$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa File: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (raw, json) Hash identifier: DZFpvTDzeMvITl5e6CcRKFvGiQg6vjXEKBizjChAqSM= Subject key identifier: 2B:A2:A7:64:2A:D4:15:F8:20:D9:9A:CB:F1:BC:09:47:2E:6F:57:A3 Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 692B4BC3F464AEEE21DFD0E1CF88480ECA55CF4C Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa Signing time: Fri 23 Feb 2024 00:00:01 +0000 ROA not before: Thu 22 Feb 2024 23:55:01 +0000 ROA not after: Fri 21 Feb 2025 00:00:01 +0000 asID: 150924 IP address blocks: 103.199.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:2b:4b:c3:f4:64:ae:ee:21:df:d0:e1:cf:88:48:0e:ca:55:cf:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: Feb 22 23:55:01 2024 GMT Not After : Feb 21 00:00:01 2025 GMT Subject: CN=2BA2A7642AD415F820D99ACBF1BC09472E6F57A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:0d:e0:e8:29:db:0e:3b:3a:9b:06:28:a2: e3:55:e4:36:3c:92:02:19:49:ef:90:d0:9a:68:62: 7d:59:8e:8c:99:d0:d3:ea:af:00:65:b0:07:c8:dd: c0:b4:bc:46:7b:1b:cc:7b:17:93:0b:b0:3c:40:4f: b3:e3:c1:d0:c8:d9:ec:b6:3e:90:de:06:11:a2:dc: c8:90:2e:b8:59:5e:90:e3:f1:e0:5d:8f:00:21:f4: 76:65:3b:6a:5c:05:12:d3:62:ad:e8:4f:c8:63:79: 0f:4a:05:78:50:67:15:e1:2c:ae:9f:08:56:a8:b8: 78:68:c3:84:44:05:99:5c:a3:c0:2f:fe:8a:56:0c: ba:1b:6e:4c:13:e7:37:8d:62:11:2b:19:2b:bd:d0: 16:c2:a0:16:d7:0b:7f:f2:16:1a:84:85:25:f8:7c: f3:74:56:84:4d:73:c0:0e:10:99:c6:c3:67:31:0d: ad:ca:93:57:ea:0b:61:64:57:82:c4:6f:a6:ac:28: a6:fb:2f:85:9a:db:73:35:1b:5b:23:06:10:99:bb: 8a:20:cf:16:b0:cd:3b:2a:50:8d:e0:df:16:16:61: a8:4d:56:12:48:e0:10:2a:95:6d:5c:d6:5a:26:2d: 55:a6:43:48:70:b2:27:bf:f5:2f:c3:bc:c5:b7:46: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A2:A7:64:2A:D4:15:F8:20:D9:9A:CB:F1:BC:09:47:2E:6F:57:A3 X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.199.117.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:4e:16:c2:11:2b:84:29:2c:b0:59:9b:4d:90:ab:d1:22:73: 13:50:93:e3:15:53:cf:b1:cc:f6:d4:6d:60:0a:52:d4:50:e1: 4d:1d:c8:66:e6:c1:0d:27:05:bf:2f:b3:65:18:bd:49:94:de: 01:d2:42:6f:cd:e0:36:20:7e:8f:65:8a:49:18:32:42:14:8d: 63:ce:0d:bf:74:27:71:71:d8:4d:24:fb:4c:b7:8d:de:5c:84: e2:ef:34:b7:90:a1:e7:29:9d:da:19:ac:d6:36:79:90:f2:47: 5d:7d:ce:9a:45:54:d1:17:60:17:d8:c0:cf:a0:42:1d:0c:83: 83:4a:52:5d:bb:6b:f4:b8:2e:65:0a:4c:a1:fa:23:d8:7e:28: cd:38:e2:3a:16:f2:32:d9:d9:ef:f6:2b:34:35:2b:e9:ef:64: e2:43:90:97:e8:f6:ba:cb:8d:c3:7e:de:4c:49:13:7c:3e:82: 84:1f:d0:c7:f4:b3:52:fe:f7:64:f4:95:81:4b:ff:24:76:46: d4:dc:9e:26:b6:4d:4f:66:3d:e5:18:33:25:6e:a1:57:a0:12: 26:77:36:dd:34:de:25:6f:56:bf:35:13:29:06:f6:60:03:b5: 53:0d:ca:cf:ea:00:f5:be:fc:dc:a7:4d:c0:46:72:55:17:4e: f9:d1:12:71 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUaStLw/Rkru4h39Dhz4hIDspVz0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNDAyMjIyMzU1MDFaFw0yNTAyMjEwMDAwMDFaMDMxMTAvBgNV BAMTKDJCQTJBNzY0MkFENDE1RjgyMEQ5OUFDQkYxQkMwOTQ3MkU2RjU3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ag3g6CnbDjs6mwYoouNV5DY8 kgIZSe+Q0JpoYn1ZjoyZ0NPqrwBlsAfI3cC0vEZ7G8x7F5MLsDxAT7PjwdDI2ey2 PpDeBhGi3MiQLrhZXpDj8eBdjwAh9HZlO2pcBRLTYq3oT8hjeQ9KBXhQZxXhLK6f CFaouHhow4REBZlco8Av/opWDLobbkwT5zeNYhErGSu90BbCoBbXC3/yFhqEhSX4 fPN0VoRNc8AOEJnGw2cxDa3Kk1fqC2FkV4LEb6asKKb7L4Wa23M1G1sjBhCZu4og zxawzTsqUI3g3xYWYahNVhJI4BAqlW1c1lomLVWmQ0hwsie/9S/DvMW3Rs9HAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUK6KnZCrUFfgg2ZrL8bwJRy5vV6MwHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2MGY4NDYxLWJiMmMtNGQzZS1h NWJlLTcwMDkzOTQyN2M4Yy8wLzMxMzAzMzJlMzEzOTM5MmUzMTMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTMyMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnx3UwDQYJ KoZIhvcNAQELBQADggEBACtOFsIRK4QpLLBZm02Qq9EicxNQk+MVU8+xzPbUbWAK UtRQ4U0dyGbmwQ0nBb8vs2UYvUmU3gHSQm/N4DYgfo9likkYMkIUjWPODb90J3Fx 2E0k+0y3jd5chOLvNLeQoecpndoZrNY2eZDyR119zppFVNEXYBfYwM+gQh0Mg4NK Ul27a/S4LmUKTKH6I9h+KM044joW8jLZ2e/2KzQ1K+nvZOJDkJfo9rrLjcN+3kxJ E3w+goQf0Mf0s1L+92T0lYFL/yR2RtTcnia2TU9mPeUYMyVuoVegEiZ3Nt003iVv Vr81EykG9mADtVMNys/qAPW+/NynTcBGclUXTvnREnE= -----END CERTIFICATE-----Generated at Sun Jun 23 20:53:52 2024 by rpki-client on console-ams.rpki-client.org