bf:78:c8:26:a3:05:ce: 89:07:9c:e3:88:20:b9:ce:da:c4:ae:65:c9:76:83: dc:42:28:e1:73:10:8b:65:fa:83:6b:d6:6d:37:49: e3:d5:ca:3f:f1:e4:a8:31:49:73:43:b8:dd:0c:c3: c4:ee:77:ca:34:57:88:7f:a4:4c:ad:1e:08:03:f7: cc:29:4f:d1:0a:8f:5e:18:5c:cb:28:77:0f:26:80: 99:11:48:49:1e:0f:f5:04:0a:bf:97:06:11:02:27: dc:2f:ac:03:fb:29:27:6f:8a:7f:d5:ba:62:f7:d3: 6c:47:e2:00:4f:e7:a3:06:82:7d:c8:99:e1:33:4a: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:15:3B:9A:0C:98:50:1D:F9:A7:AA:44:3F:60:E1:4F:26:3A:B6:84 X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.142.0/23 Signature Algorithm: sha256WithRSAEncryption a4:94:f5:0e:b7:b2:4b:16:3d:96:40:d1:17:6a:c2:36:06:1a: e3:6c:10:45:5a:b9:df:9c:87:d5:8d:58:12:fc:db:83:bc:1b: 70:e6:17:57:f8:c9:02:28:da:cd:d3:21:2a:1a:6d:ed:ba:de: 7b:da:b5:75:54:ad:8a:77:48:80:d7:4e:74:64:cf:f5:69:0b: 76:d1:2c:69:f2:33:e1:ca:02:63:84:9e:3c:16:44:19:37:cf: a9:17:ec:b9:f8:89:30:8a:35:d7:1b:d9:fb:a5:6f:24:6f:e1: 7c:b9:df:98:27:06:af:10:b2:21:4d:81:ec:a9:0e:76:dd:8a: 77:e1:22:f8:1c:2d:4f:cd:1b:23:f8:2f:89:65:61:6e:5f:dc: 70:90:bb:dc:b2:37:9e:ae:5e:25:de:d6:65:6d:98:60:db:4c: d7:a0:7d:59:97:db:9e:ba:2b:56:9f:79:9e:d4:28:bc:36:0f: 4e:b3:69:23:60:46:17:92:18:bd:01:7a:60:87:4d:55:41:3f: 14:4d:7e:bb:47:32:2c:7b:d5:bd:09:6c:2d:b1:9e:11:af:e8: ed:ff:ff:9a:cc:dc:1d:c7:06:ed:0e:d6:29:87:99:e1:1b:85: 1b:fa:e6:ac:4f:5f:47:2b:d8:6f:6c:90:e7:a9:51:44:87:47: 7d:6a:01:80 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUL2xyVVd72ZpNMkoR3VpaKmHX8YQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yMzEwMzEwMzU1MjJaFw0yNDEwMjkwNDAwMjJaMDMxMTAvBgNV BAMTKDEwMTUzQjlBMEM5ODUwMURGOUE3QUE0NDNGNjBFMTRGMjYzQUI2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7aQ3AAm4LudwGG4IpsLTI2O0 SJwhzoPpr5UiplgmYybd0guEFfBeh1ZkMaTKU2dmxeMdSdT+VDrO5U8nAsw9yrIv ZZhTjvSR6TtYPn540M0dpn3AUNpvg8qOBIxUrR8Y2dlWCQw2TkmETLSCAA5RrPvJ 95zqCaWdPsC1fYq9v3jIJqMFzokHnOOIILnO2sSuZcl2g9xCKOFzEItl+oNr1m03 SePVyj/x5KgxSXNDuN0Mw8Tud8o0V4h/pEytHggD98wpT9EKj14YXMsodw8mgJkR SEkeD/UECr+XBhECJ9wvrAP7KSdvin/VumL302xH4gBP56MGgn3ImeEzShw5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEBU7mgyYUB35p6pEP2DhTyY6toQwHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmZjBhZjZhLWM2ODAtNDczMS05 YjkyLTlhYTkzZDljMDE2Yy8wLzMxMzAzMzJlMzEzNDM3MmUzMTM0MzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzczNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5OOMA0GCSqG SIb3DQEBCwUAA4IBAQCklPUOt7JLFj2WQNEXasI2BhrjbBBFWrnfnIfVjVgS/NuD vBtw5hdX+MkCKNrN0yEqGm3tut572rV1VK2Kd0iA1050ZM/1aQt20Sxp8jPhygJj hJ48FkQZN8+pF+y5+IkwijXXG9n7pW8kb+F8ud+YJwavELIhTYHsqQ523Yp34SL4 HC1PzRsj+C+JZWFuX9xwkLvcsjeerl4l3tZlbZhg20zXoH1Zl9ueuitWn3me1Ci8 Ng9Os2kjYEYXkhi9AXpgh01VQT8UTX67RzIse9W9CWwtsZ4Rr+jt//+azNwdxwbt DtYph5nhG4Ub+uasT19HK9hvbJDnqVFEh0d9agGA -----END CERTIFICATE-----Generated at Tue Apr 30 12:55:59 2024 by rpki-client on console-fra.rpki-client.org