$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230372e302f32342d3234203d3e203538343737.roa File: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: lEiCjl1rkLtoCwJbvvMZOTib/ZkQHEwwRU1NPS6M2pM= Subject key identifier: FF:65:E2:23:BF:80:C8:E3:09:7C:74:53:E6:0A:19:5A:9A:44:F0:67 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 634D1E8D26F5C3712F502A76003F3FE68C52EC9E Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230372e302f32342d3234203d3e203538343737.roa Signing time: Mon 31 Jul 2023 00:14:33 +0000 ROA not before: Mon 31 Jul 2023 00:09:33 +0000 ROA not after: Mon 29 Jul 2024 00:14:33 +0000 asID: 58477 IP address blocks: 103.56.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4d:1e:8d:26:f5:c3:71:2f:50:2a:76:00:3f:3f:e6:8c:52:ec:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Jul 31 00:09:33 2023 GMT Not After : Jul 29 00:14:33 2024 GMT Subject: CN=FF65E223BF80C8E3097C7453E60A195A9A44F067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:78:c3:20:c0:1c:62:91:4c:b0:6e:60:1e:56: b0:00:5d:ed:ae:7d:e3:be:12:ba:4b:c5:73:ee:a9: ef:02:39:70:48:c1:56:3e:22:51:7f:9b:26:ff:46: 0a:e4:76:f8:0e:4b:f6:43:a0:c2:d6:b3:c2:83:67: 72:a0:f5:85:1b:e9:a2:e4:6f:63:f7:99:85:de:26: 6a:83:71:2d:2d:05:2e:fe:9f:3a:9a:9b:f6:1d:35: fb:8c:ff:28:02:33:68:39:3d:4f:59:e6:d5:38:e9: 3c:48:27:5c:27:30:ac:04:cb:fa:6b:dc:40:08:36: 6e:7a:77:18:62:cb:03:ad:e5:5b:74:23:94:5d:9f: 59:9a:1a:19:8a:7a:0c:a9:5e:06:98:6a:82:2f:e3: 9d:71:09:88:f2:49:e5:89:9e:09:1e:93:a3:d9:da: 37:c6:65:08:bf:a5:9a:1e:73:c9:31:18:d3:2d:ef: 74:ae:25:35:d8:8e:95:2d:a4:31:06:43:7e:89:38: 30:15:0c:3f:85:ee:75:8b:7d:17:4b:9a:bd:18:f9: 39:d7:e9:08:ca:08:f6:f9:69:b0:f2:fc:b4:6b:81: 67:90:47:2c:45:6a:52:30:59:cb:3e:21:86:d1:73: df:a1:0d:45:9f:7a:ed:7a:47:3c:24:c5:ea:c5:d8: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:65:E2:23:BF:80:C8:E3:09:7C:74:53:E6:0A:19:5A:9A:44:F0:67 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230372e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.207.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:8e:e2:78:65:30:fb:fe:87:dc:09:54:19:e8:0f:6b:b9:87: ed:f3:53:09:80:10:59:f2:c7:32:f6:29:04:6a:89:64:54:61: bc:d1:1a:8d:11:17:77:ec:1e:6a:e5:6f:6a:1d:7c:ca:b7:14: 4e:f1:e8:00:19:eb:27:9a:a4:35:c2:d2:07:5a:fb:59:ef:5f: d8:a3:aa:0f:e3:46:e1:d2:54:8b:ca:2b:87:bd:f6:51:39:1e: 86:5a:10:9f:6f:9b:0a:48:33:5b:b6:ed:21:b7:08:e9:0c:36: ca:0c:c2:a8:59:02:70:d5:bb:3d:52:9d:07:2c:d2:ca:99:71: 8f:6b:33:81:55:15:21:44:9d:df:b4:43:ee:cd:86:45:6a:60: 27:6f:f4:d2:94:e1:aa:d1:8f:a5:75:ca:1b:d4:12:f1:5f:4a: 21:d9:d0:aa:2d:4b:29:6b:f6:5f:c2:a7:60:0a:ec:71:8b:a6: 61:4b:7c:32:f5:8c:9c:0f:78:40:1d:cf:f0:85:03:c0:5a:43: f0:77:0e:da:e7:0c:ea:1c:dd:80:71:a3:ca:7b:41:58:bd:62: 4e:a9:90:22:74:b8:30:57:a8:3e:a6:b2:32:f2:8e:6b:bf:c5: f1:5e:4c:41:ae:db:14:f2:f2:48:4b:87:c0:e5:8b:4e:b3:30: ab:9d:da:3d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUY00ejSb1w3EvUCp2AD8/5oxS7J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yMzA3MzEwMDA5MzNaFw0yNDA3MjkwMDE0MzNaMDMxMTAvBgNV BAMTKEZGNjVFMjIzQkY4MEM4RTMwOTdDNzQ1M0U2MEExOTVBOUE0NEYwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1eMMgwBxikUywbmAeVrAAXe2u feO+ErpLxXPuqe8COXBIwVY+IlF/myb/RgrkdvgOS/ZDoMLWs8KDZ3Kg9YUb6aLk b2P3mYXeJmqDcS0tBS7+nzqam/YdNfuM/ygCM2g5PU9Z5tU46TxIJ1wnMKwEy/pr 3EAINm56dxhiywOt5Vt0I5Rdn1maGhmKegypXgaYaoIv451xCYjySeWJngkek6PZ 2jfGZQi/pZoec8kxGNMt73SuJTXYjpUtpDEGQ36JODAVDD+F7nWLfRdLmr0Y+TnX 6QjKCPb5abDy/LRrgWeQRyxFalIwWcs+IYbRc9+hDUWfeu16RzwkxerF2JlLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU/2XiI7+AyOMJfHRT5goZWppE8GcwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4zzANBgkqhkiG 9w0BAQsFAAOCAQEAHI7ieGUw+/6H3AlUGegPa7mH7fNTCYAQWfLHMvYpBGqJZFRh vNEajREXd+weauVvah18yrcUTvHoABnrJ5qkNcLSB1r7We9f2KOqD+NG4dJUi8or h732UTkehloQn2+bCkgzW7btIbcI6Qw2ygzCqFkCcNW7PVKdByzSyplxj2szgVUV IUSd37RD7s2GRWpgJ2/00pThqtGPpXXKG9QS8V9KIdnQqi1LKWv2X8KnYArscYum YUt8MvWMnA94QB3P8IUDwFpD8HcO2ucM6hzdgHGjyntBWL1iTqmQInS4MFeoPqay MvKOa7/F8V5MQa7bFPLySEuHwOWLTrMwq53aPQ== -----END CERTIFICATE-----Generated at Wed May 8 17:45:32 2024 by rpki-client on console-ams.rpki-client.org