$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/3130332e34302e35342e302f32332d3234203d3e203538333932.roa File: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (raw, json) Hash identifier: OZwgVgoMKy0sEqn16IC+rFGcPcd50kthg4z/SgUUsM8= Subject key identifier: 26:98:E9:E1:E6:7C:B5:64:AA:2A:4F:A2:EE:7C:D6:A6:E6:40:71:2F Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 1B2837B67D379167FEC3D5E3D3C71A1315038E86 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/3130332e34302e35342e302f32332d3234203d3e203538333932.roa Signing time: Mon 31 Jul 2023 00:06:23 +0000 ROA not before: Mon 31 Jul 2023 00:01:23 +0000 ROA not after: Mon 29 Jul 2024 00:06:23 +0000 asID: 58392 IP address blocks: 103.40.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:28:37:b6:7d:37:91:67:fe:c3:d5:e3:d3:c7:1a:13:15:03:8e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Jul 31 00:01:23 2023 GMT Not After : Jul 29 00:06:23 2024 GMT Subject: CN=2698E9E1E67CB564AA2A4FA2EE7CD6A6E640712F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:4e:5b:fa:e6:b1:34:9c:0f:01:3b:c8:34: e4:b3:76:36:97:1b:54:8d:35:7a:a5:38:33:aa:04: 3f:62:de:77:4c:4e:1a:4c:0c:3f:a3:60:5b:e0:c9: 68:64:8f:f1:18:7b:e4:a3:45:c8:99:9f:9f:43:da: 20:f6:82:74:2d:37:0a:94:78:82:75:fc:22:ae:5f: 2c:ba:69:1f:94:62:c5:97:36:20:62:0e:53:9c:cf: d2:40:23:c0:a8:6b:03:e6:37:e9:c5:6a:f5:ff:d8: 4f:7f:c4:ef:ab:eb:d5:54:22:97:bd:44:5e:57:de: 5d:74:55:b6:13:0a:c5:d3:37:00:d4:d8:ce:44:da: 09:2f:c2:f3:13:3f:5d:f7:35:df:df:8f:d3:02:e9: c2:29:11:24:dd:21:df:8f:1f:a0:5e:41:4b:37:98: 94:37:d7:6b:b2:a8:b0:33:d1:b8:5d:7c:96:4a:1c: b3:da:6e:cf:07:02:63:b0:1d:27:2f:44:14:37:86: e0:92:fa:60:13:da:f2:c5:11:88:21:a7:65:1d:24: ff:1c:83:ff:a1:ad:de:aa:13:05:94:ac:28:0d:df: c6:77:fb:d6:7b:4c:57:7c:dc:32:16:c5:09:ff:37: 8a:9f:3e:bd:4e:07:e1:71:75:9c:11:52:4b:f2:aa: 9d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:98:E9:E1:E6:7C:B5:64:AA:2A:4F:A2:EE:7C:D6:A6:E6:40:71:2F X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/3130332e34302e35342e302f32332d3234203d3e203538333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.40.54.0/23 Signature Algorithm: sha256WithRSAEncryption 49:60:ec:91:9c:ec:44:ea:82:17:f5:c4:dd:37:20:34:a2:fd: 8f:99:b7:ca:d6:23:79:73:e7:a6:b8:34:0c:eb:52:85:e9:e7: de:73:04:65:64:f5:c9:be:39:bb:f9:ff:ed:c2:00:0f:ed:cb: 17:64:97:f2:cf:1f:40:e3:44:d0:1b:1a:4a:f0:57:31:f3:f2: 65:6e:32:72:07:2a:9f:3e:b8:46:73:91:2f:75:86:9b:d9:e8: 99:e5:15:6b:4c:c6:af:1b:33:70:a3:c5:3c:89:49:3c:5a:83: 72:a1:14:5e:87:18:76:74:a8:f7:3e:4a:11:d3:49:38:5d:95: 51:99:a2:d6:40:28:97:f3:a8:66:9d:1e:51:f9:6c:63:bb:c2: 5f:c7:0f:c0:1d:b7:46:de:0a:bf:b8:9c:ed:1c:cf:88:18:3f: 71:b1:e1:0a:22:66:80:ec:3b:45:38:fc:50:f3:cc:63:80:bc: 5e:0b:b7:33:9b:0a:f9:35:e1:17:77:85:c0:78:e7:39:c7:b4: f7:28:30:0e:ca:b9:99:a4:78:ab:74:27:dd:81:17:e0:42:65: 2f:77:8a:18:46:8c:5d:1b:9d:a3:3a:8f:11:50:48:84:5f:18: 74:ee:ba:9d:0e:70:ba:7c:da:4b:c1:58:c9:1b:56:1c:30:d3: 05:9b:8f:54 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUGyg3tn03kWf+w9Xj08caExUDjoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yMzA3MzEwMDAxMjNaFw0yNDA3MjkwMDA2MjNaMDMxMTAvBgNV BAMTKDI2OThFOUUxRTY3Q0I1NjRBQTJBNEZBMkVFN0NENkE2RTY0MDcxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHk5b+uaxNJwPATvINOSzdjaX G1SNNXqlODOqBD9i3ndMThpMDD+jYFvgyWhkj/EYe+SjRciZn59D2iD2gnQtNwqU eIJ1/CKuXyy6aR+UYsWXNiBiDlOcz9JAI8CoawPmN+nFavX/2E9/xO+r69VUIpe9 RF5X3l10VbYTCsXTNwDU2M5E2gkvwvMTP133Nd/fj9MC6cIpESTdId+PH6BeQUs3 mJQ312uyqLAz0bhdfJZKHLPabs8HAmOwHScvRBQ3huCS+mAT2vLFEYghp2UdJP8c g/+hrd6qEwWUrCgN38Z3+9Z7TFd83DIWxQn/N4qfPr1OB+FxdZwRUkvyqp1JAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUJpjp4eZ8tWSqKk+i7nzWpuZAcS8wHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmZmI3NzY3LTNkZTktNDgzMy1i NGU3LWIxYjYyZWUzY2Q5OS8wLzMxMzAzMzJlMzQzMDJlMzUzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDM1MzgzMzM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnKDYwDQYJKoZIhvcN AQELBQADggEBAElg7JGc7ETqghf1xN03IDSi/Y+Zt8rWI3lz56a4NAzrUoXp595z BGVk9cm+Obv5/+3CAA/tyxdkl/LPH0DjRNAbGkrwVzHz8mVuMnIHKp8+uEZzkS91 hpvZ6JnlFWtMxq8bM3CjxTyJSTxag3KhFF6HGHZ0qPc+ShHTSThdlVGZotZAKJfz qGadHlH5bGO7wl/HD8Adt0beCr+4nO0cz4gYP3Gx4QoiZoDsO0U4/FDzzGOAvF4L tzObCvk14Rd3hcB45znHtPcoMA7KuZmkeKt0J92BF+BCZS93ihhGjF0bnaM6jxFQ SIRfGHTuup0OcLp82kvBWMkbVhww0wWbj1Q= -----END CERTIFICATE-----Generated at Thu May 2 20:47:15 2024 by rpki-client on console-fra.rpki-client.org