$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa File: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (raw, json) Hash identifier: U+CH2i3URdAWsdBZxw1lavRNuU91HKxrcLo4vg8YqCw= Subject key identifier: 42:59:CE:9B:BC:FD:C2:0F:86:18:43:FB:53:54:62:CE:41:1D:EB:10 Certificate issuer: /CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Certificate serial: 2C9B8E8131E326877540BCCCF7E17A154F3471A8 Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa Signing time: Mon 31 Jul 2023 00:07:36 +0000 ROA not before: Mon 31 Jul 2023 00:02:36 +0000 ROA not after: Mon 29 Jul 2024 00:07:36 +0000 asID: 135448 IP address blocks: 103.117.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 19:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9b:8e:81:31:e3:26:87:75:40:bc:cc:f7:e1:7a:15:4f:34:71:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Validity Not Before: Jul 31 00:02:36 2023 GMT Not After : Jul 29 00:07:36 2024 GMT Subject: CN=4259CE9BBCFDC20F861843FB535462CE411DEB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8a:4d:9b:32:1c:0b:e1:36:ea:17:8e:99:dd: 1a:dc:74:8c:73:14:ec:8e:9f:ca:4a:b3:8d:16:05: 1e:34:2c:69:04:cb:e3:5e:1f:77:53:bd:23:8f:3b: 17:eb:ca:f2:5c:da:e3:bd:5f:d6:8f:31:20:e0:de: 14:25:26:4a:12:b9:9f:c1:cb:63:cb:a3:cb:cc:f9: 83:a2:e3:9c:c2:cc:3d:97:c3:76:02:99:30:48:de: 67:61:3c:bd:02:bf:7d:6f:a8:3b:26:a4:3a:23:e7: 30:c7:7e:94:8d:38:ab:3a:67:df:0d:b3:75:d5:88: 5d:7e:d6:7c:94:cb:74:35:b1:8e:95:31:88:62:56: 66:cb:0e:2b:72:47:de:75:a2:1e:44:12:3d:6e:50: 49:ad:ee:c1:a4:b7:91:dc:93:be:41:30:72:76:06: 85:a5:52:01:47:75:39:27:47:8e:77:a0:d4:48:f6: 2f:03:04:04:c0:cd:12:7d:33:cf:09:2b:54:8c:21: 50:8c:ff:6f:8f:44:73:d0:e2:80:52:56:ac:c5:26: 02:72:6e:d1:d5:43:21:bd:4b:37:07:3b:f2:43:0c: 88:a3:be:21:97:92:ad:0d:76:d2:ce:ce:a9:f2:b2: 32:40:b8:c8:b1:33:38:ca:53:23:ae:4b:66:a3:4f: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:59:CE:9B:BC:FD:C2:0F:86:18:43:FB:53:54:62:CE:41:1D:EB:10 X509v3 Authority Key Identifier: keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.117.82.0/23 Signature Algorithm: sha256WithRSAEncryption 14:3b:a1:49:ba:bc:45:1a:46:ac:b9:00:53:dc:ea:e1:bb:8c: f6:f8:c4:8e:1b:05:12:90:87:34:97:64:fb:be:35:54:5a:01: 22:84:f0:27:c4:4e:48:1a:9f:cf:26:dc:0c:b5:ef:84:3c:38: ce:b9:b8:75:b5:52:5a:78:42:31:19:cf:5d:52:76:eb:92:1f: c9:06:a6:ff:b3:a4:be:36:89:7e:fc:c3:92:ca:70:8e:cc:71: 90:9a:7d:97:b5:1b:da:49:2b:4a:04:c5:5e:e9:b1:07:d4:b0: ed:f7:b1:d8:1a:1b:9c:94:ac:e2:85:ac:1d:48:76:4d:4c:10: 4f:f4:94:63:17:f6:3b:a6:de:ac:16:7f:25:b5:aa:86:e8:02: 6d:59:35:60:88:b7:a2:c0:3f:28:dd:20:56:d0:db:da:38:b1: 56:47:cc:da:7f:22:2f:0a:dc:20:f3:bc:5c:43:7c:5d:6b:29: c1:af:31:d3:f1:bc:fe:a9:99:6d:2a:c4:3f:5a:c0:d7:f0:39: 3e:5b:cd:dc:00:0b:7b:4f:e0:48:27:5b:90:06:e5:f0:4e:74: 23:00:2e:63:fb:07:47:5f:66:b4:4a:af:d2:2b:71:da:de:10: 1b:bb:bb:c0:b9:49:a5:2c:96:99:04:d3:e9:19:0c:0c:e4:84: 31:7e:a4:11 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULJuOgTHjJod1QLzM9+F6FU80cagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFG Mjg4MTg4OTAeFw0yMzA3MzEwMDAyMzZaFw0yNDA3MjkwMDA3MzZaMDMxMTAvBgNV BAMTKDQyNTlDRTlCQkNGREMyMEY4NjE4NDNGQjUzNTQ2MkNFNDExREVCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvik2bMhwL4TbqF46Z3RrcdIxz FOyOn8pKs40WBR40LGkEy+NeH3dTvSOPOxfryvJc2uO9X9aPMSDg3hQlJkoSuZ/B y2PLo8vM+YOi45zCzD2Xw3YCmTBI3mdhPL0Cv31vqDsmpDoj5zDHfpSNOKs6Z98N s3XViF1+1nyUy3Q1sY6VMYhiVmbLDityR951oh5EEj1uUEmt7sGkt5Hck75BMHJ2 BoWlUgFHdTknR453oNRI9i8DBATAzRJ9M88JK1SMIVCM/2+PRHPQ4oBSVqzFJgJy btHVQyG9SzcHO/JDDIijviGXkq0NdtLOzqnysjJAuMixMzjKUyOuS2ajTxENAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQlnOm7z9wg+GGEP7U1RizkEd6xAwHwYDVR0j BBgwFoAUAzFdDpZqhbh46pBYuM8D6vKIGIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTlhY2I5Ny02ZTg3LTRlMzEtYTU2OS1hMjY2MGRmNGYyYjgvMC8wMzMxNUQwRTk2 NkE4NUI4NzhFQTkwNThCOENGMDNFQUYyODgxODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFGMjg4 MTg4OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1OWFjYjk3LTZlODctNGUzMS1h NTY5LWEyNjYwZGY0ZjJiOC8wLzMxMzAzMzJlMzEzMTM3MmUzODMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ3VSMA0GCSqG SIb3DQEBCwUAA4IBAQAUO6FJurxFGkasuQBT3Orhu4z2+MSOGwUSkIc0l2T7vjVU WgEihPAnxE5IGp/PJtwMte+EPDjOubh1tVJaeEIxGc9dUnbrkh/JBqb/s6S+Nol+ /MOSynCOzHGQmn2XtRvaSStKBMVe6bEH1LDt97HYGhuclKzihawdSHZNTBBP9JRj F/Y7pt6sFn8ltaqG6AJtWTVgiLeiwD8o3SBW0NvaOLFWR8zafyIvCtwg87xcQ3xd aynBrzHT8bz+qZltKsQ/WsDX8Dk+W83cAAt7T+BIJ1uQBuXwTnQjAC5j+wdHX2a0 Sq/SK3Ha3hAbu7vAuUmlLJaZBNPpGQwM5IQxfqQR -----END CERTIFICATE-----Generated at Tue Apr 23 18:27:31 2024 by rpki-client on console-fra.rpki-client.org