$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa File: 3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa (raw, json) Hash identifier: A5jwsdbkm4RHKtI28Knuwo6t+lI+6K3iZSqyYlBymno= Subject key identifier: 4A:2F:76:62:E3:BB:45:93:4B:1A:F9:A5:8D:DA:99:AC:7D:39:CD:06 Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Certificate serial: 4CE5FC50BAB581F9A8C6816715B7498005C383FE Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa Signing time: Sat 02 Mar 2024 14:00:01 +0000 ROA not before: Sat 02 Mar 2024 13:55:01 +0000 ROA not after: Sat 01 Mar 2025 14:00:01 +0000 asID: 139417 IP address blocks: 103.138.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e5:fc:50:ba:b5:81:f9:a8:c6:81:67:15:b7:49:80:05:c3:83:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Validity Not Before: Mar 2 13:55:01 2024 GMT Not After : Mar 1 14:00:01 2025 GMT Subject: CN=4A2F7662E3BB45934B1AF9A58DDA99AC7D39CD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:a2:71:1d:ad:08:0c:02:89:4f:45:88:6b: 7d:d5:37:0b:6c:23:82:9d:2a:f6:a4:76:19:18:6f: 5d:68:a7:b9:31:8a:61:d3:6a:98:a8:41:d7:7c:2f: d6:75:39:b7:6b:da:d9:b2:e4:a8:2b:56:ef:af:86: da:dc:3f:54:9a:53:20:c6:a1:8a:0e:aa:d2:26:0c: b9:23:d6:08:e2:0f:51:70:be:00:e8:ce:26:f0:aa: 9d:14:38:3a:d3:ae:63:cf:3f:c9:55:7f:17:c0:9e: 96:50:7e:8a:42:71:c5:a1:21:60:8a:f0:f3:f0:c3: da:b3:66:1f:26:48:17:58:d9:dc:0e:b3:cb:3f:61: eb:7d:ad:02:41:93:57:b4:76:a1:96:ec:a9:5d:35: 0d:8e:f3:5a:7a:a7:bc:b2:b5:96:d0:a8:39:77:f2: 3a:40:4b:a1:59:37:f0:b6:d0:41:30:58:93:69:de: fa:2e:cf:ab:3c:3a:a9:ad:b2:92:67:58:45:fc:0d: 9b:33:fa:98:49:3c:d0:26:11:12:d2:27:10:bf:00: 27:b5:76:87:20:e5:fb:57:d3:0b:6d:90:41:7c:2b: 8e:5c:47:c5:ba:b8:08:85:11:29:fd:fa:c6:c6:31: 1f:3a:cc:3d:be:a2:a2:39:43:c6:72:b5:17:79:9c: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2F:76:62:E3:BB:45:93:4B:1A:F9:A5:8D:DA:99:AC:7D:39:CD:06 X509v3 Authority Key Identifier: keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.117.0/24 Signature Algorithm: sha256WithRSAEncryption 28:9e:65:37:1b:39:0c:13:31:94:c6:29:df:fd:f5:7f:b5:3b: 83:9e:5d:97:57:f6:a7:f2:75:3b:41:09:8d:ae:45:18:61:5c: 59:0f:0f:ee:d9:80:b4:6f:e3:c0:8b:fe:f0:11:74:dc:6b:98: a2:f2:6b:0d:ab:8f:11:95:cb:12:12:64:8a:27:17:a4:6e:0f: 90:3f:b2:a9:ad:0d:98:35:ac:81:56:d1:bd:e0:ba:4b:dd:b3: 39:93:d9:5c:9f:4e:23:0a:b5:77:37:e4:29:8e:bf:ba:66:92: 3e:5e:56:a9:13:ee:3a:31:f9:c0:18:3f:00:a0:df:12:58:2a: 06:0e:e0:f9:1e:34:6b:27:ec:6e:d9:4c:60:a1:d8:a7:8e:ab: 32:86:eb:0b:c7:77:49:90:c6:29:4f:e1:72:a1:da:05:1c:fa: be:62:2e:d5:35:ac:07:b4:8a:03:e9:f9:24:b6:62:3e:8d:1e: 11:7c:68:c8:f9:5d:a7:58:56:b6:47:82:2b:4f:78:89:84:7c: 9d:bc:80:e0:fc:f0:88:36:b5:86:61:a0:05:2e:df:e6:ba:f0: cd:64:3f:f1:b5:a9:e3:74:4c:ef:e1:e9:d4:83:7f:18:05:8e: 0b:78:8b:a6:ad:2d:e2:2b:44:18:26:f9:10:bd:2f:66:49:cf: a3:69:ba:04 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTOX8ULq1gfmoxoFnFbdJgAXDg/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3 MkRBRURENjAeFw0yNDAzMDIxMzU1MDFaFw0yNTAzMDExNDAwMDFaMDMxMTAvBgNV BAMTKDRBMkY3NjYyRTNCQjQ1OTM0QjFBRjlBNThEREE5OUFDN0QzOUNEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZ6JxHa0IDAKJT0WIa33VNwts I4KdKvakdhkYb11op7kximHTapioQdd8L9Z1Obdr2tmy5KgrVu+vhtrcP1SaUyDG oYoOqtImDLkj1gjiD1FwvgDozibwqp0UODrTrmPPP8lVfxfAnpZQfopCccWhIWCK 8PPww9qzZh8mSBdY2dwOs8s/Yet9rQJBk1e0dqGW7KldNQ2O81p6p7yytZbQqDl3 8jpAS6FZN/C20EEwWJNp3vouz6s8OqmtspJnWEX8DZsz+phJPNAmERLSJxC/ACe1 docg5ftX0wttkEF8K45cR8W6uAiFESn9+sbGMR86zD2+oqI5Q8ZytRd5nBaFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUSi92YuO7RZNLGvmljdqZrH05zQYwHwYDVR0j BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB RURENi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i NDVkLTczYzk3MmYxMDExNi8wLzMxMzAzMzJlMzEzMzM4MmUzMTMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDMxMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABninUwDQYJ KoZIhvcNAQELBQADggEBACieZTcbOQwTMZTGKd/99X+1O4OeXZdX9qfydTtBCY2u RRhhXFkPD+7ZgLRv48CL/vARdNxrmKLyaw2rjxGVyxISZIonF6RuD5A/sqmtDZg1 rIFW0b3gukvdszmT2VyfTiMKtXc35CmOv7pmkj5eVqkT7jox+cAYPwCg3xJYKgYO 4PkeNGsn7G7ZTGCh2KeOqzKG6wvHd0mQxilP4XKh2gUc+r5iLtU1rAe0igPp+SS2 Yj6NHhF8aMj5XadYVrZHgitPeImEfJ28gOD88Ig2tYZhoAUu3+a68M1kP/G1qeN0 TO/h6dSDfxgFjgt4i6atLeIrRBgm+RC9L2ZJz6NpugQ= -----END CERTIFICATE-----Generated at Sat Jun 1 22:08:22 2024 by rpki-client on console-fra.rpki-client.org