$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e32332e3230302e302f32322d3234203d3e203435323837.roa File: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (raw, json) Hash identifier: ++6lR6EMd9bjV8+OQftsrSAlwRcx9wQmBIjQ2TifJiM= Subject key identifier: B2:F9:9E:95:9F:01:F9:26:45:A6:36:6A:1C:1A:EF:78:A3:A1:D3:3E Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 2D0AE9DAF47C5590458CC9E6D28EBAA896D3EE0D Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e32332e3230302e302f32322d3234203d3e203435323837.roa Signing time: Mon 31 Jul 2023 00:02:33 +0000 ROA not before: Sun 30 Jul 2023 23:57:33 +0000 ROA not after: Mon 29 Jul 2024 00:02:33 +0000 asID: 45287 IP address blocks: 103.23.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 19:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0a:e9:da:f4:7c:55:90:45:8c:c9:e6:d2:8e:ba:a8:96:d3:ee:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Jul 30 23:57:33 2023 GMT Not After : Jul 29 00:02:33 2024 GMT Subject: CN=B2F99E959F01F92645A6366A1C1AEF78A3A1D33E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:a6:43:ee:de:47:22:d9:66:c0:61:1b:6e: fd:38:b1:42:a8:cd:97:96:b5:cc:cb:07:3c:c9:a0: 45:98:97:0c:f7:11:1d:a6:7d:d5:17:dc:d0:02:b4: 38:4c:35:5d:f0:ca:fb:2d:ca:d0:98:d5:6c:c8:b0: c0:f7:f4:75:83:53:89:b3:86:72:f2:36:73:98:91: ca:5f:9a:da:83:3f:44:c6:61:73:9d:49:2c:2c:61: 57:7f:3f:a6:f9:d6:10:7c:9a:bd:6e:7d:d8:6d:21: cb:a1:a0:77:fe:86:9d:47:fc:5d:2b:05:b7:bf:05: c1:f7:c2:8b:98:85:09:6f:bd:95:bc:be:29:04:c9: 93:b4:76:3b:91:9e:f4:5d:ec:3b:0c:b5:0c:52:49: df:44:fc:42:ee:c5:66:f5:14:ae:db:48:3d:fd:31: 24:20:de:b5:6e:53:8c:d8:a2:2a:14:39:17:85:99: 7c:d2:70:48:94:78:24:3f:6f:20:e2:83:81:de:49: 07:48:b1:22:40:33:ef:40:28:99:40:63:b3:0b:a2: 99:47:07:d7:61:87:82:0b:2f:93:4a:3d:a5:0a:be: 79:4a:07:6c:85:5b:53:f8:50:1b:f4:89:7b:0d:63: 64:22:ab:c2:b4:81:fc:2a:53:30:eb:cb:39:1d:bb: d0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F9:9E:95:9F:01:F9:26:45:A6:36:6A:1C:1A:EF:78:A3:A1:D3:3E X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3130332e32332e3230302e302f32322d3234203d3e203435323837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.200.0/22 Signature Algorithm: sha256WithRSAEncryption 11:8d:f3:4a:87:e9:40:52:fa:17:6a:55:a5:5e:cd:eb:73:89: 74:43:d7:25:36:15:d1:d7:a7:4d:94:53:85:d2:95:54:6b:1f: 93:2c:59:c1:2f:60:cf:71:ea:41:e9:8b:dc:8a:51:5f:03:34: e9:60:0c:5c:e4:f6:4e:66:52:74:27:bf:d4:66:28:e9:3c:8d: 5a:81:74:7a:c8:a8:a0:c6:d2:37:4f:ce:ab:8a:96:cd:55:8d: 4c:5c:b1:c1:31:1e:95:5c:27:ef:15:99:35:3e:a8:0a:27:c4: 04:50:a6:47:29:d6:a0:ed:d7:4f:9c:4e:68:c2:9b:36:44:3b: 81:13:aa:89:78:3a:cd:b2:ac:47:49:a9:6c:ac:34:50:f8:87: 8c:ce:05:db:ea:59:17:bd:cf:53:61:33:53:ae:bc:cb:83:90: 83:fd:76:9f:4a:09:7a:7d:c6:57:00:e4:c4:61:5d:23:23:0a: 6c:5f:8c:10:86:9f:53:f9:fe:15:4f:70:7a:9f:3d:8e:30:e9: 12:5a:bd:73:98:59:d5:52:df:bd:1d:bb:ef:36:9d:b3:c2:a1: f2:11:b8:89:77:7d:a9:35:3f:83:4d:cc:0d:e9:f0:30:de:25: eb:ca:a6:ad:cc:2a:ba:7c:f3:c3:ef:00:a4:14:38:89:bd:cf: 81:9f:fb:9f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULQrp2vR8VZBFjMnm0o66qJbT7g0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yMzA3MzAyMzU3MzNaFw0yNDA3MjkwMDAyMzNaMDMxMTAvBgNV BAMTKEIyRjk5RTk1OUYwMUY5MjY0NUE2MzY2QTFDMUFFRjc4QTNBMUQzM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwaZD7t5HItlmwGEbbv04sUKo zZeWtczLBzzJoEWYlwz3ER2mfdUX3NACtDhMNV3wyvstytCY1WzIsMD39HWDU4mz hnLyNnOYkcpfmtqDP0TGYXOdSSwsYVd/P6b51hB8mr1ufdhtIcuhoHf+hp1H/F0r Bbe/BcH3wouYhQlvvZW8vikEyZO0djuRnvRd7DsMtQxSSd9E/ELuxWb1FK7bSD39 MSQg3rVuU4zYoioUOReFmXzScEiUeCQ/byDig4HeSQdIsSJAM+9AKJlAY7MLoplH B9dhh4ILL5NKPaUKvnlKB2yFW1P4UBv0iXsNY2Qiq8K0gfwqUzDryzkdu9CnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsvmelZ8B+SZFpjZqHBrveKOh0z4wHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4MjQ5ZmMzLTZjODQtNGU5MS1i MDY3LWEwYzZhODQwYTNhOS8wLzMxMzAzMzJlMzIzMzJlMzIzMDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcXyDANBgkqhkiG 9w0BAQsFAAOCAQEAEY3zSofpQFL6F2pVpV7N63OJdEPXJTYV0denTZRThdKVVGsf kyxZwS9gz3HqQemL3IpRXwM06WAMXOT2TmZSdCe/1GYo6TyNWoF0esiooMbSN0/O q4qWzVWNTFyxwTEelVwn7xWZNT6oCifEBFCmRynWoO3XT5xOaMKbNkQ7gROqiXg6 zbKsR0mpbKw0UPiHjM4F2+pZF73PU2EzU668y4OQg/12n0oJen3GVwDkxGFdIyMK bF+MEIafU/n+FU9wep89jjDpElq9c5hZ1VLfvR277zads8Kh8hG4iXd9qTU/g03M DenwMN4l68qmrcwqunzzw+8ApBQ4ib3PgZ/7nw== -----END CERTIFICATE-----Generated at Thu Apr 18 14:05:48 2024 by rpki-client on console-ams.rpki-client.org