$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa File: 3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa (raw, json) Hash identifier: SKuUD71J65U3SNJR8+JO95fdIKwSuYHnOZVZ8xtzkrg= Subject key identifier: 41:87:9C:77:9E:1B:9F:97:0D:8F:60:DA:E8:B0:71:88:1B:7E:47:11 Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 753E3B8F9751D90768657A0A8D99632729605D9B Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa Signing time: Wed 06 Dec 2023 10:00:00 +0000 ROA not before: Wed 06 Dec 2023 09:55:00 +0000 ROA not after: Wed 04 Dec 2024 10:00:00 +0000 asID: 38515 IP address blocks: 103.107.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3e:3b:8f:97:51:d9:07:68:65:7a:0a:8d:99:63:27:29:60:5d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: Dec 6 09:55:00 2023 GMT Not After : Dec 4 10:00:00 2024 GMT Subject: CN=41879C779E1B9F970D8F60DAE8B071881B7E4711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:71:03:ab:eb:c6:1f:93:e4:bb:18:b0:eb: a2:32:a8:54:04:25:a6:9a:0d:27:3d:b8:06:dd:f8: bc:3c:32:3d:02:6e:f6:1a:ce:da:f7:03:f1:26:df: 04:bc:97:65:48:e9:20:7e:70:94:16:c4:9e:64:03: 51:6f:e6:2a:77:54:cc:ef:45:5a:fc:99:9c:3c:d3: c5:f7:3a:11:a7:49:5b:cd:0b:b5:36:ea:f8:93:18: 4d:3e:54:85:6e:39:1f:7b:fb:b0:5e:5a:ee:41:cf: 7d:a0:6f:6f:55:a1:2f:4b:b4:04:63:be:4f:88:39: 82:94:f8:cb:2f:d0:69:d5:b8:e9:f4:c2:c3:05:f5: 41:92:b0:23:21:15:06:ad:0f:bf:da:3b:d4:82:15: 22:3f:f6:c4:05:b5:55:2b:ab:a5:39:e5:a5:04:a2: 94:53:89:2b:dd:32:00:2d:d6:b2:e5:3b:28:92:e1: f8:e3:b4:c3:43:29:b9:99:63:72:e9:14:4d:e5:a1: ba:78:30:00:d9:b5:7c:d1:f0:d3:4c:0e:a3:51:bf: fe:93:76:61:37:b4:28:7a:10:e2:31:4b:94:1c:f5: f8:fe:f8:da:28:f0:6d:ab:87:63:2b:0c:37:81:14: 51:f6:91:6d:97:56:87:c0:99:8d:09:da:a5:1f:e9: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:87:9C:77:9E:1B:9F:97:0D:8F:60:DA:E8:B0:71:88:1B:7E:47:11 X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.248.0/22 Signature Algorithm: sha256WithRSAEncryption 01:c7:bb:7e:70:fd:08:5e:a1:57:8b:d3:dd:39:b5:af:f9:14: 44:f9:a3:64:1c:2b:fe:f6:b7:69:a8:ec:b0:b6:9f:3d:0a:e3: 79:58:0a:8a:52:af:ef:87:36:cb:7e:c6:03:75:ee:72:cd:4d: 6f:0b:77:76:99:82:d4:c3:56:c0:02:ee:9d:78:91:ec:c0:1b: 27:a4:e3:54:ef:0a:a7:b9:ca:fc:a5:00:bb:e1:5b:c0:81:37: c8:88:f7:41:75:d3:92:12:11:23:83:1f:a3:d9:b8:bd:51:db: 1e:b5:e3:9e:90:2e:b8:00:48:bd:d7:56:7b:07:38:16:2f:b1: d9:f0:ec:ec:2f:c9:c0:eb:83:ef:6c:89:72:4c:c0:d4:b3:83: de:c0:9a:3b:c6:d6:34:b8:76:42:a8:0c:18:7f:06:fd:da:f6: 32:df:8a:7d:bb:a3:d5:11:ee:67:f7:77:53:d9:cf:87:f4:5a: 8a:9b:1e:9b:6e:2c:a1:c4:9e:62:6e:68:b1:c6:4d:97:d9:3e: 53:73:e9:b8:40:d6:7c:ff:dc:4f:91:37:04:e1:6d:47:e6:a5: d5:fd:32:23:48:15:50:b0:15:b6:d1:a1:89:2d:ce:38:70:8a: 1b:03:68:da:70:4b:b0:aa:62:7e:3f:e0:2a:ae:39:f7:a2:cc: b4:c0:ac:08 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdT47j5dR2QdoZXoKjZljJylgXZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yMzEyMDYwOTU1MDBaFw0yNDEyMDQxMDAwMDBaMDMxMTAvBgNV BAMTKDQxODc5Qzc3OUUxQjlGOTcwRDhGNjBEQUU4QjA3MTg4MUI3RTQ3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiC3EDq+vGH5Pkuxiw66IyqFQE JaaaDSc9uAbd+Lw8Mj0CbvYaztr3A/Em3wS8l2VI6SB+cJQWxJ5kA1Fv5ip3VMzv RVr8mZw808X3OhGnSVvNC7U26viTGE0+VIVuOR97+7BeWu5Bz32gb29VoS9LtARj vk+IOYKU+Msv0GnVuOn0wsMF9UGSsCMhFQatD7/aO9SCFSI/9sQFtVUrq6U55aUE opRTiSvdMgAt1rLlOyiS4fjjtMNDKbmZY3LpFE3lobp4MADZtXzR8NNMDqNRv/6T dmE3tCh6EOIxS5Qc9fj++Noo8G2rh2MrDDeBFFH2kW2XVofAmY0J2qUf6edHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQYecd54bn5cNj2Da6LBxiBt+RxEwHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzAzMzJlMzEzMDM3MmUzMjM0MzgyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMzM4MzUzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2v4MA0GCSqG SIb3DQEBCwUAA4IBAQABx7t+cP0IXqFXi9PdObWv+RRE+aNkHCv+9rdpqOywtp89 CuN5WAqKUq/vhzbLfsYDde5yzU1vC3d2mYLUw1bAAu6deJHswBsnpONU7wqnucr8 pQC74VvAgTfIiPdBddOSEhEjgx+j2bi9UdseteOekC64AEi911Z7BzgWL7HZ8Ozs L8nA64PvbIlyTMDUs4PewJo7xtY0uHZCqAwYfwb92vYy34p9u6PVEe5n93dT2c+H 9FqKmx6bbiyhxJ5ibmixxk2X2T5Tc+m4QNZ8/9xPkTcE4W1H5qXV/TIjSBVQsBW2 0aGJLc44cIobA2jacEuwqmJ+P+Aqrjn3osy0wKwI -----END CERTIFICATE-----Generated at Sun May 5 11:44:51 2024 by rpki-client on console-ams.rpki-client.org