$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa File: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (raw, json) Hash identifier: FAm+UWOVke+ikblIivA820mXrApctFU0eEQ7rFuIRgM= Subject key identifier: 57:40:09:9D:17:CF:04:DD:48:06:9C:E5:FE:45:1C:62:69:6F:DF:1E Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 2CCDD6A55A898299CA482DD4F45FE38AAC146B79 Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa Signing time: Mon 31 Jul 2023 00:06:23 +0000 ROA not before: Mon 31 Jul 2023 00:01:23 +0000 ROA not after: Mon 29 Jul 2024 00:06:23 +0000 asID: 139379 IP address blocks: 103.142.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 20:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cd:d6:a5:5a:89:82:99:ca:48:2d:d4:f4:5f:e3:8a:ac:14:6b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: Jul 31 00:01:23 2023 GMT Not After : Jul 29 00:06:23 2024 GMT Subject: CN=5740099D17CF04DD48069CE5FE451C62696FDF1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:a8:f2:10:69:cb:5e:7c:6f:44:5c:0c:b4: 55:40:9a:45:f9:50:6d:c6:90:01:c7:31:be:6b:10: f3:f6:f6:33:ab:91:f2:9e:cd:2d:1e:8c:ad:b5:74: b8:c9:49:01:5c:38:64:98:5a:4d:f5:5e:16:8d:2d: e6:ab:e5:47:4a:53:b5:d8:04:35:82:35:e2:87:3c: 0c:a8:d4:1f:e6:1a:a5:0d:eb:93:7f:ac:ec:6d:03: 0e:31:d8:fb:98:9d:7d:a6:e4:f3:15:ae:c2:19:af: b8:68:15:3b:c6:39:ce:54:76:af:7e:ec:c3:fc:2c: b4:f0:e2:6a:df:56:ac:94:2b:2c:57:74:a0:e3:b9: 92:c8:fa:eb:53:7e:fd:c4:e9:cf:a6:4e:9c:1a:d7: d8:1d:a6:53:2d:12:77:fc:5e:ae:7a:14:d8:7d:43: 36:a3:fc:7e:84:87:71:2e:e7:60:95:22:2f:bc:b7: b1:4b:4b:2e:f1:96:1c:79:8c:da:80:d4:23:90:9b: 8e:f1:c8:f1:31:9c:98:eb:f3:22:76:60:37:67:a9: b2:15:c0:cb:49:33:52:61:40:3a:6b:ea:05:22:42: 93:21:62:35:cc:03:31:14:a9:86:4c:9f:50:52:76: fd:88:11:b0:26:77:f6:84:87:d3:15:dd:2f:1e:9e: a2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:40:09:9D:17:CF:04:DD:48:06:9C:E5:FE:45:1C:62:69:6F:DF:1E X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.200.0/23 Signature Algorithm: sha256WithRSAEncryption 99:87:8f:9d:57:72:dd:6a:fd:bd:b7:c4:55:e7:b8:04:d6:36: 02:e6:ca:e8:bf:5f:de:8c:9c:2f:5e:ae:d2:9b:d5:1f:25:06: 82:d1:06:67:cf:3d:fc:ce:37:fc:43:cc:cf:74:f0:a0:f5:8d: 27:e7:d4:fc:74:ed:ae:bd:63:1a:33:36:b6:7e:60:60:30:d9: bf:80:0c:ee:fe:eb:b7:7a:71:0c:bd:7e:fc:85:43:2d:77:7f: 0a:60:46:35:16:e6:35:7c:0c:db:be:fb:bf:6b:07:9b:ec:af: 37:4d:dc:57:2e:fb:10:64:7f:dc:93:c0:c3:37:6f:86:7f:fe: 48:63:73:0d:27:da:79:c9:1b:64:a0:5d:1b:be:bd:29:21:c3: 43:3a:35:7a:1e:c0:8b:04:48:fa:da:c4:6a:92:10:7c:9b:bb: 9b:f7:1a:8c:96:23:73:19:a0:9b:b1:bb:92:dd:d0:75:3f:d5: 11:37:f2:a9:0e:17:ed:03:1f:9c:25:69:0f:63:1f:c7:9f:c1: 6b:d7:d7:09:20:17:44:e8:6b:dd:42:ca:95:e7:e3:04:87:fd: 2d:55:e4:3e:a3:d8:da:af:d2:90:17:89:ab:4d:bd:72:27:c5: f4:61:bf:2b:c6:61:eb:63:85:e4:d7:28:b0:79:90:ed:ac:3b: ae:2e:91:5c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULM3WpVqJgpnKSC3U9F/jiqwUa3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yMzA3MzEwMDAxMjNaFw0yNDA3MjkwMDA2MjNaMDMxMTAvBgNV BAMTKDU3NDAwOTlEMTdDRjA0REQ0ODA2OUNFNUZFNDUxQzYyNjk2RkRGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd0KjyEGnLXnxvRFwMtFVAmkX5 UG3GkAHHMb5rEPP29jOrkfKezS0ejK21dLjJSQFcOGSYWk31XhaNLear5UdKU7XY BDWCNeKHPAyo1B/mGqUN65N/rOxtAw4x2PuYnX2m5PMVrsIZr7hoFTvGOc5Udq9+ 7MP8LLTw4mrfVqyUKyxXdKDjuZLI+utTfv3E6c+mTpwa19gdplMtEnf8Xq56FNh9 Qzaj/H6Eh3Eu52CVIi+8t7FLSy7xlhx5jNqA1COQm47xyPExnJjr8yJ2YDdnqbIV wMtJM1JhQDpr6gUiQpMhYjXMAzEUqYZMn1BSdv2IEbAmd/aEh9MV3S8enqI/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUV0AJnRfPBN1IBpzl/kUcYmlv3x4wHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyYTk4YzhiLWNhZDktNDllMS1i MTc4LTFkYWYzYjYyZWY1OS8wLzMxMzAzMzJlMzEzNDMyMmUzMjMwMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM3Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnjsgwDQYJ KoZIhvcNAQELBQADggEBAJmHj51Xct1q/b23xFXnuATWNgLmyui/X96MnC9ertKb 1R8lBoLRBmfPPfzON/xDzM908KD1jSfn1Px07a69YxozNrZ+YGAw2b+ADO7+67d6 cQy9fvyFQy13fwpgRjUW5jV8DNu++79rB5vsrzdN3Fcu+xBkf9yTwMM3b4Z//khj cw0n2nnJG2SgXRu+vSkhw0M6NXoewIsESPraxGqSEHybu5v3GoyWI3MZoJuxu5Ld 0HU/1RE38qkOF+0DH5wlaQ9jH8efwWvX1wkgF0Toa91CypXn4wSH/S1V5D6j2Nqv 0pAXiatNvXInxfRhvyvGYetjheTXKLB5kO2sO64ukVw= -----END CERTIFICATE-----Generated at Tue Apr 23 18:35:53 2024 by rpki-client on console-ams.rpki-client.org