$ rpki-client -vvf repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa File: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (raw, json) Hash identifier: jrk5iRfhA2/aYuNJwePIzSZ3CwRT+8pvf6Jzv1A6/BM= Subject key identifier: E4:50:03:43:E3:52:AE:73:63:BC:5F:CF:CE:F3:1D:3D:F2:43:C3:6B Certificate issuer: /CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9 Certificate serial: 2011A51885ED9E60EF573140F07737DF6566FC9A Authority key identifier: EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa Signing time: Wed 10 Jan 2024 05:00:00 +0000 ROA not before: Wed 10 Jan 2024 04:55:00 +0000 ROA not after: Wed 08 Jan 2025 05:00:00 +0000 asID: 136081 IP address blocks: 103.147.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:11:a5:18:85:ed:9e:60:ef:57:31:40:f0:77:37:df:65:66:fc:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9 Validity Not Before: Jan 10 04:55:00 2024 GMT Not After : Jan 8 05:00:00 2025 GMT Subject: CN=E4500343E352AE7363BC5FCFCEF31D3DF243C36B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:ca:31:4e:68:ba:84:67:7b:87:ca:d5:3e: 62:5a:fc:a1:a6:cf:75:72:26:0c:70:17:69:f2:78: 84:44:dd:a2:6f:e8:cb:aa:6b:9d:ed:a0:06:ee:7d: a1:11:3e:18:50:4e:51:ea:a1:5e:a9:ac:53:8d:50: 84:49:7c:77:7f:90:8f:ef:56:71:57:a6:0a:32:e3: 71:34:3d:94:cf:b9:54:30:cd:0c:e1:44:9d:d5:f8: 5a:4e:ae:a7:90:28:b3:25:28:57:6e:62:8a:f9:39: 51:7b:44:c6:4d:d7:01:6a:1f:d1:cc:fb:7f:b2:27: b5:2d:68:c0:aa:c3:48:da:12:fd:77:d4:65:d3:77: d3:1b:5f:ff:1a:f7:75:0a:bd:ee:60:4c:47:b7:c0: 88:5f:b2:05:f2:fa:be:a9:93:c8:e4:0b:c4:e7:77: 6c:27:0c:11:f9:b0:9a:03:43:f7:2f:6d:97:89:ae: 8b:1f:88:81:b2:63:b7:c3:04:d3:49:9f:77:ac:96: 22:4e:e4:91:a7:eb:ee:1d:15:93:30:99:01:f9:99: 9b:07:85:5e:6a:a0:4c:ab:9f:21:e8:79:b7:5b:66: 35:15:52:24:f8:18:0d:f6:9a:3b:e8:5e:12:d9:c9: c8:9f:90:1e:a1:3b:2e:95:2f:9b:a3:fe:9d:a5:29: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:50:03:43:E3:52:AE:73:63:BC:5F:CF:CE:F3:1D:3D:F2:43:C3:6B X509v3 Authority Key Identifier: keyid:EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.218.0/24 Signature Algorithm: sha256WithRSAEncryption 57:4b:35:e9:0e:d5:d2:c6:aa:d1:f8:d3:a1:d9:61:0f:f3:c8: cd:9e:8c:aa:ef:d4:5c:0f:6c:5e:71:cb:9b:b1:cb:a3:e5:74: fd:fe:61:94:61:55:6a:d6:40:ca:ea:0a:be:7c:ec:c6:6e:e7: 1f:6c:c7:73:47:fa:2b:d3:3a:f5:0a:dc:17:1e:6c:38:30:7a: 42:66:f9:0d:74:48:52:8e:13:3a:9b:12:de:89:b9:39:9e:df: c2:20:18:ad:d3:b4:76:ea:20:ef:29:c1:8e:d1:07:72:a4:c7: 2d:40:95:20:e8:a2:13:3f:c7:be:d4:8d:62:e6:27:55:eb:b6: 38:85:3c:e9:63:a2:b5:0f:7f:1f:ba:4f:b6:b7:b6:35:78:83: 5a:fa:de:27:ad:e0:66:36:6c:db:ff:a5:92:27:50:44:37:86: 8a:50:89:5e:c7:04:7b:db:a0:b5:bd:c0:4e:dc:d7:3e:1f:6e: b1:c8:f2:ea:00:8e:ea:02:5a:5c:2e:f9:32:d7:fc:5a:68:b3: 3a:8c:25:ec:bb:19:eb:1b:18:99:7d:a5:eb:ac:c2:25:7d:8f: bc:27:63:bc:c3:93:00:83:80:84:6e:a7:9c:ba:2e:eb:7e:69: c7:b5:47:ac:8e:dc:56:a9:f2:ee:b0:8e:09:05:a1:4b:5d:38: 18:e9:e4:d9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIBGlGIXtnmDvVzFA8Hc332Vm/JowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgxN0ZD QzYwOTJGOTAeFw0yNDAxMTAwNDU1MDBaFw0yNTAxMDgwNTAwMDBaMDMxMTAvBgNV BAMTKEU0NTAwMzQzRTM1MkFFNzM2M0JDNUZDRkNFRjMxRDNERjI0M0MzNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMT8oxTmi6hGd7h8rVPmJa/KGm z3VyJgxwF2nyeIRE3aJv6Muqa53toAbufaERPhhQTlHqoV6prFONUIRJfHd/kI/v VnFXpgoy43E0PZTPuVQwzQzhRJ3V+FpOrqeQKLMlKFduYor5OVF7RMZN1wFqH9HM +3+yJ7UtaMCqw0jaEv131GXTd9MbX/8a93UKve5gTEe3wIhfsgXy+r6pk8jkC8Tn d2wnDBH5sJoDQ/cvbZeJrosfiIGyY7fDBNNJn3esliJO5JGn6+4dFZMwmQH5mZsH hV5qoEyrnyHoebdbZjUVUiT4GA32mjvoXhLZycifkB6hOy6VL5uj/p2lKWVPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU5FADQ+NSrnNjvF/PzvMdPfJDw2swHwYDVR0j BBgwFoAU6xfkary3ilHkxbmhS9eBf8xgkvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjYwNTg2ZC1iMDI3LTQ2NTYtYjYzMS0wNTg5NmI1NDM3ODIvMC9FQjE3RTQ2QUJD Qjc4QTUxRTRDNUI5QTE0QkQ3ODE3RkNDNjA5MkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgxN0ZDQzYw OTJGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNjA1ODZkLWIwMjctNDY1Ni1i NjMxLTA1ODk2YjU0Mzc4Mi8wLzMxMzAzMzJlMzEzNDM3MmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzMDM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk9owDQYJ KoZIhvcNAQELBQADggEBAFdLNekO1dLGqtH406HZYQ/zyM2ejKrv1FwPbF5xy5ux y6PldP3+YZRhVWrWQMrqCr587MZu5x9sx3NH+ivTOvUK3BcebDgwekJm+Q10SFKO EzqbEt6JuTme38IgGK3TtHbqIO8pwY7RB3Kkxy1AlSDoohM/x77UjWLmJ1XrtjiF POljorUPfx+6T7a3tjV4g1r63iet4GY2bNv/pZInUEQ3hopQiV7HBHvboLW9wE7c 1z4fbrHI8uoAjuoCWlwu+TLX/FposzqMJey7GesbGJl9peuswiV9j7wnY7zDkwCD gIRup5y6Lut+ace1R6yO3Fap8u6wjgkFoUtdOBjp5Nk= -----END CERTIFICATE-----Generated at Sat Jun 1 09:09:44 2024 by rpki-client on console-fra.rpki-client.org