$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e31392e38302e302f32332d3234203d3e20313332363339.roa File: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (raw, json) Hash identifier: rEiPJnrdrYYlFEBaRzbUD9BJkoKBn51ZZoCL2QKX2fk= Subject key identifier: F5:AD:82:46:56:6D:E0:F3:C7:61:03:77:73:B3:BB:90:96:9E:65:F8 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 7905234B350492BAD93B8878FA6D451885A44573 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e31392e38302e302f32332d3234203d3e20313332363339.roa Signing time: Wed 24 Jul 2024 13:40:07 +0000 ROA not before: Wed 24 Jul 2024 13:35:07 +0000 ROA not after: Wed 23 Jul 2025 13:40:07 +0000 asID: 132639 IP address blocks: 103.19.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:05:23:4b:35:04:92:ba:d9:3b:88:78:fa:6d:45:18:85:a4:45:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Jul 24 13:35:07 2024 GMT Not After : Jul 23 13:40:07 2025 GMT Subject: CN=F5AD8246566DE0F3C761037773B3BB90969E65F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:67:97:e4:54:fa:9e:29:2c:fd:d8:4e:35: f7:da:67:bc:45:98:f5:cd:7f:ce:74:5c:f9:7f:3a: 7a:0f:51:6a:41:25:08:79:91:7e:a1:67:76:b7:1f: 96:50:5d:81:83:36:fb:ed:28:13:ff:06:50:9f:1e: 28:45:3c:bb:4a:4f:1d:87:8f:e2:e9:2b:dd:30:cc: 96:6b:5b:67:a8:7d:27:fd:50:a4:b4:a8:c6:4d:6f: 39:76:f0:5d:26:c1:34:92:1c:ed:71:36:7e:84:e6: 2a:73:b3:e0:05:07:92:a8:a0:3c:4a:34:e4:8b:97: 8e:92:29:c8:4f:21:23:63:3c:40:3a:ca:e6:b9:53: 9b:8b:9f:21:de:09:f5:d0:19:d1:cf:c7:ff:c2:57: 37:6e:70:8e:8a:7a:6f:ba:20:2f:fa:23:74:0b:9c: 72:c5:e2:6a:01:8c:0d:99:2d:3f:a4:20:6a:7d:73: 7e:3b:50:4a:c3:47:de:da:92:2b:be:e2:7b:34:cb: 8c:da:95:43:57:e0:d1:08:b9:5d:61:18:5a:20:9f: 23:56:d1:f3:67:25:1c:99:00:80:b4:6d:4a:33:9d: d2:52:64:c2:83:37:e7:07:6b:f2:55:14:23:d0:14: d1:b0:39:af:df:90:a7:7c:1e:bc:d4:36:da:9f:7a: 7a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AD:82:46:56:6D:E0:F3:C7:61:03:77:73:B3:BB:90:96:9E:65:F8 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e31392e38302e302f32332d3234203d3e20313332363339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.80.0/23 Signature Algorithm: sha256WithRSAEncryption 83:b9:66:93:77:4e:df:44:45:5d:dd:c5:b7:5c:5b:4f:6c:ca: 52:2f:a9:f7:e4:0f:a0:b2:64:a5:ea:f1:2c:b4:ac:1d:84:e6: 95:f8:71:8a:d6:24:35:ae:1d:4a:c3:15:5d:4a:1e:7a:f9:b0: 50:74:e8:09:e9:d5:d2:6d:8e:6b:c2:ce:48:cd:b3:83:d2:67: 59:8c:70:23:78:81:b9:cc:e2:b4:6d:05:d8:b6:ff:6a:6e:50: a3:fb:43:c9:90:42:97:95:fd:45:a1:4f:d5:02:82:53:ce:db: d4:b8:c2:3e:12:57:2a:5a:12:31:c3:89:bb:91:b7:82:1e:f2: 3b:92:27:49:76:e8:21:3a:54:36:44:61:69:58:8e:61:03:a9: 7f:08:23:ba:bd:65:54:cb:0c:d8:88:4d:1e:78:c7:ec:f2:72: 15:26:90:10:cd:98:cc:7e:6b:06:73:fb:0c:a8:08:4d:d2:38: 88:e5:ca:54:f5:01:5b:7e:c1:c3:30:52:45:71:39:5f:6e:c7: 64:41:21:d3:bb:8e:3d:17:ef:29:2d:e9:10:78:78:88:8c:47: f1:18:bf:c3:8f:e6:f8:c3:b2:1a:22:01:19:55:93:dd:c7:f9: 93:39:cb:1b:e8:bb:7b:62:ec:31:2d:1f:b7:61:5b:8e:81:de: b7:3f:70:6e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeQUjSzUEkrrZO4h4+m1FGIWkRXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNDA3MjQxMzM1MDdaFw0yNTA3MjMxMzQwMDdaMDMxMTAvBgNV BAMTKEY1QUQ4MjQ2NTY2REUwRjNDNzYxMDM3NzczQjNCQjkwOTY5RTY1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6meX5FT6niks/dhONffaZ7xF mPXNf850XPl/OnoPUWpBJQh5kX6hZ3a3H5ZQXYGDNvvtKBP/BlCfHihFPLtKTx2H j+LpK90wzJZrW2eofSf9UKS0qMZNbzl28F0mwTSSHO1xNn6E5ipzs+AFB5KooDxK NOSLl46SKchPISNjPEA6yua5U5uLnyHeCfXQGdHPx//CVzducI6Kem+6IC/6I3QL nHLF4moBjA2ZLT+kIGp9c347UErDR97akiu+4ns0y4zalUNX4NEIuV1hGFognyNW 0fNnJRyZAIC0bUozndJSZMKDN+cHa/JVFCPQFNGwOa/fkKd8HrzUNtqfenpNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9a2CRlZt4PPHYQN3c7O7kJaeZfgwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhYTQyNzQyLTg5ZDItNDliYi04 YTNlLTI5NGMzNjg5NzFmNS8wLzMxMzAzMzJlMzEzOTJlMzgzMDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcTUDANBgkqhkiG 9w0BAQsFAAOCAQEAg7lmk3dO30RFXd3Ft1xbT2zKUi+p9+QPoLJkperxLLSsHYTm lfhxitYkNa4dSsMVXUoeevmwUHToCenV0m2Oa8LOSM2zg9JnWYxwI3iBuczitG0F 2Lb/am5Qo/tDyZBCl5X9RaFP1QKCU87b1LjCPhJXKloSMcOJu5G3gh7yO5InSXbo ITpUNkRhaViOYQOpfwgjur1lVMsM2IhNHnjH7PJyFSaQEM2YzH5rBnP7DKgITdI4 iOXKVPUBW37BwzBSRXE5X27HZEEh07uOPRfvKS3pEHh4iIxH8Ri/w4/m+MOyGiIB GVWT3cf5kznLG+i7e2LsMS0ft2FbjoHetz9wbg== -----END CERTIFICATE-----Generated at Sun Nov 24 09:53:15 2024 by rpki-client on console-ams.rpki-client.org