$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa File: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (raw, json) Hash identifier: Qbf5L6dvOkp05dp6qz3cweW1VpWz/txfBmLhY6c0Gd4= Subject key identifier: 5F:F5:83:15:F2:02:1E:09:A3:F5:8C:C0:7D:60:5C:AB:DB:61:07:95 Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 552C52E8ED4DC21F499B82F8CEED1CBCC5B84B72 Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa Signing time: Mon 31 Jul 2023 00:09:40 +0000 ROA not before: Mon 31 Jul 2023 00:04:40 +0000 ROA not after: Mon 29 Jul 2024 00:09:40 +0000 asID: 63497 IP address blocks: 103.134.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 05:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2c:52:e8:ed:4d:c2:1f:49:9b:82:f8:ce:ed:1c:bc:c5:b8:4b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Jul 31 00:04:40 2023 GMT Not After : Jul 29 00:09:40 2024 GMT Subject: CN=5FF58315F2021E09A3F58CC07D605CABDB610795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e9:4f:26:fe:61:86:4a:ed:8d:92:f1:02:48: d4:e5:ea:28:68:fa:52:45:9c:43:81:93:83:ea:9f: bb:0b:b4:ae:cb:b1:07:eb:ae:76:9a:98:1e:82:72: c8:60:69:c7:06:14:0f:33:3c:53:23:a0:cf:97:59: f1:8d:dd:56:63:cd:a0:c8:87:ec:b5:4e:86:27:90: d4:1e:95:1a:b5:6e:f7:a1:2c:34:0d:b6:ab:81:29: 17:75:5a:c9:af:56:1b:24:28:b5:79:c6:f1:03:f0: f7:63:07:36:91:87:65:ec:2a:65:b5:db:36:78:58: fa:13:01:d7:51:fa:ec:b9:4a:36:ac:f3:9e:33:51: 99:89:9b:9a:fa:3e:a8:ac:16:e9:fd:9e:70:4f:8e: ef:d8:1d:28:40:b6:d4:e3:5b:fd:cf:c1:13:27:84: 97:fb:b3:81:6e:5b:55:f0:bb:15:65:2d:84:59:8f: a1:4b:92:d8:62:50:bd:79:e3:c7:0a:ec:f9:5f:b9: 78:78:9c:73:cc:c4:6d:42:23:9d:92:62:dc:ea:e3: dc:b2:4d:c0:e3:4c:9a:a5:20:62:e7:4c:a9:1a:b1: 16:c9:66:4a:5e:20:1a:fa:83:06:fb:b2:f1:f0:40: 2b:1f:40:86:a4:81:3a:b6:d5:b8:97:f4:05:96:3c: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F5:83:15:F2:02:1E:09:A3:F5:8C:C0:7D:60:5C:AB:DB:61:07:95 X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.104.0/22 Signature Algorithm: sha256WithRSAEncryption 29:5f:73:ed:99:14:55:12:ea:f9:21:bb:64:22:f0:80:d8:31: d1:8d:1d:6c:a5:d3:e3:97:72:fe:c2:7e:bc:cf:a2:02:dd:7a: 23:50:64:b7:00:ea:79:59:6a:ad:5a:91:8c:f5:b9:bc:fb:41: b1:e3:b2:17:9d:a1:7a:c2:3e:77:d0:53:51:21:6b:52:fb:a3: 07:58:bf:c6:74:89:af:fd:9c:cf:dc:93:00:d4:64:70:b5:07: ef:8e:00:e1:41:f8:e7:d6:fa:ca:d4:25:64:5b:ff:ed:e6:36: 23:ad:42:8d:9d:80:21:33:52:90:9f:f1:18:d7:55:b5:5b:a8: 77:59:44:94:30:df:8f:94:4a:95:55:22:64:cc:a7:ca:c7:37: f4:22:93:76:fa:ce:1c:66:a4:53:32:64:b9:bf:b2:81:6e:b9: 0e:35:e7:26:30:d0:41:7a:89:c1:fa:d6:49:3a:31:07:da:d6: 5b:61:35:25:99:f0:d1:2f:1b:91:a1:76:c1:a0:95:22:04:9e: 15:41:f0:24:84:e0:b9:27:fe:11:b8:b5:b4:0a:f3:62:27:e9: 87:e3:4e:6d:29:97:be:4b:42:ad:fd:72:fb:01:7c:3c:f2:bf: ef:4a:2c:6d:6d:42:b5:aa:25:9e:7f:32:59:e5:9c:2e:a1:5b: 8a:e8:b1:ae -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVSxS6O1Nwh9Jm4L4zu0cvMW4S3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yMzA3MzEwMDA0NDBaFw0yNDA3MjkwMDA5NDBaMDMxMTAvBgNV BAMTKDVGRjU4MzE1RjIwMjFFMDlBM0Y1OENDMDdENjA1Q0FCREI2MTA3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv6U8m/mGGSu2NkvECSNTl6iho +lJFnEOBk4Pqn7sLtK7LsQfrrnaamB6CcshgaccGFA8zPFMjoM+XWfGN3VZjzaDI h+y1ToYnkNQelRq1bvehLDQNtquBKRd1WsmvVhskKLV5xvED8PdjBzaRh2XsKmW1 2zZ4WPoTAddR+uy5Sjas854zUZmJm5r6PqisFun9nnBPju/YHShAttTjW/3PwRMn hJf7s4FuW1XwuxVlLYRZj6FLkthiUL1548cK7PlfuXh4nHPMxG1CI52SYtzq49yy TcDjTJqlIGLnTKkasRbJZkpeIBr6gwb7svHwQCsfQIakgTq21biX9AWWPHhdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUX/WDFfICHgmj9YzAfWBcq9thB5UwHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y2YjVhZTFlLWJlNjYtNGEzMC1h OTQ4LTdkNDc4YzIyZWEyYi8wLzMxMzAzMzJlMzEzMzM0MmUzMTMwMzQyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzNjMzMzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4ZoMA0GCSqG SIb3DQEBCwUAA4IBAQApX3PtmRRVEur5IbtkIvCA2DHRjR1spdPjl3L+wn68z6IC 3XojUGS3AOp5WWqtWpGM9bm8+0Gx47IXnaF6wj530FNRIWtS+6MHWL/GdImv/ZzP 3JMA1GRwtQfvjgDhQfjn1vrK1CVkW//t5jYjrUKNnYAhM1KQn/EY11W1W6h3WUSU MN+PlEqVVSJkzKfKxzf0IpN2+s4cZqRTMmS5v7KBbrkONecmMNBBeonB+tZJOjEH 2tZbYTUlmfDRLxuRoXbBoJUiBJ4VQfAkhOC5J/4RuLW0CvNiJ+mH405tKZe+S0Kt /XL7AXw88r/vSixtbUK1qiWefzJZ5ZwuoVuK6LGu -----END CERTIFICATE-----Generated at Tue Apr 30 21:57:49 2024 by rpki-client on console-ams.rpki-client.org