$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa File: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (raw, json) Hash identifier: xadTEIHtejR8XFJ0UP4dte8N2PBaecP1Ye7ZglYgbxc= Subject key identifier: 1D:AB:3E:18:FF:F9:F2:B2:65:10:F3:70:33:C7:EA:EA:01:F6:EE:36 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 5CA891E3FFE54E53384A33DAEFB6AB875B3476B7 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa Signing time: Tue 09 Apr 2024 10:00:01 +0000 ROA not before: Tue 09 Apr 2024 09:55:01 +0000 ROA not after: Tue 08 Apr 2025 10:00:01 +0000 asID: 150935 IP address blocks: 103.109.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 03:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a8:91:e3:ff:e5:4e:53:38:4a:33:da:ef:b6:ab:87:5b:34:76:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Apr 9 09:55:01 2024 GMT Not After : Apr 8 10:00:01 2025 GMT Subject: CN=1DAB3E18FFF9F2B26510F37033C7EAEA01F6EE36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:d3:2c:9a:51:78:da:72:2f:4f:cb:08:15: cf:34:2a:4e:32:e0:eb:00:cb:38:71:8a:ba:69:1b: 43:b5:89:47:8d:92:01:32:00:d8:8e:9a:d6:69:cf: 3c:82:dd:87:be:2d:06:0a:e6:76:5b:e5:53:c2:e2: 5d:1c:7d:63:57:81:28:79:2d:b5:18:5a:96:af:ce: 70:4c:49:62:45:42:f9:04:4e:56:a4:af:17:05:4e: 20:01:15:f5:6d:5c:90:6e:33:f7:6d:a6:2a:ad:46: c2:02:ce:0b:40:b3:bd:26:d9:cc:c0:ec:58:64:43: 61:23:cb:82:36:5d:b6:65:40:97:75:ef:3c:e8:22: 96:00:ce:a9:c1:1f:5c:d2:32:9c:00:ad:c7:23:d8: e3:da:c4:11:d5:57:5f:97:4c:98:2b:01:2d:5f:7b: 5e:75:8d:a6:20:45:94:94:f0:15:0b:a5:01:00:08: cd:db:53:5d:94:26:a9:62:3b:b7:85:70:85:0b:71: 8f:3e:31:51:d4:ca:f8:47:17:d3:fe:f5:3e:f5:e7: 33:a6:c9:23:25:1a:4c:e3:f8:a1:5f:aa:f5:90:0a: 75:11:a7:55:c5:ab:24:31:61:e1:00:e3:8f:a7:84: 53:2b:77:b8:94:ee:60:00:c2:90:e8:05:78:eb:07: 9f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AB:3E:18:FF:F9:F2:B2:65:10:F3:70:33:C7:EA:EA:01:F6:EE:36 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.207.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:61:f8:ab:0c:e5:b9:f3:68:c0:60:24:68:50:4c:08:7c:4b: 6c:50:64:49:14:e5:3a:45:ef:ec:2a:51:8f:be:e6:c7:5c:12: 9e:f8:b4:12:99:f8:23:f2:21:8b:47:84:3c:dc:02:01:90:9b: 09:93:ef:96:f0:27:8e:36:67:47:b1:82:bd:fe:f5:ff:fd:91: 69:cb:80:c7:4f:2e:c3:48:19:a2:22:cc:b5:d7:e2:06:63:84: 20:a6:fc:85:28:aa:da:a4:10:81:78:5f:5e:48:25:b9:0e:db: ca:bb:1f:9b:4d:1c:c4:df:32:a8:c2:aa:76:bd:94:fa:47:b7: 39:1d:b7:30:aa:20:5d:00:49:72:a7:af:50:dd:14:a5:d3:99: b9:f4:a4:b5:98:e9:b5:15:ec:ba:06:a1:9a:09:9f:ff:88:05: b5:f9:ca:70:a4:0f:3e:c9:30:a6:cf:2d:8a:66:13:61:e4:40: fc:65:f8:9c:91:cd:4a:83:5b:ab:22:0c:bd:b1:f4:c3:48:45: 7a:5e:a6:ca:63:e6:6e:da:0a:dc:95:89:b4:21:68:dc:0d:30: 6e:d4:46:8b:1a:4c:d1:ae:79:f4:d0:93:11:13:af:2b:72:01: 16:e5:92:44:f1:fd:cb:c7:c9:21:41:62:3c:ea:bd:f6:76:35: 3a:13:be:5a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXKiR4//lTlM4SjPa77arh1s0drcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNDA0MDkwOTU1MDFaFw0yNTA0MDgxMDAwMDFaMDMxMTAvBgNV BAMTKDFEQUIzRTE4RkZGOUYyQjI2NTEwRjM3MDMzQzdFQUVBMDFGNkVFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPdMsmlF42nIvT8sIFc80Kk4y 4OsAyzhxirppG0O1iUeNkgEyANiOmtZpzzyC3Ye+LQYK5nZb5VPC4l0cfWNXgSh5 LbUYWpavznBMSWJFQvkETlakrxcFTiABFfVtXJBuM/dtpiqtRsICzgtAs70m2czA 7FhkQ2Ejy4I2XbZlQJd17zzoIpYAzqnBH1zSMpwArccj2OPaxBHVV1+XTJgrAS1f e151jaYgRZSU8BULpQEACM3bU12UJqliO7eFcIULcY8+MVHUyvhHF9P+9T715zOm ySMlGkzj+KFfqvWQCnURp1XFqyQxYeEA44+nhFMrd7iU7mAAwpDoBXjrB5+xAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUHas+GP/58rJlEPNwM8fq6gH27jYwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjODg5MmViLWRkYzAtNGNiNi05 NTdjLWI2NTNmMjhiYmYzOS8wLzMxMzAzMzJlMzEzMDM5MmUzMjMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTMzMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbc8wDQYJ KoZIhvcNAQELBQADggEBAD5h+KsM5bnzaMBgJGhQTAh8S2xQZEkU5TpF7+wqUY++ 5sdcEp74tBKZ+CPyIYtHhDzcAgGQmwmT75bwJ442Z0exgr3+9f/9kWnLgMdPLsNI GaIizLXX4gZjhCCm/IUoqtqkEIF4X15IJbkO28q7H5tNHMTfMqjCqna9lPpHtzkd tzCqIF0ASXKnr1DdFKXTmbn0pLWY6bUV7LoGoZoJn/+IBbX5ynCkDz7JMKbPLYpm E2HkQPxl+JyRzUqDW6siDL2x9MNIRXpepspj5m7aCtyVibQhaNwNMG7URosaTNGu efTQkxETrytyARblkkTx/cvHySFBYjzqvfZ2NToTvlo= -----END CERTIFICATE-----Generated at Sat Jun 1 23:00:30 2024 by rpki-client on console-ams.rpki-client.org