$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3130332e34392e3232302e302f32322d3232203d3e203234323131.roa File: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (raw, json) Hash identifier: WBr4V54hTipP22BH3LFS608ipKiviFySmDv88qVJvoA= Subject key identifier: A1:F4:96:26:D3:78:33:8D:FB:49:6A:7F:4A:F5:6D:AA:95:97:AA:E1 Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 64E2255919A09448B517E8CF310674CB8C89EC4D Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3130332e34392e3232302e302f32322d3232203d3e203234323131.roa Signing time: Fri 22 Dec 2023 10:00:01 +0000 ROA not before: Fri 22 Dec 2023 09:55:01 +0000 ROA not after: Fri 20 Dec 2024 10:00:01 +0000 asID: 24211 IP address blocks: 103.49.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 19:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e2:25:59:19:a0:94:48:b5:17:e8:cf:31:06:74:cb:8c:89:ec:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Dec 22 09:55:01 2023 GMT Not After : Dec 20 10:00:01 2024 GMT Subject: CN=A1F49626D378338DFB496A7F4AF56DAA9597AAE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:1c:05:6c:0c:09:d2:f9:50:40:8c:93:41: c7:dc:2d:14:17:24:11:a7:04:ed:ae:92:ae:01:fd: 51:85:ee:a3:35:df:76:11:75:ea:69:36:46:ac:e9: ca:23:bb:65:ad:87:11:2b:c7:d9:40:04:db:ea:22: 96:5d:72:3e:4a:8e:dc:a8:86:df:4b:c6:1c:ee:e4: 20:9c:8f:ef:db:55:7e:08:6c:76:a6:d5:2d:f4:62: 8a:13:32:44:7a:5a:67:9b:5f:07:a0:b1:26:63:4d: 06:ca:90:d9:4e:06:71:03:99:6a:8b:2f:fa:b7:b8: f3:34:4b:52:a5:1d:fa:88:93:3d:8e:15:55:9a:74: 86:d7:fa:fb:e1:f8:72:98:78:b2:ce:6f:51:11:ab: ea:cd:78:85:e2:8d:78:a5:4f:a7:d9:d3:dd:71:31: c8:57:88:32:a7:93:fe:90:25:ee:34:6f:71:b1:3b: b7:2a:c5:f7:50:7a:37:d9:4e:e3:24:f3:01:6f:95: 4a:9a:09:05:94:02:9f:25:c0:6c:06:f9:34:f7:9a: aa:84:5e:7b:8d:5a:b2:ed:b4:58:a7:87:2d:20:1b: 81:3f:64:08:93:fb:c0:e5:ae:e5:41:39:be:af:2d: 6d:0a:5b:15:fc:bf:30:e8:5a:ad:b8:69:23:26:d8: 0f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F4:96:26:D3:78:33:8D:FB:49:6A:7F:4A:F5:6D:AA:95:97:AA:E1 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3130332e34392e3232302e302f32322d3232203d3e203234323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.220.0/22 Signature Algorithm: sha256WithRSAEncryption 18:f8:c3:03:79:da:d4:79:f1:7e:a5:69:33:26:05:1a:e1:fd: dd:b3:aa:61:03:be:33:91:b1:78:ac:ff:7d:26:ee:5f:a4:11: 22:81:1c:66:19:0b:d1:0c:87:f8:9d:50:5c:ed:44:a1:a7:c7: c1:e7:f4:59:a0:f6:0b:75:5d:33:54:98:26:78:db:cd:36:b9: d8:ba:6b:45:ce:1f:47:53:f3:23:4e:da:7c:04:bd:2b:cf:f7: 68:ca:3d:3e:70:cc:09:b0:9f:17:34:82:97:bc:df:8e:e3:03: 13:be:d3:57:6b:fb:1b:68:ff:72:b0:d3:76:21:eb:99:d1:ef: 09:e1:bc:d4:da:33:a0:0e:ab:0d:20:f9:6d:fc:07:75:c5:39: e3:ac:38:7c:52:17:65:2c:d4:03:2c:eb:69:f2:1e:5a:ca:21: 91:d8:1b:68:5f:6b:72:8f:86:68:2f:d1:8a:01:ef:ae:e1:54: 4d:26:49:31:87:8a:ef:98:47:3c:54:ac:37:dc:d5:e1:60:10: 4d:6c:d6:2e:28:77:72:aa:d5:32:b0:6a:a8:ec:10:2c:cd:8f: 2f:c6:3b:50:1b:2c:3a:8e:90:dd:54:d8:35:43:9a:b6:f5:a2: 71:10:c5:ec:82:a9:f8:9c:16:e6:b5:8c:f3:dd:ea:68:f0:ef: 8d:46:24:53 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZOIlWRmglEi1F+jPMQZ0y4yJ7E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yMzEyMjIwOTU1MDFaFw0yNDEyMjAxMDAwMDFaMDMxMTAvBgNV BAMTKEExRjQ5NjI2RDM3ODMzOERGQjQ5NkE3RjRBRjU2REFBOTU5N0FBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRlhwFbAwJ0vlQQIyTQcfcLRQX JBGnBO2ukq4B/VGF7qM133YRdeppNkas6coju2WthxErx9lABNvqIpZdcj5Kjtyo ht9Lxhzu5CCcj+/bVX4IbHam1S30YooTMkR6WmebXwegsSZjTQbKkNlOBnEDmWqL L/q3uPM0S1KlHfqIkz2OFVWadIbX+vvh+HKYeLLOb1ERq+rNeIXijXilT6fZ091x MchXiDKnk/6QJe40b3GxO7cqxfdQejfZTuMk8wFvlUqaCQWUAp8lwGwG+TT3mqqE XnuNWrLttFinhy0gG4E/ZAiT+8DlruVBOb6vLW0KWxX8vzDoWq24aSMm2A8lAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUofSWJtN4M437SWp/SvVtqpWXquEwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h YWM1LTA4MDQxYjNmNjVlNi8wLzMxMzAzMzJlMzQzOTJlMzIzMjMwMmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzIzNDMyMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcx3DANBgkqhkiG 9w0BAQsFAAOCAQEAGPjDA3na1HnxfqVpMyYFGuH93bOqYQO+M5GxeKz/fSbuX6QR IoEcZhkL0QyH+J1QXO1EoafHwef0WaD2C3VdM1SYJnjbzTa52LprRc4fR1PzI07a fAS9K8/3aMo9PnDMCbCfFzSCl7zfjuMDE77TV2v7G2j/crDTdiHrmdHvCeG81Noz oA6rDSD5bfwHdcU546w4fFIXZSzUAyzrafIeWsohkdgbaF9rco+GaC/RigHvruFU TSZJMYeK75hHPFSsN9zV4WAQTWzWLih3cqrVMrBqqOwQLM2PL8Y7UBssOo6Q3VTY NUOatvWicRDF7IKp+JwW5rWM893qaPDvjUYkUw== -----END CERTIFICATE-----Generated at Sat Apr 27 13:32:23 2024 by rpki-client on console-ams.rpki-client.org