$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa File: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (raw, json) Hash identifier: q0z6x6M2EaMJnhFKND8l+V4WiFhIIYAEPTaaboaynCo= Subject key identifier: BF:57:E7:A8:DD:D5:12:E5:C3:86:3B:92:B8:AE:11:7F:DB:D8:64:36 Certificate issuer: /CN=735D87BA86773AC70137CF53116358A1F3B19766 Certificate serial: 0ADF24B886FD4CABA4197814A1F5D0F497AA6A13 Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa Signing time: Sun 02 Jul 2023 03:00:01 +0000 ROA not before: Sun 02 Jul 2023 02:55:01 +0000 ROA not after: Sun 30 Jun 2024 03:00:01 +0000 asID: 18004 IP address blocks: 103.234.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 07:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:df:24:b8:86:fd:4c:ab:a4:19:78:14:a1:f5:d0:f4:97:aa:6a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766 Validity Not Before: Jul 2 02:55:01 2023 GMT Not After : Jun 30 03:00:01 2024 GMT Subject: CN=BF57E7A8DDD512E5C3863B92B8AE117FDBD86436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:61:a8:b9:e0:6a:c3:88:c2:d5:a8:5f:01: d7:28:c5:7c:d8:0e:24:b9:31:a7:5b:2a:b8:30:2a: 37:84:cb:6a:95:74:0c:70:58:4b:52:da:99:50:d8: 54:94:41:d2:d3:af:4c:bf:d7:b8:5a:67:ef:77:02: a5:4c:8e:0c:a1:61:7f:1a:c1:ce:fb:33:9c:7e:6d: 7e:af:98:f0:94:ce:3a:ea:ae:fb:3d:76:da:87:7e: e8:91:50:c4:7a:85:e2:0a:3c:75:14:46:91:5d:c5: ed:26:05:7a:0c:74:1d:70:c1:ce:0c:6b:2a:08:9c: cb:63:eb:7a:f1:bc:34:15:67:c8:48:80:9a:f2:dc: 3f:f4:e7:86:9b:14:ee:eb:00:a1:26:56:33:c8:47: c2:27:ab:b5:9a:34:52:90:7f:f1:ca:dd:2a:3f:da: b0:e8:2e:7c:10:df:22:18:f6:76:be:76:f6:08:30: 3f:c9:f0:a4:f4:98:cb:2d:9f:41:e3:43:17:27:ef: 50:0b:40:55:9e:77:bb:46:12:ff:63:75:26:83:eb: b6:e7:ef:0a:e6:7d:86:21:bd:95:b3:01:50:d1:04: 56:5a:84:62:71:0b:72:2a:27:7c:4c:cb:45:88:d6: 28:1b:ec:54:6e:97:b0:59:ad:e5:a6:73:cd:ef:07: b2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:57:E7:A8:DD:D5:12:E5:C3:86:3B:92:B8:AE:11:7F:DB:D8:64:36 X509v3 Authority Key Identifier: keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.120.0/22 Signature Algorithm: sha256WithRSAEncryption 38:07:12:e1:4d:c6:75:02:ba:5b:f4:0c:8a:38:0c:00:ae:f2: 25:55:e8:3e:f4:2c:d7:0e:52:c1:0c:5b:96:5a:0d:e2:0f:3f: 3f:1a:26:97:76:a8:61:c4:02:03:e5:43:b3:3e:c6:5a:3a:79: 12:99:04:2b:35:63:2e:6f:5c:b6:94:5e:33:4a:20:ea:54:e4: b7:98:ed:f9:63:d7:a7:20:7e:20:37:83:c8:60:90:e8:45:1a: 1b:58:cf:7c:00:66:54:cc:12:22:77:6b:be:01:23:eb:8e:42: 7d:0c:3c:12:16:44:4c:e7:e0:e2:07:83:bd:cc:8d:21:9b:fa: e7:24:eb:0f:8d:4c:e0:e8:f7:0c:9b:49:5a:08:02:0b:c9:68: 13:a9:61:c6:99:3c:fd:a5:c9:24:17:fe:3d:a9:37:03:5f:02: f6:f2:f7:f3:57:96:45:bd:69:0b:7d:e4:82:3e:24:c0:b2:ac: e0:66:4e:d9:03:76:b9:1f:ba:ba:b2:6b:83:98:a4:35:6d:4e: 70:08:c7:d4:30:fa:cc:9e:a8:e3:40:f1:96:36:9b:d8:e5:10: 44:bf:1d:6b:25:ca:41:08:0a:88:26:72:3a:22:7b:5f:ca:bf: c0:e8:56:15:24:63:48:b3:37:13:7b:ed:fd:b7:8e:cd:59:aa: eb:2b:47:ed -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCt8kuIb9TKukGXgUofXQ9JeqahMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFG M0IxOTc2NjAeFw0yMzA3MDIwMjU1MDFaFw0yNDA2MzAwMzAwMDFaMDMxMTAvBgNV BAMTKEJGNTdFN0E4RERENTEyRTVDMzg2M0I5MkI4QUUxMTdGREJEODY0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbWGoueBqw4jC1ahfAdcoxXzY DiS5MadbKrgwKjeEy2qVdAxwWEtS2plQ2FSUQdLTr0y/17haZ+93AqVMjgyhYX8a wc77M5x+bX6vmPCUzjrqrvs9dtqHfuiRUMR6heIKPHUURpFdxe0mBXoMdB1wwc4M ayoInMtj63rxvDQVZ8hIgJry3D/054abFO7rAKEmVjPIR8Inq7WaNFKQf/HK3So/ 2rDoLnwQ3yIY9na+dvYIMD/J8KT0mMstn0HjQxcn71ALQFWed7tGEv9jdSaD67bn 7wrmfYYhvZWzAVDRBFZahGJxC3IqJ3xMy0WI1igb7FRul7BZreWmc83vB7IFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUv1fnqN3VEuXDhjuSuK4Rf9vYZDYwHwYDVR0j BBgwFoAUc12HuoZ3OscBN89TEWNYofOxl2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMC83MzVEODdCQTg2 NzczQUM3MDEzN0NGNTMxMTYzNThBMUYzQjE5NzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFGM0Ix OTc2Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNWQzNjRhLWRhMGItNDU0MC05 MzQ5LTU5MzBiZDcyNWNlMy8wLzMxMzAzMzJlMzIzMzM0MmUzMTMyMzAyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTM4MzAzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+p4MA0GCSqG SIb3DQEBCwUAA4IBAQA4BxLhTcZ1Arpb9AyKOAwArvIlVeg+9CzXDlLBDFuWWg3i Dz8/GiaXdqhhxAID5UOzPsZaOnkSmQQrNWMub1y2lF4zSiDqVOS3mO35Y9enIH4g N4PIYJDoRRobWM98AGZUzBIid2u+ASPrjkJ9DDwSFkRM5+DiB4O9zI0hm/rnJOsP jUzg6PcMm0laCAILyWgTqWHGmTz9pckkF/49qTcDXwL28vfzV5ZFvWkLfeSCPiTA sqzgZk7ZA3a5H7q6smuDmKQ1bU5wCMfUMPrMnqjjQPGWNpvY5RBEvx1rJcpBCAqI JnI6Intfyr/A6FYVJGNIszcTe+39t47NWarrK0ft -----END CERTIFICATE-----Generated at Fri May 17 01:06:09 2024 by rpki-client on console-fra.rpki-client.org