$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32332d3233203d3e203536323630.roa File: 3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (raw, json) Hash identifier: Nsp3rpvc2YxoshFdcWRRW5YXfWkFYR9yncxDLnk5/TU= Subject key identifier: FB:DC:F4:75:CF:38:08:08:0C:BF:5E:BA:01:91:E5:22:FA:22:BC:CD Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE Certificate serial: 53039D7EE4E7CBAF3674A11658408B49DBE52C5B Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32332d3233203d3e203536323630.roa Signing time: Tue 26 Dec 2023 10:00:34 +0000 ROA not before: Tue 26 Dec 2023 09:55:34 +0000 ROA not after: Tue 24 Dec 2024 10:00:34 +0000 asID: 56260 IP address blocks: 103.29.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:03:9d:7e:e4:e7:cb:af:36:74:a1:16:58:40:8b:49:db:e5:2c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Validity Not Before: Dec 26 09:55:34 2023 GMT Not After : Dec 24 10:00:34 2024 GMT Subject: CN=FBDCF475CF3808080CBF5EBA0191E522FA22BCCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:f6:7e:32:4b:26:91:00:49:f1:d2:8e:8d: 09:a5:9e:11:e6:81:99:be:e0:db:02:ea:c0:d9:d6: 9c:f0:26:81:68:77:88:37:2f:72:14:3f:ab:e1:34: 42:37:bc:af:8a:a9:25:4f:d7:a2:aa:8d:e6:13:15: 71:3e:2b:1b:5a:42:88:68:dd:db:db:7c:2b:5b:1f: 33:ad:1b:b7:a6:a5:6c:90:c0:d4:76:2a:39:3d:7f: 78:e3:76:0a:2f:c4:44:3c:e2:33:9c:83:f4:8b:33: 74:d2:ed:d1:c9:ed:49:05:d3:4d:9e:af:0a:0d:87: 8a:7d:11:5f:b7:5d:60:e8:c6:78:35:20:d7:c3:05: 6b:a7:e9:a2:13:e0:7e:9c:65:04:9c:03:a7:71:e9: 92:95:8f:94:7a:94:68:6a:9e:fa:d2:38:50:16:a2: be:b9:47:9d:57:bc:3a:3a:77:ec:60:72:0c:16:e1: 0b:d8:50:10:c5:16:50:6d:e6:7c:6c:1c:2a:da:86: 05:0c:36:6b:60:f6:0b:e8:fe:48:e3:36:e9:b7:67: 92:58:0a:ad:7f:9e:18:68:a1:1c:c0:ec:15:da:7c: 96:45:fb:ae:2e:00:82:f1:05:e0:ec:7d:ef:53:40: 3a:02:6a:77:13:c9:fd:6a:12:01:f1:10:3c:16:f4: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DC:F4:75:CF:38:08:08:0C:BF:5E:BA:01:91:E5:22:FA:22:BC:CD X509v3 Authority Key Identifier: keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32332d3233203d3e203536323630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.184.0/23 Signature Algorithm: sha256WithRSAEncryption 72:5d:02:2b:7b:4f:a6:17:96:3e:c8:76:6c:b8:84:47:94:5e: f5:98:d9:8e:be:ba:0f:5a:0a:ad:bb:7f:99:2b:03:91:04:ad: 2f:0d:8c:9d:c6:6b:e3:76:eb:c2:93:9f:00:2e:e3:9b:a1:0c: db:d5:72:b2:b3:f6:47:d8:bd:98:ef:fe:17:1f:c7:50:88:08: 34:79:92:f8:1f:84:84:40:62:90:7c:67:09:12:cf:38:26:84: 47:20:7a:30:55:07:93:68:eb:6a:84:ab:22:ea:9d:11:7d:f2: 68:3c:eb:31:4f:af:94:82:55:b5:78:fa:0e:fe:50:a3:3c:a7: f2:4e:a4:d6:4c:a2:91:ee:fb:9b:7f:a5:bc:6f:4f:19:ae:8f: 8b:72:75:df:d9:cd:f1:b9:ae:4d:6f:1f:83:ea:38:fc:c8:ac: b9:8e:93:8f:81:7c:22:c7:91:57:39:ca:0b:7e:24:4c:7d:ab: 22:8e:e3:aa:09:1c:40:43:4a:83:0f:bc:58:b4:df:e6:6b:89: a9:13:73:33:7d:f5:bc:7a:21:c9:58:ee:27:9e:45:44:cf:bc: 25:b2:c1:d8:98:8e:d0:b1:91:c7:6e:0b:ed:05:28:fa:2a:0d: c7:e0:69:f5:ae:e1:fa:e8:bd:b5:00:cb:73:a5:fd:51:22:aa: 40:b4:3c:c3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUwOdfuTny682dKEWWECLSdvlLFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQw NzY3MkJERTAeFw0yMzEyMjYwOTU1MzRaFw0yNDEyMjQxMDAwMzRaMDMxMTAvBgNV BAMTKEZCRENGNDc1Q0YzODA4MDgwQ0JGNUVCQTAxOTFFNTIyRkEyMkJDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqPZ+MksmkQBJ8dKOjQmlnhHm gZm+4NsC6sDZ1pzwJoFod4g3L3IUP6vhNEI3vK+KqSVP16KqjeYTFXE+KxtaQoho 3dvbfCtbHzOtG7empWyQwNR2Kjk9f3jjdgovxEQ84jOcg/SLM3TS7dHJ7UkF002e rwoNh4p9EV+3XWDoxng1INfDBWun6aIT4H6cZQScA6dx6ZKVj5R6lGhqnvrSOFAW or65R51XvDo6d+xgcgwW4QvYUBDFFlBt5nxsHCrahgUMNmtg9gvo/kjjNum3Z5JY Cq1/nhhooRzA7BXafJZF+64uAILxBeDsfe9TQDoCancTyf1qEgHxEDwW9C/XAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU+9z0dc84CAgMv166AZHlIvoivM0wHwYDVR0j BBgwFoAUTET29UO9u4WNNlbUGjZmBAdnK94wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMC80QzQ0RjZGNTQz QkRCQjg1OEQzNjU2RDQxQTM2NjYwNDA3NjcyQkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQwNzY3 MkJERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZjJjNjZjLTFmODctNGQ5OC1h NDY3LTMyMThiNjQ1YjNhYy8wLzMxMzAzMzJlMzIzOTJlMzEzODM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzUzNjMyMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcduDANBgkqhkiG 9w0BAQsFAAOCAQEAcl0CK3tPpheWPsh2bLiER5Re9ZjZjr66D1oKrbt/mSsDkQSt Lw2MncZr43brwpOfAC7jm6EM29VysrP2R9i9mO/+Fx/HUIgINHmS+B+EhEBikHxn CRLPOCaERyB6MFUHk2jraoSrIuqdEX3yaDzrMU+vlIJVtXj6Dv5Qozyn8k6k1kyi ke77m3+lvG9PGa6Pi3J139nN8bmuTW8fg+o4/MisuY6Tj4F8IseRVznKC34kTH2r Io7jqgkcQENKgw+8WLTf5muJqRNzM331vHohyVjuJ55FRM+8JbLB2JiO0LGRx24L 7QUo+ioNx+Bp9a7h+ui9tQDLc6X9USKqQLQ8ww== -----END CERTIFICATE-----Generated at Sat Jun 1 15:52:56 2024 by rpki-client on console-ams.rpki-client.org