$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3235302e3139392e302f32342d3234203d3e203633343937.roa File: 3130332e3235302e3139392e302f32342d3234203d3e203633343937.roa (raw, json) Hash identifier: PQyUCOKeV8GaNhFn3qGKZ89Sa664IqyavOG5j9X8+bM= Subject key identifier: A6:9C:2A:DC:B4:CE:C2:0C:19:BE:C6:21:0D:DC:32:8F:EC:EB:00:93 Certificate issuer: /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB Certificate serial: 342C2335FDC66150684D55871A69BC68561D564B Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3235302e3139392e302f32342d3234203d3e203633343937.roa Signing time: Mon 31 Jul 2023 00:08:11 +0000 ROA not before: Mon 31 Jul 2023 00:03:11 +0000 ROA not after: Mon 29 Jul 2024 00:08:11 +0000 asID: 63497 IP address blocks: 103.250.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 13:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2c:23:35:fd:c6:61:50:68:4d:55:87:1a:69:bc:68:56:1d:56:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB Validity Not Before: Jul 31 00:03:11 2023 GMT Not After : Jul 29 00:08:11 2024 GMT Subject: CN=A69C2ADCB4CEC20C19BEC6210DDC328FECEB0093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8a:62:44:74:cb:73:e8:64:55:0a:42:64:c1: f2:c8:39:a3:e0:33:e0:2f:a2:2e:71:15:23:3c:e9: c4:fa:84:32:77:c2:85:0d:32:4f:e8:7a:52:56:b1: 68:d7:e4:de:74:af:51:9e:a1:6b:0d:42:3d:6c:3d: 4d:10:b4:10:8d:be:5e:34:c5:6a:82:91:c7:97:27: f8:99:8b:76:ea:ba:e1:7a:eb:2f:5b:a1:c7:19:54: 1c:23:1c:6a:20:00:ea:43:d6:ae:91:a0:fb:aa:9b: 3d:7e:cc:eb:1d:87:08:1f:4b:c0:72:c2:1c:ba:20: 93:85:88:7d:11:c2:4b:e4:cb:4b:8c:4c:8f:48:5b: 87:1c:38:ff:4e:cc:c9:da:87:71:23:f3:e8:58:ae: 23:c2:4c:16:4c:ef:f0:ca:33:6e:df:ed:53:aa:1e: 83:f0:4c:6f:9f:fc:f3:94:56:0a:03:88:96:22:1b: 86:35:cf:5a:71:2d:67:db:2d:fe:bc:fd:ac:3f:d4: 16:b0:6d:e3:ff:38:cf:1d:fb:bd:c6:4d:b3:e8:77: 3d:dc:9a:45:04:36:0d:ae:37:62:83:8a:18:c3:fc: 55:74:0e:3d:43:b7:bf:6f:7a:8a:75:31:d3:29:ee: 0b:12:88:a0:c1:15:43:e0:e1:c2:54:f4:8c:82:93: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9C:2A:DC:B4:CE:C2:0C:19:BE:C6:21:0D:DC:32:8F:EC:EB:00:93 X509v3 Authority Key Identifier: keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3235302e3139392e302f32342d3234203d3e203633343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.250.199.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:48:41:5e:60:14:bb:af:57:4c:f4:9e:18:f8:e4:70:de:61: 5d:6d:d4:ac:7e:f7:42:c4:7a:06:23:bd:47:36:84:21:81:d2: d4:6f:0e:e3:2e:69:16:dd:81:4d:14:01:92:6c:ea:ad:07:c0: 61:ce:e1:fe:e5:4a:09:c7:96:44:2d:99:82:93:8e:47:86:f5: 85:f8:3d:2a:26:40:a8:82:a4:39:7c:84:36:85:ef:4d:e1:0a: 2a:42:64:02:0e:47:a3:2a:68:57:da:91:02:82:77:6e:18:7f: 78:2e:5e:99:03:b7:e0:ea:f1:fb:56:53:75:6e:f0:7f:71:e4: 0a:e6:39:15:d5:0f:cc:8d:ce:33:70:65:46:57:1f:79:80:fc: cc:8f:65:d2:96:db:b9:25:65:9b:12:2f:82:c6:90:6b:10:00: 8c:fa:81:b6:22:a5:17:16:e9:e3:ff:e4:c2:e4:d6:ed:3d:e2: 87:09:eb:8d:4d:42:f1:be:3d:57:3b:8b:06:57:ef:cc:b1:4b: e9:9f:66:7e:66:6f:00:8d:74:dc:a0:db:fd:9e:53:43:25:21: 7e:95:88:cd:73:f2:08:bf:08:a2:8c:06:8c:54:18:6b:22:b3: 4c:b4:ce:39:40:80:fa:d0:c6:e4:b1:36:e4:7f:9d:a8:a5:ac: 65:ad:d7:9e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNCwjNf3GYVBoTVWHGmm8aFYdVkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjEx NTFDNUVEQjAeFw0yMzA3MzEwMDAzMTFaFw0yNDA3MjkwMDA4MTFaMDMxMTAvBgNV BAMTKEE2OUMyQURDQjRDRUMyMEMxOUJFQzYyMTBEREMzMjhGRUNFQjAwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmimJEdMtz6GRVCkJkwfLIOaPg M+Avoi5xFSM86cT6hDJ3woUNMk/oelJWsWjX5N50r1GeoWsNQj1sPU0QtBCNvl40 xWqCkceXJ/iZi3bquuF66y9boccZVBwjHGogAOpD1q6RoPuqmz1+zOsdhwgfS8By why6IJOFiH0Rwkvky0uMTI9IW4ccOP9OzMnah3Ej8+hYriPCTBZM7/DKM27f7VOq HoPwTG+f/POUVgoDiJYiG4Y1z1pxLWfbLf68/aw/1BawbeP/OM8d+73GTbPodz3c mkUENg2uN2KDihjD/FV0Dj1Dt79veop1MdMp7gsSiKDBFUPg4cJU9IyCk7AJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUppwq3LTOwgwZvsYhDdwyj+zrAJMwHwYDVR0j BBgwFoAUAyGYT5gjCk+UZn6CwKPesRUcXtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTYzM2I4ZS0wZGY5LTQ0YWMtOWNhZS1kNmY2NzY1YTUyYzkvMC8wMzIxOTg0Rjk4 MjMwQTRGOTQ2NjdFODJDMEEzREVCMTE1MUM1RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjExNTFD NUVEQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNjMzYjhlLTBkZjktNDRhYy05 Y2FlLWQ2ZjY3NjVhNTJjOS8wLzMxMzAzMzJlMzIzNTMwMmUzMTM5MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/rHMA0GCSqG SIb3DQEBCwUAA4IBAQBOSEFeYBS7r1dM9J4Y+ORw3mFdbdSsfvdCxHoGI71HNoQh gdLUbw7jLmkW3YFNFAGSbOqtB8BhzuH+5UoJx5ZELZmCk45HhvWF+D0qJkCogqQ5 fIQ2he9N4QoqQmQCDkejKmhX2pECgnduGH94Ll6ZA7fg6vH7VlN1bvB/ceQK5jkV 1Q/Mjc4zcGVGVx95gPzMj2XSltu5JWWbEi+CxpBrEACM+oG2IqUXFunj/+TC5Nbt PeKHCeuNTULxvj1XO4sGV+/MsUvpn2Z+Zm8AjXTcoNv9nlNDJSF+lYjNc/IIvwii jAaMVBhrIrNMtM45QID60MbksTbkf52opaxlrdee -----END CERTIFICATE-----Generated at Tue Apr 23 18:36:29 2024 by rpki-client on console-ams.rpki-client.org