$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa File: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (raw, json) Hash identifier: DIk57DXP9EbnAxhNqfJ9/qfaXKxZUsUMRYf4DR8Uo5I= Subject key identifier: FD:F7:AD:D1:E8:47:AD:D7:3C:A8:D4:31:B8:80:F1:6E:E3:D1:23:8F Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Certificate serial: 0460E2CC446B230D734C4F41455785F02D114C53 Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa Signing time: Mon 01 Jul 2024 01:03:12 +0000 ROA not before: Mon 01 Jul 2024 00:58:12 +0000 ROA not after: Mon 30 Jun 2025 01:03:12 +0000 asID: 140389 IP address blocks: 103.153.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:60:e2:cc:44:6b:23:0d:73:4c:4f:41:45:57:85:f0:2d:11:4c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Validity Not Before: Jul 1 00:58:12 2024 GMT Not After : Jun 30 01:03:12 2025 GMT Subject: CN=FDF7ADD1E847ADD73CA8D431B880F16EE3D1238F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:43:f3:43:bf:4f:ad:17:cd:35:72:eb:10:c0: 83:00:f9:a9:5a:ee:f2:00:bc:46:3a:49:7f:a9:6e: 96:97:11:26:2f:60:9e:9e:b6:02:7a:e1:f5:7a:a8: 7a:eb:e7:c1:58:39:f8:d4:67:be:3c:2f:5a:07:40: a4:9b:9e:96:eb:fc:91:1b:f0:f0:81:d1:3d:48:1e: de:37:32:ae:72:47:79:c7:60:31:e6:d7:65:4f:e0: f1:b9:3d:10:87:04:82:67:2d:60:e3:e0:35:75:8f: 75:f7:13:5e:19:a4:05:18:36:27:ea:b5:e6:80:2d: d9:11:84:4e:68:0f:3b:35:3b:56:ea:a6:ec:b5:5a: 4d:cf:ad:58:e5:15:8f:bd:6f:5b:87:ff:70:fe:20: 32:3e:ad:d3:ea:d1:7f:04:0f:3c:3c:81:4d:eb:d6: 29:91:8e:54:f3:b3:ba:74:da:31:87:9d:ea:88:59: ca:70:bc:03:81:35:96:87:74:89:63:90:4f:4a:4c: b8:3b:e3:b5:dd:54:04:72:3f:70:06:0f:b2:68:f8: 23:15:d8:b1:2a:ea:55:59:60:fe:34:72:a0:15:cc: e3:25:19:70:55:13:02:dc:4f:08:cb:75:af:e5:9b: 46:fb:b5:07:8d:bf:62:fa:51:1f:49:5b:59:53:27: 83:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F7:AD:D1:E8:47:AD:D7:3C:A8:D4:31:B8:80:F1:6E:E3:D1:23:8F X509v3 Authority Key Identifier: keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.2.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:63:82:4d:cd:d2:37:5c:4f:56:29:a7:e7:79:e7:98:26:c2: 5f:e2:0c:68:1d:ff:5d:50:7a:95:10:3e:75:8c:b7:c8:ab:6d: 11:17:f4:ec:d1:22:ad:a0:77:30:22:93:1a:b5:8e:39:cf:bb: 5b:b4:2e:a6:e0:e1:85:d1:cd:ba:f5:5a:d8:e6:14:5c:b9:31: 7c:1a:08:84:57:c8:3a:d9:17:1f:49:99:1e:5f:e2:82:b8:ca: 5c:bc:a7:bc:c8:11:ed:84:51:fc:01:33:4f:9d:9b:dd:be:15: b7:ac:84:98:a4:08:a2:88:2c:1b:3c:5e:4a:b8:cf:be:2b:6c: 4f:d6:ff:cd:1f:f6:21:43:a0:70:a0:75:0f:b0:d9:f8:64:0d: 36:3d:3d:6a:7b:6d:57:20:3e:1b:ad:4c:19:19:e5:ec:9f:ed: 3b:a4:67:33:98:92:ae:70:c6:3b:5f:a2:b4:14:2b:ed:0d:47: e1:d8:94:a0:52:37:0f:99:3b:6f:4c:a7:19:d6:b8:75:67:27: 11:4b:76:04:23:80:98:f8:66:2a:14:30:fa:99:da:67:ca:e5: 4c:c4:82:91:e9:1e:c2:68:f8:4d:27:78:39:81:e9:e0:ab:96: 53:11:61:a9:fb:e4:13:4c:72:4e:d0:c3:4a:ae:91:ba:2c:7b: 17:b0:d4:15 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBGDizERrIw1zTE9BRVeF8C0RTFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZE ODBDRjk3NzAeFw0yNDA3MDEwMDU4MTJaFw0yNTA2MzAwMTAzMTJaMDMxMTAvBgNV BAMTKEZERjdBREQxRTg0N0FERDczQ0E4RDQzMUI4ODBGMTZFRTNEMTIzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiQ/NDv0+tF801cusQwIMA+ala 7vIAvEY6SX+pbpaXESYvYJ6etgJ64fV6qHrr58FYOfjUZ748L1oHQKSbnpbr/JEb 8PCB0T1IHt43Mq5yR3nHYDHm12VP4PG5PRCHBIJnLWDj4DV1j3X3E14ZpAUYNifq teaALdkRhE5oDzs1O1bqpuy1Wk3PrVjlFY+9b1uH/3D+IDI+rdPq0X8EDzw8gU3r 1imRjlTzs7p02jGHneqIWcpwvAOBNZaHdIljkE9KTLg747XdVARyP3AGD7Jo+CMV 2LEq6lVZYP40cqAVzOMlGXBVEwLcTwjLda/lm0b7tQeNv2L6UR9JW1lTJ4NBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU/fet0ehHrdc8qNQxuIDxbuPRI48wHwYDVR0j BBgwFoAU4ia0+oQtzmw4ZEnxT4whz9gM+XcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmMxYWI3MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMC9FMjI2QjRGQTg0 MkRDRTZDMzg2NDQ5RjE0RjhDMjFDRkQ4MENGOTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZEODBD Rjk3Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYzFhYjcxLTkxZDAtNGYwYi1i YjI5LWNiYjdkMzVlNzRiYS8wLzMxMzAzMzJlMzEzNTMzMmUzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzQzMDMzMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeZAjANBgkqhkiG 9w0BAQsFAAOCAQEAn2OCTc3SN1xPVimn53nnmCbCX+IMaB3/XVB6lRA+dYy3yKtt ERf07NEiraB3MCKTGrWOOc+7W7QupuDhhdHNuvVa2OYUXLkxfBoIhFfIOtkXH0mZ Hl/igrjKXLynvMgR7YRR/AEzT52b3b4Vt6yEmKQIoogsGzxeSrjPvitsT9b/zR/2 IUOgcKB1D7DZ+GQNNj09anttVyA+G61MGRnl7J/tO6RnM5iSrnDGO1+itBQr7Q1H 4diUoFI3D5k7b0ynGda4dWcnEUt2BCOAmPhmKhQw+pnaZ8rlTMSCkekewmj4TSd4 OYHp4KuWUxFhqfvkE0xyTtDDSq6Ruix7F7DUFQ== -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org