$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa File: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (raw, json) Hash identifier: RxO0GFnTPCDcjYRMtgcgcPJ7K16NUO62Ah0OPKUzzSk= Subject key identifier: 47:4D:B7:32:F9:69:DF:83:C0:88:08:0A:12:2E:E3:6C:E4:16:6C:81 Certificate issuer: /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Certificate serial: 2489AC1237A2C25F52E6DB3F9BEAA3B365C628C6 Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa Signing time: Wed 01 May 2024 22:01:57 +0000 ROA not before: Wed 01 May 2024 21:56:57 +0000 ROA not after: Wed 30 Apr 2025 22:01:57 +0000 asID: 138064 IP address blocks: 103.70.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:89:ac:12:37:a2:c2:5f:52:e6:db:3f:9b:ea:a3:b3:65:c6:28:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Validity Not Before: May 1 21:56:57 2024 GMT Not After : Apr 30 22:01:57 2025 GMT Subject: CN=474DB732F969DF83C088080A122EE36CE4166C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6f:a0:7c:e8:5e:55:ab:d1:0f:5e:75:5b:85: a5:f8:54:2f:fd:92:0f:68:1c:09:28:46:a1:27:ef: ae:3b:21:40:64:41:0a:38:f8:ec:69:95:a8:21:25: 89:b0:19:8f:76:e6:3f:59:78:a5:bf:c3:13:0c:be: 78:7b:99:92:77:ed:59:6f:12:33:ca:e2:3b:92:22: 71:3c:62:19:c1:76:8b:21:6c:e0:c4:ed:0d:df:e3: 3f:c0:b6:30:bd:87:65:5f:fb:45:8d:73:9d:26:51: 85:12:3d:2b:31:9c:7a:01:bd:4d:9f:3c:12:39:88: dd:83:e2:2f:1c:c5:8e:cb:79:94:9e:d9:25:96:c7: f1:6e:24:90:f2:8a:33:b0:9a:73:a3:3c:8f:5f:fb: 4a:e1:3d:6a:1a:c4:ab:95:6b:22:1a:f8:b8:f7:17: 8d:9d:f4:4c:f8:e5:72:bc:be:51:dd:a0:80:90:9f: f5:96:35:f7:85:bf:0c:6d:eb:a3:44:0f:8c:8a:84: 6f:eb:b7:9d:80:f2:b4:87:90:c4:f8:52:4b:d6:aa: 9f:ae:9c:1a:2f:3e:b1:66:41:14:9e:e9:aa:2d:c4: ce:98:da:98:ff:1f:21:5f:6c:f5:0d:bb:d8:23:c5: 87:ad:2a:ef:ba:2e:54:ef:e7:51:77:10:2a:62:e9: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4D:B7:32:F9:69:DF:83:C0:88:08:0A:12:2E:E3:6C:E4:16:6C:81 X509v3 Authority Key Identifier: keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.70.92.0/23 Signature Algorithm: sha256WithRSAEncryption 39:66:2d:dd:8b:78:af:f8:98:f8:92:51:d7:67:e2:8f:b5:10: a8:b5:b9:74:5f:f3:b0:7d:af:0b:f6:7d:2a:8a:87:07:a4:f8: 69:2f:8a:ff:bd:73:8b:6f:97:72:d8:6d:c1:13:da:11:1f:21: d3:d7:44:37:33:f7:3e:84:7f:f5:df:72:dd:d7:2b:2f:d3:63: f6:55:8c:dc:83:e0:6a:71:6b:6a:c9:c9:43:c8:24:fc:6d:a4: fe:c5:9c:3f:de:6b:2e:67:23:a7:8d:b9:2f:b7:e7:74:3b:06: 41:57:26:32:72:e7:42:ee:14:46:e9:32:46:2b:13:65:99:9b: fe:d9:11:6d:8f:2f:71:b8:aa:61:9f:4a:64:83:49:de:d3:cb: 11:3a:f8:20:d0:cb:61:00:f3:70:87:3a:19:fa:b8:7b:a7:ae: 48:af:91:10:d6:a6:25:43:6c:74:dd:d9:74:11:ad:36:de:72: 0f:1a:9e:62:5e:b0:83:55:b2:37:0d:10:cd:b7:d6:c8:f7:d0: 25:42:fc:bd:bd:12:f7:18:e5:0a:9d:ba:14:a8:98:3d:b4:25: 10:ab:57:75:24:41:f2:40:db:91:58:e8:df:ae:b4:88:94:ac: 7d:dc:73:50:34:ae:2a:c8:c0:72:b1:a6:8a:41:f7:41:5c:5b: 5e:b1:cc:76 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJImsEjeiwl9S5ts/m+qjs2XGKMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUND QTc4NDg2MjAeFw0yNDA1MDEyMTU2NTdaFw0yNTA0MzAyMjAxNTdaMDMxMTAvBgNV BAMTKDQ3NERCNzMyRjk2OURGODNDMDg4MDgwQTEyMkVFMzZDRTQxNjZDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeb6B86F5Vq9EPXnVbhaX4VC/9 kg9oHAkoRqEn7647IUBkQQo4+OxplaghJYmwGY925j9ZeKW/wxMMvnh7mZJ37Vlv EjPK4juSInE8YhnBdoshbODE7Q3f4z/AtjC9h2Vf+0WNc50mUYUSPSsxnHoBvU2f PBI5iN2D4i8cxY7LeZSe2SWWx/FuJJDyijOwmnOjPI9f+0rhPWoaxKuVayIa+Lj3 F42d9Ez45XK8vlHdoICQn/WWNfeFvwxt66NED4yKhG/rt52A8rSHkMT4UkvWqp+u nBovPrFmQRSe6aotxM6Y2pj/HyFfbPUNu9gjxYetKu+6LlTv51F3ECpi6UvHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUR023Mvlp34PAiAgKEi7jbOQWbIEwHwYDVR0j BBgwFoAUYYnk9nvlPfZSgvjhu2MWXMp4SGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTg5ZjY0My0zN2JjLTRmZmItOTUyOS00MDFlNGI2ZWY2NzUvMC82MTg5RTRGNjdC RTUzREY2NTI4MkY4RTFCQjYzMTY1Q0NBNzg0ODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUNDQTc4 NDg2Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1ODlmNjQzLTM3YmMtNGZmYi05 NTI5LTQwMWU0YjZlZjY3NS8wLzMxMzAzMzJlMzczMDJlMzkzMjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzODMwMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdGXDANBgkqhkiG 9w0BAQsFAAOCAQEAOWYt3Yt4r/iY+JJR12fij7UQqLW5dF/zsH2vC/Z9KoqHB6T4 aS+K/71zi2+XcthtwRPaER8h09dENzP3PoR/9d9y3dcrL9Nj9lWM3IPganFrasnJ Q8gk/G2k/sWcP95rLmcjp425L7fndDsGQVcmMnLnQu4URukyRisTZZmb/tkRbY8v cbiqYZ9KZINJ3tPLETr4INDLYQDzcIc6Gfq4e6euSK+RENamJUNsdN3ZdBGtNt5y DxqeYl6wg1WyNw0QzbfWyPfQJUL8vb0S9xjlCp26FKiYPbQlEKtXdSRB8kDbkVjo 3660iJSsfdxzUDSuKsjAcrGmikH3QVxbXrHMdg== -----END CERTIFICATE-----Generated at Sat May 4 02:34:28 2024 by rpki-client on console-fra.rpki-client.org