$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa File: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (raw, json) Hash identifier: u9+WmCfkZa1OrSZt6CY8I7hAe5nGAb1tZmVV5X6CT6g= Subject key identifier: EB:DA:11:F5:8D:A2:82:F4:27:B8:2C:2C:E0:02:A7:26:8C:E0:82:E0 Certificate issuer: /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Certificate serial: 4C5C07270A64A8D03743B20A015DD086178D2696 Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa Signing time: Wed 31 May 2023 21:16:33 +0000 ROA not before: Wed 31 May 2023 21:11:33 +0000 ROA not after: Wed 29 May 2024 21:16:33 +0000 asID: 138064 IP address blocks: 103.70.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 02:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:5c:07:27:0a:64:a8:d0:37:43:b2:0a:01:5d:d0:86:17:8d:26:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Validity Not Before: May 31 21:11:33 2023 GMT Not After : May 29 21:16:33 2024 GMT Subject: CN=EBDA11F58DA282F427B82C2CE002A7268CE082E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:59:d9:57:d2:0e:61:68:b1:89:a4:69:21: c5:f2:26:89:9a:4d:95:93:2e:f9:24:6f:78:ad:0d: 80:fb:b1:e2:74:e7:9a:8d:d5:f4:d8:db:59:64:22: a6:a9:73:cb:f3:bc:40:a4:67:ce:6c:44:6a:bf:44: 4d:ff:bf:80:3b:30:e0:4d:44:94:c7:89:ff:af:f6: f3:ec:45:7f:31:97:a0:7a:90:ee:fc:3b:fb:7a:d2: 68:a9:db:f8:5d:39:82:c0:4f:da:31:53:66:9b:4a: 95:f9:4b:aa:81:e7:db:77:4c:5d:31:26:5e:42:f7: e1:bd:a5:5c:05:00:07:42:09:1f:bd:a6:8b:7a:d8: 4f:1a:e5:32:e9:52:7b:f0:b3:e0:94:b2:c6:04:96: 6e:7d:fc:00:5f:49:23:81:68:3d:30:37:d6:2b:24: 3c:41:e6:41:7e:fe:77:6e:22:01:5d:e0:89:01:da: b3:0b:44:2c:ed:5d:2f:bf:27:b6:f3:5f:c5:ec:b0: af:57:c5:fb:f6:ce:5d:2c:46:2c:1e:14:8f:a9:5f: a5:cc:ef:f9:e7:96:e2:db:7b:6a:bf:e9:84:eb:50: 04:5e:c2:db:23:1c:d3:18:a7:84:63:67:17:67:3a: f8:03:bc:39:f8:69:f3:9d:72:9a:0d:b6:61:6c:90: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DA:11:F5:8D:A2:82:F4:27:B8:2C:2C:E0:02:A7:26:8C:E0:82:E0 X509v3 Authority Key Identifier: keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/3130332e37302e39322e302f32332d3234203d3e20313338303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.70.92.0/23 Signature Algorithm: sha256WithRSAEncryption 14:1a:1f:89:ed:dd:02:e7:b7:c1:19:12:79:c6:1e:4c:63:65: a9:3c:86:40:3a:b5:c4:95:3e:45:2d:2d:60:ce:c2:61:38:57: 5c:bc:4b:aa:0d:bc:5b:12:9d:a2:dc:b6:6b:e1:dd:37:11:8e: 33:89:28:bf:c4:2c:6a:58:7d:4c:b1:6e:c5:c1:d7:ab:75:aa: 1f:e7:72:71:41:1a:c8:9a:91:2f:5f:51:ae:85:1e:57:88:f7: 39:73:28:68:db:5c:02:5b:e9:06:9a:ef:a7:09:fb:e5:68:ea: 34:f9:54:2b:cc:5e:03:95:2c:03:39:ba:57:09:f9:8f:f5:da: a7:c0:86:28:24:f5:cc:86:c3:f3:d4:9c:ba:40:d0:a7:48:a0: 5a:4d:ba:5c:8a:8b:21:1d:1b:9f:d6:39:79:67:ef:29:6b:7f: 6d:d6:42:2a:a6:2c:24:51:6c:8f:e1:f2:2a:25:28:01:a5:24: a1:3f:75:7a:c9:86:83:4e:70:d7:bc:ce:6f:1f:da:43:16:60: d5:78:49:8e:5f:22:dc:dc:23:6a:a3:00:0d:59:57:82:1f:16: 57:ae:0e:1e:69:06:40:50:19:7d:de:4e:c3:90:21:ba:e8:71: ad:b3:f8:98:9d:96:07:3d:a3:b9:0c:83:ed:73:9c:80:64:dd: 44:a5:f9:94 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTFwHJwpkqNA3Q7IKAV3QhheNJpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUND QTc4NDg2MjAeFw0yMzA1MzEyMTExMzNaFw0yNDA1MjkyMTE2MzNaMDMxMTAvBgNV BAMTKEVCREExMUY1OERBMjgyRjQyN0I4MkMyQ0UwMDJBNzI2OENFMDgyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHlnZV9IOYWixiaRpIcXyJoma TZWTLvkkb3itDYD7seJ055qN1fTY21lkIqapc8vzvECkZ85sRGq/RE3/v4A7MOBN RJTHif+v9vPsRX8xl6B6kO78O/t60mip2/hdOYLAT9oxU2abSpX5S6qB59t3TF0x Jl5C9+G9pVwFAAdCCR+9pot62E8a5TLpUnvws+CUssYElm59/ABfSSOBaD0wN9Yr JDxB5kF+/nduIgFd4IkB2rMLRCztXS+/J7bzX8XssK9Xxfv2zl0sRiweFI+pX6XM 7/nnluLbe2q/6YTrUARewtsjHNMYp4RjZxdnOvgDvDn4afOdcpoNtmFskL77AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU69oR9Y2igvQnuCws4AKnJozgguAwHwYDVR0j BBgwFoAUYYnk9nvlPfZSgvjhu2MWXMp4SGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTg5ZjY0My0zN2JjLTRmZmItOTUyOS00MDFlNGI2ZWY2NzUvMC82MTg5RTRGNjdC RTUzREY2NTI4MkY4RTFCQjYzMTY1Q0NBNzg0ODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUNDQTc4 NDg2Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1ODlmNjQzLTM3YmMtNGZmYi05 NTI5LTQwMWU0YjZlZjY3NS8wLzMxMzAzMzJlMzczMDJlMzkzMjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzODMwMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdGXDANBgkqhkiG 9w0BAQsFAAOCAQEAFBofie3dAue3wRkSecYeTGNlqTyGQDq1xJU+RS0tYM7CYThX XLxLqg28WxKdoty2a+HdNxGOM4kov8Qsalh9TLFuxcHXq3WqH+dycUEayJqRL19R roUeV4j3OXMoaNtcAlvpBprvpwn75WjqNPlUK8xeA5UsAzm6Vwn5j/Xap8CGKCT1 zIbD89ScukDQp0igWk26XIqLIR0bn9Y5eWfvKWt/bdZCKqYsJFFsj+HyKiUoAaUk oT91esmGg05w17zObx/aQxZg1XhJjl8i3NwjaqMADVlXgh8WV64OHmkGQFAZfd5O w5AhuuhxrbP4mJ2WBz2juQyD7XOcgGTdRKX5lA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:42 2024 by rpki-client on console-ams.rpki-client.org