$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa File: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (raw, json) Hash identifier: AyYMf9ry9I7VPYy4qKkUyb1Om7gBlYgG6ZINPCBMVDU= Subject key identifier: 95:F3:A9:8A:C0:A6:91:36:54:33:5F:3D:83:09:4C:90:C6:4E:21:F3 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 2C84CBEDF9A80FA28CE8D58D7D7092A43017DC85 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa Signing time: Mon 31 Jul 2023 00:13:28 +0000 ROA not before: Mon 31 Jul 2023 00:08:28 +0000 ROA not after: Mon 29 Jul 2024 00:13:28 +0000 asID: 135472 IP address blocks: 103.71.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 11:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:84:cb:ed:f9:a8:0f:a2:8c:e8:d5:8d:7d:70:92:a4:30:17:dc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Jul 31 00:08:28 2023 GMT Not After : Jul 29 00:13:28 2024 GMT Subject: CN=95F3A98AC0A6913654335F3D83094C90C64E21F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:5f:6f:f5:6d:d8:9c:6a:a3:78:de:d7:e3: f6:d3:ff:18:f8:05:9e:a2:fd:65:5c:4a:f1:7a:e9: ee:99:42:7f:d9:35:06:37:34:0d:f4:60:a7:80:48: e8:3c:da:d3:ad:7f:95:38:e4:11:3f:99:a0:a6:8c: ff:2f:25:82:9a:55:70:3d:d1:24:5f:bf:6d:35:c4: 5f:77:39:52:21:04:88:7d:47:4c:da:e1:7c:26:57: 39:b1:78:79:37:5c:f6:cb:23:48:e6:8b:15:7e:63: e4:1d:63:a4:66:b7:75:c5:cb:26:99:8d:bd:e6:66: 1d:99:98:c6:ae:54:02:f9:0b:d5:2e:4e:df:6d:f1: b4:e2:b3:f9:40:4c:f6:31:d1:ca:01:03:50:32:66: 5b:16:f8:bc:fd:0c:9e:14:f1:6f:5e:94:6b:bb:b9: df:90:72:67:f1:4a:25:9c:68:a7:24:fe:14:b9:7a: 18:64:da:95:d6:22:98:da:db:d0:ba:55:12:c8:f8: 3b:0b:15:2b:78:43:60:37:4b:6d:ca:a7:b2:b2:77: 6e:f8:87:0a:8c:24:9c:2c:16:93:54:14:73:21:2d: a5:79:c6:81:b2:ff:9a:e7:5c:cc:68:e3:74:1b:d8: 40:ed:cd:a7:cf:8f:4a:fc:ab:74:fe:f0:fd:01:a9: 0b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F3:A9:8A:C0:A6:91:36:54:33:5F:3D:83:09:4C:90:C6:4E:21:F3 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.191.0/24 Signature Algorithm: sha256WithRSAEncryption db:c0:c0:55:eb:fa:4b:7a:a8:be:22:50:96:7d:b4:06:da:1a: 2d:10:b0:bf:26:12:85:1c:ff:c3:4c:92:00:0e:13:b4:f0:2e: 60:17:75:8e:17:74:d6:97:29:b3:09:ef:11:6e:e4:1f:2c:36: 9f:ac:93:02:bb:8f:2d:9d:1d:29:d7:ea:22:52:fa:d1:f4:73: 9a:fb:8d:24:21:ff:3d:13:ab:8b:aa:e2:37:e7:1b:1a:55:68: 5d:09:4c:e9:05:ea:c9:d3:41:21:45:f0:ef:b5:4f:a3:2c:09: c2:5b:87:9c:d2:a2:9d:47:26:b9:05:a5:b7:9e:99:34:dd:21: e9:79:7c:4a:0b:13:84:0e:4a:b5:7c:8e:73:5f:73:28:38:c5: a2:bb:db:0d:d4:76:39:e3:09:d3:e0:bc:58:f5:58:4b:38:6d: 9b:a6:7b:ec:81:b7:fb:e1:70:e4:dd:f0:8b:6d:45:d8:5e:24: ba:41:6a:85:c8:74:d6:35:b8:06:66:01:2b:17:00:ef:3c:a3: 1f:8c:28:de:bf:0e:40:35:03:6a:d1:12:00:b2:fa:cb:00:6d: 55:72:3e:65:ca:8e:7b:0b:13:b0:cc:7d:17:27:99:3d:ff:6b: c5:93:d2:0b:e0:c5:cf:2f:23:f1:a9:23:eb:41:bf:6d:d0:58: 22:71:b4:fd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULITL7fmoD6KM6NWNfXCSpDAX3IUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yMzA3MzEwMDA4MjhaFw0yNDA3MjkwMDEzMjhaMDMxMTAvBgNV BAMTKDk1RjNBOThBQzBBNjkxMzY1NDMzNUYzRDgzMDk0QzkwQzY0RTIxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKV9v9W3YnGqjeN7X4/bT/xj4 BZ6i/WVcSvF66e6ZQn/ZNQY3NA30YKeASOg82tOtf5U45BE/maCmjP8vJYKaVXA9 0SRfv201xF93OVIhBIh9R0za4XwmVzmxeHk3XPbLI0jmixV+Y+QdY6Rmt3XFyyaZ jb3mZh2ZmMauVAL5C9UuTt9t8bTis/lATPYx0coBA1AyZlsW+Lz9DJ4U8W9elGu7 ud+QcmfxSiWcaKck/hS5ehhk2pXWIpja29C6VRLI+DsLFSt4Q2A3S23Kp7Kyd274 hwqMJJwsFpNUFHMhLaV5xoGy/5rnXMxo43Qb2EDtzafPj0r8q3T+8P0BqQsRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUlfOpisCmkTZUM189gwlMkMZOIfMwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiMDQ4MDY0LTg3ZGUtNGRlNy1i MGJkLTEyZmEwZGViOGUzMi8wLzMxMzAzMzJlMzczMTJlMzEzOTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0e/MA0GCSqG SIb3DQEBCwUAA4IBAQDbwMBV6/pLeqi+IlCWfbQG2hotELC/JhKFHP/DTJIADhO0 8C5gF3WOF3TWlymzCe8RbuQfLDafrJMCu48tnR0p1+oiUvrR9HOa+40kIf89E6uL quI35xsaVWhdCUzpBerJ00EhRfDvtU+jLAnCW4ec0qKdRya5BaW3npk03SHpeXxK CxOEDkq1fI5zX3MoOMWiu9sN1HY54wnT4LxY9VhLOG2bpnvsgbf74XDk3fCLbUXY XiS6QWqFyHTWNbgGZgErFwDvPKMfjCjevw5ANQNq0RIAsvrLAG1Vcj5lyo57CxOw zH0XJ5k9/2vFk9IL4MXPLyPxqSPrQb9t0FgicbT9 -----END CERTIFICATE-----Generated at Tue Apr 23 18:27:38 2024 by rpki-client on console-fra.rpki-client.org