$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e203435323938.roa File: 3130332e3235332e3130372e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: 34WkT2v63a53hU/cvHrT21yoybJSjm0427HUmGYE6xY= Subject key identifier: E2:12:69:7F:77:76:97:4F:CA:4F:C7:72:C9:00:F7:AE:55:1C:BC:B9 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 62E0018F35267087C0B454BB1B7F3D74B1262824 Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e203435323938.roa Signing time: Tue 15 Aug 2023 16:48:08 +0000 ROA not before: Tue 15 Aug 2023 16:43:08 +0000 ROA not after: Tue 13 Aug 2024 16:48:08 +0000 asID: 45298 IP address blocks: 103.253.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e0:01:8f:35:26:70:87:c0:b4:54:bb:1b:7f:3d:74:b1:26:28:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Aug 15 16:43:08 2023 GMT Not After : Aug 13 16:48:08 2024 GMT Subject: CN=E212697F7776974FCA4FC772C900F7AE551CBCB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:8b:0a:04:ba:cb:11:fe:ae:f3:d9:2e:37: 14:b9:7e:7f:f8:49:d7:45:ee:cf:16:8b:be:03:9e: d0:13:d0:c5:34:9c:90:e6:8d:48:41:68:ff:49:ce: c7:ed:af:1d:76:98:45:7d:77:4f:33:73:b2:92:29: bb:b6:bd:58:d6:c1:0e:41:ba:97:c8:49:87:a4:ef: 40:6e:fd:b9:86:4b:b5:b3:94:c5:32:aa:09:b5:f8: 52:c7:3e:88:0c:c4:64:69:93:4a:62:8c:1a:8a:07: 1a:75:2c:06:ff:92:fc:a1:67:5e:f1:96:c9:d3:b2: 8c:dc:fa:d2:d6:6f:e2:ae:d9:94:90:d0:42:c9:80: f6:e4:8f:06:1c:aa:24:18:1a:74:c5:bf:03:97:ee: de:21:71:e0:f8:c6:10:b0:a8:94:5c:c9:10:a2:35: 4a:94:7c:e7:25:57:85:5c:89:70:d5:35:24:19:d1: f8:d3:9e:da:8a:e9:8f:6a:68:ad:16:47:4d:8a:47: 64:1d:ba:87:40:77:a9:10:3b:dc:a0:d2:df:1c:6f: c1:99:43:fb:25:06:88:31:10:b9:34:f2:37:17:a4: 8a:a7:fc:b1:a9:97:cf:75:83:0d:ae:bb:6c:44:e4: 5c:2b:1a:55:46:02:02:bf:c2:d9:07:60:21:ea:9a: 0e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:12:69:7F:77:76:97:4F:CA:4F:C7:72:C9:00:F7:AE:55:1C:BC:B9 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.107.0/24 Signature Algorithm: sha256WithRSAEncryption af:bf:33:ea:56:dc:1f:16:89:db:fa:28:0f:ab:8e:0d:3b:50: 7a:7c:f9:01:4f:a1:40:cd:3a:d4:79:6b:52:d7:1d:bd:93:d0: 7a:92:dc:c6:75:02:c2:85:88:a4:e8:bd:6a:71:38:4c:2d:ad: cd:26:6f:ed:90:a5:21:2c:4f:1f:5d:70:68:47:79:1d:4b:80: 72:98:ca:7e:71:81:e9:5e:bf:8e:60:a9:d4:36:e4:a9:95:40: db:d8:ae:7a:f9:10:64:22:03:f3:86:de:cb:42:7a:59:f5:9a: e6:be:62:b4:87:d1:9e:fb:fe:8f:ea:9a:7b:d9:38:60:5f:a2: 6e:c1:e8:74:71:40:f8:c9:d8:39:9e:25:81:43:dd:fe:9e:a8: 03:e1:c2:20:82:fb:a4:4a:c7:d6:37:df:96:1a:66:9e:e4:da: 2a:9d:7e:44:f6:6c:c8:8c:74:c8:f8:12:97:3a:f0:5e:2b:fb: 7e:ac:ae:69:b0:de:7c:58:75:73:8b:5a:c0:99:d8:a7:74:4f: eb:e6:07:25:e9:45:6b:4e:52:a8:21:79:d7:09:73:37:54:db: 68:e2:a2:b6:87:bf:a3:8a:97:6e:e7:4b:01:49:3b:0e:ee:0d: 3d:35:1a:cd:bc:54:33:1a:d2:4b:59:81:fb:c9:07:8d:4b:3e: 51:ef:c4:b9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYuABjzUmcIfAtFS7G389dLEmKCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yMzA4MTUxNjQzMDhaFw0yNDA4MTMxNjQ4MDhaMDMxMTAvBgNV BAMTKEUyMTI2OTdGNzc3Njk3NEZDQTRGQzc3MkM5MDBGN0FFNTUxQ0JDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRYsKBLrLEf6u89kuNxS5fn/4 SddF7s8Wi74DntAT0MU0nJDmjUhBaP9Jzsftrx12mEV9d08zc7KSKbu2vVjWwQ5B upfISYek70Bu/bmGS7WzlMUyqgm1+FLHPogMxGRpk0pijBqKBxp1LAb/kvyhZ17x lsnTsozc+tLWb+Ku2ZSQ0ELJgPbkjwYcqiQYGnTFvwOX7t4hceD4xhCwqJRcyRCi NUqUfOclV4VciXDVNSQZ0fjTntqK6Y9qaK0WR02KR2QduodAd6kQO9yg0t8cb8GZ Q/slBogxELk08jcXpIqn/LGpl891gw2uu2xE5FwrGlVGAgK/wtkHYCHqmg7VAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4hJpf3d2l0/KT8dyyQD3rlUcvLkwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzAzMzJlMzIzNTMzMmUzMTMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzIzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/1rMA0GCSqG SIb3DQEBCwUAA4IBAQCvvzPqVtwfFonb+igPq44NO1B6fPkBT6FAzTrUeWtS1x29 k9B6ktzGdQLChYik6L1qcThMLa3NJm/tkKUhLE8fXXBoR3kdS4BymMp+cYHpXr+O YKnUNuSplUDb2K56+RBkIgPzht7LQnpZ9ZrmvmK0h9Ge+/6P6pp72ThgX6Juweh0 cUD4ydg5niWBQ93+nqgD4cIggvukSsfWN9+WGmae5NoqnX5E9mzIjHTI+BKXOvBe K/t+rK5psN58WHVzi1rAmdindE/r5gcl6UVrTlKoIXnXCXM3VNto4qK2h7+jipdu 50sBSTsO7g09NRrNvFQzGtJLWYH7yQeNSz5R78S5 -----END CERTIFICATE-----Generated at Fri May 31 20:32:23 2024 by rpki-client on console-ams.rpki-client.org