$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa File: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (raw, json) Hash identifier: zY+TrKHD4jTP8Sq9ggS9iKECtyilKJ9r46K9+jrayV8= Subject key identifier: 28:20:7C:5C:67:2A:30:46:85:8C:7B:CD:40:44:B6:BE:41:9A:25:F6 Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Certificate serial: 4F2FEBCB49669419DBE4B7D55594553F5FCBEE34 Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa Signing time: Wed 01 Nov 2023 20:00:01 +0000 ROA not before: Wed 01 Nov 2023 19:55:01 +0000 ROA not after: Wed 30 Oct 2024 20:00:01 +0000 asID: 141596 IP address blocks: 103.160.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2f:eb:cb:49:66:94:19:db:e4:b7:d5:55:94:55:3f:5f:cb:ee:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59 Validity Not Before: Nov 1 19:55:01 2023 GMT Not After : Oct 30 20:00:01 2024 GMT Subject: CN=28207C5C672A3046858C7BCD4044B6BE419A25F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:50:2a:cd:be:58:37:1c:a0:62:c7:dc:7d: 44:3f:7d:b9:d6:f1:20:f4:f8:26:0d:7c:08:4c:c8: 4c:f4:b1:ad:15:95:10:7b:64:24:7a:b9:ba:80:13: 68:4e:9e:d1:57:05:a9:2e:4b:1b:29:a1:09:bb:76: 4b:1f:0c:6e:02:31:3a:9f:bf:0b:82:c3:af:02:65: 18:92:de:40:dc:37:c8:fe:30:fe:8e:ec:d1:9b:ca: 00:6d:6b:18:38:20:db:66:62:5b:ae:be:de:79:63: 14:de:c0:a8:04:85:55:84:53:f1:de:c3:c4:8f:89: 6d:9d:58:90:b9:e0:ea:1a:97:9e:b1:49:7d:be:e4: f4:8d:e0:ea:c3:ba:e7:5d:71:09:11:29:d6:3e:f2: 8d:c8:db:33:10:b4:0a:97:8a:73:c9:36:13:6c:76: 88:1a:e7:78:60:ca:84:4b:50:02:c8:fb:b1:00:2e: c3:d7:16:2d:04:94:95:a9:fb:7f:b1:e1:a3:19:82: 79:b5:2c:60:67:e4:75:78:45:d2:c2:db:b2:ee:8d: 36:69:ba:88:b3:c5:c0:6a:c6:87:f7:3f:35:ee:b6: f8:06:06:c0:31:13:62:d1:75:2d:c2:d5:52:a2:f4: a5:5b:29:93:e5:87:3e:27:71:ed:cc:77:e4:a9:d0: b0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:20:7C:5C:67:2A:30:46:85:8C:7B:CD:40:44:B6:BE:41:9A:25:F6 X509v3 Authority Key Identifier: keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.40.0/23 Signature Algorithm: sha256WithRSAEncryption 81:95:0f:c7:ac:fb:b0:0a:0d:c3:37:cb:03:b3:25:88:6d:d6: 66:da:f5:86:d2:6f:18:f4:0f:26:26:5e:ec:3b:4c:b4:69:2e: 09:e0:f1:4e:dd:0a:44:de:68:d8:33:23:9d:d7:51:96:ad:31: 96:f2:38:38:bd:1b:ce:8f:59:aa:61:3d:1f:17:1b:b9:4a:a8: db:42:2e:14:dd:75:8e:38:f2:bc:fc:19:f6:b2:14:de:aa:82: 8f:63:03:8c:b7:fa:ac:ef:75:33:bb:15:e2:88:39:c3:fc:b0: 61:68:00:0c:40:68:ae:f1:0a:65:2a:90:68:88:9e:2b:28:2e: 36:67:b7:e4:ca:f2:ee:6c:70:a8:bc:b8:06:5f:f0:0c:0d:25: 61:65:d0:fd:34:ec:ff:bb:9f:d1:a6:98:07:3a:29:02:1a:25: ab:bd:86:75:f0:8c:e1:5a:84:89:db:a6:1f:3b:d0:d2:02:4c: b5:9b:9d:75:55:0d:e4:34:ba:8a:41:36:c9:77:f6:1f:c5:fe: f5:c8:23:83:3c:6d:f6:9b:2e:b0:57:d5:19:1e:f3:48:48:3b: dc:cf:27:f2:a6:31:8c:ba:aa:8f:fd:09:74:8d:6a:51:b0:53: d7:2d:e8:af:76:ec:29:5c:a3:7f:02:f4:7e:1b:ed:be:06:2f: ae:e3:32:3a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTy/ry0lmlBnb5LfVVZRVP1/L7jQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQw N0U4MkQ1OTAeFw0yMzExMDExOTU1MDFaFw0yNDEwMzAyMDAwMDFaMDMxMTAvBgNV BAMTKDI4MjA3QzVDNjcyQTMwNDY4NThDN0JDRDQwNDRCNkJFNDE5QTI1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+T1Aqzb5YNxygYsfcfUQ/fbnW 8SD0+CYNfAhMyEz0sa0VlRB7ZCR6ubqAE2hOntFXBakuSxspoQm7dksfDG4CMTqf vwuCw68CZRiS3kDcN8j+MP6O7NGbygBtaxg4INtmYluuvt55YxTewKgEhVWEU/He w8SPiW2dWJC54Ooal56xSX2+5PSN4OrDuuddcQkRKdY+8o3I2zMQtAqXinPJNhNs doga53hgyoRLUALI+7EALsPXFi0ElJWp+3+x4aMZgnm1LGBn5HV4RdLC27LujTZp uoizxcBqxof3PzXutvgGBsAxE2LRdS3C1VKi9KVbKZPlhz4nce3Md+Sp0LB3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKCB8XGcqMEaFjHvNQES2vkGaJfYwHwYDVR0j BBgwFoAUNwOsQVTwWx5kLzHe9xojhAfoLVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTA5OWFkZi03ZTEyLTRlODMtOTVjMi1kZDdmNzc0OTQ3ODgvMC8zNzAzQUM0MTU0 RjA1QjFFNjQyRjMxREVGNzFBMjM4NDA3RTgyRDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcwM0FDNDE1NEYwNUIxRTY0MkYzMURFRjcxQTIzODQwN0U4 MkQ1OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRhMDk5YWRmLTdlMTItNGU4My05 NWMyLWRkN2Y3NzQ5NDc4OC8wLzMxMzAzMzJlMzEzNjMwMmUzNDMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMxMzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6AoMA0GCSqG SIb3DQEBCwUAA4IBAQCBlQ/HrPuwCg3DN8sDsyWIbdZm2vWG0m8Y9A8mJl7sO0y0 aS4J4PFO3QpE3mjYMyOd11GWrTGW8jg4vRvOj1mqYT0fFxu5SqjbQi4U3XWOOPK8 /Bn2shTeqoKPYwOMt/qs73UzuxXiiDnD/LBhaAAMQGiu8QplKpBoiJ4rKC42Z7fk yvLubHCovLgGX/AMDSVhZdD9NOz/u5/RppgHOikCGiWrvYZ18IzhWoSJ26YfO9DS Aky1m511VQ3kNLqKQTbJd/Yfxf71yCODPG32my6wV9UZHvNISDvczyfypjGMuqqP /Ql0jWpRsFPXLeivduwpXKN/AvR+G+2+Bi+u4zI6 -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org