$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa File: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (raw, json) Hash identifier: KBl4F4MhWQAfdT8VLgdvcEQPqTWopxwimnVWpoaWIPs= Subject key identifier: AD:BA:69:45:C4:AF:32:1B:66:50:09:B4:1F:67:45:2E:BE:6D:AA:6B Certificate issuer: /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Certificate serial: 0A610377FD6C1077FDB74C1B34BBC787425EDF0E Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa Signing time: Sat 04 Nov 2023 04:00:01 +0000 ROA not before: Sat 04 Nov 2023 03:55:01 +0000 ROA not after: Sat 02 Nov 2024 04:00:01 +0000 asID: 141579 IP address blocks: 103.160.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:61:03:77:fd:6c:10:77:fd:b7:4c:1b:34:bb:c7:87:42:5e:df:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Validity Not Before: Nov 4 03:55:01 2023 GMT Not After : Nov 2 04:00:01 2024 GMT Subject: CN=ADBA6945C4AF321B665009B41F67452EBE6DAA6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:62:69:7a:8c:df:ff:0a:71:1f:c3:e2:25: 8b:83:90:d3:af:4d:fa:e9:0f:f9:bf:94:8f:ae:f5: b6:d4:f9:91:17:81:2e:bb:99:54:95:3c:99:70:ce: 1f:37:d1:ee:65:10:7e:aa:bc:ea:1e:9a:d2:fc:bd: 93:08:6e:f4:0d:30:0d:8b:21:24:12:ab:4a:cb:ef: e4:ff:36:53:dc:10:bb:15:ae:f1:c1:1b:69:e3:8a: a0:03:f5:e0:99:bc:86:b8:f6:df:a1:39:88:c1:71: 15:dc:af:a7:a1:8d:93:d4:c3:d5:9a:e2:6c:57:25: fe:9a:af:24:30:e9:c1:6e:a9:11:7a:cc:dc:26:3a: 9a:0c:79:fe:81:02:30:54:37:90:f0:92:14:75:17: 06:3d:64:81:d3:71:f9:ba:e0:1e:ca:8a:6b:d6:19: fa:3f:d8:1b:d2:75:c0:9f:0f:17:e3:b3:2a:bf:4c: 06:84:e7:06:68:7c:2c:ea:b5:ff:03:e7:65:dc:20: e7:fc:1a:1d:dc:4e:94:73:a9:9d:a4:a7:28:e0:d2: 1f:99:f1:a3:cd:41:0c:ed:c6:2f:9f:59:ac:0b:a4: 53:d3:b8:ac:47:48:bf:9a:d1:a6:53:a8:2f:aa:75: 99:e2:e9:77:fa:33:2e:fa:1d:4b:11:b3:91:32:7b: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BA:69:45:C4:AF:32:1B:66:50:09:B4:1F:67:45:2E:BE:6D:AA:6B X509v3 Authority Key Identifier: keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.95.0/24 Signature Algorithm: sha256WithRSAEncryption 71:81:88:e4:d8:9c:12:11:8c:7c:e0:20:bb:67:32:1e:e7:14: 8a:a8:07:98:04:91:fb:08:24:a9:2f:7d:5c:93:9f:8f:6b:9d: fd:de:54:09:72:24:59:7d:3e:45:bd:b6:63:92:5c:d6:60:ce: 35:c1:41:6f:db:a7:19:06:3f:07:4c:99:0f:db:80:9d:99:35: cb:04:8c:d4:d1:38:21:4e:65:5f:3f:0c:eb:71:a4:7f:06:40: 60:36:5e:b9:06:a5:15:48:af:4e:86:27:80:22:6d:11:98:af: c2:89:f3:f8:75:46:aa:0b:61:e3:e4:e6:35:28:25:07:3e:e2: a0:06:c6:a8:d2:e5:a7:b2:72:42:3b:a0:80:ea:54:31:a5:ec: 47:85:ed:8b:2e:51:7d:1e:08:4e:b1:cf:bd:1f:03:da:d1:ee: 94:c5:e2:87:f9:89:99:54:b1:c6:0b:13:18:5d:3d:79:f9:3c: 58:ef:c8:96:b7:b0:4e:02:2b:4b:e6:58:33:3f:43:4c:25:c4: 15:ac:5e:08:a0:c3:45:0f:50:69:1c:3d:59:0e:bb:49:9f:fc: 6d:a1:36:7b:dd:5a:87:fd:2a:ce:09:23:27:80:73:ff:a1:0f: 19:4c:ed:ea:67:72:09:e4:c5:62:e2:7b:c7:61:40:af:b0:a0: 77:f6:dc:c1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCmEDd/1sEHf9t0wbNLvHh0Je3w4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMw NjI0MDc1MTAeFw0yMzExMDQwMzU1MDFaFw0yNDExMDIwNDAwMDFaMDMxMTAvBgNV BAMTKEFEQkE2OTQ1QzRBRjMyMUI2NjUwMDlCNDFGNjc0NTJFQkU2REFBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstWJpeozf/wpxH8PiJYuDkNOv TfrpD/m/lI+u9bbU+ZEXgS67mVSVPJlwzh830e5lEH6qvOoemtL8vZMIbvQNMA2L ISQSq0rL7+T/NlPcELsVrvHBG2njiqAD9eCZvIa49t+hOYjBcRXcr6ehjZPUw9Wa 4mxXJf6aryQw6cFuqRF6zNwmOpoMef6BAjBUN5DwkhR1FwY9ZIHTcfm64B7KimvW Gfo/2BvSdcCfDxfjsyq/TAaE5wZofCzqtf8D52XcIOf8Gh3cTpRzqZ2kpyjg0h+Z 8aPNQQztxi+fWawLpFPTuKxHSL+a0aZTqC+qdZni6Xf6My76HUsRs5Eye1gpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrbppRcSvMhtmUAm0H2dFLr5tqmswHwYDVR0j BBgwFoAU+PKiyIXUd952pbLnXWmdXAYkB1EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMC9GOEYyQTJDODg1 RDQ3N0RFNzZBNUIyRTc1RDY5OUQ1QzA2MjQwNzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMwNjI0 MDc1MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1OWU1NjU4LWFiMTAtNDI5Ny05 MmY0LWY2YTI2NjNlNTRjMC8wLzMxMzAzMzJlMzEzNjMwMmUzOTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzUzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6BfMA0GCSqG SIb3DQEBCwUAA4IBAQBxgYjk2JwSEYx84CC7ZzIe5xSKqAeYBJH7CCSpL31ck5+P a5393lQJciRZfT5FvbZjklzWYM41wUFv26cZBj8HTJkP24CdmTXLBIzU0TghTmVf PwzrcaR/BkBgNl65BqUVSK9OhieAIm0RmK/CifP4dUaqC2Hj5OY1KCUHPuKgBsao 0uWnsnJCO6CA6lQxpexHhe2LLlF9HghOsc+9HwPa0e6UxeKH+YmZVLHGCxMYXT15 +TxY78iWt7BOAitL5lgzP0NMJcQVrF4IoMNFD1BpHD1ZDrtJn/xtoTZ73VqH/SrO CSMngHP/oQ8ZTO3qZ3IJ5MVi4nvHYUCvsKB39tzB -----END CERTIFICATE-----Generated at Sat Jun 1 04:06:51 2024 by rpki-client on console-ams.rpki-client.org