$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/3130332e31312e3133342e302f32332d3234203d3e203538333932.roa File: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (raw, json) Hash identifier: //8RUAobLXV1JMXmZJVAyzx31BxHxTrg0me3iufb1Cc= Subject key identifier: 1F:47:2C:55:92:8C:6E:8B:79:92:8D:35:7F:C0:7B:D8:6F:B0:DF:BD Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 6D5837979D46A88A551AACC07185FE7361838854 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/3130332e31312e3133342e302f32332d3234203d3e203538333932.roa Signing time: Mon 31 Jul 2023 00:06:23 +0000 ROA not before: Mon 31 Jul 2023 00:01:23 +0000 ROA not after: Mon 29 Jul 2024 00:06:23 +0000 asID: 58392 IP address blocks: 103.11.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 22:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:58:37:97:9d:46:a8:8a:55:1a:ac:c0:71:85:fe:73:61:83:88:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Jul 31 00:01:23 2023 GMT Not After : Jul 29 00:06:23 2024 GMT Subject: CN=1F472C55928C6E8B79928D357FC07BD86FB0DFBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:7f:1f:a8:db:a4:a0:93:7b:2e:11:a3:30: c4:0a:fe:21:2e:0a:de:e9:e9:a9:b4:ca:c6:35:19: 1a:fb:ec:20:a0:2c:f9:ee:59:e5:00:11:1b:d6:ca: 1c:b7:95:70:61:67:36:73:e3:ce:85:b1:25:20:e8: 88:61:c1:fe:96:95:0b:35:ce:52:c7:0f:7d:01:f0: 34:4b:52:51:aa:98:be:e7:17:53:d2:c4:52:73:29: 7e:f5:a7:37:a4:16:c3:35:f8:b1:0c:a8:27:73:6e: e5:98:94:99:7f:10:8d:37:03:e7:05:3d:ca:a1:6c: ee:a9:93:44:e6:09:4e:89:ea:0c:d2:55:87:37:2b: 0e:20:f6:60:86:df:90:7e:b7:5c:34:93:d2:28:52: 27:0c:25:00:5a:58:de:1a:92:08:68:5b:15:e8:f2: e4:44:4c:7a:ee:47:ff:81:7d:b1:f6:42:d1:6b:c8: 94:c9:65:70:56:06:6d:48:a5:d7:f9:c0:b8:97:95: af:e7:98:8b:d2:89:97:43:34:9c:7f:28:01:17:9d: 5f:b7:af:61:33:6a:4a:11:56:1c:a4:d2:5c:14:28: 27:92:34:af:c0:7f:9c:66:d5:12:f1:6a:a1:e9:d3: 2c:49:df:29:d8:c9:31:bc:0e:e3:fe:c5:82:a1:97: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:47:2C:55:92:8C:6E:8B:79:92:8D:35:7F:C0:7B:D8:6F:B0:DF:BD X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/3130332e31312e3133342e302f32332d3234203d3e203538333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.134.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:15:7b:4e:9f:08:09:c6:5e:5e:35:da:35:c6:1b:d5:8f:39: 69:53:0c:af:46:5f:73:ac:a1:55:e1:3c:c3:fc:9e:ec:fc:e3: f4:2c:12:46:00:fb:28:c5:15:f9:8e:09:43:56:da:48:90:ee: bb:59:da:45:19:fa:f3:e2:39:fd:09:a8:b3:31:94:26:f7:b4: 8c:8c:c8:16:92:b8:26:11:09:27:61:49:f0:b7:19:c7:b5:38: 4c:3d:7a:e7:fd:41:fc:2a:19:e1:41:d3:ad:92:31:e4:fc:74: 16:8f:28:c9:20:04:e8:d7:76:0f:92:47:c5:e0:63:12:77:b6: e1:f4:c8:53:ec:51:75:d6:51:e3:7c:93:45:17:51:23:a2:60: 48:55:89:85:3f:63:eb:a6:b4:ac:3b:ce:a7:1f:08:e7:40:ba: ba:18:95:4e:ce:98:33:2d:91:33:5e:a3:55:20:48:d8:28:a0: 1a:26:c1:49:05:43:b3:b6:12:46:f6:5c:9f:bc:6d:e6:dd:f9: f7:95:4d:35:4e:ea:2c:ce:c7:44:7c:39:4c:2e:e5:7d:05:f3: f5:45:66:0c:df:8a:22:fb:ba:89:0b:37:fb:98:6b:74:91:32: 29:d5:e4:45:87:45:b4:d7:87:30:72:54:59:2e:ca:97:a7:6b: d4:8d:28:3a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbVg3l51GqIpVGqzAcYX+c2GDiFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yMzA3MzEwMDAxMjNaFw0yNDA3MjkwMDA2MjNaMDMxMTAvBgNV BAMTKDFGNDcyQzU1OTI4QzZFOEI3OTkyOEQzNTdGQzA3QkQ4NkZCMERGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGI38fqNukoJN7LhGjMMQK/iEu Ct7p6am0ysY1GRr77CCgLPnuWeUAERvWyhy3lXBhZzZz486FsSUg6Ihhwf6WlQs1 zlLHD30B8DRLUlGqmL7nF1PSxFJzKX71pzekFsM1+LEMqCdzbuWYlJl/EI03A+cF PcqhbO6pk0TmCU6J6gzSVYc3Kw4g9mCG35B+t1w0k9IoUicMJQBaWN4akghoWxXo 8uRETHruR/+BfbH2QtFryJTJZXBWBm1Ipdf5wLiXla/nmIvSiZdDNJx/KAEXnV+3 r2EzakoRVhyk0lwUKCeSNK/Af5xm1RLxaqHp0yxJ3ynYyTG8DuP+xYKhl9bdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUH0csVZKMbot5ko01f8B72G+w370wHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmZmI3NzY3LTNkZTktNDgzMy1i NGU3LWIxYjYyZWUzY2Q5OS8wLzMxMzAzMzJlMzEzMTJlMzEzMzM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzUzODMzMzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcLhjANBgkqhkiG 9w0BAQsFAAOCAQEAOxV7Tp8ICcZeXjXaNcYb1Y85aVMMr0Zfc6yhVeE8w/ye7Pzj 9CwSRgD7KMUV+Y4JQ1baSJDuu1naRRn68+I5/QmoszGUJve0jIzIFpK4JhEJJ2FJ 8LcZx7U4TD165/1B/CoZ4UHTrZIx5Px0Fo8oySAE6Nd2D5JHxeBjEne24fTIU+xR ddZR43yTRRdRI6JgSFWJhT9j66a0rDvOpx8I50C6uhiVTs6YMy2RM16jVSBI2Cig GibBSQVDs7YSRvZcn7xt5t3595VNNU7qLM7HRHw5TC7lfQXz9UVmDN+KIvu6iQs3 +5hrdJEyKdXkRYdFtNeHMHJUWS7Kl6dr1I0oOg== -----END CERTIFICATE-----Generated at Thu Apr 18 20:08:36 2024 by rpki-client on console-fra.rpki-client.org