$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e20313338313135.roa File: 3130332e35362e3230342e302f32342d3234203d3e20313338313135.roa (raw, json) Hash identifier: jGeK0GZJaYDnRqO/vkaJ6dxajEGAKAkJUdqE3PZIu1w= Subject key identifier: 4A:3A:C8:66:F8:6B:C5:31:04:62:F2:01:B9:E9:02:ED:38:29:01:87 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 3F0DF4A78B7B6F53BE1DF555DC93C78C24288AA4 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e20313338313135.roa Signing time: Wed 20 Mar 2024 03:00:02 +0000 ROA not before: Wed 20 Mar 2024 02:55:02 +0000 ROA not after: Wed 19 Mar 2025 03:00:02 +0000 asID: 138115 IP address blocks: 103.56.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 08:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0d:f4:a7:8b:7b:6f:53:be:1d:f5:55:dc:93:c7:8c:24:28:8a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Mar 20 02:55:02 2024 GMT Not After : Mar 19 03:00:02 2025 GMT Subject: CN=4A3AC866F86BC5310462F201B9E902ED38290187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:46:42:7e:58:91:f6:79:f0:1c:65:b8:7e: dc:83:50:e9:26:e8:32:70:9c:bf:c4:2d:4d:c6:5a: 6f:5c:ea:9e:ec:87:7e:43:41:95:af:ce:36:cd:c6: fa:f2:ab:d8:ed:67:11:72:80:c7:2c:a6:04:6b:dd: 55:e6:09:a3:84:0c:0c:f1:f4:43:6b:11:ca:97:9d: 78:64:ac:ac:0b:e0:ec:34:29:83:27:f1:c0:ef:4c: 27:6e:58:17:86:7c:02:c9:00:90:f2:6d:75:74:34: f8:c7:7f:ff:58:67:1f:70:27:5d:16:4f:0c:34:80: e5:55:98:22:58:71:71:0d:1e:0a:78:74:64:4b:12: 1e:e1:2d:c8:39:5d:7f:06:7c:2f:77:e6:1f:d5:9a: 28:c9:c9:51:00:cf:dc:f2:4a:dc:62:32:bc:20:96: d6:dc:55:c9:1f:74:10:f1:22:a2:b5:92:b4:4c:df: 92:b6:14:6b:07:2d:0e:57:e7:33:d1:93:da:02:8d: c9:7a:b9:c0:3a:f9:ab:6e:c1:45:a4:e2:82:c2:3d: 89:22:26:de:bb:b3:52:50:b2:a4:23:93:3f:ef:31: a7:a1:09:62:b7:ff:87:da:9b:c6:bf:db:1c:60:f7: 76:07:58:93:d9:26:84:55:7e:ab:93:e9:4a:2c:62: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3A:C8:66:F8:6B:C5:31:04:62:F2:01:B9:E9:02:ED:38:29:01:87 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230342e302f32342d3234203d3e20313338313135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.204.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:7e:aa:08:bb:31:13:ec:88:6e:85:bf:7c:2b:5d:cd:c7:2d: a7:43:89:72:eb:19:e1:a8:4d:35:4c:38:52:35:e6:1a:ff:ff: e0:65:15:bb:03:88:d0:26:f5:d5:a8:0e:10:e6:f3:78:79:d3: e1:34:54:8e:a0:16:98:b5:25:2b:1b:52:5b:63:32:98:4e:c0: f9:db:38:6f:40:a7:ee:9f:41:42:4d:d2:42:ad:ad:13:65:43: 43:79:33:4a:87:23:db:57:95:57:71:6d:9e:3d:a3:b3:e0:66: 0d:f9:7f:c1:4b:fb:74:ac:69:8a:32:27:c9:4e:78:7b:e6:32: cf:89:cd:8f:a7:69:2f:59:65:c8:ae:2f:82:4b:5f:33:c8:e6: aa:c8:ae:3e:88:90:7e:c4:b2:3d:97:d4:8f:75:21:4a:38:b4: f4:1f:6c:d2:b1:da:af:26:11:7e:44:33:26:21:cc:40:99:87: ad:6b:84:4b:fc:81:6d:47:16:3d:62:26:39:1d:2d:3d:db:d9: 35:7a:92:09:7c:aa:51:81:ac:0f:bd:e8:76:ed:9a:80:51:fc: 09:32:59:7b:e8:64:9a:8f:28:10:be:74:06:07:9f:c7:ca:46: 1e:83:7d:b6:ca:0a:79:1b:ad:fc:c9:f5:e2:c8:97:79:95:2b: 14:78:32:58 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPw30p4t7b1O+HfVV3JPHjCQoiqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNDAzMjAwMjU1MDJaFw0yNTAzMTkwMzAwMDJaMDMxMTAvBgNV BAMTKDRBM0FDODY2Rjg2QkM1MzEwNDYyRjIwMUI5RTkwMkVEMzgyOTAxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0d0ZCfliR9nnwHGW4ftyDUOkm 6DJwnL/ELU3GWm9c6p7sh35DQZWvzjbNxvryq9jtZxFygMcspgRr3VXmCaOEDAzx 9ENrEcqXnXhkrKwL4Ow0KYMn8cDvTCduWBeGfALJAJDybXV0NPjHf/9YZx9wJ10W Tww0gOVVmCJYcXENHgp4dGRLEh7hLcg5XX8GfC935h/VmijJyVEAz9zyStxiMrwg ltbcVckfdBDxIqK1krRM35K2FGsHLQ5X5zPRk9oCjcl6ucA6+atuwUWk4oLCPYki Jt67s1JQsqQjkz/vMaehCWK3/4fam8a/2xxg93YHWJPZJoRVfquT6UosYmghAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSjrIZvhrxTEEYvIBuekC7TgpAYcwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzjMMA0GCSqG SIb3DQEBCwUAA4IBAQA8fqoIuzET7Ihuhb98K13Nxy2nQ4ly6xnhqE01TDhSNeYa ///gZRW7A4jQJvXVqA4Q5vN4edPhNFSOoBaYtSUrG1JbYzKYTsD52zhvQKfun0FC TdJCra0TZUNDeTNKhyPbV5VXcW2ePaOz4GYN+X/BS/t0rGmKMifJTnh75jLPic2P p2kvWWXIri+CS18zyOaqyK4+iJB+xLI9l9SPdSFKOLT0H2zSsdqvJhF+RDMmIcxA mYeta4RL/IFtRxY9YiY5HS0929k1epIJfKpRgawPveh27ZqAUfwJMll76GSajygQ vnQGB5/HykYeg322ygp5G638yfXiyJd5lSsUeDJY -----END CERTIFICATE-----Generated at Thu May 2 04:19:22 2024 by rpki-client on console-ams.rpki-client.org