$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa File: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (raw, json) Hash identifier: 6XmDfTsbERnFgMipPotNpHoYxdYjqDueHE+KGaCKNPc= Subject key identifier: 55:9B:56:E3:85:E5:5C:7B:B8:FC:F4:11:D4:D5:52:F9:FB:A3:0A:3A Certificate issuer: /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Certificate serial: 573BA9483C5D3AA84DAB7F9D554A25BA1AA54F65 Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa Signing time: Thu 21 Sep 2023 08:01:51 +0000 ROA not before: Thu 21 Sep 2023 07:56:51 +0000 ROA not after: Thu 19 Sep 2024 08:01:51 +0000 asID: 141099 IP address blocks: 103.156.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:3b:a9:48:3c:5d:3a:a8:4d:ab:7f:9d:55:4a:25:ba:1a:a5:4f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Validity Not Before: Sep 21 07:56:51 2023 GMT Not After : Sep 19 08:01:51 2024 GMT Subject: CN=559B56E385E55C7BB8FCF411D4D552F9FBA30A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:bc:76:51:9b:8b:a7:f9:e6:55:1e:85:db: f9:a4:01:6e:4e:6d:83:18:74:6c:c8:26:e1:db:0f: 21:17:4c:4c:a2:39:fe:be:16:24:1a:1c:21:af:b8: 03:c1:ed:e7:f8:2c:68:39:ae:13:ec:ec:14:1a:f5: a2:d7:0f:0f:1f:12:39:61:3c:7e:da:64:4e:1a:91: 0c:07:0d:ff:70:5a:0f:98:59:3e:2f:8b:08:ce:17: 53:0a:0a:68:12:b5:53:62:eb:ae:e6:1b:94:46:b8: 40:91:b7:a2:ed:59:c8:31:94:1d:f7:84:db:6c:1f: 06:c6:f2:ad:f4:5c:3f:a0:4c:92:5b:fe:3e:d6:a2: 14:bb:2e:ba:8c:6d:da:5c:26:fe:f9:aa:d6:55:55: b0:fe:f7:81:a6:d5:dd:3f:9f:4d:0a:88:b6:87:bc: af:08:0b:7e:1e:6f:b3:a7:82:70:fc:60:0c:29:29: 42:b7:e1:c0:b7:29:1e:48:53:cd:78:b6:08:6a:24: ea:0f:6e:f7:cb:5e:e0:12:c5:00:9a:2a:20:c2:51: 5c:91:cd:06:d2:3d:70:50:e2:07:3d:36:4a:3f:35: 01:e6:69:22:d0:da:dd:87:ec:23:6f:8e:99:0c:61: bc:d9:39:7f:83:e8:60:e8:66:c6:a3:6c:8f:ff:6b: 47:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9B:56:E3:85:E5:5C:7B:B8:FC:F4:11:D4:D5:52:F9:FB:A3:0A:3A X509v3 Authority Key Identifier: keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.234.0/24 Signature Algorithm: sha256WithRSAEncryption 06:41:ec:39:d1:fe:16:3e:7b:ee:b4:1d:7d:de:4d:77:03:9f: 82:32:0d:91:aa:c5:44:e0:70:6e:30:9a:f9:ca:dc:bc:33:bf: 44:fb:6c:b4:d9:63:60:ae:5d:f2:6f:fa:aa:8e:1e:06:42:e9: 8c:60:b0:52:0f:4b:95:6c:ac:2d:c6:e7:a8:52:b5:6b:ca:cc: f4:08:fa:f2:68:f3:4a:ca:90:47:02:fb:cf:45:4d:7c:52:72: 91:4d:43:60:bf:b7:c2:9d:fd:9b:99:3f:20:fd:16:3f:5f:b7: 42:ca:55:91:be:53:c2:ae:96:e5:3a:6f:5f:95:45:1a:1e:c7: cb:b9:f0:93:db:17:75:8c:03:6f:7f:69:f4:e5:52:e4:25:9c: e3:47:33:d4:85:ba:8d:9e:45:8e:91:6f:54:c8:9d:8c:95:ca: 18:b4:ce:7d:20:a1:36:31:f4:40:7a:56:89:de:2a:5e:da:35: 43:6e:5e:00:52:3a:28:86:3a:f0:85:16:50:5d:18:69:3a:49: 8e:e1:34:bb:e2:ee:3f:0d:64:87:46:28:3c:d2:42:86:46:62: 4f:15:c6:8a:2d:c0:c1:e2:14:db:50:4a:02:40:2d:0e:81:1c: bb:fc:ee:b4:a7:75:52:e4:7d:09:a8:08:f7:ca:56:1d:b1:13: 48:ef:a5:3a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUVzupSDxdOqhNq3+dVUoluhqlT2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0 MzBGRDM0QjAeFw0yMzA5MjEwNzU2NTFaFw0yNDA5MTkwODAxNTFaMDMxMTAvBgNV BAMTKDU1OUI1NkUzODVFNTVDN0JCOEZDRjQxMUQ0RDU1MkY5RkJBMzBBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZLx2UZuLp/nmVR6F2/mkAW5O bYMYdGzIJuHbDyEXTEyiOf6+FiQaHCGvuAPB7ef4LGg5rhPs7BQa9aLXDw8fEjlh PH7aZE4akQwHDf9wWg+YWT4viwjOF1MKCmgStVNi667mG5RGuECRt6LtWcgxlB33 hNtsHwbG8q30XD+gTJJb/j7WohS7LrqMbdpcJv75qtZVVbD+94Gm1d0/n00KiLaH vK8IC34eb7OngnD8YAwpKUK34cC3KR5IU814tghqJOoPbvfLXuASxQCaKiDCUVyR zQbSPXBQ4gc9Nko/NQHmaSLQ2t2H7CNvjpkMYbzZOX+D6GDoZsajbI//a0crAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUVZtW44XlXHu4/PQR1NVS+fujCjowHwYDVR0j BBgwFoAUXcXTZViSIpW4Xnrjp5F4+0MP00swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTNhMTM4ZS1hMmIyLTQ2MDQtYWQ1MC0zY2FiNzUwYTc1ZTcvMC81REM1RDM2NTU4 OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQzMEZEMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0MzBG RDM0Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlM2ExMzhlLWEyYjItNDYwNC1h ZDUwLTNjYWI3NTBhNzVlNy8wLzMxMzAzMzJlMzEzNTM2MmUzMjMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM5Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnOowDQYJ KoZIhvcNAQELBQADggEBAAZB7DnR/hY+e+60HX3eTXcDn4IyDZGqxUTgcG4wmvnK 3Lwzv0T7bLTZY2CuXfJv+qqOHgZC6YxgsFIPS5VsrC3G56hStWvKzPQI+vJo80rK kEcC+89FTXxScpFNQ2C/t8Kd/ZuZPyD9Fj9ft0LKVZG+U8KuluU6b1+VRRoex8u5 8JPbF3WMA29/afTlUuQlnONHM9SFuo2eRY6Rb1TInYyVyhi0zn0goTYx9EB6Vone Kl7aNUNuXgBSOiiGOvCFFlBdGGk6SY7hNLvi7j8NZIdGKDzSQoZGYk8VxootwMHi FNtQSgJALQ6BHLv87rSndVLkfQmoCPfKVh2xE0jvpTo= -----END CERTIFICATE-----Generated at Tue Apr 30 21:36:08 2024 by rpki-client on console-fra.rpki-client.org