$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3233203d3e20313430343233.roa File: 3130332e32302e3130382e302f32332d3233203d3e20313430343233.roa (raw, json) Hash identifier: rg13v6/0+V9qFKbOPQV+iyGvoxjmLJeGndkL/jm5swk= Subject key identifier: BF:52:EA:34:B2:86:3B:E4:50:C8:B4:D0:79:FB:7A:DB:39:02:92:F7 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 23C3DD568F8CDD273B4E7BC9CC2700E4FEABBC6D Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3233203d3e20313430343233.roa Signing time: Tue 20 Jun 2023 15:38:16 +0000 ROA not before: Tue 20 Jun 2023 15:33:16 +0000 ROA not after: Tue 18 Jun 2024 15:38:16 +0000 asID: 140423 IP address blocks: 103.20.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 05:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c3:dd:56:8f:8c:dd:27:3b:4e:7b:c9:cc:27:00:e4:fe:ab:bc:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Jun 20 15:33:16 2023 GMT Not After : Jun 18 15:38:16 2024 GMT Subject: CN=BF52EA34B2863BE450C8B4D079FB7ADB390292F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:e8:83:02:98:f6:03:f3:2e:86:f7:67:ad: 4c:bb:3b:16:63:1c:e5:d3:49:a1:75:cf:bc:4c:2f: aa:09:24:d0:fe:a1:c4:44:8c:4a:ae:4e:00:4d:f1: 6d:c5:00:c2:f9:dc:e5:c7:1b:b7:a0:07:37:79:17: 6b:53:ed:c4:04:da:fd:8e:f3:ee:f1:6c:dc:fa:e0: 51:05:1e:97:74:ee:35:b3:4f:6a:5a:72:de:ce:4b: 1e:0d:e0:88:64:48:7a:38:64:4a:fa:b9:5b:ab:42: 2f:8b:4b:c7:5d:13:a3:ec:e8:bb:ab:5e:7d:3c:7f: 26:2b:2b:b2:92:2c:f5:04:4d:71:2e:20:7a:93:27: 90:ab:d3:70:95:3b:55:f1:04:3a:3e:89:d4:50:d3: 96:8c:e5:75:ff:c6:eb:9d:37:a4:b5:12:84:a1:c8: da:21:71:4b:38:38:ce:f6:67:d3:82:b7:50:9f:8c: 19:02:d5:c6:90:9c:e4:36:ac:12:0e:bd:8f:1e:be: ed:60:bc:5c:99:fb:d4:83:e4:07:8d:31:ba:ce:c8: 83:7c:18:66:17:59:1c:cd:5e:25:96:6b:b7:94:9d: b5:a5:36:54:e0:18:e5:ce:18:7f:db:a4:33:c6:87: ea:7f:00:9f:86:4a:b6:3b:53:a8:bc:2b:77:41:97: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:52:EA:34:B2:86:3B:E4:50:C8:B4:D0:79:FB:7A:DB:39:02:92:F7 X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/3130332e32302e3130382e302f32332d3233203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.108.0/23 Signature Algorithm: sha256WithRSAEncryption c2:db:80:ec:58:22:49:92:f9:27:cb:86:b7:17:44:73:a5:bb: e2:ed:5a:37:20:54:f7:17:e2:d0:05:91:98:3e:c5:dd:1e:0c: e4:21:5a:d3:03:c5:31:67:b8:2c:78:e5:bd:26:01:1d:94:92: 9d:bb:f8:af:b5:fb:27:1c:0e:cd:f6:e7:b2:74:d4:19:24:24: d2:20:c6:59:1e:9b:90:b5:2b:b2:1d:d6:2f:e3:9c:e7:17:02: 83:7d:05:af:83:6c:8c:80:1a:7b:ae:d4:5a:ad:40:c7:e6:fb: 8b:41:1e:f2:24:1e:29:e4:65:e5:4f:84:68:ac:de:a1:ae:7c: 25:91:75:75:f7:4c:69:48:60:38:92:59:0e:98:47:03:67:72: ab:7a:a7:42:17:43:fc:ea:9e:02:df:9f:b6:5c:d5:41:f1:97: eb:0b:ff:5b:d5:df:4c:e1:68:f1:74:d9:30:e1:5d:33:4b:c8: 8b:38:26:c3:97:59:c8:d5:6a:2e:68:3c:26:a0:94:41:8e:50: 16:66:a3:9f:02:58:bd:6d:8f:34:1a:5e:d2:9c:4c:51:91:98: c5:30:86:d4:1d:9b:2d:e5:3c:e4:42:97:de:0d:f5:57:11:63: 9b:5c:00:1b:18:60:83:df:20:af:d3:b6:72:fc:d5:c8:5e:b4: 24:ec:24:38 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUI8PdVo+M3Sc7TnvJzCcA5P6rvG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yMzA2MjAxNTMzMTZaFw0yNDA2MTgxNTM4MTZaMDMxMTAvBgNV BAMTKEJGNTJFQTM0QjI4NjNCRTQ1MEM4QjREMDc5RkI3QURCMzkwMjkyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoReiDApj2A/MuhvdnrUy7OxZj HOXTSaF1z7xML6oJJND+ocREjEquTgBN8W3FAML53OXHG7egBzd5F2tT7cQE2v2O 8+7xbNz64FEFHpd07jWzT2pact7OSx4N4IhkSHo4ZEr6uVurQi+LS8ddE6Ps6Lur Xn08fyYrK7KSLPUETXEuIHqTJ5Cr03CVO1XxBDo+idRQ05aM5XX/xuudN6S1EoSh yNohcUs4OM72Z9OCt1CfjBkC1caQnOQ2rBIOvY8evu1gvFyZ+9SD5AeNMbrOyIN8 GGYXWRzNXiWWa7eUnbWlNlTgGOXOGH/bpDPGh+p/AJ+GSrY7U6i8K3dBl+IXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUv1LqNLKGO+RQyLTQeft62zkCkvcwHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYzZiZDczLWY5YmQtNGY1YS05 YzU5LWZiZWExYmQ4MzQ3My8wLzMxMzAzMzJlMzIzMDJlMzEzMDM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMwMzQzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxRsMA0GCSqG SIb3DQEBCwUAA4IBAQDC24DsWCJJkvkny4a3F0Rzpbvi7Vo3IFT3F+LQBZGYPsXd HgzkIVrTA8UxZ7gseOW9JgEdlJKdu/ivtfsnHA7N9ueydNQZJCTSIMZZHpuQtSuy HdYv45znFwKDfQWvg2yMgBp7rtRarUDH5vuLQR7yJB4p5GXlT4RorN6hrnwlkXV1 90xpSGA4klkOmEcDZ3KreqdCF0P86p4C35+2XNVB8ZfrC/9b1d9M4WjxdNkw4V0z S8iLOCbDl1nI1WouaDwmoJRBjlAWZqOfAli9bY80Gl7SnExRkZjFMIbUHZst5Tzk QpfeDfVXEWObXAAbGGCD3yCv07Zy/NXIXrQk7CQ4 -----END CERTIFICATE-----Generated at Wed May 1 05:56:55 2024 by rpki-client on console-fra.rpki-client.org