$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa File: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (raw, json) Hash identifier: +mJefirNVXI6XsMgfalNCJOE9NMEhcTErJJNZPBMNcQ= Subject key identifier: 88:3E:B2:AA:B6:DF:81:B3:9D:53:A8:A5:64:04:49:3C:C5:D2:43:B9 Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 1D2FC1AF4B783D4328C37B800804408ADAEB3E40 Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa Signing time: Mon 31 Jul 2023 00:07:18 +0000 ROA not before: Mon 31 Jul 2023 00:02:18 +0000 ROA not after: Mon 29 Jul 2024 00:07:18 +0000 asID: 136088 IP address blocks: 103.87.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2f:c1:af:4b:78:3d:43:28:c3:7b:80:08:04:40:8a:da:eb:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jul 31 00:02:18 2023 GMT Not After : Jul 29 00:07:18 2024 GMT Subject: CN=883EB2AAB6DF81B39D53A8A56404493CC5D243B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:8a:c3:b4:e1:32:8d:59:6a:af:72:64:63: 24:8d:e7:ba:5e:b5:dd:6d:da:da:d6:75:55:13:89: 35:49:e9:92:a8:c5:87:dd:6f:7f:ea:9c:86:d4:5c: ad:3e:cb:2d:c1:ef:3c:50:01:65:21:21:c6:a8:ab: 20:9f:28:2c:0a:32:ac:d1:56:53:d0:8b:92:09:ed: 9e:9f:89:48:fe:83:b8:8b:e6:48:3d:c4:cf:f0:d2: da:b0:de:15:2e:76:33:2c:65:d9:78:c3:60:0f:8b: 94:f7:09:d5:0d:71:7a:30:8a:7c:76:fd:3d:b2:c5: 83:77:36:fd:04:49:af:11:8f:6f:5b:03:d9:f0:d6: e2:24:5d:da:0d:18:df:97:96:35:0e:89:e4:77:60: 3d:d1:ef:35:c8:8f:eb:07:24:a0:a7:ac:a1:23:39: b9:c2:d5:4d:5d:99:d7:e3:22:d4:9c:cc:82:c0:20: 8c:80:50:49:c0:19:8a:a7:f7:a8:11:ec:b5:64:e1: 0f:2b:a6:20:d3:a5:1e:69:36:9e:a6:2b:d0:aa:5c: 7e:9e:e9:cd:bd:f7:ff:7f:86:80:57:06:1e:dc:51: 70:df:94:ee:6c:d8:5d:8a:cd:b8:fb:cd:d1:d7:94: 39:43:9a:b7:b5:c3:47:88:70:6c:8e:45:1b:48:48: ec:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3E:B2:AA:B6:DF:81:B3:9D:53:A8:A5:64:04:49:3C:C5:D2:43:B9 X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.231.0/24 Signature Algorithm: sha256WithRSAEncryption 80:78:eb:47:08:27:54:35:ef:77:0e:ef:e4:5c:85:04:82:a2: a5:10:5d:e2:eb:cc:ee:f4:02:01:52:9f:1e:45:9d:a0:50:27: 61:4a:36:da:14:bd:d9:80:35:ab:05:4a:05:4c:34:e5:b8:39: e8:55:fe:bc:87:5c:f0:2e:fc:9a:d3:21:ed:82:51:62:e8:0c: 1a:9f:d2:25:bd:62:52:f2:32:f1:fd:61:24:ed:09:28:59:12: 57:eb:60:8e:aa:dd:a2:0f:4f:ff:a2:58:77:33:cf:32:67:07: e9:e1:67:2d:88:a2:0e:2d:ee:2a:47:e8:de:5d:53:28:05:bd: 67:14:fc:c3:5e:8d:a6:81:f3:d6:73:cf:6e:94:b1:78:4a:31: 83:6d:8b:b3:1a:99:b3:ed:26:e5:4f:9b:7c:6f:f7:7a:a9:77: bb:c8:ec:a7:dd:07:00:75:c2:c1:9f:f8:c2:fc:0d:6f:0c:fd: 91:f4:98:8e:3d:65:40:98:0e:9e:6c:85:89:63:57:8e:a9:6f: 1e:a9:90:21:f9:6b:5d:4c:9a:7f:ab:cf:0a:0d:d9:07:e2:f7: 82:9d:72:4e:e9:18:fb:10:27:f6:56:60:62:04:45:18:ee:be: 23:e0:45:2c:4b:c6:f7:7d:39:ea:7a:51:ed:50:cb:4f:8a:84: 92:8c:a6:03 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHS/Br0t4PUMow3uACARAitrrPkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yMzA3MzEwMDAyMThaFw0yNDA3MjkwMDA3MThaMDMxMTAvBgNV BAMTKDg4M0VCMkFBQjZERjgxQjM5RDUzQThBNTY0MDQ0OTNDQzVEMjQzQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaYrDtOEyjVlqr3JkYySN57pe td1t2trWdVUTiTVJ6ZKoxYfdb3/qnIbUXK0+yy3B7zxQAWUhIcaoqyCfKCwKMqzR VlPQi5IJ7Z6fiUj+g7iL5kg9xM/w0tqw3hUudjMsZdl4w2APi5T3CdUNcXowinx2 /T2yxYN3Nv0ESa8Rj29bA9nw1uIkXdoNGN+XljUOieR3YD3R7zXIj+sHJKCnrKEj ObnC1U1dmdfjItSczILAIIyAUEnAGYqn96gR7LVk4Q8rpiDTpR5pNp6mK9CqXH6e 6c299/9/hoBXBh7cUXDflO5s2F2Kzbj7zdHXlDlDmre1w0eIcGyORRtISOzjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUiD6yqrbfgbOdU6ilZARJPMXSQ7kwHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMxMzAzMzJlMzgzNzJlMzIzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1fnMA0GCSqG SIb3DQEBCwUAA4IBAQCAeOtHCCdUNe93Du/kXIUEgqKlEF3i68zu9AIBUp8eRZ2g UCdhSjbaFL3ZgDWrBUoFTDTluDnoVf68h1zwLvya0yHtglFi6Awan9IlvWJS8jLx /WEk7QkoWRJX62COqt2iD0//olh3M88yZwfp4WctiKIOLe4qR+jeXVMoBb1nFPzD Xo2mgfPWc89ulLF4SjGDbYuzGpmz7SblT5t8b/d6qXe7yOyn3QcAdcLBn/jC/A1v DP2R9JiOPWVAmA6ebIWJY1eOqW8eqZAh+WtdTJp/q88KDdkH4veCnXJO6Rj7ECf2 VmBiBEUY7r4j4EUsS8b3fTnqelHtUMtPioSSjKYD -----END CERTIFICATE-----Generated at Wed Apr 24 22:29:03 2024 by rpki-client on console-fra.rpki-client.org