$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa File: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (raw, json) Hash identifier: S0jz9/CvwZquCQdr3zzMug2f9bRerKc/cchjpAQ98O8= Subject key identifier: F2:59:D5:CF:EF:94:20:35:C8:C1:B7:9B:50:C0:B0:10:B0:23:AF:15 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 07AA3A4E86F505D72CB2D123EED3A7AF86B00537 Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa Signing time: Mon 31 Jul 2023 00:07:24 +0000 ROA not before: Mon 31 Jul 2023 00:02:24 +0000 ROA not after: Mon 29 Jul 2024 00:07:24 +0000 asID: 138079 IP address blocks: 103.130.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:aa:3a:4e:86:f5:05:d7:2c:b2:d1:23:ee:d3:a7:af:86:b0:05:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Jul 31 00:02:24 2023 GMT Not After : Jul 29 00:07:24 2024 GMT Subject: CN=F259D5CFEF942035C8C1B79B50C0B010B023AF15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:27:b2:f2:d4:da:e4:13:24:45:74:b1:de: ae:f5:7b:6d:7a:e7:d0:e1:56:e1:61:36:a6:49:3a: 04:c6:8f:4c:e1:cb:1e:6d:ca:3d:01:25:bc:b4:22: d3:e0:43:4e:88:65:5a:e1:61:84:98:53:2a:56:49: 49:c1:0c:56:27:51:5e:94:d8:62:21:24:90:e6:d9: d3:db:46:31:94:2b:5c:93:86:ca:bd:55:9b:18:b6: 3a:17:a4:a6:a4:66:15:4f:e1:32:e7:46:d5:0c:34: 16:32:f0:32:1f:c7:c1:ce:96:d2:28:b2:71:9d:70: d2:21:88:ea:a2:4e:3f:41:c4:31:3f:02:f2:dc:b9: 1c:66:cf:b2:4c:98:60:ee:20:8f:6c:0f:f4:f7:40: f4:e9:12:5c:ff:d3:e0:cf:05:e2:f1:e1:7b:7d:13: fd:0f:af:ae:81:ac:a1:5d:4e:d0:4f:92:cd:3b:d0: 75:b5:09:79:bd:44:be:8a:ac:f8:bb:c7:09:7d:ab: 32:4f:f2:8a:83:29:b2:a0:dd:85:db:9f:9e:d3:18: 71:51:a1:e3:a4:b8:33:7d:7f:b3:4e:0f:fe:cd:2b: db:91:65:e5:fe:c7:7f:2d:69:be:23:e6:ce:ea:f0: a1:a0:cf:8d:72:97:e1:3c:16:b7:d8:0e:e8:b6:1e: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:59:D5:CF:EF:94:20:35:C8:C1:B7:9B:50:C0:B0:10:B0:23:AF:15 X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.60.0/23 Signature Algorithm: sha256WithRSAEncryption c8:3a:5a:ee:85:72:f4:84:19:92:4f:ce:35:8e:65:23:4c:fe: 29:a3:4f:42:93:3c:a5:0f:19:89:65:b6:b3:f1:98:af:fa:14: ff:65:25:b5:a9:8c:cf:ee:c7:91:46:ea:ec:9b:51:62:b5:30: 9b:d3:0d:5e:44:43:40:c5:41:47:6d:65:c5:3a:f0:31:58:6d: 67:18:f9:a1:81:0c:39:a0:e2:cd:d2:55:9d:1d:24:c5:97:1c: dc:c1:80:d1:27:d6:d7:d2:9e:f5:e3:87:0a:35:a3:6c:ce:de: 84:9e:6f:f6:9b:7c:c2:a3:c1:e7:39:3f:6c:5c:f8:d7:47:8e: a3:15:ab:1b:d4:de:97:5f:17:12:16:6a:49:1a:57:de:e0:7f: a6:06:ae:aa:f2:f3:43:9a:d9:15:59:cb:a8:d3:28:11:09:39: db:4a:14:df:af:19:f9:dd:b6:f5:01:62:9a:ac:7c:81:f2:17: b5:d8:d7:71:d2:ec:91:01:7f:27:dc:4c:10:c5:0f:57:bf:e7: 02:e5:ed:f8:09:b9:13:ad:13:53:97:c7:bc:d0:f6:7b:be:0a: a6:b8:b6:b4:5c:f7:90:29:92:6a:97:b7:dc:c1:69:2b:be:cc: c6:25:62:4f:30:12:b2:57:8c:db:7c:d8:a4:26:d2:ba:94:a7: 30:c9:3c:91 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUB6o6Tob1BdcsstEj7tOnr4awBTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yMzA3MzEwMDAyMjRaFw0yNDA3MjkwMDA3MjRaMDMxMTAvBgNV BAMTKEYyNTlENUNGRUY5NDIwMzVDOEMxQjc5QjUwQzBCMDEwQjAyM0FGMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+Cey8tTa5BMkRXSx3q71e216 59DhVuFhNqZJOgTGj0zhyx5tyj0BJby0ItPgQ06IZVrhYYSYUypWSUnBDFYnUV6U 2GIhJJDm2dPbRjGUK1yThsq9VZsYtjoXpKakZhVP4TLnRtUMNBYy8DIfx8HOltIo snGdcNIhiOqiTj9BxDE/AvLcuRxmz7JMmGDuII9sD/T3QPTpElz/0+DPBeLx4Xt9 E/0Pr66BrKFdTtBPks070HW1CXm9RL6KrPi7xwl9qzJP8oqDKbKg3YXbn57TGHFR oeOkuDN9f7NOD/7NK9uRZeX+x38tab4j5s7q8KGgz41yl+E8FrfYDui2Hu+pAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8lnVz++UIDXIwbebUMCwELAjrxUwHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMmEzZjI4LTgyNzMtNGRkNS04 N2ZjLTFlZjAwYWNhYzliNi8wLzMxMzAzMzJlMzEzMzMwMmUzNjMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM4MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4I8MA0GCSqG SIb3DQEBCwUAA4IBAQDIOlruhXL0hBmST841jmUjTP4po09CkzylDxmJZbaz8Ziv +hT/ZSW1qYzP7seRRursm1FitTCb0w1eRENAxUFHbWXFOvAxWG1nGPmhgQw5oOLN 0lWdHSTFlxzcwYDRJ9bX0p7144cKNaNszt6Enm/2m3zCo8HnOT9sXPjXR46jFasb 1N6XXxcSFmpJGlfe4H+mBq6q8vNDmtkVWcuo0ygRCTnbShTfrxn53bb1AWKarHyB 8he12Ndx0uyRAX8n3EwQxQ9Xv+cC5e34CbkTrRNTl8e80PZ7vgqmuLa0XPeQKZJq l7fcwWkrvszGJWJPMBKyV4zbfNikJtK6lKcwyTyR -----END CERTIFICATE-----Generated at Wed Apr 24 12:29:10 2024 by rpki-client on console-fra.rpki-client.org