$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132332e302f32342d3234203d3e203536323436.roa File: 3130332e31302e3132332e302f32342d3234203d3e203536323436.roa (raw, json) Hash identifier: f6l9Mps9KOwRTZ8zCaPt4WojL9r0mTDZLtDhPPg7dLU= Subject key identifier: 4E:88:4C:7A:46:4C:55:C3:A9:56:D5:C1:1B:A3:08:78:BF:C9:D3:42 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 7FFD0EEB3ADD2555819F56DF9DAEF3AA247EB67B Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132332e302f32342d3234203d3e203536323436.roa Signing time: Mon 31 Jul 2023 00:03:56 +0000 ROA not before: Sun 30 Jul 2023 23:58:56 +0000 ROA not after: Mon 29 Jul 2024 00:03:56 +0000 asID: 56246 IP address blocks: 103.10.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 18:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:fd:0e:eb:3a:dd:25:55:81:9f:56:df:9d:ae:f3:aa:24:7e:b6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 30 23:58:56 2023 GMT Not After : Jul 29 00:03:56 2024 GMT Subject: CN=4E884C7A464C55C3A956D5C11BA30878BFC9D342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:36:87:8a:1c:ef:9b:c2:14:b7:72:96:3a: ba:4d:d4:88:38:28:5c:8d:2d:b3:27:98:c0:6f:a2: bc:76:e6:61:02:c0:b4:86:a4:3e:55:34:d1:fb:3a: d9:f9:58:db:02:9d:9f:a2:86:30:85:51:43:d4:e1: ce:65:80:4b:20:51:ee:1c:65:43:40:99:85:b0:f9: 3b:33:df:a1:c5:03:55:f6:01:51:80:65:b4:e3:19: 61:6a:c8:8d:2a:9d:a8:99:41:61:ac:73:36:46:54: b3:c0:ff:66:fe:ec:b4:cc:27:70:dd:bb:82:33:18: 09:14:d8:94:3a:81:1d:33:2a:d0:3d:68:25:44:66: 6f:0d:31:e4:28:af:cc:3e:39:d4:c2:cb:17:a3:b9: b5:ba:f8:6c:fa:60:6d:a4:e5:06:3f:43:28:f3:56: a3:83:b7:e3:ae:87:27:b5:ff:3a:4e:92:07:09:f4: 40:c5:51:41:4c:d1:01:b3:8e:2b:13:fd:97:47:36: ea:46:40:48:9e:4b:1e:d9:95:25:4d:0f:c9:ca:0b: 19:f6:51:a9:9e:45:bc:22:5e:32:59:45:71:33:56: eb:da:0b:85:18:fa:10:17:cd:18:21:41:c7:80:d3: 34:0c:ac:db:c0:13:16:e6:0f:d2:de:6b:3d:5a:ea: b9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:88:4C:7A:46:4C:55:C3:A9:56:D5:C1:1B:A3:08:78:BF:C9:D3:42 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132332e302f32342d3234203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.123.0/24 Signature Algorithm: sha256WithRSAEncryption b4:7c:f4:0b:5b:92:f7:66:cf:6e:79:cb:7d:51:64:ae:99:04: be:44:ca:6a:48:03:c5:a8:60:7a:47:b2:21:d5:af:5c:8b:b0: 50:7b:28:1e:36:8e:32:a4:5d:6b:ec:26:12:26:41:d1:8a:2e: 4c:e4:3f:db:4d:d3:1a:07:60:a4:44:70:7a:e6:dc:ad:a7:8a: 80:79:99:7e:a8:29:9a:18:cd:7c:e7:9a:bb:9b:1d:8b:d5:e2: ad:68:1a:c8:e5:2b:bd:ce:a9:84:9f:43:1b:28:79:68:c1:3a: dc:d9:9e:e2:a2:20:80:05:a6:3e:43:da:44:e6:aa:db:55:d2: df:99:4c:1d:6b:dd:a5:94:11:16:82:09:30:f1:43:d9:99:2d: fd:3e:08:30:03:fa:e4:f1:a8:a0:b2:07:b1:64:9b:85:8e:b3: da:31:df:8c:aa:0c:ec:0a:ad:be:02:8d:65:d3:b1:d9:c1:25: bb:82:57:21:42:03:e4:8b:09:c2:0b:5f:82:55:e8:ca:94:e1: 3a:ac:d0:df:72:d6:5b:64:2c:ea:c2:3c:47:42:44:68:4e:e4: 0f:1f:57:49:01:b3:41:87:be:c8:c0:42:ee:c0:3f:18:17:5a: 9f:4f:a5:56:27:03:ee:91:80:67:5f:56:73:7e:f8:a0:79:d2: ca:c9:b9:f7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUf/0O6zrdJVWBn1bfna7zqiR+tnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yMzA3MzAyMzU4NTZaFw0yNDA3MjkwMDAzNTZaMDMxMTAvBgNV BAMTKDRFODg0QzdBNDY0QzU1QzNBOTU2RDVDMTFCQTMwODc4QkZDOUQzNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3jaHihzvm8IUt3KWOrpN1Ig4 KFyNLbMnmMBvorx25mECwLSGpD5VNNH7Otn5WNsCnZ+ihjCFUUPU4c5lgEsgUe4c ZUNAmYWw+Tsz36HFA1X2AVGAZbTjGWFqyI0qnaiZQWGsczZGVLPA/2b+7LTMJ3Dd u4IzGAkU2JQ6gR0zKtA9aCVEZm8NMeQor8w+OdTCyxejubW6+Gz6YG2k5QY/Qyjz VqODt+Ouhye1/zpOkgcJ9EDFUUFM0QGzjisT/ZdHNupGQEieSx7ZlSVND8nKCxn2 UameRbwiXjJZRXEzVuvaC4UY+hAXzRghQceA0zQMrNvAExbmD9Leaz1a6rlnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTohMekZMVcOpVtXBG6MIeL/J00IwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzAzMzJlMzEzMDJlMzEzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKezANBgkqhkiG 9w0BAQsFAAOCAQEAtHz0C1uS92bPbnnLfVFkrpkEvkTKakgDxahgekeyIdWvXIuw UHsoHjaOMqRda+wmEiZB0YouTOQ/203TGgdgpERweubcraeKgHmZfqgpmhjNfOea u5sdi9XirWgayOUrvc6phJ9DGyh5aME63Nme4qIggAWmPkPaROaq21XS35lMHWvd pZQRFoIJMPFD2Zkt/T4IMAP65PGooLIHsWSbhY6z2jHfjKoM7AqtvgKNZdOx2cEl u4JXIUID5IsJwgtfglXoypThOqzQ33LWW2Qs6sI8R0JEaE7kDx9XSQGzQYe+yMBC 7sA/GBdan0+lVicD7pGAZ19Wc374oHnSysm59w== -----END CERTIFICATE-----Generated at Fri Apr 19 10:26:10 2024 by rpki-client on console-ams.rpki-client.org