$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa File: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (raw, json) Hash identifier: hpSYpdOYbxvK3Mwj23VYDwcpv1csmfSqREkFZTJiMSo= Subject key identifier: 95:29:D3:22:D8:44:1B:84:51:F4:EB:29:C5:1E:EC:61:48:23:9C:F1 Certificate issuer: /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B Certificate serial: 49A0FB06BA2543E4886D3BFE5FE97A0C03C00722 Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa Signing time: Mon 11 Dec 2023 07:47:49 +0000 ROA not before: Mon 11 Dec 2023 07:42:49 +0000 ROA not after: Mon 09 Dec 2024 07:47:49 +0000 asID: 38750 IP address blocks: 103.213.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 07:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a0:fb:06:ba:25:43:e4:88:6d:3b:fe:5f:e9:7a:0c:03:c0:07:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B Validity Not Before: Dec 11 07:42:49 2023 GMT Not After : Dec 9 07:47:49 2024 GMT Subject: CN=9529D322D8441B8451F4EB29C51EEC6148239CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:e2:0e:16:73:cf:eb:04:49:b1:d6:b4:73: 38:06:f5:7b:37:d9:f2:92:a7:a1:aa:5f:fd:d2:9e: c9:ed:93:0b:51:f4:a1:59:0c:ff:b0:c0:5b:d0:fb: f0:40:c6:e9:b3:cb:65:1c:57:c0:05:ce:87:dc:1d: 53:ee:b9:e3:f3:c3:8f:84:21:ba:28:d3:6f:79:8b: f6:c3:22:4c:be:8a:40:0d:de:e9:f9:3a:d4:f9:2f: 91:a2:1e:81:45:12:8a:34:ef:e3:3c:61:5a:d4:da: da:6d:3f:9a:cf:5d:9e:e3:c8:8a:b1:4f:97:19:d4: 6b:43:95:77:b7:24:2e:26:90:59:d3:05:ff:a1:8a: 14:57:0c:29:1e:eb:33:3f:f5:fd:a6:e9:36:06:7b: 25:a7:fe:8a:ac:60:0b:08:11:23:11:d0:cf:49:55: 7b:0c:00:2f:1d:88:71:f5:14:23:6b:73:49:95:61: 30:17:7a:9f:f3:d2:0f:11:0b:e6:4b:5c:9d:9c:59: bf:6f:74:a2:87:f6:46:69:d7:7d:ef:e9:6a:c2:c9: b0:ea:dd:c0:84:3a:f3:0d:cb:a6:2b:c3:dc:e4:19: fa:67:76:0a:4b:36:0d:01:af:87:f0:2a:b8:4c:e7: 63:a2:20:08:46:47:7c:39:dc:a3:56:e5:34:71:c3: 24:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:29:D3:22:D8:44:1B:84:51:F4:EB:29:C5:1E:EC:61:48:23:9C:F1 X509v3 Authority Key Identifier: keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.116.0/24 Signature Algorithm: sha256WithRSAEncryption 60:6d:00:ee:ae:0a:98:8f:40:08:7e:a5:f0:b5:6d:09:05:fd: eb:42:ed:29:4a:c9:97:34:2b:cd:9c:d2:45:6d:22:d6:92:8b: bc:86:bd:b2:6a:ea:fe:fd:e9:0b:86:5a:f9:b6:5a:17:c1:ad: 5c:31:d3:92:3f:1e:b7:ab:4d:ef:61:19:c9:7d:b5:a6:fa:fd: c9:e9:08:2f:15:d1:25:23:27:d2:c6:6a:58:d1:b2:00:33:27: 35:cf:8a:8a:3a:c6:47:65:09:75:45:69:7c:24:6d:ba:35:43: bd:5d:4f:03:cb:8c:bd:d6:f7:d1:7f:5b:6a:3e:a7:76:07:21: a9:85:55:46:34:32:a0:88:a4:c9:89:99:c3:15:34:e9:25:d4: 59:57:01:6c:7d:f2:4a:92:d2:28:22:92:d6:81:43:1f:85:96: 41:d6:a7:27:4d:89:c1:77:1a:33:70:fe:ff:af:29:d4:0e:b9: d0:f3:26:e7:81:87:c0:ba:af:2f:70:93:8f:03:ef:f2:2f:c8: ee:08:c6:58:ea:64:5d:0e:8b:68:ca:87:04:24:43:d0:4d:b7: 61:a7:bb:2c:6e:94:13:e7:bc:a4:ca:0c:ad:c1:a9:3b:9b:f4: 04:fd:1f:21:f4:81:5b:63:b7:3f:e8:b9:62:35:82:c1:79:cc: 57:d2:5c:84 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSaD7BrolQ+SIbTv+X+l6DAPAByIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5RUU5 REUzMjAxQjAeFw0yMzEyMTEwNzQyNDlaFw0yNDEyMDkwNzQ3NDlaMDMxMTAvBgNV BAMTKDk1MjlEMzIyRDg0NDFCODQ1MUY0RUIyOUM1MUVFQzYxNDgyMzlDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9uIOFnPP6wRJsda0czgG9Xs3 2fKSp6GqX/3SnsntkwtR9KFZDP+wwFvQ+/BAxumzy2UcV8AFzofcHVPuuePzw4+E Iboo0295i/bDIky+ikAN3un5OtT5L5GiHoFFEoo07+M8YVrU2tptP5rPXZ7jyIqx T5cZ1GtDlXe3JC4mkFnTBf+hihRXDCke6zM/9f2m6TYGeyWn/oqsYAsIESMR0M9J VXsMAC8diHH1FCNrc0mVYTAXep/z0g8RC+ZLXJ2cWb9vdKKH9kZp133v6WrCybDq 3cCEOvMNy6Yrw9zkGfpndgpLNg0Br4fwKrhM52OiIAhGR3w53KNW5TRxwyQjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUlSnTIthEG4RR9OspxR7sYUgjnPEwHwYDVR0j BBgwFoAU1VvoIXoiIS+Xe9lbQffJ7p3jIBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGY1Y2ZkYi03OTg3LTQzNTEtYmMyZS02NmMyNGY0OWY0NDAvMC9ENTVCRTgyMTdB MjIyMTJGOTc3QkQ5NUI0MUY3QzlFRTlERTMyMDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5RUU5REUz MjAxQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwZjVjZmRiLTc5ODctNDM1MS1i YzJlLTY2YzI0ZjQ5ZjQ0MC8wLzMxMzAzMzJlMzIzMTMzMmUzMTMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9V0MA0GCSqG SIb3DQEBCwUAA4IBAQBgbQDurgqYj0AIfqXwtW0JBf3rQu0pSsmXNCvNnNJFbSLW kou8hr2yaur+/ekLhlr5tloXwa1cMdOSPx63q03vYRnJfbWm+v3J6QgvFdElIyfS xmpY0bIAMyc1z4qKOsZHZQl1RWl8JG26NUO9XU8Dy4y91vfRf1tqPqd2ByGphVVG NDKgiKTJiZnDFTTpJdRZVwFsffJKktIoIpLWgUMfhZZB1qcnTYnBdxozcP7/rynU DrnQ8ybngYfAuq8vcJOPA+/yL8juCMZY6mRdDotoyocEJEPQTbdhp7ssbpQT57yk ygytwak7m/QE/R8h9IFbY7c/6LliNYLBecxX0lyE -----END CERTIFICATE-----Generated at Fri May 31 08:37:56 2024 by rpki-client on console-fra.rpki-client.org