$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/3130332e33312e3232342e302f32322d3234203d3e20313331373535.roa File: 3130332e33312e3232342e302f32322d3234203d3e20313331373535.roa (raw, json) Hash identifier: uLShdDz31wKsxyvOiW52gFBOVdF3+UV9dVHHCc2BVjM= Subject key identifier: DB:A7:5A:E2:75:19:A2:46:01:04:EB:1F:AB:F0:DC:59:E8:DD:2F:08 Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 3867B3233BBC6A0980AD572827AC061623FBB649 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/3130332e33312e3232342e302f32322d3234203d3e20313331373535.roa Signing time: Thu 26 Oct 2023 06:01:13 +0000 ROA not before: Thu 26 Oct 2023 05:56:13 +0000 ROA not after: Thu 24 Oct 2024 06:01:13 +0000 asID: 131755 IP address blocks: 103.31.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:67:b3:23:3b:bc:6a:09:80:ad:57:28:27:ac:06:16:23:fb:b6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Oct 26 05:56:13 2023 GMT Not After : Oct 24 06:01:13 2024 GMT Subject: CN=DBA75AE27519A2460104EB1FABF0DC59E8DD2F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:ab:73:51:cb:92:7d:a8:50:af:2c:4f:cf: 13:b6:8a:70:22:cb:25:63:a7:c1:1e:c9:d7:5d:cf: a7:4f:83:7d:e8:68:5b:27:bb:76:6a:01:0a:37:e1: bb:84:18:72:08:83:c5:cb:78:e1:72:f5:4a:7d:bf: 12:11:33:8a:fb:b4:1c:c3:51:c4:14:b3:62:a1:17: 51:97:d2:c1:dc:97:4a:d6:94:a8:f4:76:d4:0b:0d: 63:29:73:0d:da:57:f0:da:1a:d3:5f:71:cf:a3:a6: 99:bb:24:53:77:8e:e1:ba:3e:56:2d:99:09:fb:f0: 57:b3:60:93:60:c7:77:f1:09:10:2a:88:0c:01:bd: 8b:d1:d6:6b:44:c9:10:87:af:ad:a4:7c:98:22:bb: aa:d8:45:6d:ad:83:c1:ef:2c:29:9c:b7:f7:2e:5e: bd:19:5f:ac:51:d4:cc:b3:ee:97:9f:b5:17:8e:0a: 44:a3:a1:d6:c4:8f:5d:1c:c1:ad:eb:bf:61:ae:39: 78:20:97:cb:06:7b:7c:16:3d:89:59:0b:2f:1c:e1: 21:bc:4b:9b:84:cb:82:ce:3b:ab:11:4b:85:34:7f: 07:ac:56:8f:54:ac:be:08:33:16:89:b7:81:e4:26: 59:b4:ec:6d:06:d0:e4:7b:f1:ea:1a:42:08:b7:f3: ca:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A7:5A:E2:75:19:A2:46:01:04:EB:1F:AB:F0:DC:59:E8:DD:2F:08 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/3130332e33312e3232342e302f32322d3234203d3e20313331373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.224.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:05:f9:b1:a2:9f:88:87:21:bb:87:58:51:68:9e:a2:e1:13: a6:d7:70:21:f8:3e:54:80:6c:1a:5b:15:37:bc:58:65:d3:71: ed:7a:3c:20:3a:6d:db:e1:7c:56:4b:0b:0f:51:da:49:ac:41: e4:65:22:ea:48:90:4c:7d:4b:23:fc:82:f6:8c:34:50:41:b9: 42:c7:5f:85:13:dd:cd:77:66:f1:5c:de:7f:74:28:1b:eb:9f: 1f:aa:a5:6e:03:4c:71:9d:00:f6:93:83:f7:23:10:8e:3d:a5: 01:c3:da:03:e7:b4:c9:f4:51:6c:bb:23:13:1f:d9:6e:07:30: 80:97:d3:b4:74:3c:b0:c8:b9:82:89:78:3e:2e:eb:bf:db:70: f2:d0:4e:cb:dc:c7:67:15:97:d3:a5:47:9f:73:81:1a:83:84: d2:9d:29:c5:12:e8:18:8c:5f:82:d1:f0:2e:1b:ec:07:8b:a0: c9:95:9c:86:21:1c:39:ce:44:d9:aa:67:a7:53:8b:f3:a2:aa: 52:ff:48:59:7c:f9:bb:10:82:8b:d8:70:df:ee:78:ea:d9:89: 90:ab:f4:8a:d0:b4:ac:46:64:91:ea:f5:dd:ce:16:e7:14:e2: d0:14:4f:0d:76:5c:36:cc:6a:de:39:d4:5c:8b:30:de:ae:22: 76:41:f6:f9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOGezIzu8agmArVcoJ6wGFiP7tkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yMzEwMjYwNTU2MTNaFw0yNDEwMjQwNjAxMTNaMDMxMTAvBgNV BAMTKERCQTc1QUUyNzUxOUEyNDYwMTA0RUIxRkFCRjBEQzU5RThERDJGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBz6tzUcuSfahQryxPzxO2inAi yyVjp8Eeydddz6dPg33oaFsnu3ZqAQo34buEGHIIg8XLeOFy9Up9vxIRM4r7tBzD UcQUs2KhF1GX0sHcl0rWlKj0dtQLDWMpcw3aV/DaGtNfcc+jppm7JFN3juG6PlYt mQn78FezYJNgx3fxCRAqiAwBvYvR1mtEyRCHr62kfJgiu6rYRW2tg8HvLCmct/cu Xr0ZX6xR1Myz7peftReOCkSjodbEj10cwa3rv2GuOXggl8sGe3wWPYlZCy8c4SG8 S5uEy4LOO6sRS4U0fwesVo9UrL4IMxaJt4HkJlm07G0G0OR78eoaQgi388q7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU26da4nUZokYBBOsfq/DcWejdLwgwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhOGYwNDM1LTRkMzgtNDdlZi04 NTBmLTUxYmE0NjE3ZmIzZC8wLzMxMzAzMzJlMzMzMTJlMzIzMjM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZx/gMA0GCSqG SIb3DQEBCwUAA4IBAQAOBfmxop+IhyG7h1hRaJ6i4ROm13Ah+D5UgGwaWxU3vFhl 03HtejwgOm3b4XxWSwsPUdpJrEHkZSLqSJBMfUsj/IL2jDRQQblCx1+FE93Nd2bx XN5/dCgb658fqqVuA0xxnQD2k4P3IxCOPaUBw9oD57TJ9FFsuyMTH9luBzCAl9O0 dDywyLmCiXg+Luu/23Dy0E7L3MdnFZfTpUefc4Eag4TSnSnFEugYjF+C0fAuG+wH i6DJlZyGIRw5zkTZqmenU4vzoqpS/0hZfPm7EIKL2HDf7njq2YmQq/SK0LSsRmSR 6vXdzhbnFOLQFE8Ndlw2zGreOdRcizDeriJ2Qfb5 -----END CERTIFICATE-----Generated at Thu May 2 17:39:53 2024 by rpki-client on console-fra.rpki-client.org