$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa File: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (raw, json) Hash identifier: MK8sCC8N+jxIle5DouV0FAWtS3LVmt81dQuXnTzLQj0= Subject key identifier: AF:71:55:13:46:00:D8:9C:55:B8:9C:8D:8E:E4:68:53:C5:51:80:6C Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 01FAC9BEB23810AD11B3FA20C723FD19E9FBE6C9 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa Signing time: Thu 25 Apr 2024 15:00:00 +0000 ROA not before: Thu 25 Apr 2024 14:55:00 +0000 ROA not after: Thu 24 Apr 2025 15:00:00 +0000 asID: 150980 IP address blocks: 103.70.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fa:c9:be:b2:38:10:ad:11:b3:fa:20:c7:23:fd:19:e9:fb:e6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Apr 25 14:55:00 2024 GMT Not After : Apr 24 15:00:00 2025 GMT Subject: CN=AF7155134600D89C55B89C8D8EE46853C551806C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3e:c4:ef:b6:73:f8:10:f2:4c:5d:75:3b:4b: 6b:e7:9b:c2:17:a1:bd:3f:69:2e:16:21:40:be:82: 2f:98:71:33:f9:8c:b4:8d:5c:bd:4b:2d:f7:65:06: 75:65:cb:d4:7a:8f:a1:ba:a7:69:b2:1a:7d:df:1d: a4:ff:30:d2:10:08:5e:0b:52:8d:07:32:d9:6e:d3: 6b:98:88:91:93:51:4c:bd:03:25:dc:59:fe:7d:25: 7d:ac:b5:22:95:b1:a5:ac:1a:d9:38:d5:1d:5e:31: 99:40:88:c8:5f:a2:c5:4e:c6:5d:e8:21:07:92:a5: 29:13:f8:90:38:48:58:6c:26:64:fc:cb:88:be:42: 04:ef:36:44:fe:38:a5:65:d4:23:b1:a9:5d:7f:75: 45:2e:78:3a:c5:58:17:24:a7:ba:2c:89:c8:be:c1: 06:6d:38:5f:72:20:ab:63:89:32:ef:91:67:11:62: bd:9c:ea:ed:65:82:60:dc:32:20:a6:c0:2e:bb:6b: ea:bc:f6:20:32:a3:3d:77:f7:79:92:9c:0e:55:14: 04:6d:71:78:7f:bd:61:15:7b:f1:a1:60:a2:e0:02: b2:8a:cb:47:65:ba:04:f4:dc:fa:9f:fb:57:f6:e3: bd:05:6b:c7:8a:94:df:7c:73:c4:74:db:d2:d2:3b: 72:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:71:55:13:46:00:D8:9C:55:B8:9C:8D:8E:E4:68:53:C5:51:80:6C X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.70.123.0/24 Signature Algorithm: sha256WithRSAEncryption 61:42:95:8c:1d:97:8c:91:73:73:2f:91:07:2a:cb:c2:8b:8d: 57:75:3e:26:0b:88:8f:5e:0c:40:57:0e:e5:fd:a4:60:b3:e0: da:96:e4:6c:1f:14:e3:39:a9:fe:67:c9:53:c6:d6:27:26:6a: 3e:b9:e9:0a:19:31:b3:d7:ec:b8:ad:35:f3:42:45:16:35:7b: 6a:95:8d:81:96:49:90:d5:46:33:cf:3f:d5:85:b2:74:0c:7e: e5:81:51:2b:c2:69:d4:3b:b0:fb:56:a1:02:20:fc:0d:44:b7: f6:dc:8d:63:bc:f5:6f:0c:ea:cc:05:b1:10:c0:0f:ef:14:a2: 17:7b:32:f4:0f:98:a4:0a:68:bc:d3:35:b5:73:56:65:66:b6: 7e:3f:a8:6b:74:92:b1:ff:20:08:34:29:f0:25:ed:12:21:7d: bd:62:88:d4:63:ee:0b:e1:0d:74:11:2b:44:ae:cf:99:25:19: 14:f8:c2:29:bf:cf:fd:4b:66:4e:68:9a:5c:c1:12:a0:f3:3b: f5:1f:8f:8f:8b:3e:22:dc:a0:cb:bb:3e:60:b2:da:cd:db:ae: 1b:48:84:d2:46:75:68:2e:12:03:9b:92:cf:55:aa:d6:cf:0c: cf:19:d4:7b:0c:b7:78:43:a8:87:95:74:b3:f6:35:14:62:92: 3b:52:11:dc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAfrJvrI4EK0Rs/ogxyP9Gen75skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNDA0MjUxNDU1MDBaFw0yNTA0MjQxNTAwMDBaMDMxMTAvBgNV BAMTKEFGNzE1NTEzNDYwMEQ4OUM1NUI4OUM4RDhFRTQ2ODUzQzU1MTgwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjPsTvtnP4EPJMXXU7S2vnm8IX ob0/aS4WIUC+gi+YcTP5jLSNXL1LLfdlBnVly9R6j6G6p2myGn3fHaT/MNIQCF4L Uo0HMtlu02uYiJGTUUy9AyXcWf59JX2stSKVsaWsGtk41R1eMZlAiMhfosVOxl3o IQeSpSkT+JA4SFhsJmT8y4i+QgTvNkT+OKVl1COxqV1/dUUueDrFWBckp7osici+ wQZtOF9yIKtjiTLvkWcRYr2c6u1lgmDcMiCmwC67a+q89iAyoz1393mSnA5VFARt cXh/vWEVe/GhYKLgArKKy0dlugT03Pqf+1f2470Fa8eKlN98c8R029LSO3KjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUr3FVE0YA2JxVuJyNjuRoU8VRgGwwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzMjUwNjYyLTNlZWYtNGFhOS05 ZWRlLTU2MjlkNWI2ZWE5NS8wLzMxMzAzMzJlMzczMDJlMzEzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0Z7MA0GCSqG SIb3DQEBCwUAA4IBAQBhQpWMHZeMkXNzL5EHKsvCi41XdT4mC4iPXgxAVw7l/aRg s+DaluRsHxTjOan+Z8lTxtYnJmo+uekKGTGz1+y4rTXzQkUWNXtqlY2BlkmQ1UYz zz/VhbJ0DH7lgVErwmnUO7D7VqECIPwNRLf23I1jvPVvDOrMBbEQwA/vFKIXezL0 D5ikCmi80zW1c1ZlZrZ+P6hrdJKx/yAINCnwJe0SIX29YojUY+4L4Q10EStErs+Z JRkU+MIpv8/9S2ZOaJpcwRKg8zv1H4+Piz4i3KDLuz5gstrN264bSITSRnVoLhID m5LPVarWzwzPGdR7DLd4Q6iHlXSz9jUUYpI7UhHc -----END CERTIFICATE-----Generated at Sun Jun 2 07:02:56 2024 by rpki-client on console-fra.rpki-client.org