$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33302e302f32342d3234203d3e203538353532.roa File: 3130332e31312e33302e302f32342d3234203d3e203538353532.roa (raw, json) Hash identifier: 1TMfyrlE2u++xBHoPWY0gYsP7D9p7mJiv3YN/ii9zPk= Subject key identifier: 74:8E:B5:52:9A:D0:DC:B9:C7:EE:F3:D7:E7:D7:40:3A:DC:D8:09:57 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 68D561D16E88BAE3C6B87B1140ADAED42DE3D13B Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33302e302f32342d3234203d3e203538353532.roa Signing time: Mon 31 Jul 2023 00:03:58 +0000 ROA not before: Sun 30 Jul 2023 23:58:58 +0000 ROA not after: Mon 29 Jul 2024 00:03:58 +0000 asID: 58552 IP address blocks: 103.11.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d5:61:d1:6e:88:ba:e3:c6:b8:7b:11:40:ad:ae:d4:2d:e3:d1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jul 30 23:58:58 2023 GMT Not After : Jul 29 00:03:58 2024 GMT Subject: CN=748EB5529AD0DCB9C7EEF3D7E7D7403ADCD80957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:19:13:e9:c5:18:4b:a6:bb:20:3d:16:45:09: 8a:88:fa:07:8e:4e:8a:4a:70:90:99:da:1a:b9:25: dd:15:34:05:45:5d:e2:d0:08:60:61:8d:07:29:1b: 19:58:72:61:3f:29:e4:7c:69:2e:0b:65:f2:1d:ab: f8:6b:66:9e:00:89:0c:1b:dd:89:9e:2a:5c:34:25: f5:e5:23:57:52:27:7b:2a:7d:2c:17:ab:e5:10:c8: e4:88:4c:a7:9f:1e:b6:d5:96:3e:62:32:84:ee:c7: 1c:57:ea:da:74:c5:c1:b4:5e:0a:b7:15:ff:4e:47: 7e:ef:bd:35:88:01:82:92:14:79:2d:70:15:98:4f: dc:5e:14:c1:e4:2e:a4:6c:12:ac:27:cc:9b:48:ad: 10:22:ac:71:7c:75:75:44:0c:9b:c8:27:ec:1a:5d: c6:73:93:a3:be:81:8f:3c:38:bc:6d:23:34:f6:f8: 44:e3:be:6a:39:fc:62:ec:27:fb:bb:a8:8f:51:69: c8:03:1e:38:71:0a:12:3a:ef:84:fc:dd:b1:cc:6f: d5:25:2d:af:62:c0:95:50:ed:65:8b:0e:b9:15:9d: 38:6f:58:b0:c4:39:e4:0c:27:b5:46:dd:c0:fb:01: 0a:f7:d9:64:ef:1b:82:08:85:c3:d4:f6:89:a5:a4: c6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8E:B5:52:9A:D0:DC:B9:C7:EE:F3:D7:E7:D7:40:3A:DC:D8:09:57 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33302e302f32342d3234203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.30.0/24 Signature Algorithm: sha256WithRSAEncryption 37:08:5c:c8:20:e8:c0:64:b8:b9:0e:ba:8c:bd:d6:07:5d:ac: c4:34:7a:7e:e3:fc:4f:78:1d:e0:74:12:33:7d:75:ef:63:01: 97:0b:a1:4e:e6:05:8d:5e:d5:e6:0e:97:57:74:9e:9f:4b:88: 90:53:79:d4:25:c3:20:fa:51:b5:df:60:46:44:f2:7a:ef:83: 06:37:df:b8:15:4b:e4:c0:3c:f6:81:14:9e:ed:1d:b1:9f:f2: 98:2f:ea:cf:1a:19:8d:8a:17:80:17:35:4d:fa:07:20:d7:8a: c0:64:1c:7c:ff:00:e0:81:1d:0e:c4:15:9a:ba:f9:83:ed:5a: f0:ff:db:30:1b:ab:64:58:8d:75:6a:3c:f9:7e:fc:02:1f:92: c4:3a:b5:6e:1b:a5:58:fe:20:69:97:9c:b6:c2:5a:de:8b:0e: d9:db:d8:69:4b:26:72:c2:90:aa:0e:5d:ff:85:8d:74:99:c4: 28:5d:37:18:e7:39:72:99:72:55:d4:99:7e:f1:61:f6:33:10: cc:2a:43:ab:2a:0b:9f:a5:ea:05:ec:07:05:51:6a:d8:74:83: b3:2c:70:c7:5e:b4:2e:bb:b3:fa:d5:d4:7a:91:57:cc:8b:c9: 86:8e:a7:8e:2e:1b:ae:51:6d:ac:63:8f:0f:2f:98:58:29:88: bc:d4:fe:9a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUaNVh0W6IuuPGuHsRQK2u1C3j0TswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yMzA3MzAyMzU4NThaFw0yNDA3MjkwMDAzNThaMDMxMTAvBgNV BAMTKDc0OEVCNTUyOUFEMERDQjlDN0VFRjNEN0U3RDc0MDNBRENEODA5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaGRPpxRhLprsgPRZFCYqI+geO TopKcJCZ2hq5Jd0VNAVFXeLQCGBhjQcpGxlYcmE/KeR8aS4LZfIdq/hrZp4AiQwb 3YmeKlw0JfXlI1dSJ3sqfSwXq+UQyOSITKefHrbVlj5iMoTuxxxX6tp0xcG0Xgq3 Ff9OR37vvTWIAYKSFHktcBWYT9xeFMHkLqRsEqwnzJtIrRAirHF8dXVEDJvIJ+wa XcZzk6O+gY88OLxtIzT2+ETjvmo5/GLsJ/u7qI9RacgDHjhxChI674T83bHMb9Ul La9iwJVQ7WWLDrkVnThvWLDEOeQMJ7VG3cD7AQr32WTvG4IIhcPU9omlpMY5AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUdI61UprQ3LnH7vPX59dAOtzYCVcwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzAzMzJlMzEzMTJlMzMzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnCx4wDQYJKoZIhvcN AQELBQADggEBADcIXMgg6MBkuLkOuoy91gddrMQ0en7j/E94HeB0EjN9de9jAZcL oU7mBY1e1eYOl1d0np9LiJBTedQlwyD6UbXfYEZE8nrvgwY337gVS+TAPPaBFJ7t HbGf8pgv6s8aGY2KF4AXNU36ByDXisBkHHz/AOCBHQ7EFZq6+YPtWvD/2zAbq2RY jXVqPPl+/AIfksQ6tW4bpVj+IGmXnLbCWt6LDtnb2GlLJnLCkKoOXf+FjXSZxChd NxjnOXKZclXUmX7xYfYzEMwqQ6sqC5+l6gXsBwVRath0g7MscMdetC67s/rV1HqR V8yLyYaOp44uG65Rbaxjjw8vmFgpiLzU/po= -----END CERTIFICATE-----Generated at Thu Apr 25 23:29:15 2024 by rpki-client on console-ams.rpki-client.org