$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa File: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (raw, json) Hash identifier: P5RVLm4lr2ZaUNe4nmqoH+fJdUlcaDfKG4sRVXp9cBI= Subject key identifier: 9B:95:DD:41:01:9F:B4:8C:BF:35:08:6E:E1:2C:1F:A6:93:8B:5A:67 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 67E332CA20E8E205BB2F99F230AA65F610EFE196 Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa Signing time: Tue 09 Jul 2024 01:00:00 +0000 ROA not before: Tue 09 Jul 2024 00:55:00 +0000 ROA not after: Tue 08 Jul 2025 01:00:00 +0000 asID: 139969 IP address blocks: 103.147.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e3:32:ca:20:e8:e2:05:bb:2f:99:f2:30:aa:65:f6:10:ef:e1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Jul 9 00:55:00 2024 GMT Not After : Jul 8 01:00:00 2025 GMT Subject: CN=9B95DD41019FB48CBF35086EE12C1FA6938B5A67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7c:95:d9:4c:80:1b:95:31:fc:77:eb:78:98: d6:cd:e7:ec:71:bb:f3:7c:2d:81:f8:c2:31:f9:6b: dc:9b:c6:75:8b:f7:3e:54:af:44:aa:3e:b1:62:84: 4e:e9:51:78:e7:88:01:15:6e:52:db:df:8a:00:32: 9f:74:e7:18:0f:40:85:b9:dd:d8:31:5e:06:51:59: 7e:9b:ed:70:63:80:34:c6:83:ae:1a:1b:93:40:8a: c6:fc:40:b9:03:d5:c9:46:51:ac:5b:4d:ef:e2:96: a5:ef:b8:6a:3f:6d:de:14:d4:8e:03:7e:30:72:c3: 64:a0:d7:d2:77:41:26:15:4b:9c:3d:27:81:cd:07: 9f:67:c3:55:42:31:05:95:33:be:e6:03:e1:6c:31: 80:a0:e1:8d:f9:87:e2:36:a8:7c:dd:43:f1:27:50: e3:d8:f8:e0:5c:cb:ca:9f:28:b2:0f:00:02:0e:22: 7d:96:69:21:ba:ec:5e:c0:23:9e:fa:c0:e9:fe:0a: ce:a0:e4:af:f5:a2:26:e4:46:18:f9:30:67:7f:38: f4:fa:04:26:1d:2d:ac:60:a0:3a:a6:8c:32:d6:2e: 17:dd:10:8a:67:4e:99:c2:e9:70:e2:bd:4f:aa:f8: eb:b6:15:fb:5c:16:1a:9e:8d:31:02:1f:29:8e:2c: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:95:DD:41:01:9F:B4:8C:BF:35:08:6E:E1:2C:1F:A6:93:8B:5A:67 X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.220.0/23 Signature Algorithm: sha256WithRSAEncryption 79:5b:ff:f2:aa:c3:c6:3b:57:a9:e1:92:94:1b:d9:85:b5:3d: ce:7c:25:72:bf:62:fe:d7:b4:b2:ad:7e:1f:18:a7:45:6a:5b: d0:8e:1a:84:90:71:ad:fe:cf:7d:15:db:e4:64:84:ec:d1:f3: a4:f0:96:77:f6:9c:8f:7a:f6:d1:b2:45:ae:51:24:57:5f:6a: 69:f0:e8:84:68:35:d7:bf:84:2e:e7:42:bd:a5:ea:f2:a4:6e: 79:19:64:4a:f1:2b:0f:99:00:9e:6e:0d:e3:34:c3:04:58:39: 79:b7:48:8e:b0:53:7d:21:5e:e7:0a:74:3e:56:7d:55:26:78: 23:7e:c3:a9:87:28:b0:b6:3b:d0:5e:98:bb:42:96:16:47:d1: 5d:32:37:b1:9c:4a:c5:29:21:cf:de:cc:4d:d9:16:3a:d5:76: 54:51:25:3a:aa:59:a2:26:3a:79:64:21:2a:45:9f:93:05:f9: 3e:b0:98:58:0a:0e:c3:74:fe:73:12:63:92:67:ad:df:14:f9: 23:e2:47:4a:63:21:ee:0e:e5:4a:12:68:24:73:72:7a:23:06: ea:46:69:4e:a0:72:fe:24:03:82:ff:cd:54:9d:80:2b:b4:81: 1d:3e:f8:12:f4:1f:f4:be:f2:5f:f6:f8:e3:f8:35:0f:14:b0: ed:fe:b0:1e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZ+MyyiDo4gW7L5nyMKpl9hDv4ZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNDA3MDkwMDU1MDBaFw0yNTA3MDgwMTAwMDBaMDMxMTAvBgNV BAMTKDlCOTVERDQxMDE5RkI0OENCRjM1MDg2RUUxMkMxRkE2OTM4QjVBNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufJXZTIAblTH8d+t4mNbN5+xx u/N8LYH4wjH5a9ybxnWL9z5Ur0SqPrFihE7pUXjniAEVblLb34oAMp905xgPQIW5 3dgxXgZRWX6b7XBjgDTGg64aG5NAisb8QLkD1clGUaxbTe/ilqXvuGo/bd4U1I4D fjByw2Sg19J3QSYVS5w9J4HNB59nw1VCMQWVM77mA+FsMYCg4Y35h+I2qHzdQ/En UOPY+OBcy8qfKLIPAAIOIn2WaSG67F7AI576wOn+Cs6g5K/1oibkRhj5MGd/OPT6 BCYdLaxgoDqmjDLWLhfdEIpnTpnC6XDivU+q+Ou2FftcFhqejTECHymOLNhZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUm5XdQQGftIy/NQhu4SwfppOLWmcwHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1YzMyMWViLTE1ZjgtNDY0Ni1i MDUzLWYxOTlkNmZhN2Y1My8wLzMxMzAzMzJlMzEzNDM3MmUzMjMyMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM2Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnk9wwDQYJ KoZIhvcNAQELBQADggEBAHlb//Kqw8Y7V6nhkpQb2YW1Pc58JXK/Yv7XtLKtfh8Y p0VqW9COGoSQca3+z30V2+RkhOzR86Twlnf2nI969tGyRa5RJFdfamnw6IRoNde/ hC7nQr2l6vKkbnkZZErxKw+ZAJ5uDeM0wwRYOXm3SI6wU30hXucKdD5WfVUmeCN+ w6mHKLC2O9BemLtClhZH0V0yN7GcSsUpIc/ezE3ZFjrVdlRRJTqqWaImOnlkISpF n5MF+T6wmFgKDsN0/nMSY5Jnrd8U+SPiR0pjIe4O5UoSaCRzcnojBupGaU6gcv4k A4L/zVSdgCu0gR0++BL0H/S+8l/2+OP4NQ8UsO3+sB4= -----END CERTIFICATE-----Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org