$ rpki-client -vvf repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230362e302f32342d3234203d3e203538343837.roa File: 3130332e38342e3230362e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: wD/tq3qxtfJ3y2T3ldF1/BO80ye0su5ixxAqIkEwqMs= Subject key identifier: 72:B6:B6:C7:34:EC:42:85:3A:82:8A:CD:40:17:DD:B1:F0:76:41:C3 Certificate issuer: /CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Certificate serial: 46A3B1DD35C43CB71192C89D7449D1B82BF32CE8 Authority key identifier: FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230362e302f32342d3234203d3e203538343837.roa Signing time: Tue 23 Jan 2024 10:01:55 +0000 ROA not before: Tue 23 Jan 2024 09:56:55 +0000 ROA not after: Tue 21 Jan 2025 10:01:55 +0000 asID: 58487 IP address blocks: 103.84.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a3:b1:dd:35:c4:3c:b7:11:92:c8:9d:74:49:d1:b8:2b:f3:2c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFCC3C879250F6351654AFE2ED137EED71DCACA1 Validity Not Before: Jan 23 09:56:55 2024 GMT Not After : Jan 21 10:01:55 2025 GMT Subject: CN=72B6B6C734EC42853A828ACD4017DDB1F07641C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:a6:cb:d9:69:b1:7e:cc:b2:27:be:a6:cf: d2:d6:e5:cb:56:dd:69:e2:f4:4c:35:c6:f1:c0:27: be:f3:76:0b:52:84:85:35:e6:04:bb:53:c8:96:a8: 80:13:df:e3:33:1e:80:2e:73:00:c0:18:80:e6:e7: 7f:cf:70:4b:12:0b:f2:74:cd:20:e4:c2:07:f7:cb: f9:da:f4:5e:28:7d:ec:a5:18:de:ef:ff:ca:51:9a: ee:11:53:58:48:5f:eb:98:9b:59:00:dd:56:3e:4d: ff:1f:e2:42:2f:82:88:15:bd:7c:3f:53:a2:ec:89: 97:34:fa:40:dd:5e:a9:92:ce:e0:ad:10:3e:16:70: f5:bc:7a:de:91:69:e0:68:63:a9:7a:f6:44:8c:73: a5:4b:1e:b0:ec:11:25:5b:f8:95:dc:56:83:6d:f1: 3a:5e:29:08:98:e1:77:00:e3:77:c3:a8:2a:75:1e: e3:78:06:f8:b0:d7:db:38:35:b0:4a:be:9f:f2:c2: d4:04:49:89:12:43:ec:05:52:d6:55:73:cb:b5:5b: 0d:d3:5e:1d:2b:9b:49:fb:25:7b:32:ab:85:d4:c0: c7:ed:45:f8:e5:f6:dc:a5:42:88:44:fe:15:ad:55: 23:0e:39:47:74:dd:2c:01:c6:89:1e:ef:1c:fe:11: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B6:B6:C7:34:EC:42:85:3A:82:8A:CD:40:17:DD:B1:F0:76:41:C3 X509v3 Authority Key Identifier: keyid:FF:CC:3C:87:92:50:F6:35:16:54:AF:E2:ED:13:7E:ED:71:DC:AC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/FFCC3C879250F6351654AFE2ED137EED71DCACA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFCC3C879250F6351654AFE2ED137EED71DCACA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60eea08c-3fd2-488e-a574-9f9bb631a62b/0/3130332e38342e3230362e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.206.0/24 Signature Algorithm: sha256WithRSAEncryption 08:b4:bc:16:8d:7c:9c:31:eb:53:13:57:d5:9b:1d:d0:8d:d7: 64:89:65:76:07:15:3f:8b:9a:28:f6:60:1a:13:c3:99:59:e0: 06:01:cb:80:79:84:61:3f:d8:7f:0d:68:75:4a:c9:57:74:16: 33:0b:d6:5a:8c:72:25:44:1b:53:5d:0f:3f:6c:9f:9a:15:67: e8:e9:08:1a:61:37:69:87:8d:d0:7c:66:10:91:ae:0d:b4:0d: 5f:f5:bf:60:8f:07:ae:da:bf:cc:f4:b0:2b:f7:c6:0e:4a:3f: 0d:f5:01:c0:92:c4:0b:18:ec:68:53:d8:6e:78:b6:90:da:a2: 0c:89:20:d8:de:93:49:4b:fa:09:c9:2e:dd:55:0b:17:20:fc: 7e:d2:b3:f7:b9:65:19:02:1a:94:60:54:5a:7b:b3:84:bd:eb: 75:df:ba:14:c8:b6:a0:9c:0b:45:93:c5:af:ac:eb:4d:2f:8a: af:95:c0:86:ab:14:c8:b5:ad:f8:06:13:32:3c:64:d8:e5:f5: dc:94:6c:5e:3b:18:e9:bf:36:cc:93:2a:40:2e:f1:01:e1:d3: de:84:7c:90:19:b1:31:19:33:34:a7:0f:a0:bd:92:4e:0d:91: 73:f2:ed:d9:bc:cb:3f:b6:17:8d:b7:71:87:c1:38:62:74:ca: 41:d3:f0:77 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURqOx3TXEPLcRksiddEnRuCvzLOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3 MURDQUNBMTAeFw0yNDAxMjMwOTU2NTVaFw0yNTAxMjExMDAxNTVaMDMxMTAvBgNV BAMTKDcyQjZCNkM3MzRFQzQyODUzQTgyOEFDRDQwMTdEREIxRjA3NjQxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzeqbL2WmxfsyyJ76mz9LW5ctW 3Wni9Ew1xvHAJ77zdgtShIU15gS7U8iWqIAT3+MzHoAucwDAGIDm53/PcEsSC/J0 zSDkwgf3y/na9F4ofeylGN7v/8pRmu4RU1hIX+uYm1kA3VY+Tf8f4kIvgogVvXw/ U6LsiZc0+kDdXqmSzuCtED4WcPW8et6RaeBoY6l69kSMc6VLHrDsESVb+JXcVoNt 8TpeKQiY4XcA43fDqCp1HuN4Bviw19s4NbBKvp/ywtQESYkSQ+wFUtZVc8u1Ww3T Xh0rm0n7JXsyq4XUwMftRfjl9tylQohE/hWtVSMOOUd03SwBxoke7xz+EUYpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUcra2xzTsQoU6gorNQBfdsfB2QcMwHwYDVR0j BBgwFoAU/8w8h5JQ9jUWVK/i7RN+7XHcrKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGVlYTA4Yy0zZmQyLTQ4OGUtYTU3NC05ZjliYjYzMWE2MmIvMC9GRkNDM0M4Nzky NTBGNjM1MTY1NEFGRTJFRDEzN0VFRDcxRENBQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZDQzNDODc5MjUwRjYzNTE2NTRBRkUyRUQxMzdFRUQ3MURD QUNBMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwZWVhMDhjLTNmZDItNDg4ZS1h NTc0LTlmOWJiNjMxYTYyYi8wLzMxMzAzMzJlMzgzNDJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdUzjANBgkqhkiG 9w0BAQsFAAOCAQEACLS8Fo18nDHrUxNX1Zsd0I3XZIlldgcVP4uaKPZgGhPDmVng BgHLgHmEYT/Yfw1odUrJV3QWMwvWWoxyJUQbU10PP2yfmhVn6OkIGmE3aYeN0Hxm EJGuDbQNX/W/YI8Hrtq/zPSwK/fGDko/DfUBwJLECxjsaFPYbni2kNqiDIkg2N6T SUv6Ccku3VULFyD8ftKz97llGQIalGBUWnuzhL3rdd+6FMi2oJwLRZPFr6zrTS+K r5XAhqsUyLWt+AYTMjxk2OX13JRsXjsY6b82zJMqQC7xAeHT3oR8kBmxMRkzNKcP oL2STg2Rc/Lt2bzLP7YXjbdxh8E4YnTKQdPwdw== -----END CERTIFICATE-----Generated at Sat May 4 01:50:55 2024 by rpki-client on console-ams.rpki-client.org