$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa File: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (raw, json) Hash identifier: yXrSB/CDnleLoFY+VIsWj2VD6Xj94c/k9DGZ9zhorA8= Subject key identifier: 05:DF:6B:60:DA:43:6B:39:44:B7:6E:15:F8:FA:63:93:B4:ED:71:07 Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Certificate serial: 5B97C3DAD707ABC2D0B614CB2590E6207F58381E Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa Signing time: Wed 28 Jun 2023 08:00:00 +0000 ROA not before: Wed 28 Jun 2023 07:55:00 +0000 ROA not after: Wed 26 Jun 2024 08:00:00 +0000 asID: 131111 IP address blocks: 103.54.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 10:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:97:c3:da:d7:07:ab:c2:d0:b6:14:cb:25:90:e6:20:7f:58:38:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Validity Not Before: Jun 28 07:55:00 2023 GMT Not After : Jun 26 08:00:00 2024 GMT Subject: CN=05DF6B60DA436B3944B76E15F8FA6393B4ED7107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:39:62:5f:67:d7:44:4e:15:87:8c:d8:84: 8e:46:40:a9:79:fb:4b:b8:47:c2:39:34:8e:b0:cc: 97:20:5c:a4:31:91:dd:a4:ac:74:5b:60:8e:f8:30: db:5c:08:dd:b7:e2:cd:ce:88:10:33:68:bf:7a:c9: 81:8d:47:84:c5:bf:3d:a5:d2:5e:bb:71:2a:f8:53: ad:a3:0d:36:a6:ff:ad:de:48:6e:19:2d:9e:c2:8b: 8a:b0:4d:17:2b:5c:ca:1c:0f:6c:ab:e5:73:e4:f7: 03:35:ce:e5:4b:42:ab:25:7f:04:0e:59:47:61:0f: 74:7a:f9:6e:ed:c4:43:3f:29:fe:26:64:7a:f5:d7: 2a:d9:74:44:a6:60:28:e3:22:07:8a:37:b4:51:50: df:99:f7:d1:5e:cd:05:f8:2f:55:f0:e4:3d:33:09: 13:d0:0c:9d:41:43:49:9a:a6:ef:71:97:dc:6a:ea: a2:3f:14:1c:13:6a:4f:8a:ba:d2:5a:73:0d:47:dc: 38:22:bd:97:43:5d:d1:f4:dd:ea:90:5e:7c:08:d6: 9b:e4:cc:a4:fa:31:3b:90:70:21:80:6e:37:1c:2a: 60:63:bf:66:e0:70:52:af:d9:f0:63:47:d6:73:e3: dd:59:7d:7d:cc:67:35:43:ae:43:70:f5:23:b6:26: 34:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DF:6B:60:DA:43:6B:39:44:B7:6E:15:F8:FA:63:93:B4:ED:71:07 X509v3 Authority Key Identifier: keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.216.0/22 Signature Algorithm: sha256WithRSAEncryption 85:25:5f:80:52:e3:3d:5a:06:d2:30:d9:2e:a5:04:d0:2e:c2: 58:d9:c0:06:20:f3:58:7e:5e:e5:e3:91:16:8c:9d:1f:c5:51: 94:11:f5:eb:ef:73:99:32:9f:bd:18:dc:88:64:f9:61:9a:1e: b2:ff:e9:6c:8c:78:77:a8:d3:6b:3c:05:b3:f4:8d:3d:f9:0d: f4:2e:8a:a9:6f:84:45:2e:bf:25:53:7d:51:34:dd:f0:08:56: ba:37:c6:f7:f1:95:58:47:83:61:2e:c3:08:d7:ea:d6:17:0d: 5c:f1:85:6d:90:bd:48:f4:61:17:b2:49:50:85:ca:5c:6e:34: 43:64:f8:4b:a0:a8:f6:48:ac:8c:86:02:bf:9f:b7:c2:d3:56: b0:db:81:12:a9:32:0e:0d:28:cf:8d:02:e4:a5:3a:af:d7:81: 3d:ef:95:27:6a:50:19:0d:27:01:4c:c7:40:3e:bd:dc:af:98: 1c:66:47:e0:03:84:fb:d4:b2:73:f5:9b:5e:f1:87:0a:59:ba: 6b:e4:95:b2:96:e9:d7:0b:b4:bf:88:f6:24:22:ca:03:d8:c0: ab:68:39:1a:e7:f6:e7:a4:e3:5a:78:60:91:2b:e5:27:da:fc: 58:e0:6c:b7:ca:4f:f3:cc:a0:ab:d1:b6:1c:df:c5:0e:f7:be: 78:7c:01:86 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUW5fD2tcHq8LQthTLJZDmIH9YOB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4 RDFFQkFDODAeFw0yMzA2MjgwNzU1MDBaFw0yNDA2MjYwODAwMDBaMDMxMTAvBgNV BAMTKDA1REY2QjYwREE0MzZCMzk0NEI3NkUxNUY4RkE2MzkzQjRFRDcxMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSjliX2fXRE4Vh4zYhI5GQKl5 +0u4R8I5NI6wzJcgXKQxkd2krHRbYI74MNtcCN234s3OiBAzaL96yYGNR4TFvz2l 0l67cSr4U62jDTam/63eSG4ZLZ7Ci4qwTRcrXMocD2yr5XPk9wM1zuVLQqslfwQO WUdhD3R6+W7txEM/Kf4mZHr11yrZdESmYCjjIgeKN7RRUN+Z99FezQX4L1Xw5D0z CRPQDJ1BQ0mapu9xl9xq6qI/FBwTak+KutJacw1H3DgivZdDXdH03eqQXnwI1pvk zKT6MTuQcCGAbjccKmBjv2bgcFKv2fBjR9Zz491ZfX3MZzVDrkNw9SO2JjRpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBd9rYNpDazlEt24V+Ppjk7TtcQcwHwYDVR0j BBgwFoAUpTzhoXYjGLqRMKR8+hYCfo0eusgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzllYWQ4MS1hYzEyLTQ0NzktYjJmYi05OThlMDE4NTQ1NTEvMC9BNTNDRTFBMTc2 MjMxOEJBOTEzMEE0N0NGQTE2MDI3RThEMUVCQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4RDFF QkFDOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIzOWVhZDgxLWFjMTItNDQ3OS1i MmZiLTk5OGUwMTg1NDU1MS8wLzMxMzAzMzJlMzUzNDJlMzIzMTM2MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZzbYMA0GCSqG SIb3DQEBCwUAA4IBAQCFJV+AUuM9WgbSMNkupQTQLsJY2cAGIPNYfl7l45EWjJ0f xVGUEfXr73OZMp+9GNyIZPlhmh6y/+lsjHh3qNNrPAWz9I09+Q30Loqpb4RFLr8l U31RNN3wCFa6N8b38ZVYR4NhLsMI1+rWFw1c8YVtkL1I9GEXsklQhcpcbjRDZPhL oKj2SKyMhgK/n7fC01aw24ESqTIODSjPjQLkpTqv14E975UnalAZDScBTMdAPr3c r5gcZkfgA4T71LJz9Zte8YcKWbpr5JWylunXC7S/iPYkIsoD2MCraDka5/bnpONa eGCRK+Un2vxY4Gy3yk/zzKCr0bYc38UO9754fAGG -----END CERTIFICATE-----Generated at Wed Apr 24 10:29:46 2024 by rpki-client on console-fra.rpki-client.org