$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa File: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: c3utuI2CLkkw3BaE/1tvYgBMap1lWhlLuLsEo7UFfSM= Subject key identifier: 39:B9:EB:3A:D2:36:69:CB:EA:10:59:17:44:39:FB:6F:1D:21:B1:B8 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 33B80D9FDAF4A9CDD04667FD83BAC1B2CAA65861 Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa Signing time: Fri 01 Sep 2023 08:00:01 +0000 ROA not before: Fri 01 Sep 2023 07:55:01 +0000 ROA not after: Fri 30 Aug 2024 08:00:01 +0000 asID: 17995 IP address blocks: 103.162.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 02:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b8:0d:9f:da:f4:a9:cd:d0:46:67:fd:83:ba:c1:b2:ca:a6:58:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Sep 1 07:55:01 2023 GMT Not After : Aug 30 08:00:01 2024 GMT Subject: CN=39B9EB3AD23669CBEA1059174439FB6F1D21B1B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:b5:33:17:22:35:09:a7:c5:6d:56:bc:28: f5:c5:7e:45:3b:5b:41:53:3a:f5:a6:95:be:ec:4c: 9f:31:74:8e:76:0a:36:c6:f5:1f:f6:e6:62:2e:fa: 41:72:2d:dc:01:1f:cd:b4:74:74:ba:14:41:27:f1: c6:7c:d7:b9:dd:d5:9c:f6:9e:eb:e1:ed:b7:10:2f: d0:50:00:14:8e:87:bb:af:be:08:f1:d3:b0:95:13: e4:46:40:68:ab:e5:27:bc:d5:f7:83:60:74:36:53: 67:27:31:16:a0:08:62:05:f0:08:e4:ea:4e:e9:1e: b8:6c:18:d6:aa:1f:2e:65:5e:22:b5:7f:25:04:47: 4b:3b:e7:55:14:9c:40:28:1a:36:12:0a:bf:c5:18: 44:06:b2:f9:6f:38:55:7d:fa:32:83:68:20:7e:21: d7:cf:01:3a:ff:5e:7d:eb:26:9a:db:d4:02:64:a4: 17:a4:ce:46:23:2c:e1:ce:9b:87:d1:56:b0:e4:34: 5a:b3:26:bc:82:8d:5c:66:d8:bd:cd:cb:ef:c5:31: d0:c2:ad:7d:23:54:c2:5f:bb:59:ac:ba:df:75:81: 84:56:77:b3:13:d1:e5:1e:c1:f8:f0:c6:2c:be:cf: 77:f1:16:8d:6a:12:51:56:d8:65:da:80:d4:2a:07: 7e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B9:EB:3A:D2:36:69:CB:EA:10:59:17:44:39:FB:6F:1D:21:B1:B8 X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.146.0/23 Signature Algorithm: sha256WithRSAEncryption 54:ea:7c:55:9a:f8:db:40:96:b8:e0:1a:1d:ea:9e:ae:ca:ea: fa:c5:df:90:6f:56:96:d2:5f:8e:e8:02:ab:ed:70:36:4c:71: e8:95:22:e9:fa:ad:ca:87:a0:f3:d8:ff:d8:b6:ad:23:89:22: 04:52:3f:14:ef:98:4f:19:e4:d3:67:2f:1a:6d:88:32:b9:6a: 71:3a:ec:3e:37:c1:a2:df:e8:aa:5a:bd:8e:46:f0:4a:d6:8f: 4f:eb:5e:18:60:dc:e7:18:36:de:df:73:ea:1f:f2:69:c5:39: 91:01:c2:62:7a:77:20:79:d4:f4:e3:18:89:b0:9a:ef:2a:ef: dd:49:ee:05:4b:ec:73:4b:b2:9d:c9:d7:17:2a:b2:2d:41:b4: 20:be:5d:45:8a:97:02:ef:f2:36:71:c3:c2:70:4a:49:71:3a: 55:01:e4:10:3f:66:b9:6e:4b:75:67:cf:c6:d9:13:fd:cf:d0: a4:b7:49:77:0a:af:1b:fc:47:f6:bf:5a:48:56:e8:5a:cf:c5: 4e:d5:56:21:19:c3:d6:fe:f7:11:4d:94:df:8a:5f:4d:92:10: ed:c5:3e:05:93:c8:72:cc:b1:ea:d7:c5:a2:5f:16:d2:a3:f0: 3b:6d:b7:40:15:f8:32:d6:f6:91:d1:8b:1b:f0:01:8a:ff:02: bf:3e:6e:dd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUM7gNn9r0qc3QRmf9g7rBssqmWGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yMzA5MDEwNzU1MDFaFw0yNDA4MzAwODAwMDFaMDMxMTAvBgNV BAMTKDM5QjlFQjNBRDIzNjY5Q0JFQTEwNTkxNzQ0MzlGQjZGMUQyMUIxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jbUzFyI1CafFbVa8KPXFfkU7 W0FTOvWmlb7sTJ8xdI52CjbG9R/25mIu+kFyLdwBH820dHS6FEEn8cZ817nd1Zz2 nuvh7bcQL9BQABSOh7uvvgjx07CVE+RGQGir5Se81feDYHQ2U2cnMRagCGIF8Ajk 6k7pHrhsGNaqHy5lXiK1fyUER0s751UUnEAoGjYSCr/FGEQGsvlvOFV9+jKDaCB+ IdfPATr/Xn3rJprb1AJkpBekzkYjLOHOm4fRVrDkNFqzJryCjVxm2L3Ny+/FMdDC rX0jVMJfu1msut91gYRWd7MT0eUewfjwxiy+z3fxFo1qElFW2GXagNQqB37XAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUObnrOtI2acvqEFkXRDn7bx0hsbgwHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwNTIwYjU0LTNiYTctNDYzMS1h ZjBiLTU1OTg0YjBiYTdmMi8wLzMxMzAzMzJlMzEzNjMyMmUzMTM0MzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6KSMA0GCSqG SIb3DQEBCwUAA4IBAQBU6nxVmvjbQJa44Bod6p6uyur6xd+Qb1aW0l+O6AKr7XA2 THHolSLp+q3Kh6Dz2P/Ytq0jiSIEUj8U75hPGeTTZy8abYgyuWpxOuw+N8Gi3+iq Wr2ORvBK1o9P614YYNznGDbe33PqH/JpxTmRAcJiencgedT04xiJsJrvKu/dSe4F S+xzS7KdydcXKrItQbQgvl1FipcC7/I2ccPCcEpJcTpVAeQQP2a5bkt1Z8/G2RP9 z9Ckt0l3Cq8b/Ef2v1pIVuhaz8VO1VYhGcPW/vcRTZTfil9NkhDtxT4Fk8hyzLHq 18WiXxbSo/A7bbdAFfgy1vaR0Ysb8AGK/wK/Pm7d -----END CERTIFICATE-----Generated at Sat Apr 27 17:53:16 2024 by rpki-client on console-ams.rpki-client.org