$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa File: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: 6CpN8aBw/RZzk7vZX82p71fUs1ZsrBjhdxlC+CO80+A= Subject key identifier: 17:F7:C1:0A:DC:B4:A0:B6:C3:D8:FD:F5:78:CA:CB:03:4B:17:49:81 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 37FF8D0ED80ECDA687C8DBB6751C76F977BBADB1 Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa Signing time: Fri 02 Aug 2024 08:00:01 +0000 ROA not before: Fri 02 Aug 2024 07:55:01 +0000 ROA not after: Fri 01 Aug 2025 08:00:01 +0000 asID: 17995 IP address blocks: 103.162.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 05:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ff:8d:0e:d8:0e:cd:a6:87:c8:db:b6:75:1c:76:f9:77:bb:ad:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Aug 2 07:55:01 2024 GMT Not After : Aug 1 08:00:01 2025 GMT Subject: CN=17F7C10ADCB4A0B6C3D8FDF578CACB034B174981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a5:7f:b7:97:ce:4b:1d:65:e6:36:3b:85:93: 9d:38:81:83:64:f9:94:29:56:eb:73:ac:08:35:7d: 08:19:fa:75:a8:1c:7f:2f:76:c5:03:57:e4:08:13: bd:80:72:3e:c0:c1:3a:b0:83:b9:cd:03:db:54:a0: 9f:55:ee:7a:41:bf:09:57:6f:c4:97:b9:5b:6b:e9: dd:a3:27:5c:bd:42:00:22:1c:64:3a:87:e1:0c:49: 7f:25:80:3c:92:ac:f9:80:f6:89:d5:1d:0e:5e:34: db:ef:a2:81:57:4b:7e:47:38:da:94:eb:85:56:8b: 92:5f:05:b1:fc:fd:9f:1e:b0:4c:b0:d3:df:24:5a: 81:83:cf:48:5b:5f:22:8f:92:60:9e:24:45:24:6a: c5:9e:fd:92:a7:62:df:66:2c:ce:bb:c5:b1:af:3f: 3d:83:b5:2e:7d:64:2d:8f:19:04:12:16:17:d6:ca: 88:fa:61:b2:8a:8d:2d:e4:43:fa:eb:7a:48:1c:30: e6:90:f0:49:d8:21:94:1f:d7:10:d7:13:01:5c:64: 13:5c:c0:7a:64:00:f4:95:55:e4:4d:dd:9d:21:33: 2b:0b:d2:aa:d5:bd:c6:2c:b9:b3:82:41:2e:28:ef: b0:ac:e2:87:c5:c3:a9:93:6f:f2:25:3e:4a:9e:9a: a3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F7:C1:0A:DC:B4:A0:B6:C3:D8:FD:F5:78:CA:CB:03:4B:17:49:81 X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.146.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:4e:6e:4d:48:31:c1:56:29:ba:7f:29:d7:13:0f:87:28:64: b2:0d:00:8b:af:17:4c:99:10:5f:77:45:ac:b0:02:c5:58:1f: 0c:eb:05:08:84:5f:16:17:23:b5:63:45:09:18:af:ea:34:3f: bc:1a:64:a7:4e:25:7b:5b:58:0c:af:5a:fe:7b:06:21:b9:6f: 0a:cb:fc:bf:71:f1:e4:8b:89:66:6f:fc:a1:25:c0:c1:94:5a: 5d:2b:21:ce:95:c8:d4:a1:25:73:33:83:47:5b:ce:6f:fd:48: 3f:88:83:6e:fd:25:49:77:35:c2:c8:86:0a:94:54:a2:f1:71: 71:f4:ab:b1:de:9d:62:0f:0b:98:4e:0d:97:1a:d3:ed:2f:b7: a6:82:b8:ad:d5:7d:e5:bc:b5:8d:ea:cf:d6:66:28:ab:6e:12: 12:d5:df:3c:89:0c:ca:a1:3b:17:e4:f5:ef:cf:3e:0d:2a:32: a5:b1:88:34:63:35:15:9a:fd:34:a6:4f:08:2e:6c:f2:70:df: 7a:03:fa:e0:6d:47:56:99:87:6f:47:60:86:b4:d8:c0:9c:c8: 70:e9:69:d8:59:77:12:87:80:eb:14:4a:e2:54:80:14:58:99: 69:9c:78:d1:f6:15:1b:01:ab:5f:d0:a5:1a:64:8b:9d:93:b2: 31:e3:fd:42 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUN/+NDtgOzaaHyNu2dRx2+Xe7rbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNDA4MDIwNzU1MDFaFw0yNTA4MDEwODAwMDFaMDMxMTAvBgNV BAMTKDE3RjdDMTBBRENCNEEwQjZDM0Q4RkRGNTc4Q0FDQjAzNEIxNzQ5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLpX+3l85LHWXmNjuFk504gYNk +ZQpVutzrAg1fQgZ+nWoHH8vdsUDV+QIE72Acj7AwTqwg7nNA9tUoJ9V7npBvwlX b8SXuVtr6d2jJ1y9QgAiHGQ6h+EMSX8lgDySrPmA9onVHQ5eNNvvooFXS35HONqU 64VWi5JfBbH8/Z8esEyw098kWoGDz0hbXyKPkmCeJEUkasWe/ZKnYt9mLM67xbGv Pz2DtS59ZC2PGQQSFhfWyoj6YbKKjS3kQ/rrekgcMOaQ8EnYIZQf1xDXEwFcZBNc wHpkAPSVVeRN3Z0hMysL0qrVvcYsubOCQS4o77Cs4ofFw6mTb/IlPkqemqPxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUF/fBCty0oLbD2P31eMrLA0sXSYEwHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwNTIwYjU0LTNiYTctNDYzMS1h ZjBiLTU1OTg0YjBiYTdmMi8wLzMxMzAzMzJlMzEzNjMyMmUzMTM0MzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6KSMA0GCSqG SIb3DQEBCwUAA4IBAQBeTm5NSDHBVim6fynXEw+HKGSyDQCLrxdMmRBfd0WssALF WB8M6wUIhF8WFyO1Y0UJGK/qND+8GmSnTiV7W1gMr1r+ewYhuW8Ky/y/cfHki4lm b/yhJcDBlFpdKyHOlcjUoSVzM4NHW85v/Ug/iINu/SVJdzXCyIYKlFSi8XFx9Kux 3p1iDwuYTg2XGtPtL7emgrit1X3lvLWN6s/WZiirbhIS1d88iQzKoTsX5PXvzz4N KjKlsYg0YzUVmv00pk8ILmzycN96A/rgbUdWmYdvR2CGtNjAnMhw6WnYWXcSh4Dr FEriVIAUWJlpnHjR9hUbAatf0KUaZIudk7Ix4/1C -----END CERTIFICATE-----Generated at Sat Nov 23 07:43:26 2024 by rpki-client on console-ams.rpki-client.org