$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa File: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (raw, json) Hash identifier: g83LIJ3ExQtEGXGTQd6P8xh7CcOhD81osnr+YMgS0Qs= Subject key identifier: 95:C3:66:8C:57:81:65:C8:70:CF:8E:5E:71:B8:00:5B:27:25:39:A8 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 024E29ACDC40E88387B525B9997986B22194833E Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa Signing time: Thu 13 Jun 2024 16:00:00 +0000 ROA not before: Thu 13 Jun 2024 15:55:00 +0000 ROA not after: Thu 12 Jun 2025 16:00:00 +0000 asID: 131705 IP address blocks: 103.154.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 13:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4e:29:ac:dc:40:e8:83:87:b5:25:b9:99:79:86:b2:21:94:83:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Jun 13 15:55:00 2024 GMT Not After : Jun 12 16:00:00 2025 GMT Subject: CN=95C3668C578165C870CF8E5E71B8005B272539A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:6d:11:20:9a:0a:77:1e:aa:3c:74:1f:20:e7: 84:8d:66:d1:6b:c1:e5:4d:29:67:e4:78:a0:0f:bd: df:96:e8:d0:d1:32:c6:3f:b0:22:39:ba:39:72:73: 0c:f1:0f:51:e8:58:d4:32:60:97:ec:73:ec:89:9c: 62:99:11:78:d8:aa:82:c7:8a:47:72:3c:51:f9:71: a2:af:83:c9:b9:c4:9d:22:e8:26:e0:ff:d2:1c:32: ec:ee:c9:78:72:d2:fc:c1:92:8b:9d:63:8a:cd:da: d6:df:a9:dc:cc:5f:b4:d6:78:f4:b0:9a:32:39:57: 5c:70:12:3d:47:b6:a2:6e:f0:37:6f:25:a3:84:75: 03:7d:90:c8:1a:fb:3d:2d:03:ca:4f:67:e0:44:cb: 7f:ba:19:33:e6:7d:73:e6:be:25:13:3b:0d:8f:4c: c7:80:8b:e6:a9:82:e6:e7:07:af:35:de:33:5e:1f: 18:aa:30:ae:b0:81:28:ae:92:54:51:47:f4:70:68: 49:8d:5b:fb:ef:3f:9d:10:b8:14:23:ed:f5:51:a1: 1a:5c:09:14:2f:e1:05:c1:9e:98:6a:3a:b2:2d:68: 50:d6:00:31:45:43:46:5d:48:43:b5:25:6f:73:6c: fa:08:82:9e:3e:39:bb:32:49:96:70:15:9a:7a:4a: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C3:66:8C:57:81:65:C8:70:CF:8E:5E:71:B8:00:5B:27:25:39:A8 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.178.0/23 Signature Algorithm: sha256WithRSAEncryption 42:85:03:5d:9e:e9:eb:b2:dc:b2:2e:66:db:01:95:0d:1e:50: ad:3c:04:28:bb:ee:e6:4e:8c:da:2d:90:7e:f5:aa:ce:03:a7: ca:ea:6c:93:78:7a:d9:f6:1e:86:f0:85:d9:ac:3c:21:69:cf: da:1d:91:1d:68:ae:e2:e7:8a:c9:eb:d0:5f:e0:8e:ba:5b:9d: a4:e5:9a:49:1d:59:49:68:8b:11:34:e2:a4:da:b4:50:7d:7c: 8a:9f:fc:49:d7:56:bf:d8:ad:79:78:f4:6b:1c:12:84:5e:57: a5:1e:52:25:fd:81:f6:99:21:28:15:9f:d6:cc:56:5c:40:51: fb:d7:7f:9e:60:b8:81:be:9a:31:15:52:14:2e:15:9a:d0:f7: e4:1f:af:6a:f9:40:84:c8:ef:61:54:3f:b8:2e:85:ca:cd:c9: 80:08:da:47:f6:17:f8:06:ab:eb:e6:a3:12:52:1e:98:bb:cc: 02:5b:55:33:44:09:64:d8:f8:52:75:27:09:8b:35:00:5d:d0: b9:69:36:04:f5:d4:28:4b:34:f8:56:b8:46:41:c0:d1:32:80: 87:39:8e:fb:01:05:90:d4:97:80:3e:6d:a7:72:c7:ff:a5:08: 8a:2b:41:5e:1b:c4:e7:bd:00:23:94:71:fc:55:15:16:0f:91: d8:d0:ef:00 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAk4prNxA6IOHtSW5mXmGsiGUgz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNDA2MTMxNTU1MDBaFw0yNTA2MTIxNjAwMDBaMDMxMTAvBgNV BAMTKDk1QzM2NjhDNTc4MTY1Qzg3MENGOEU1RTcxQjgwMDVCMjcyNTM5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6bREgmgp3Hqo8dB8g54SNZtFr weVNKWfkeKAPvd+W6NDRMsY/sCI5ujlycwzxD1HoWNQyYJfsc+yJnGKZEXjYqoLH ikdyPFH5caKvg8m5xJ0i6Cbg/9IcMuzuyXhy0vzBkoudY4rN2tbfqdzMX7TWePSw mjI5V1xwEj1HtqJu8DdvJaOEdQN9kMga+z0tA8pPZ+BEy3+6GTPmfXPmviUTOw2P TMeAi+apgubnB6813jNeHxiqMK6wgSiuklRRR/RwaEmNW/vvP50QuBQj7fVRoRpc CRQv4QXBnphqOrItaFDWADFFQ0ZdSEO1JW9zbPoIgp4+ObsySZZwFZp6SmfpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUlcNmjFeBZchwz45ecbgAWyclOagwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05 OWE0LTBmNDVlOGVjZjU3Ni8wLzMxMzAzMzJlMzEzNTM0MmUzMTM3MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnmrIwDQYJ KoZIhvcNAQELBQADggEBAEKFA12e6euy3LIuZtsBlQ0eUK08BCi77uZOjNotkH71 qs4Dp8rqbJN4etn2HobwhdmsPCFpz9odkR1oruLnisnr0F/gjrpbnaTlmkkdWUlo ixE04qTatFB9fIqf/EnXVr/YrXl49GscEoReV6UeUiX9gfaZISgVn9bMVlxAUfvX f55guIG+mjEVUhQuFZrQ9+Qfr2r5QITI72FUP7guhcrNyYAI2kf2F/gGq+vmoxJS Hpi7zAJbVTNECWTY+FJ1JwmLNQBd0LlpNgT11ChLNPhWuEZBwNEygIc5jvsBBZDU l4A+badyx/+lCIorQV4bxOe9ACOUcfxVFRYPkdjQ7wA= -----END CERTIFICATE-----Generated at Fri Jun 21 12:33:58 2024 by rpki-client on console-ams.rpki-client.org