$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa File: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (raw, json) Hash identifier: zRDRKsGfDSPGZeBFpKw8m8jzkQXpByktJd+PrEoLpz8= Subject key identifier: E4:4C:1A:94:7B:A2:D4:77:71:AA:74:C8:0F:A7:74:1A:A5:C2:A6:02 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 1B5DE0764F8B05C009BEA47D1117C637AF37CBEE Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa Signing time: Fri 25 Aug 2023 01:00:00 +0000 ROA not before: Fri 25 Aug 2023 00:55:00 +0000 ROA not after: Fri 23 Aug 2024 01:00:00 +0000 asID: 137330 IP address blocks: 103.112.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 16:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:5d:e0:76:4f:8b:05:c0:09:be:a4:7d:11:17:c6:37:af:37:cb:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Aug 25 00:55:00 2023 GMT Not After : Aug 23 01:00:00 2024 GMT Subject: CN=E44C1A947BA2D47771AA74C80FA7741AA5C2A602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:81:5f:e6:2e:8e:54:92:6e:c2:77:c6:8b: 5e:13:09:e7:63:24:c2:10:96:b5:11:79:40:67:5f: 26:98:ad:cc:81:05:09:58:46:c5:21:c3:23:1e:a4: 88:9e:fc:92:8a:cb:96:c8:53:6b:d3:86:26:2b:f9: e0:70:cd:32:2f:5a:91:3d:f8:3b:cf:c3:cf:9d:26: 8e:23:fd:b9:74:83:78:4f:c0:8f:3f:ee:5c:c4:a0: 96:19:a2:7b:94:c0:a2:38:33:94:88:41:a4:9b:9d: 52:cc:06:43:74:8a:e2:dc:4a:a5:a4:44:76:76:09: 76:fe:21:7f:25:36:c5:13:22:4f:55:cd:c7:7c:2e: f0:6c:46:b4:e2:d3:ab:61:ba:6a:37:c1:ca:c1:6c: 43:ba:8e:96:ce:33:9a:b7:1a:25:ea:aa:30:a2:4f: 78:b8:98:39:54:bf:f0:05:23:6c:85:6d:08:cd:0a: 1c:d5:d1:46:d9:7d:38:e8:06:c4:a0:58:7a:37:12: 98:ac:4f:82:35:76:92:8e:15:f4:71:42:f9:b6:86: e7:8e:e2:31:db:3c:87:ea:ec:b1:4f:fa:af:82:39: f4:03:8b:cc:bd:da:9f:00:52:2e:3c:b2:78:9b:d4: 84:44:4a:61:20:8b:c5:2a:16:35:98:43:0e:53:ae: 35:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4C:1A:94:7B:A2:D4:77:71:AA:74:C8:0F:A7:74:1A:A5:C2:A6:02 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.136.0/24 Signature Algorithm: sha256WithRSAEncryption 99:0b:b5:7b:33:f1:a4:4e:88:17:9e:0f:bb:cf:02:25:ac:a6: a7:28:f6:79:c2:88:11:f3:47:76:b7:56:96:78:d1:44:4e:9f: 74:d0:85:cf:11:c9:2e:97:a5:55:4f:06:99:2a:e1:72:c1:d4: 58:45:87:26:62:fd:5c:e4:e8:99:ff:17:40:b0:6a:6d:7d:c8: 53:b4:df:b9:b3:ad:b3:9e:d5:c1:3d:c9:e2:aa:1d:ab:6f:f3: cf:fa:ce:12:5d:d2:d3:60:2a:b1:b9:ee:14:14:98:68:5f:f3: ea:aa:64:c4:5f:ec:99:d3:46:90:b3:ea:e8:7b:d1:b9:83:55: 2f:23:1c:a0:fe:15:a7:e5:53:9b:fd:b5:5b:b4:89:39:a1:0d: 0c:0b:f7:d4:ac:7b:b7:37:84:f3:eb:33:59:c0:f0:8e:ba:5b: 97:35:e7:df:48:6b:02:dd:f7:9b:69:27:18:70:91:ef:d6:ba: 6d:31:e6:25:2e:fa:9f:79:ec:81:6b:4c:7a:6a:46:65:88:24: 6d:63:3e:c2:f6:67:02:bd:24:b1:d1:29:0a:dc:b8:10:18:0f: d3:d9:8e:e2:b2:5d:17:5b:a8:ff:f3:a0:51:8c:e3:30:8e:38: 1f:fe:27:36:30:65:ce:bd:f7:6b:20:70:4d:1b:49:6d:2f:10: 42:73:fb:87 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUG13gdk+LBcAJvqR9ERfGN683y+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yMzA4MjUwMDU1MDBaFw0yNDA4MjMwMTAwMDBaMDMxMTAvBgNV BAMTKEU0NEMxQTk0N0JBMkQ0Nzc3MUFBNzRDODBGQTc3NDFBQTVDMkE2MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyYFf5i6OVJJuwnfGi14TCedj JMIQlrUReUBnXyaYrcyBBQlYRsUhwyMepIie/JKKy5bIU2vThiYr+eBwzTIvWpE9 +DvPw8+dJo4j/bl0g3hPwI8/7lzEoJYZonuUwKI4M5SIQaSbnVLMBkN0iuLcSqWk RHZ2CXb+IX8lNsUTIk9Vzcd8LvBsRrTi06thumo3wcrBbEO6jpbOM5q3GiXqqjCi T3i4mDlUv/AFI2yFbQjNChzV0UbZfTjoBsSgWHo3EpisT4I1dpKOFfRxQvm2hueO 4jHbPIfq7LFP+q+COfQDi8y92p8AUi48snib1IRESmEgi8UqFjWYQw5TrjUxAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU5EwalHui1HdxqnTID6d0GqXCpgIwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMxMzAzMzJlMzEzMTMyMmUzMTMzMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncIgwDQYJ KoZIhvcNAQELBQADggEBAJkLtXsz8aROiBeeD7vPAiWspqco9nnCiBHzR3a3VpZ4 0UROn3TQhc8RyS6XpVVPBpkq4XLB1FhFhyZi/Vzk6Jn/F0Cwam19yFO037mzrbOe 1cE9yeKqHatv88/6zhJd0tNgKrG57hQUmGhf8+qqZMRf7JnTRpCz6uh70bmDVS8j HKD+FaflU5v9tVu0iTmhDQwL99Sse7c3hPPrM1nA8I66W5c1599IawLd95tpJxhw ke/Wum0x5iUu+p957IFrTHpqRmWIJG1jPsL2ZwK9JLHRKQrcuBAYD9PZjuKyXRdb qP/zoFGM4zCOOB/+JzYwZc6992sgcE0bSW0vEEJz+4c= -----END CERTIFICATE-----Generated at Fri Apr 26 10:57:37 2024 by rpki-client on console-ams.rpki-client.org