$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa File: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (raw, json) Hash identifier: HpFyn+Irpjnomz9LEKiiz8iiQr9zpivirAs35bWyOJc= Subject key identifier: 4E:4C:AB:64:7E:B3:0C:4A:00:BF:3C:EF:9F:3C:29:52:4A:5A:3B:A7 Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 121B09635A65BF3FFCD1A3E3134CC4F427661C68 Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa Signing time: Thu 19 Oct 2023 19:53:10 +0000 ROA not before: Thu 19 Oct 2023 19:48:10 +0000 ROA not after: Thu 17 Oct 2024 19:53:10 +0000 asID: 138866 IP address blocks: 103.142.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 20:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1b:09:63:5a:65:bf:3f:fc:d1:a3:e3:13:4c:c4:f4:27:66:1c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Oct 19 19:48:10 2023 GMT Not After : Oct 17 19:53:10 2024 GMT Subject: CN=4E4CAB647EB30C4A00BF3CEF9F3C29524A5A3BA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:12:0b:3d:00:fc:f8:39:56:20:41:67:3e: 7d:ed:f3:6e:7b:19:19:56:8a:88:b1:94:ac:4b:4b: 3d:4a:87:1c:18:ac:8b:c1:b1:5f:80:56:42:43:c6: 6e:b7:75:c2:ac:92:2a:a0:e1:47:c0:12:42:e3:63: cc:33:a7:06:ca:ae:39:e6:28:01:2b:22:ac:bf:48: 6e:c4:87:55:c0:aa:b6:15:69:45:9e:02:dd:4b:fb: c0:f9:80:d9:bd:7a:b3:f5:9c:06:e3:35:d6:ec:2d: 29:23:a0:d0:f5:d9:88:8a:8e:f3:df:58:74:9f:cb: 65:5b:29:29:bf:9b:8b:f4:fb:f7:11:92:0f:43:d7: e9:2b:e0:a2:ae:d4:f7:d6:d2:fa:08:a6:6e:17:b6: e2:6a:cd:2b:54:86:7f:ff:f7:26:30:1c:2d:95:15: 0b:a1:a2:05:87:e7:5e:5f:c5:4c:f7:c1:21:6b:44: 25:96:db:d3:54:ac:d2:49:50:15:f2:e1:9f:33:29: 95:11:a0:c6:42:ea:8a:b2:a3:37:4e:53:08:0c:84: 81:ca:2c:2e:a2:17:80:fb:29:35:56:78:eb:53:18: 44:16:1b:5b:84:24:27:b6:74:ba:fc:29:4b:7d:db: 7b:60:11:d2:fe:5c:f9:0c:db:ed:65:ac:a8:52:7d: fb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4C:AB:64:7E:B3:0C:4A:00:BF:3C:EF:9F:3C:29:52:4A:5A:3B:A7 X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.194.0/24 Signature Algorithm: sha256WithRSAEncryption 06:db:b3:a3:5f:eb:96:df:75:9d:63:ce:78:38:9f:65:f0:96: cd:3e:58:7a:26:63:81:ee:3c:d8:d2:26:e8:e5:5c:8a:ab:8f: 8d:de:31:d4:24:a3:9d:d1:8e:b6:4b:ab:d5:fa:bc:0b:5a:bf: 2a:3e:47:4f:0c:70:e4:9c:ff:70:32:00:53:53:54:a0:cb:22: fd:dd:38:66:e9:25:7e:c9:eb:47:5d:ec:5e:db:03:15:9b:07: 40:ed:67:8f:2a:f0:c9:43:88:53:41:85:3a:1a:60:c5:52:fd: 2a:18:15:9b:07:3b:3c:39:49:10:ff:d3:c9:1c:a4:aa:4d:a3: 2d:87:fd:87:36:4c:73:08:25:91:d4:49:e3:08:a1:b1:73:40: a2:c5:d1:51:f9:39:38:e3:8e:75:53:b1:5a:77:54:3e:b6:0e: ef:17:f7:81:ac:f3:96:15:44:5f:4c:ab:33:a4:e6:dd:1c:a9: 51:8e:78:99:d5:53:c3:ca:d6:07:46:ec:dc:d5:34:95:f3:db: d2:27:1b:28:93:4f:e5:cb:0b:d5:5d:c3:0b:89:01:f9:38:ee: 1f:c3:10:c1:fc:0c:53:7c:04:37:00:89:c7:d5:1e:88:36:4d: 79:93:6a:05:c5:fb:a9:ea:50:f2:05:a5:bc:c2:cb:60:5f:a8: 88:11:f2:a0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEhsJY1plvz/80aPjE0zE9CdmHGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yMzEwMTkxOTQ4MTBaFw0yNDEwMTcxOTUzMTBaMDMxMTAvBgNV BAMTKDRFNENBQjY0N0VCMzBDNEEwMEJGM0NFRjlGM0MyOTUyNEE1QTNCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13RILPQD8+DlWIEFnPn3t8257 GRlWioixlKxLSz1KhxwYrIvBsV+AVkJDxm63dcKskiqg4UfAEkLjY8wzpwbKrjnm KAErIqy/SG7Eh1XAqrYVaUWeAt1L+8D5gNm9erP1nAbjNdbsLSkjoND12YiKjvPf WHSfy2VbKSm/m4v0+/cRkg9D1+kr4KKu1PfW0voIpm4XtuJqzStUhn//9yYwHC2V FQuhogWH515fxUz3wSFrRCWW29NUrNJJUBXy4Z8zKZURoMZC6oqyozdOUwgMhIHK LC6iF4D7KTVWeOtTGEQWG1uEJCe2dLr8KUt923tgEdL+XPkM2+1lrKhSffv3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUTkyrZH6zDEoAvzzvnzwpUkpaO6cwHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyYWEyZDEwLTNmYWEtNDI3Mi1i ZTFmLTgxMDI5NTdiNjVlNi8wLzMxMzAzMzJlMzEzNDMyMmUzMTM5MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjsIwDQYJ KoZIhvcNAQELBQADggEBAAbbs6Nf65bfdZ1jzng4n2Xwls0+WHomY4HuPNjSJujl XIqrj43eMdQko53RjrZLq9X6vAtavyo+R08McOSc/3AyAFNTVKDLIv3dOGbpJX7J 60dd7F7bAxWbB0DtZ48q8MlDiFNBhToaYMVS/SoYFZsHOzw5SRD/08kcpKpNoy2H /Yc2THMIJZHUSeMIobFzQKLF0VH5OTjjjnVTsVp3VD62Du8X94Gs85YVRF9MqzOk 5t0cqVGOeJnVU8PK1gdG7NzVNJXz29InGyiTT+XLC9VdwwuJAfk47h/DEMH8DFN8 BDcAicfVHog2TXmTagXF+6nqUPIFpbzCy2BfqIgR8qA= -----END CERTIFICATE-----Generated at Thu May 2 17:16:34 2024 by rpki-client on console-ams.rpki-client.org