$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa File: 3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa (raw, json) Hash identifier: D601aVF+KC8lPWaa6roy5thQtWMBJP6uK5EqvHhEltU= Subject key identifier: 74:E0:E6:DC:93:CF:7D:73:21:35:63:5F:CF:4D:11:62:09:64:D1:D1 Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Certificate serial: 5AAF6777495DD031076F6374D4DD0352487F7334 Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa Signing time: Mon 31 Jul 2023 00:08:13 +0000 ROA not before: Mon 31 Jul 2023 00:03:13 +0000 ROA not after: Mon 29 Jul 2024 00:08:13 +0000 asID: 138810 IP address blocks: 103.134.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:af:67:77:49:5d:d0:31:07:6f:63:74:d4:dd:03:52:48:7f:73:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C Validity Not Before: Jul 31 00:03:13 2023 GMT Not After : Jul 29 00:08:13 2024 GMT Subject: CN=74E0E6DC93CF7D732135635FCF4D11620964D1D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:f7:d6:1b:fd:95:1e:d3:7c:83:4a:cf:ee: e6:13:fb:20:dc:7e:ff:e0:c8:2d:38:7b:88:04:4b: a5:13:60:08:b2:cb:55:2e:d0:70:33:58:5d:b8:96: 59:e4:98:95:91:98:5f:bf:05:e1:5d:bb:74:13:9f: f8:b2:7a:09:39:d8:6a:4f:ba:ab:ed:ea:79:56:5a: 57:73:2c:4a:e9:0f:7e:87:d2:31:91:9c:4d:bc:21: c6:28:14:91:2e:6a:26:61:b6:83:64:b2:e6:38:0d: 9b:33:62:19:e1:14:6b:c4:43:10:fc:0a:07:0d:9f: 39:39:c6:19:93:b7:de:d7:39:de:19:b7:57:dc:7c: ad:d0:3c:8d:d4:83:d4:b0:6a:7d:af:6b:98:5b:03: 94:ce:8b:08:a6:d8:f7:f4:9e:d5:7f:5b:6c:5d:84: 08:13:0f:58:d5:2c:6f:73:e2:fe:c2:0e:e4:49:af: fe:c5:50:e6:b7:c9:51:72:1c:81:b1:68:e5:f9:1f: 4d:28:0f:39:66:e0:1a:79:01:3b:ac:11:8c:91:17: a0:2a:1b:29:95:eb:5b:16:2f:04:60:43:7c:01:a9: 3a:1b:23:5c:61:4e:cf:06:7c:d3:80:70:91:07:9a: 2c:aa:c6:b2:c8:71:39:a9:18:99:41:d0:ce:58:d5: a3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E0:E6:DC:93:CF:7D:73:21:35:63:5F:CF:4D:11:62:09:64:D1:D1 X509v3 Authority Key Identifier: keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/3130332e3133342e3232302e302f32322d3234203d3e20313338383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.220.0/22 Signature Algorithm: sha256WithRSAEncryption 76:97:4a:78:78:74:2e:ce:1a:0e:b3:4a:f6:1f:9e:44:e5:32: e8:32:04:62:65:94:cc:74:3c:c7:11:0c:2d:ff:ee:04:41:6c: 87:76:2f:f5:cb:b8:a3:6b:4d:95:5b:c2:e1:21:52:73:1b:7d: 0e:5e:cc:3c:38:01:49:9e:04:45:5c:f7:a7:ec:5c:43:61:f8: f3:5b:fa:51:a9:e7:76:0f:d4:14:c3:6c:39:a7:56:d9:a9:b4: cb:2f:bc:c2:df:70:3c:d5:41:e2:ff:8a:95:06:5f:e0:30:5e: 03:22:7e:58:f4:9b:25:ac:02:dd:3b:9a:57:2e:61:94:22:96: 57:e7:ce:81:cd:84:d4:9d:e6:ab:15:cb:b7:17:5d:a0:cf:01: 16:bb:b4:ea:ad:fa:fd:a8:27:ab:81:a8:ea:18:2c:f2:9c:72: 2a:cd:30:c4:81:a5:c8:f9:e8:26:b3:8f:cf:8a:bd:d9:b9:6a: 58:a5:17:51:44:d8:9e:35:82:0b:e2:b7:49:ac:fb:a0:ab:7b: df:8a:c7:c8:83:c2:17:ee:d2:e2:f3:fc:e7:2f:e9:1e:c4:96: 16:6d:cd:1a:d5:ca:50:3b:2f:35:19:9d:ed:5b:1e:6d:c5:30: cf:2a:9a:c9:6f:69:3f:22:69:37:64:eb:47:2a:51:78:f2:81: b8:a5:38:46 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWq9nd0ld0DEHb2N01N0DUkh/czQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNG RDI2NkI1QzAeFw0yMzA3MzEwMDAzMTNaFw0yNDA3MjkwMDA4MTNaMDMxMTAvBgNV BAMTKDc0RTBFNkRDOTNDRjdENzMyMTM1NjM1RkNGNEQxMTYyMDk2NEQxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRYPfWG/2VHtN8g0rP7uYT+yDc fv/gyC04e4gES6UTYAiyy1Uu0HAzWF24llnkmJWRmF+/BeFdu3QTn/iyegk52GpP uqvt6nlWWldzLErpD36H0jGRnE28IcYoFJEuaiZhtoNksuY4DZszYhnhFGvEQxD8 CgcNnzk5xhmTt97XOd4Zt1fcfK3QPI3Ug9Swan2va5hbA5TOiwim2Pf0ntV/W2xd hAgTD1jVLG9z4v7CDuRJr/7FUOa3yVFyHIGxaOX5H00oDzlm4Bp5ATusEYyRF6Aq GymV61sWLwRgQ3wBqTobI1xhTs8GfNOAcJEHmiyqxrLIcTmpGJlB0M5Y1aMjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUdODm3JPPfXMhNWNfz00RYglk0dEwHwYDVR0j BBgwFoAUsyY9aH1b37L7ToAqs7AD/P0ma1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjM2ZTg4ZC1kNTczLTRjYmItYjQ2MC1hMGI5NjlhYTg0ZDUvMC9CMzI2M0Q2ODdE NUJERkIyRkI0RTgwMkFCM0IwMDNGQ0ZEMjY2QjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyNjNENjg3RDVCREZCMkZCNEU4MDJBQjNCMDAzRkNGRDI2 NkI1Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiMzZlODhkLWQ1NzMtNGNiYi1i NDYwLWEwYjk2OWFhODRkNS8wLzMxMzAzMzJlMzEzMzM0MmUzMjMyMzAyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzgzODMxMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnhtwwDQYJ KoZIhvcNAQELBQADggEBAHaXSnh4dC7OGg6zSvYfnkTlMugyBGJllMx0PMcRDC3/ 7gRBbId2L/XLuKNrTZVbwuEhUnMbfQ5ezDw4AUmeBEVc96fsXENh+PNb+lGp53YP 1BTDbDmnVtmptMsvvMLfcDzVQeL/ipUGX+AwXgMiflj0myWsAt07mlcuYZQillfn zoHNhNSd5qsVy7cXXaDPARa7tOqt+v2oJ6uBqOoYLPKccirNMMSBpcj56Cazj8+K vdm5alilF1FE2J41ggvit0ms+6Cre9+Kx8iDwhfu0uLz/Ocv6R7ElhZtzRrVylA7 LzUZne1bHm3FMM8qmslvaT8iaTdk60cqUXjygbilOEY= -----END CERTIFICATE-----Generated at Tue Apr 23 18:27:45 2024 by rpki-client on console-fra.rpki-client.org