$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa File: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (raw, json) Hash identifier: ASjGZfKs9QpxxvvlaR9uaiBjLXzuqLHdbcgolklAop4= Subject key identifier: D0:61:7D:1D:5D:F9:19:98:74:27:82:73:EE:52:B9:B0:26:AF:C5:FC Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 123341E404D6F70320ED133067C8E84A63B4A3DC Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa Signing time: Mon 17 Jul 2023 07:00:00 +0000 ROA not before: Mon 17 Jul 2023 06:55:00 +0000 ROA not after: Mon 15 Jul 2024 07:00:00 +0000 asID: 58369 IP address blocks: 103.188.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:33:41:e4:04:d6:f7:03:20:ed:13:30:67:c8:e8:4a:63:b4:a3:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Jul 17 06:55:00 2023 GMT Not After : Jul 15 07:00:00 2024 GMT Subject: CN=D0617D1D5DF9199874278273EE52B9B026AFC5FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:af:d1:37:aa:90:a0:ad:ec:dd:1a:48:e2: 85:0c:be:7d:c0:54:51:19:ae:45:66:bc:d6:63:30: 72:24:d1:77:6b:60:57:94:5c:d5:36:44:2d:80:0e: c9:2b:bf:43:2c:d8:ba:90:8c:c2:71:5d:ca:c9:ae: 47:5a:0d:e3:c3:71:c5:59:9e:f9:31:fc:df:44:05: c5:da:97:25:75:0a:c9:ab:8c:cf:7a:41:95:09:95: 9c:77:e0:4f:1a:20:ed:23:48:03:bd:79:02:1f:10: b8:71:69:fb:a4:97:85:f0:e1:08:96:1e:8a:0c:3e: f3:cd:7c:2f:69:da:1d:46:50:44:eb:25:51:f5:0e: e0:e3:55:b7:c7:26:f3:43:32:16:1c:87:dc:8d:a8: 37:49:ad:00:36:0f:50:1f:b6:f7:d8:d9:83:8d:93: fa:77:e3:b3:2e:71:ac:63:d0:d5:37:53:c8:cd:ae: b2:2d:7b:bc:b2:9c:3a:86:90:2f:97:ef:73:56:a2: 74:ed:7f:25:63:54:88:2b:d1:52:89:d7:cc:42:44: ac:aa:5a:89:78:5a:81:dd:8f:c4:66:8c:ca:b0:5a: 4a:98:79:4e:6b:38:a2:53:ed:a2:14:ca:4b:a5:48: 49:68:99:ed:c5:8d:54:18:2e:a0:5b:0c:f3:28:76: e7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:61:7D:1D:5D:F9:19:98:74:27:82:73:EE:52:B9:B0:26:AF:C5:FC X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.174.0/24 Signature Algorithm: sha256WithRSAEncryption 22:63:d8:c8:7f:98:69:b6:69:39:a0:69:e1:c0:51:b7:09:a2: 07:4b:dd:9f:db:30:e5:76:9e:52:8c:b7:c0:c6:2d:36:8e:de: ac:21:85:e4:c0:ed:ef:89:1a:f0:ec:68:a9:d9:9b:82:da:d2: 02:fc:2c:c4:65:03:de:b6:54:f5:e0:2b:6d:64:f1:c6:ce:e1: 56:82:c3:cf:cb:4e:57:9d:da:3f:9f:98:0d:a0:55:06:fd:b0: a0:4c:64:a1:81:f8:e1:72:f5:cb:f3:68:c0:54:b4:d2:2a:0c: b0:4f:a1:88:fa:5d:24:82:3f:d2:20:90:68:e6:fb:e4:f1:e1: 56:eb:74:bb:33:75:c2:66:3f:1f:48:36:98:48:48:20:9d:f4: 87:8c:f8:d4:a9:78:9e:d4:5b:e0:04:47:57:f3:3b:82:cc:4f: 1d:01:c4:d9:7f:bb:36:f1:be:4a:b1:15:d0:58:eb:79:de:0b: 45:d4:a3:f4:36:0c:77:12:0e:a6:0f:3d:ca:10:40:85:c1:53: 82:b7:1b:61:ab:d3:f1:75:87:fa:91:db:1c:f5:63:68:2d:70: 3b:51:d8:cb:d7:6e:05:13:f3:86:cf:d1:ba:39:c2:b2:7a:f0: 71:f3:75:98:66:52:db:1a:d5:78:d2:31:7f:9b:d8:5e:ac:9b: 6f:0b:6b:d8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEjNB5ATW9wMg7RMwZ8joSmO0o9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yMzA3MTcwNjU1MDBaFw0yNDA3MTUwNzAwMDBaMDMxMTAvBgNV BAMTKEQwNjE3RDFENURGOTE5OTg3NDI3ODI3M0VFNTJCOUIwMjZBRkM1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwq/RN6qQoK3s3RpI4oUMvn3A VFEZrkVmvNZjMHIk0XdrYFeUXNU2RC2ADskrv0Ms2LqQjMJxXcrJrkdaDePDccVZ nvkx/N9EBcXalyV1CsmrjM96QZUJlZx34E8aIO0jSAO9eQIfELhxafukl4Xw4QiW HooMPvPNfC9p2h1GUETrJVH1DuDjVbfHJvNDMhYch9yNqDdJrQA2D1AftvfY2YON k/p347Mucaxj0NU3U8jNrrIte7yynDqGkC+X73NWonTtfyVjVIgr0VKJ18xCRKyq Wol4WoHdj8RmjMqwWkqYeU5rOKJT7aIUykulSElome3FjVQYLqBbDPModucjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0GF9HV35GZh0J4Jz7lK5sCavxfwwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2YmQ1NTM4LTQyNzAtNDEyZC05 ZDY2LWMyYjUxNTdkM2Q2ZS8wLzMxMzAzMzJlMzEzODM4MmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7yuMA0GCSqG SIb3DQEBCwUAA4IBAQAiY9jIf5hptmk5oGnhwFG3CaIHS92f2zDldp5SjLfAxi02 jt6sIYXkwO3viRrw7Gip2ZuC2tIC/CzEZQPetlT14CttZPHGzuFWgsPPy05Xndo/ n5gNoFUG/bCgTGShgfjhcvXL82jAVLTSKgywT6GI+l0kgj/SIJBo5vvk8eFW63S7 M3XCZj8fSDaYSEggnfSHjPjUqXie1FvgBEdX8zuCzE8dAcTZf7s28b5KsRXQWOt5 3gtF1KP0Ngx3Eg6mDz3KEECFwVOCtxthq9PxdYf6kdsc9WNoLXA7UdjL124FE/OG z9G6OcKyevBx83WYZlLbGtV40jF/m9herJtvC2vY -----END CERTIFICATE-----Generated at Tue Apr 30 12:55:39 2024 by rpki-client on console-fra.rpki-client.org