$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa File: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (raw, json) Hash identifier: vEN5+8N4lOo4Itdf+oFc07PgLTLPtkSPNTs1/8b7E0U= Subject key identifier: C8:DB:BD:AB:4D:6E:A5:2E:61:B7:C8:16:BA:24:C6:9C:12:06:5A:11 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 0A63B7C6185CE65368E741BD6BF904B36ECC4B20 Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa Signing time: Wed 17 Apr 2024 09:02:27 +0000 ROA not before: Wed 17 Apr 2024 08:57:27 +0000 ROA not after: Wed 16 Apr 2025 09:02:27 +0000 asID: 135455 IP address blocks: 103.68.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:63:b7:c6:18:5c:e6:53:68:e7:41:bd:6b:f9:04:b3:6e:cc:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Apr 17 08:57:27 2024 GMT Not After : Apr 16 09:02:27 2025 GMT Subject: CN=C8DBBDAB4D6EA52E61B7C816BA24C69C12065A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:75:6e:6a:55:c8:bb:a4:74:6d:d9:ec:03:59: 4d:ee:01:02:d7:c0:28:11:5f:d3:c2:bd:a7:2e:ad: d1:a9:9f:91:dc:a9:b6:70:df:a4:19:0b:69:77:2b: 23:9f:23:d4:f5:95:42:4e:1e:7d:c7:8d:20:96:ab: b9:25:74:9a:94:3e:a8:8f:24:9a:75:24:a4:dd:5f: 63:1d:b6:87:41:47:b0:a2:ef:7d:35:cf:95:d7:58: 46:1a:b3:37:39:34:43:e7:94:cb:b2:f9:e4:48:91: 04:33:71:22:4a:c9:d4:66:ea:33:bc:8b:ed:45:9a: 83:db:ff:bf:c5:12:61:49:6f:0e:29:6c:e1:bc:73: 75:7c:44:20:13:03:aa:77:86:fa:4c:c4:c1:69:de: 5f:67:4c:16:a8:1f:24:e9:ca:63:4f:0a:9d:aa:9a: d5:a4:bc:6b:49:8a:11:df:fe:1d:72:5f:23:49:ad: 81:4d:b4:b4:76:5e:6d:b8:a8:ba:a4:64:cc:37:f1: 5d:32:13:ed:3f:2b:e8:57:01:24:12:34:a1:ba:92: 35:ba:2c:51:50:a5:ff:9a:ca:b1:de:bc:7a:3b:ac: d8:ee:70:87:73:96:46:cf:88:83:b7:9a:5a:b5:39: 27:13:80:c9:bc:7a:b6:91:4f:74:5c:6a:d1:9c:4d: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DB:BD:AB:4D:6E:A5:2E:61:B7:C8:16:BA:24:C6:9C:12:06:5A:11 X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.136.0/23 Signature Algorithm: sha256WithRSAEncryption a6:e3:a4:af:cc:7c:b4:40:b2:4d:6d:77:c1:e7:40:77:3c:e3: 28:84:f9:aa:c7:cc:1c:3b:41:b7:5f:d0:44:8f:eb:37:92:0f: 17:74:03:0b:b0:52:30:fb:16:e8:77:71:6a:82:d2:dc:5c:c4: 19:15:6f:31:ec:f0:dd:85:a6:67:f7:cb:2a:4a:ce:a2:02:10: d9:4c:d7:fc:da:23:7a:68:ac:70:55:62:15:73:64:54:5a:d9: 2d:70:f6:4a:ca:4e:f0:2e:b3:5e:b9:e4:1e:b0:ac:a1:d6:51: 5b:99:06:f7:01:94:52:db:d0:bd:94:f5:1f:8a:fc:4b:8a:61: 4f:fb:19:2a:b8:e8:83:5c:e0:e1:5b:7d:b3:e4:bd:95:b6:78: 5c:1c:75:e2:74:8c:3a:1d:04:7f:54:68:76:f8:65:66:fc:df: 33:76:15:86:72:2a:fd:a4:dd:ea:01:ac:5f:54:d7:d6:1b:f1: e5:5e:53:e2:a8:06:1a:ce:be:22:07:81:3a:4b:bb:f4:7c:0e: 20:8d:3a:9b:df:27:91:f7:ce:88:62:98:a5:94:c0:47:89:c9: f6:05:29:c1:6f:fb:77:f7:87:1e:2f:03:cb:eb:a6:d5:25:32: 35:d0:1d:d0:ef:70:47:9c:8e:a1:5f:2b:cf:81:09:b5:7a:10: 8c:0d:6a:8d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCmO3xhhc5lNo50G9a/kEs27MSyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNDA0MTcwODU3MjdaFw0yNTA0MTYwOTAyMjdaMDMxMTAvBgNV BAMTKEM4REJCREFCNEQ2RUE1MkU2MUI3QzgxNkJBMjRDNjlDMTIwNjVBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJdW5qVci7pHRt2ewDWU3uAQLX wCgRX9PCvacurdGpn5HcqbZw36QZC2l3KyOfI9T1lUJOHn3HjSCWq7kldJqUPqiP JJp1JKTdX2MdtodBR7Ci7301z5XXWEYaszc5NEPnlMuy+eRIkQQzcSJKydRm6jO8 i+1FmoPb/7/FEmFJbw4pbOG8c3V8RCATA6p3hvpMxMFp3l9nTBaoHyTpymNPCp2q mtWkvGtJihHf/h1yXyNJrYFNtLR2Xm24qLqkZMw38V0yE+0/K+hXASQSNKG6kjW6 LFFQpf+ayrHevHo7rNjucIdzlkbPiIO3mlq1OScTgMm8eraRT3RcatGcTc2VAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyNu9q01upS5ht8gWuiTGnBIGWhEwHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzZGMxYjA1LTJhNjktNDViMC04 YzQ0LTYyNjc3MjI3NmJkOS8wLzMxMzAzMzJlMzYzODJlMzEzMzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0SIMA0GCSqG SIb3DQEBCwUAA4IBAQCm46SvzHy0QLJNbXfB50B3POMohPmqx8wcO0G3X9BEj+s3 kg8XdAMLsFIw+xbod3FqgtLcXMQZFW8x7PDdhaZn98sqSs6iAhDZTNf82iN6aKxw VWIVc2RUWtktcPZKyk7wLrNeueQesKyh1lFbmQb3AZRS29C9lPUfivxLimFP+xkq uOiDXODhW32z5L2VtnhcHHXidIw6HQR/VGh2+GVm/N8zdhWGcir9pN3qAaxfVNfW G/HlXlPiqAYazr4iB4E6S7v0fA4gjTqb3yeR986IYpillMBHicn2BSnBb/t394ce LwPL66bVJTI10B3Q73BHnI6hXyvPgQm1ehCMDWqN -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org