$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa File: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (raw, json) Hash identifier: O8zWM7ESi9hMNBemGnyRTFqIERd3v8FrjHKZaF4s2lE= Subject key identifier: ED:4D:87:50:09:E5:C8:BD:93:AE:4F:B4:42:C3:1F:E0:B6:C7:CA:D0 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 4B40276FCFEED818FC3AE7B0D79D5BAA87CE2EF4 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa Signing time: Fri 25 Aug 2023 01:00:00 +0000 ROA not before: Fri 25 Aug 2023 00:55:00 +0000 ROA not after: Fri 23 Aug 2024 01:00:00 +0000 asID: 55701 IP address blocks: 103.112.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 16:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:40:27:6f:cf:ee:d8:18:fc:3a:e7:b0:d7:9d:5b:aa:87:ce:2e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Aug 25 00:55:00 2023 GMT Not After : Aug 23 01:00:00 2024 GMT Subject: CN=ED4D875009E5C8BD93AE4FB442C31FE0B6C7CAD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4e:00:7c:a0:79:34:3f:8e:07:ad:d0:7d:a2: 3d:ae:be:fd:07:8a:d0:a1:76:34:a6:2e:8e:9b:05: 19:26:49:22:76:e3:67:74:18:42:30:05:ef:ee:6d: cd:9c:d9:f8:b5:79:6c:3b:81:44:87:e5:ff:c1:75: 14:90:65:fe:f6:39:e1:46:61:df:aa:08:18:0e:e4: 9b:93:7c:c8:0c:16:e3:54:47:14:24:31:6b:e9:e1: 67:4d:aa:db:01:fc:b3:f9:0a:85:85:76:62:ba:2d: 53:4e:d5:27:6f:e9:9e:36:2e:74:dc:88:e6:4f:c1: b9:95:2c:1c:89:cc:75:05:8c:8e:05:c7:fc:73:68: 04:5d:e6:88:48:25:84:fe:a4:dc:70:47:67:a7:23: cc:24:64:2b:81:b9:3c:a7:88:37:f3:48:4e:a2:d3: 7b:d9:e7:4a:41:dd:b0:cf:d2:7e:9a:b5:f1:2c:58: 68:0c:07:aa:f9:6d:f1:fd:cb:2a:22:27:de:d5:c2: a2:58:2b:91:fc:4d:d8:61:6f:8a:53:a8:d0:6b:6d: 85:5d:b9:60:b6:d1:a4:6e:dd:9b:1c:a7:fe:25:6f: ee:04:6f:e7:f5:f2:c4:c4:6d:13:16:15:77:de:a1: 3f:1a:74:28:69:20:2a:9f:39:58:c6:19:26:0b:a4: de:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4D:87:50:09:E5:C8:BD:93:AE:4F:B4:42:C3:1F:E0:B6:C7:CA:D0 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.139.0/24 Signature Algorithm: sha256WithRSAEncryption 36:5a:5c:68:19:71:47:cc:a8:a3:38:cc:57:43:c5:5b:88:b4: c5:41:57:4e:f1:62:ea:75:e0:f1:a6:1e:9b:e7:fe:46:48:ec: 95:34:2a:80:3a:f5:39:f4:56:9a:02:02:64:12:a4:a1:c2:f2: d7:70:d6:8f:fd:ad:cd:c7:4f:86:d6:c1:da:09:7d:66:fa:d2: 77:bb:ee:bf:81:d3:1a:26:ad:4b:55:08:61:54:d1:3c:b0:c4: 07:fc:82:50:f4:b5:5d:91:a2:d7:c4:ef:a6:e4:9f:67:9a:95: 76:3f:8f:53:58:3c:e4:81:85:9b:7c:be:d2:cc:6a:f0:b7:b4: 7f:27:09:1a:7a:ad:3a:db:d9:fb:d7:90:ef:86:7f:93:0f:ac: b4:a4:f3:b2:1f:9b:1c:ee:b5:e1:98:9e:9a:96:4d:07:89:27: 43:06:f6:e2:4f:14:f5:0a:30:44:fc:c9:79:e1:0f:41:45:41: db:ac:31:fa:d7:fc:62:c6:35:8f:d4:08:7b:38:9c:2b:62:f1: 6f:71:de:5e:75:1d:2f:83:3f:c4:36:fb:b3:53:4e:bf:f2:9e: 9e:1d:be:a0:ea:19:f1:71:c0:a8:35:82:5f:a3:e0:71:d1:20: b5:56:b9:7c:5d:b8:6c:09:95:81:7f:0b:2e:30:cc:a1:eb:1e: 70:d4:ba:d9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUS0Anb8/u2Bj8Ouew151bqofOLvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yMzA4MjUwMDU1MDBaFw0yNDA4MjMwMTAwMDBaMDMxMTAvBgNV BAMTKEVENEQ4NzUwMDlFNUM4QkQ5M0FFNEZCNDQyQzMxRkUwQjZDN0NBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlTgB8oHk0P44HrdB9oj2uvv0H itChdjSmLo6bBRkmSSJ242d0GEIwBe/ubc2c2fi1eWw7gUSH5f/BdRSQZf72OeFG Yd+qCBgO5JuTfMgMFuNURxQkMWvp4WdNqtsB/LP5CoWFdmK6LVNO1Sdv6Z42LnTc iOZPwbmVLByJzHUFjI4Fx/xzaARd5ohIJYT+pNxwR2enI8wkZCuBuTyniDfzSE6i 03vZ50pB3bDP0n6atfEsWGgMB6r5bfH9yyoiJ97VwqJYK5H8Tdhhb4pTqNBrbYVd uWC20aRu3Zscp/4lb+4Eb+f18sTEbRMWFXfeoT8adChpICqfOVjGGSYLpN69AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7U2HUAnlyL2Trk+0QsMf4LbHytAwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMxMzAzMzJlMzEzMTMyMmUzMTMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzczMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3CLMA0GCSqG SIb3DQEBCwUAA4IBAQA2WlxoGXFHzKijOMxXQ8VbiLTFQVdO8WLqdeDxph6b5/5G SOyVNCqAOvU59FaaAgJkEqShwvLXcNaP/a3Nx0+G1sHaCX1m+tJ3u+6/gdMaJq1L VQhhVNE8sMQH/IJQ9LVdkaLXxO+m5J9nmpV2P49TWDzkgYWbfL7SzGrwt7R/Jwka eq0629n715Dvhn+TD6y0pPOyH5sc7rXhmJ6alk0HiSdDBvbiTxT1CjBE/Ml54Q9B RUHbrDH61/xixjWP1Ah7OJwrYvFvcd5edR0vgz/ENvuzU06/8p6eHb6g6hnxccCo NYJfo+Bx0SC1Vrl8XbhsCZWBfwsuMMyh6x5w1LrZ -----END CERTIFICATE-----Generated at Fri Apr 26 10:57:37 2024 by rpki-client on console-ams.rpki-client.org