$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa File: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: oXDcg/9vzgUkXpGoov5aGgsX/s3nVpZvkOqCdik9Ovc= Subject key identifier: 3F:55:7B:35:BB:52:0A:A5:22:27:EA:27:03:31:08:68:9D:91:89:9F Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 4ABDB1605E74AD4D3210D4D080B030C47D32743D Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa Signing time: Mon 31 Jul 2023 00:14:33 +0000 ROA not before: Mon 31 Jul 2023 00:09:33 +0000 ROA not after: Mon 29 Jul 2024 00:14:33 +0000 asID: 58477 IP address blocks: 103.56.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bd:b1:60:5e:74:ad:4d:32:10:d4:d0:80:b0:30:c4:7d:32:74:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Jul 31 00:09:33 2023 GMT Not After : Jul 29 00:14:33 2024 GMT Subject: CN=3F557B35BB520AA52227EA27033108689D91899F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:04:73:f4:7d:55:5e:ad:03:e6:9f:cb:3f: 23:00:9f:a0:a1:f6:e6:19:11:0d:5b:bd:ae:f0:1b: b4:3d:d4:a1:ae:42:33:16:51:24:58:97:9e:e0:b9: 88:e2:06:8b:4e:84:f5:5d:ce:be:c5:14:da:99:0d: d0:13:24:93:20:6a:22:ef:5d:24:15:37:c0:d5:4b: 1b:81:45:82:75:01:c5:46:96:7c:66:09:0d:69:b8: c1:08:11:29:4f:d9:f0:a2:d9:62:ba:d9:a1:18:94: 70:97:bd:35:b5:c9:5d:fc:e7:0d:92:69:0c:10:69: d5:0f:07:13:53:57:f5:f3:36:2b:c5:5a:21:00:ee: 4c:eb:0c:dc:e9:92:57:d3:2c:79:01:b5:ff:3b:37: b2:55:f4:49:22:6d:60:c9:b6:98:35:6c:d7:e4:84: e4:6c:d6:5a:8a:14:e8:a3:69:06:d2:79:62:5f:66: b8:d4:ec:2b:85:08:18:36:1e:c4:f9:fd:4b:5f:b3: 08:0d:7e:13:b7:79:bd:5f:88:99:31:32:bd:5b:44: 20:b1:a5:6f:05:37:9f:84:93:cb:b1:22:ff:0c:d1: fb:ff:ae:51:d3:68:7b:46:52:eb:23:5c:c6:fb:c0: 9a:35:4d:91:04:1c:bb:0c:d2:84:ab:43:cc:58:3d: a4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:55:7B:35:BB:52:0A:A5:22:27:EA:27:03:31:08:68:9D:91:89:9F X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.205.0/24 Signature Algorithm: sha256WithRSAEncryption b2:e5:d5:a8:80:37:89:2f:0a:f7:f2:19:25:61:65:24:3b:de: f1:0f:77:e2:87:17:94:f1:79:f4:0c:bc:92:e9:c8:a2:af:d7: e8:50:ca:ae:82:ba:ee:33:4a:31:97:e0:a6:30:ec:c5:4b:92: b6:2b:fc:69:47:8b:81:7e:17:0e:f8:06:3d:f5:05:f7:06:0a: cb:98:7e:d4:33:8e:e1:60:25:35:3d:cc:b8:ae:ac:d7:13:e8: a6:16:19:59:5c:42:0a:18:02:90:86:32:b7:06:dc:a7:db:e5: bf:d3:4b:30:8a:10:fe:92:65:dd:d3:1d:66:4c:2f:58:a5:db: c8:1e:34:00:72:0a:5a:e2:83:a1:0d:52:5d:49:d1:0e:4e:0e: 7b:e1:87:6a:21:76:fb:09:86:8a:22:ec:0d:17:8e:18:09:3f: 04:ad:9c:09:1d:14:6a:9e:0e:ff:06:cd:fa:e8:10:ec:35:b2: c7:5a:d6:48:17:5a:47:c0:11:ed:2e:15:1a:29:4b:bb:cd:66: 7b:5e:d3:d5:85:eb:d5:79:c6:29:c5:bc:91:75:19:70:a0:f9: fd:13:52:6a:31:3a:0c:8d:50:44:7f:e3:f9:9f:05:aa:f8:b6: 9a:2c:e5:f1:82:dc:d5:87:b8:49:e8:7f:66:f8:3f:03:26:42: 0f:72:3f:a0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSr2xYF50rU0yENTQgLAwxH0ydD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yMzA3MzEwMDA5MzNaFw0yNDA3MjkwMDE0MzNaMDMxMTAvBgNV BAMTKDNGNTU3QjM1QkI1MjBBQTUyMjI3RUEyNzAzMzEwODY4OUQ5MTg5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NgRz9H1VXq0D5p/LPyMAn6Ch 9uYZEQ1bva7wG7Q91KGuQjMWUSRYl57guYjiBotOhPVdzr7FFNqZDdATJJMgaiLv XSQVN8DVSxuBRYJ1AcVGlnxmCQ1puMEIESlP2fCi2WK62aEYlHCXvTW1yV385w2S aQwQadUPBxNTV/XzNivFWiEA7kzrDNzpklfTLHkBtf87N7JV9EkibWDJtpg1bNfk hORs1lqKFOijaQbSeWJfZrjU7CuFCBg2HsT5/UtfswgNfhO3eb1fiJkxMr1bRCCx pW8FN5+Ek8uxIv8M0fv/rlHTaHtGUusjXMb7wJo1TZEEHLsM0oSrQ8xYPaQnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUP1V7NbtSCqUiJ+onAzEIaJ2RiZ8wHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4zTANBgkqhkiG 9w0BAQsFAAOCAQEAsuXVqIA3iS8K9/IZJWFlJDve8Q934ocXlPF59Ay8kunIoq/X 6FDKroK67jNKMZfgpjDsxUuStiv8aUeLgX4XDvgGPfUF9wYKy5h+1DOO4WAlNT3M uK6s1xPophYZWVxCChgCkIYytwbcp9vlv9NLMIoQ/pJl3dMdZkwvWKXbyB40AHIK WuKDoQ1SXUnRDk4Oe+GHaiF2+wmGiiLsDReOGAk/BK2cCR0Uap4O/wbN+ugQ7DWy x1rWSBdaR8AR7S4VGilLu81me17T1YXr1XnGKcW8kXUZcKD5/RNSajE6DI1QRH/j +Z8Fqvi2mizl8YLc1Ye4Seh/Zvg/AyZCD3I/oA== -----END CERTIFICATE-----Generated at Wed May 8 18:12:23 2024 by rpki-client on console-fra.rpki-client.org