$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa File: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (raw, json) Hash identifier: WMKEBAaTnk06pQkIqhUR6TVQL+aU81+Mm1NvIDioAOI= Subject key identifier: 43:D4:D2:F7:A9:28:F3:C5:35:01:B9:81:30:F9:DB:86:FD:B9:77:D3 Certificate issuer: /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Certificate serial: 1223C53ACD7D164CFE39D8C1ED17CC286623CF62 Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa Signing time: Mon 31 Jul 2023 00:07:13 +0000 ROA not before: Mon 31 Jul 2023 00:02:13 +0000 ROA not after: Mon 29 Jul 2024 00:07:13 +0000 asID: 24532 IP address blocks: 103.116.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 10:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:23:c5:3a:cd:7d:16:4c:fe:39:d8:c1:ed:17:cc:28:66:23:cf:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Validity Not Before: Jul 31 00:02:13 2023 GMT Not After : Jul 29 00:07:13 2024 GMT Subject: CN=43D4D2F7A928F3C53501B98130F9DB86FDB977D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:69:93:1b:ff:6b:44:3e:67:fa:d8:f7:0a: 34:85:ab:dd:76:8c:b5:d3:c9:df:44:e5:79:eb:41: c4:27:8a:00:09:40:b7:93:bb:89:83:ef:f1:7c:93: 4a:2b:8d:c8:12:ac:d1:43:71:08:bb:f4:23:ea:07: f6:24:b8:95:89:d1:8b:5c:0a:b1:15:60:08:8f:21: 58:24:a8:80:35:f6:d9:ef:17:5a:3b:f9:d7:d0:a3: 53:70:a4:2d:e6:1b:76:49:6a:d5:4d:f9:06:2a:ea: 4f:4f:a4:56:82:c1:0f:db:85:93:12:77:9c:27:28: 0f:9e:f3:7d:03:3e:74:da:05:7e:46:2a:15:df:8b: a1:c8:54:75:93:49:5d:3a:35:49:66:3e:cb:ac:fc: 88:02:2b:bd:80:1a:24:f9:3a:c3:3e:cc:96:7d:88: cf:26:06:f4:80:3d:5e:8d:d2:02:8f:66:15:85:95: d1:fc:f7:f8:b9:8a:b1:12:fe:94:42:4a:ba:a6:6c: 78:32:1d:9e:93:03:1f:b9:e9:57:48:b3:ad:13:3e: 71:9e:89:54:d2:07:e0:23:14:be:b6:8a:14:ce:fa: 27:3a:0b:ea:74:8a:a1:2f:5c:8a:96:02:4f:c4:cf: ba:29:23:11:d9:f0:45:48:48:d5:61:75:07:c2:c5: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:D2:F7:A9:28:F3:C5:35:01:B9:81:30:F9:DB:86:FD:B9:77:D3 X509v3 Authority Key Identifier: keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.112.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:ba:7e:56:2d:18:f2:cb:32:5b:33:06:10:19:e6:00:f6:5f: c5:11:f1:26:25:56:0d:a9:47:bf:a8:e2:7c:d3:54:0e:d4:2c: 5c:4b:f3:55:0d:db:2f:17:23:d2:86:6e:cf:14:3a:fa:ee:e8: b6:5d:5e:48:b9:b7:12:27:25:73:36:06:d4:c4:5a:d5:db:3b: c4:97:57:7e:12:15:fb:10:ac:0c:fa:f5:5a:20:43:e9:1c:1d: 4d:bb:0b:e2:73:07:af:e4:a9:eb:63:d0:8d:ab:10:8d:52:7d: c9:45:3d:5b:54:0f:64:59:43:99:2d:f4:22:24:e0:56:1f:93: 5e:83:18:8c:18:ea:0b:5c:fd:26:a1:f6:6d:9a:ba:b6:7b:f9: fc:a7:32:34:f0:48:47:12:5b:8f:e4:79:df:26:38:2c:df:69: 1a:b3:75:d1:5c:dd:82:cf:a7:b0:58:cd:6f:e1:3d:14:6a:19: 4a:ed:d3:b6:ad:25:0b:28:6d:de:0a:58:69:3a:f5:84:c6:0c: 3b:3b:b8:f0:04:d0:b8:ea:89:b9:70:43:6e:f7:25:83:ac:9c: 8f:22:fb:a9:34:a8:4f:6f:d6:2c:dd:4c:38:e6:a0:12:f7:a3: 19:e9:6e:1e:5b:71:1c:cf:84:79:bc:c0:99:e8:47:9e:da:5a: c0:b0:c1:7d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEiPFOs19Fkz+OdjB7RfMKGYjz2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENE REVFN0U0NTAeFw0yMzA3MzEwMDAyMTNaFw0yNDA3MjkwMDA3MTNaMDMxMTAvBgNV BAMTKDQzRDREMkY3QTkyOEYzQzUzNTAxQjk4MTMwRjlEQjg2RkRCOTc3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClFGmTG/9rRD5n+tj3CjSFq912 jLXTyd9E5XnrQcQnigAJQLeTu4mD7/F8k0orjcgSrNFDcQi79CPqB/YkuJWJ0Ytc CrEVYAiPIVgkqIA19tnvF1o7+dfQo1NwpC3mG3ZJatVN+QYq6k9PpFaCwQ/bhZMS d5wnKA+e830DPnTaBX5GKhXfi6HIVHWTSV06NUlmPsus/IgCK72AGiT5OsM+zJZ9 iM8mBvSAPV6N0gKPZhWFldH89/i5irES/pRCSrqmbHgyHZ6TAx+56VdIs60TPnGe iVTSB+AjFL62ihTO+ic6C+p0iqEvXIqWAk/Ez7opIxHZ8EVISNVhdQfCxdE9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQ9TS96ko88U1AbmBMPnbhv25d9MwHwYDVR0j BBgwFoAUgRhsBmNCoOZs0ZIa7bWKjN3ufkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjliZjc5Ny05MTNkLTQ4ZGQtODMyYy0zM2I0MDliNWY3OWIvMC84MTE4NkMwNjYz NDJBMEU2NkNEMTkyMUFFREI1OEE4Q0RERUU3RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENEREVF N0U0NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmOWJmNzk3LTkxM2QtNDhkZC04 MzJjLTMzYjQwOWI1Zjc5Yi8wLzMxMzAzMzJlMzEzMTM2MmUzMTMxMzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMjM0MzUzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3RwMA0GCSqG SIb3DQEBCwUAA4IBAQBsun5WLRjyyzJbMwYQGeYA9l/FEfEmJVYNqUe/qOJ801QO 1CxcS/NVDdsvFyPShm7PFDr67ui2XV5IubcSJyVzNgbUxFrV2zvEl1d+EhX7EKwM +vVaIEPpHB1Nuwvicwev5KnrY9CNqxCNUn3JRT1bVA9kWUOZLfQiJOBWH5NegxiM GOoLXP0mofZtmrq2e/n8pzI08EhHEluP5HnfJjgs32kas3XRXN2Cz6ewWM1v4T0U ahlK7dO2rSULKG3eClhpOvWExgw7O7jwBNC46om5cENu9yWDrJyPIvupNKhPb9Ys 3Uw45qAS96MZ6W4eW3Ecz4R5vMCZ6Eee2lrAsMF9 -----END CERTIFICATE-----Generated at Wed May 1 10:32:18 2024 by rpki-client on console-fra.rpki-client.org