$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa File: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (raw, json) Hash identifier: sNVSyyId+pKhRU7SCXz++K/1q6I0WmlzRqnk37T/knM= Subject key identifier: CD:AE:FE:11:EA:61:8A:C0:56:38:A8:31:76:1C:36:B0:7E:4D:FC:C6 Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 54F48B5053DDF2574DC16DA37B41C9934FC065AA Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa Signing time: Mon 31 Jul 2023 00:07:25 +0000 ROA not before: Mon 31 Jul 2023 00:02:25 +0000 ROA not after: Mon 29 Jul 2024 00:07:25 +0000 asID: 58821 IP address blocks: 103.242.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f4:8b:50:53:dd:f2:57:4d:c1:6d:a3:7b:41:c9:93:4f:c0:65:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Jul 31 00:02:25 2023 GMT Not After : Jul 29 00:07:25 2024 GMT Subject: CN=CDAEFE11EA618AC05638A831761C36B07E4DFCC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2d:cf:d2:cc:fc:11:a6:fa:f4:c2:4d:98:1e: ee:e2:40:28:d6:b6:dd:1e:1e:ec:ca:ea:bf:22:bf: 7f:a8:af:69:81:c8:ba:ff:47:88:57:2f:bf:dd:d6: 38:b9:73:1a:73:86:94:cd:7c:3b:cf:b8:99:0c:4c: 50:e5:1f:87:95:1e:61:e6:e8:7c:49:7e:07:31:33: b2:48:58:f7:95:07:d8:7d:b1:c9:c5:f2:0a:6b:f2: 8c:fd:a6:ba:a9:fc:e4:73:7e:d4:1c:9a:8a:a5:e7: 7b:b4:78:42:bf:6a:89:b6:0b:00:b0:c5:9e:f7:c3: d9:b4:8a:82:ad:ae:1d:43:24:46:d5:fe:7f:b6:f9: e3:b4:75:01:7b:ad:b0:87:0f:ca:de:68:29:58:88: 5d:2e:3a:b3:07:7a:31:fb:96:69:8d:0b:2b:e9:f4: e5:0f:5a:e4:ed:19:79:6b:20:eb:2e:b2:81:ba:10: c3:62:f3:69:c2:81:a8:11:28:6c:ca:36:57:bb:54: 33:9d:83:ad:62:8f:83:05:a8:d1:ad:5e:c1:f1:60: 2c:ed:96:71:fb:09:ef:e6:0e:c0:27:65:1f:b4:26: 7b:f1:b7:e5:a1:9a:22:47:a9:02:51:c3:4b:70:d8: 57:33:d2:68:7d:a4:24:bd:8a:6e:78:5e:1e:d5:a4: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AE:FE:11:EA:61:8A:C0:56:38:A8:31:76:1C:36:B0:7E:4D:FC:C6 X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.242.104.0/22 Signature Algorithm: sha256WithRSAEncryption b5:55:45:44:c7:59:56:15:c4:42:b9:c4:ee:27:35:e2:e4:05: b5:9b:30:11:e5:45:13:e1:ff:68:29:bb:08:95:bb:5c:7c:04: 0c:13:05:47:f8:dc:1c:bf:14:5b:e9:a7:c6:13:dd:23:37:b4: e2:da:0a:82:5b:a4:c5:fd:fe:1f:7b:cf:dc:6b:cd:56:53:16: aa:76:d5:fa:9e:06:93:2a:5c:ac:01:7f:4f:a3:58:7f:2b:81: c9:8e:04:29:78:fe:96:be:54:3d:ef:93:01:a7:c6:93:e8:81: 80:da:03:91:27:46:27:80:22:e2:73:f2:6a:1d:fe:15:63:0c: 64:13:b1:49:7f:35:6c:66:17:4a:ba:ef:ed:3d:8b:56:16:80: da:d3:01:b5:c6:38:91:8a:13:ef:83:6e:3e:ee:c9:60:d7:f1: 2c:13:fe:c1:a0:cc:17:a7:bb:14:24:ef:ea:91:db:b1:a7:c4: ba:40:16:c9:7e:3c:b2:f3:f5:65:0a:d8:65:9b:f7:ee:b5:a0: 93:0f:30:d3:97:1d:30:5c:8e:38:da:bd:22:65:31:b8:6f:50: e4:25:86:e1:6d:de:74:e0:e6:c9:cd:f2:55:44:f8:2b:8a:cc: 10:2d:c1:64:eb:78:57:d0:45:70:69:5e:b7:2b:9c:49:95:72: 60:af:8d:d4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVPSLUFPd8ldNwW2je0HJk0/AZaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yMzA3MzEwMDAyMjVaFw0yNDA3MjkwMDA3MjVaMDMxMTAvBgNV BAMTKENEQUVGRTExRUE2MThBQzA1NjM4QTgzMTc2MUMzNkIwN0U0REZDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhLc/SzPwRpvr0wk2YHu7iQCjW tt0eHuzK6r8iv3+or2mByLr/R4hXL7/d1ji5cxpzhpTNfDvPuJkMTFDlH4eVHmHm 6HxJfgcxM7JIWPeVB9h9scnF8gpr8oz9prqp/ORzftQcmoql53u0eEK/aom2CwCw xZ73w9m0ioKtrh1DJEbV/n+2+eO0dQF7rbCHD8reaClYiF0uOrMHejH7lmmNCyvp 9OUPWuTtGXlrIOsusoG6EMNi82nCgagRKGzKNle7VDOdg61ij4MFqNGtXsHxYCzt lnH7Ce/mDsAnZR+0Jnvxt+WhmiJHqQJRw0tw2Fcz0mh9pCS9im54Xh7VpFVPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUza7+EephisBWOKgxdhw2sH5N/MYwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlNDVjOWViLTNiYjYtNDIwMy04 Yzg2LWYwOGI2NGRhM2VhOS8wLzMxMzAzMzJlMzIzNDMyMmUzMTMwMzQyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNTM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/JoMA0GCSqG SIb3DQEBCwUAA4IBAQC1VUVEx1lWFcRCucTuJzXi5AW1mzAR5UUT4f9oKbsIlbtc fAQMEwVH+NwcvxRb6afGE90jN7Ti2gqCW6TF/f4fe8/ca81WUxaqdtX6ngaTKlys AX9Po1h/K4HJjgQpeP6WvlQ975MBp8aT6IGA2gORJ0YngCLic/JqHf4VYwxkE7FJ fzVsZhdKuu/tPYtWFoDa0wG1xjiRihPvg24+7slg1/EsE/7BoMwXp7sUJO/qkdux p8S6QBbJfjyy8/VlCthlm/futaCTDzDTlx0wXI442r0iZTG4b1DkJYbhbd504ObJ zfJVRPgriswQLcFk63hX0EVwaV63K5xJlXJgr43U -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:37 2024 by rpki-client on console-ams.rpki-client.org