$ rpki-client -vvf repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa File: 3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (raw, json) Hash identifier: KE5K7Tws2wVEyQRkiEtPBwg0zPoQMx2IT7EzHEF8brQ= Subject key identifier: 56:71:9E:99:E3:C3:F8:6D:8C:CF:EA:1B:5A:28:5A:BF:2E:A1:89:DB Certificate issuer: /CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280 Certificate serial: 4991D7C5C544951A127ECD8A37D1F2366911D0B7 Authority key identifier: E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa Signing time: Fri 13 Oct 2023 03:00:01 +0000 ROA not before: Fri 13 Oct 2023 02:55:01 +0000 ROA not after: Fri 11 Oct 2024 03:00:01 +0000 asID: 138057 IP address blocks: 103.120.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 04:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:91:d7:c5:c5:44:95:1a:12:7e:cd:8a:37:d1:f2:36:69:11:d0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280 Validity Not Before: Oct 13 02:55:01 2023 GMT Not After : Oct 11 03:00:01 2024 GMT Subject: CN=56719E99E3C3F86D8CCFEA1B5A285ABF2EA189DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d0:06:fd:96:41:7c:fa:56:f0:89:48:f2:67: 77:d8:55:02:ac:28:e3:55:0e:da:b4:bf:bf:1c:c1: b4:d1:49:3b:11:a0:4d:49:62:87:b8:a9:c2:e0:65: 8e:8a:02:7f:93:9f:cd:d1:09:46:39:a1:37:d2:98: fe:7a:ad:cd:1b:f3:af:94:7a:91:62:62:e7:7b:a9: 7a:ab:50:76:3c:26:82:dc:b2:25:2e:96:85:38:3e: f4:5c:39:3b:eb:e2:05:df:56:72:b6:1e:c4:89:e3: 9d:a6:0d:c3:71:99:44:b3:93:48:e6:0a:57:2b:4b: 35:ed:6e:2b:2e:e3:58:c2:7e:1d:5e:fb:56:fa:f4: bd:04:eb:96:88:21:ee:1d:27:e3:2c:61:38:91:ef: fa:79:7e:75:2b:fa:f6:8d:07:a9:fe:4d:d8:44:c8: 44:b2:07:83:6f:a9:fb:8c:e1:0d:8c:7e:0a:a4:92: 9e:0e:27:f6:e1:9e:8c:71:1c:46:fa:14:fc:68:79: 37:64:9d:75:40:b7:3a:d0:27:66:26:ee:71:6a:e9: 25:d4:b8:13:f3:ec:9f:4d:db:35:c5:07:95:c2:a6: f4:3f:55:99:a0:2f:02:ec:c9:51:99:ef:84:a6:6e: 67:03:0a:03:5b:67:6d:95:4c:81:1f:f0:5c:49:aa: d2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:71:9E:99:E3:C3:F8:6D:8C:CF:EA:1B:5A:28:5A:BF:2E:A1:89:DB X509v3 Authority Key Identifier: keyid:E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.138.0/24 Signature Algorithm: sha256WithRSAEncryption 75:8e:0d:62:b6:0f:3b:ef:97:60:e2:fd:d0:8b:01:79:47:e0: 12:49:88:23:b5:12:9e:ba:5c:01:94:78:75:52:1b:f1:4f:00: 09:df:67:1c:64:6d:33:12:cf:bd:b8:c7:12:83:01:42:a9:2f: 61:e1:31:7f:ed:29:92:f8:95:ad:03:fe:7c:42:e7:4f:08:ce: 0a:29:b3:31:81:23:e2:90:65:39:7c:78:e1:b2:cc:39:b3:6e: ed:08:a6:52:9f:36:82:0d:8b:25:29:5d:25:d6:a4:d6:23:a1: 58:0d:7c:0d:31:f9:d2:6d:92:78:c3:cc:14:f1:83:f8:c3:97: ea:18:21:5b:b2:55:1f:34:76:31:57:3d:b1:7b:e8:2d:08:20: 14:90:20:7a:8a:e6:71:8f:12:31:e2:eb:88:82:0e:2b:91:6f: 75:9c:aa:d6:a6:05:35:44:86:d7:c2:28:37:8a:bb:bb:1f:83: 73:2d:89:f4:b7:22:fc:a1:e9:af:f3:ca:09:d9:da:54:f7:b2: f4:93:84:8e:54:de:21:39:93:96:15:5f:39:93:c0:38:72:e6: 12:14:6a:93:7b:9f:af:4a:d2:d2:bf:90:06:8e:8f:c4:4d:db: 35:4c:31:44:8a:b4:3c:26:eb:cd:ec:dc:b4:d8:80:16:75:b0: d6:9b:ea:d2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSZHXxcVElRoSfs2KN9HyNmkR0LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg0REI0NEYwMDA4NjI0RjhFNzY5M0JDM0JFMUY5QkZD RERGQTI4MDAeFw0yMzEwMTMwMjU1MDFaFw0yNDEwMTEwMzAwMDFaMDMxMTAvBgNV BAMTKDU2NzE5RTk5RTNDM0Y4NkQ4Q0NGRUExQjVBMjg1QUJGMkVBMTg5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp0Ab9lkF8+lbwiUjyZ3fYVQKs KONVDtq0v78cwbTRSTsRoE1JYoe4qcLgZY6KAn+Tn83RCUY5oTfSmP56rc0b86+U epFiYud7qXqrUHY8JoLcsiUuloU4PvRcOTvr4gXfVnK2HsSJ452mDcNxmUSzk0jm ClcrSzXtbisu41jCfh1e+1b69L0E65aIIe4dJ+MsYTiR7/p5fnUr+vaNB6n+TdhE yESyB4NvqfuM4Q2Mfgqkkp4OJ/bhnoxxHEb6FPxoeTdknXVAtzrQJ2Ym7nFq6SXU uBPz7J9N2zXFB5XCpvQ/VZmgLwLsyVGZ74SmbmcDCgNbZ22VTIEf8FxJqtKHAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUVnGemePD+G2Mz+obWihavy6hidswHwYDVR0j BBgwFoAU6E20TwAIYk+OdpO8O+H5v83fooAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWI5NjAwNS04M2E5LTQxZTQtYWY1Yi1mM2VhYThmMjM2NTEvMC9FODREQjQ0RjAw MDg2MjRGOEU3NjkzQkMzQkUxRjlCRkNEREZBMjgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg0REI0NEYwMDA4NjI0RjhFNzY5M0JDM0JFMUY5QkZDRERG QTI4MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlYjk2MDA1LTgzYTktNDFlNC1h ZjViLWYzZWFhOGYyMzY1MS8wLzMxMzAzMzJlMzEzMjMwMmUzMTMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM1Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneIowDQYJ KoZIhvcNAQELBQADggEBAHWODWK2Dzvvl2Di/dCLAXlH4BJJiCO1Ep66XAGUeHVS G/FPAAnfZxxkbTMSz724xxKDAUKpL2HhMX/tKZL4la0D/nxC508IzgopszGBI+KQ ZTl8eOGyzDmzbu0IplKfNoINiyUpXSXWpNYjoVgNfA0x+dJtknjDzBTxg/jDl+oY IVuyVR80djFXPbF76C0IIBSQIHqK5nGPEjHi64iCDiuRb3WcqtamBTVEhtfCKDeK u7sfg3MtifS3Ivyh6a/zygnZ2lT3svSThI5U3iE5k5YVXzmTwDhy5hIUapN7n69K 0tK/kAaOj8RN2zVMMUSKtDwm683s3LTYgBZ1sNab6tI= -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:40 2024 by rpki-client on console-ams.rpki-client.org