$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa File: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (raw, json) Hash identifier: qa6SWYQ3z7tubsYGKVAhbTn4KZFDnx+c4xy/e1J05DI= Subject key identifier: 9E:6B:85:86:5F:7E:6C:2B:BB:C0:06:95:E3:48:26:56:E0:22:79:E8 Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Certificate serial: 6EC145880A96D59AE258E5909A5B0AE7FCE4E8E5 Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa Signing time: Mon 31 Jul 2023 00:09:33 +0000 ROA not before: Mon 31 Jul 2023 00:04:33 +0000 ROA not after: Mon 29 Jul 2024 00:09:33 +0000 asID: 55685 IP address blocks: 103.80.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 23:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c1:45:88:0a:96:d5:9a:e2:58:e5:90:9a:5b:0a:e7:fc:e4:e8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Validity Not Before: Jul 31 00:04:33 2023 GMT Not After : Jul 29 00:09:33 2024 GMT Subject: CN=9E6B85865F7E6C2BBBC00695E3482656E02279E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9b:73:39:61:4f:0b:db:56:6a:72:70:75:53: 08:bd:b7:c0:67:28:aa:c7:55:66:2a:59:8c:48:19: 89:9a:94:ee:12:c8:17:61:0f:34:13:3a:84:bd:05: bf:d5:7f:ad:de:ac:97:0e:f1:69:d7:82:6b:6b:4f: 33:e4:60:92:47:7c:0b:69:2a:b6:23:7d:74:6b:57: be:e6:29:7e:a1:7e:09:3a:a9:21:12:71:ad:96:fc: 1e:17:69:70:9c:bf:42:8d:ac:66:05:9e:9f:0a:40: 5d:fe:8f:0e:3e:e6:35:2a:12:67:56:68:df:5c:d9: 71:55:b4:12:9e:73:02:9f:04:b4:9b:c9:db:23:80: 79:86:e0:7e:69:57:70:7b:b5:67:1e:f5:80:de:e0: ba:7a:be:0c:04:e0:db:b5:bc:79:22:61:d9:e8:a9: 90:fa:28:57:37:85:04:fe:b1:76:2e:be:4e:20:2e: 51:94:67:84:37:d9:85:2e:06:94:80:33:27:10:72: 2b:1c:d9:ec:2f:ca:f6:48:d0:49:58:04:dc:84:5c: 1b:b2:13:8b:39:85:85:af:d4:8f:02:1e:7c:60:c3: 5d:49:82:f4:79:d3:a8:e8:51:e4:de:52:29:68:6d: 62:de:76:71:d1:c5:18:e1:b2:8c:0c:74:4b:86:86: 18:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6B:85:86:5F:7E:6C:2B:BB:C0:06:95:E3:48:26:56:E0:22:79:E8 X509v3 Authority Key Identifier: keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e38382e302f32322d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.80.88.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:c5:80:e1:fb:8f:ad:a3:a6:51:dd:dc:9f:41:43:05:95:83: 6b:24:63:3d:a1:63:d8:fc:3b:c9:23:4a:36:cd:f8:0b:fa:68: 8b:d5:25:ee:d6:d6:ee:59:f0:09:0b:56:f3:e5:36:a5:c2:af: 85:af:30:d7:cd:85:74:81:1e:a1:b0:a4:b3:ba:58:bb:13:82: dc:6a:19:d7:5f:05:71:65:b2:21:70:5d:1e:47:09:cb:25:35: bd:3c:19:83:27:07:69:80:a1:89:26:dc:f8:40:28:2b:36:93: be:fa:06:fd:f2:aa:56:37:dc:1b:f2:50:ab:41:f8:4a:59:1b: 57:3a:7a:8d:cc:29:7b:08:6e:cb:83:24:fd:25:a0:40:ff:77: 91:1b:3b:db:f6:fc:d8:56:36:c2:1e:d9:b3:30:b0:eb:a6:06: fa:f1:dd:e7:98:b6:de:ab:d5:f8:0a:4f:fc:19:fb:68:86:46: 12:77:a1:92:1f:e6:5d:8d:44:ad:c8:51:40:c3:d9:e4:0f:8b: 51:e1:cb:27:a4:5b:73:f5:17:4d:68:fe:98:48:c5:58:26:8e: 45:63:ef:3e:19:f0:25:90:26:23:b1:68:51:15:08:e0:e2:a7: df:d9:54:03:34:1a:86:96:1e:5a:a1:c4:2d:69:cf:74:bb:18: 8e:15:53:71 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUbsFFiAqW1ZriWOWQmlsK5/zk6OUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw MTI1MkE1QzAeFw0yMzA3MzEwMDA0MzNaFw0yNDA3MjkwMDA5MzNaMDMxMTAvBgNV BAMTKDlFNkI4NTg2NUY3RTZDMkJCQkMwMDY5NUUzNDgyNjU2RTAyMjc5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjm3M5YU8L21ZqcnB1Uwi9t8Bn KKrHVWYqWYxIGYmalO4SyBdhDzQTOoS9Bb/Vf63erJcO8WnXgmtrTzPkYJJHfAtp KrYjfXRrV77mKX6hfgk6qSESca2W/B4XaXCcv0KNrGYFnp8KQF3+jw4+5jUqEmdW aN9c2XFVtBKecwKfBLSbydsjgHmG4H5pV3B7tWce9YDe4Lp6vgwE4Nu1vHkiYdno qZD6KFc3hQT+sXYuvk4gLlGUZ4Q32YUuBpSAMycQcisc2ewvyvZI0ElYBNyEXBuy E4s5hYWv1I8CHnxgw11JgvR506joUeTeUilobWLednHRxRjhsowMdEuGhhgRAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUnmuFhl9+bCu7wAaV40gmVuAieegwHwYDVR0j BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1 MkE1Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyMDMyYmM5LTYwNWEtNDI1My1h NGNkLTYyZjEyNDEyNmVhYy8wLzMxMzAzMzJlMzgzMDJlMzgzODJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM1MzUzNjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnUFgwDQYJKoZIhvcN AQELBQADggEBAGzFgOH7j62jplHd3J9BQwWVg2skYz2hY9j8O8kjSjbN+Av6aIvV Je7W1u5Z8AkLVvPlNqXCr4WvMNfNhXSBHqGwpLO6WLsTgtxqGddfBXFlsiFwXR5H CcslNb08GYMnB2mAoYkm3PhAKCs2k776Bv3yqlY33BvyUKtB+EpZG1c6eo3MKXsI bsuDJP0loED/d5EbO9v2/NhWNsIe2bMwsOumBvrx3eeYtt6r1fgKT/wZ+2iGRhJ3 oZIf5l2NRK3IUUDD2eQPi1HhyyekW3P1F01o/phIxVgmjkVj7z4Z8CWQJiOxaFEV CODip9/ZVAM0GoaWHlqhxC1pz3S7GI4VU3E= -----END CERTIFICATE-----Generated at Tue Apr 23 18:36:09 2024 by rpki-client on console-ams.rpki-client.org