$ rpki-client -vvf repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa File: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (raw, json) Hash identifier: c8dhQ6si4Soue+U0Glg1nSNL4eiAxl1A7gRat6LQ9q8= Subject key identifier: 69:FC:D8:96:9C:7F:EC:EC:1C:53:99:FA:01:56:02:2E:02:E6:6D:D7 Certificate issuer: /CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89 Certificate serial: 7A96831559E0C84D6D9A0C728F9641C805298432 Authority key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa Signing time: Thu 10 Aug 2023 20:00:01 +0000 ROA not before: Thu 10 Aug 2023 19:55:01 +0000 ROA not after: Thu 08 Aug 2024 20:00:01 +0000 asID: 64300 IP address blocks: 103.153.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:96:83:15:59:e0:c8:4d:6d:9a:0c:72:8f:96:41:c8:05:29:84:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89 Validity Not Before: Aug 10 19:55:01 2023 GMT Not After : Aug 8 20:00:01 2024 GMT Subject: CN=69FCD8969C7FECEC1C5399FA0156022E02E66DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:9d:f7:72:79:cd:9c:3c:ab:ac:5d:e6:b7: 50:e4:f2:e6:31:f9:10:d1:71:9e:fc:00:6d:f4:57: c3:89:46:fb:f8:ef:58:70:82:6f:9f:f8:d4:d3:36: d9:3b:0b:4a:e5:0d:de:d0:2d:99:57:2f:d6:9f:f3: aa:b3:4b:d5:c7:17:c9:03:dc:1c:4b:57:7d:a1:d5: 1a:ae:0c:31:84:b1:6d:b3:64:78:dc:44:ca:46:42: 55:31:38:86:93:8b:0a:24:c4:ef:fd:ec:eb:8d:37: 4d:ac:13:e9:60:f8:ab:e0:a1:92:58:17:46:97:34: 35:f5:3b:ed:75:4f:4b:75:2c:1f:d4:7a:4b:b3:0b: e6:2a:59:01:f9:e2:ec:11:98:01:fc:12:f9:b5:90: e8:cc:b6:ed:ad:a6:80:74:24:98:33:55:33:be:30: 05:77:37:d8:78:dc:a8:b6:07:01:75:5c:b2:c2:6b: 45:16:b1:d7:17:dc:65:db:36:f1:db:a9:2d:9d:c0: 54:83:13:8d:0e:3a:a3:a1:38:3c:b6:88:98:b2:c8: cb:21:27:d8:04:46:c5:cb:97:d9:10:b9:7f:d2:60: 4c:d7:f7:79:94:1f:72:fa:ce:f4:ba:62:1b:4a:2a: ab:18:a0:f9:8b:16:37:9c:8b:f9:14:09:09:a4:68: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FC:D8:96:9C:7F:EC:EC:1C:53:99:FA:01:56:02:2E:02:E6:6D:D7 X509v3 Authority Key Identifier: keyid:92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.148.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:4a:5a:4e:4a:2a:bd:b4:cb:ea:4e:ce:1c:a3:ae:ec:fb:eb: f9:5a:9a:8f:6d:17:30:6e:c2:a7:67:45:44:3b:69:9e:64:57: 5a:3d:ee:07:d0:a8:5f:5e:42:d8:93:0a:21:71:f1:84:48:67: dc:39:f9:a7:f4:00:33:1f:1f:31:90:f3:db:ec:a1:9f:d4:5f: c4:6e:41:7d:2e:e6:63:db:f9:4e:35:23:9d:27:f2:3e:79:f5: 49:de:87:42:42:fc:5b:92:d5:7d:c7:d3:20:1c:87:8f:88:5c: 4c:29:f3:3b:9f:ea:17:0c:2e:28:2a:7d:6d:b8:17:bf:88:53: 84:39:2a:de:42:71:57:55:3b:e9:89:79:65:9e:0d:74:64:4a: 20:00:cc:e2:4f:b0:7f:8e:05:35:3a:7b:4b:76:30:69:39:4d: 1f:e3:d0:3a:6d:4d:1e:f0:15:f1:db:db:a5:6d:dc:8a:66:5d: d6:71:22:83:4e:7f:57:80:fe:78:b3:96:5e:74:d3:ea:fc:76: 78:c6:8d:81:52:32:e8:56:ec:1d:09:cf:49:58:89:d2:a9:f8: 7c:ea:d4:9b:c4:64:35:bc:f2:f9:f2:90:80:cc:00:d9:91:51: 86:aa:da:fc:8d:b7:42:bc:66:91:77:eb:41:2f:3a:65:3d:36: aa:5b:30:ff -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUepaDFVngyE1tmgxyj5ZByAUphDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUzRTBE RTE0RkQ4OTAeFw0yMzA4MTAxOTU1MDFaFw0yNDA4MDgyMDAwMDFaMDMxMTAvBgNV BAMTKDY5RkNEODk2OUM3RkVDRUMxQzUzOTlGQTAxNTYwMjJFMDJFNjZERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Bp33cnnNnDyrrF3mt1Dk8uYx +RDRcZ78AG30V8OJRvv471hwgm+f+NTTNtk7C0rlDd7QLZlXL9af86qzS9XHF8kD 3BxLV32h1RquDDGEsW2zZHjcRMpGQlUxOIaTiwokxO/97OuNN02sE+lg+KvgoZJY F0aXNDX1O+11T0t1LB/UekuzC+YqWQH54uwRmAH8Evm1kOjMtu2tpoB0JJgzVTO+ MAV3N9h43Ki2BwF1XLLCa0UWsdcX3GXbNvHbqS2dwFSDE40OOqOhODy2iJiyyMsh J9gERsXLl9kQuX/SYEzX93mUH3L6zvS6YhtKKqsYoPmLFjeci/kUCQmkaHVvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUafzYlpx/7OwcU5n6AVYCLgLmbdcwHwYDVR0j BBgwFoAUkubKaDr6GOoDGd7Bfd9T4N4U/YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDMwNGI2NC0yODk5LTQ4MzAtOWMzYy0zNzU4NGEzMjdlMWUvMC85MkU2Q0E2ODNB RkExOEVBMDMxOURFQzE3RERGNTNFMERFMTRGRDg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUzRTBERTE0 RkQ4OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0MzA0YjY0LTI4OTktNDgzMC05 YzNjLTM3NTg0YTMyN2UxZS8wLzMxMzAzMzJlMzEzNTMzMmUzMTM0MzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNjM0MzMzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5mUMA0GCSqG SIb3DQEBCwUAA4IBAQCfSlpOSiq9tMvqTs4co67s++v5WpqPbRcwbsKnZ0VEO2me ZFdaPe4H0KhfXkLYkwohcfGESGfcOfmn9AAzHx8xkPPb7KGf1F/EbkF9LuZj2/lO NSOdJ/I+efVJ3odCQvxbktV9x9MgHIePiFxMKfM7n+oXDC4oKn1tuBe/iFOEOSre QnFXVTvpiXllng10ZEogAMziT7B/jgU1OntLdjBpOU0f49A6bU0e8BXx29ulbdyK Zl3WcSKDTn9XgP54s5ZedNPq/HZ4xo2BUjLoVuwdCc9JWInSqfh86tSbxGQ1vPL5 8pCAzADZkVGGqtr8jbdCvGaRd+tBLzplPTaqWzD/ -----END CERTIFICATE-----Generated at Mon May 6 05:55:15 2024 by rpki-client on console-ams.rpki-client.org