$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e35382e3136302e302f32322d3234203d3e203539323738.roa File: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (raw, json) Hash identifier: SpbZA/kXxN5gSRLLmxjSpsJIUCYOLrEi5NRgTfiLpHg= Subject key identifier: 0E:33:85:43:0B:99:D7:42:33:3D:D5:BD:FE:B1:02:09:46:65:BA:F7 Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Certificate serial: 4C7A7B34834B7E925D8702BBA3A1B8803136C704 Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e35382e3136302e302f32322d3234203d3e203539323738.roa Signing time: Wed 06 Sep 2023 05:00:30 +0000 ROA not before: Wed 06 Sep 2023 04:55:30 +0000 ROA not after: Wed 04 Sep 2024 05:00:30 +0000 asID: 59278 IP address blocks: 103.58.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 17:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7a:7b:34:83:4b:7e:92:5d:87:02:bb:a3:a1:b8:80:31:36:c7:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Validity Not Before: Sep 6 04:55:30 2023 GMT Not After : Sep 4 05:00:30 2024 GMT Subject: CN=0E3385430B99D742333DD5BDFEB102094665BAF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b5:f5:23:94:3c:7a:28:b8:bb:9b:08:2f:d8: 8d:33:ac:07:43:98:31:8c:50:3a:7b:18:71:5d:13: 48:ea:b4:ab:d8:39:5d:f2:77:f7:93:fc:de:a3:43: 3d:d8:1f:ee:2e:dc:44:98:14:36:c4:e1:74:5c:4b: 74:52:ce:6a:16:ac:20:76:6b:3d:50:92:6f:e0:34: 25:f2:32:76:a1:e6:3a:11:cb:b6:f4:63:e2:5b:39: b2:41:a6:6d:4b:02:49:d2:b6:e2:e1:44:b0:e1:9a: 3a:f2:e9:b3:0e:2e:bc:9f:66:ce:5c:56:27:b6:25: 1e:12:aa:c5:1f:01:94:5c:91:04:25:18:2e:38:b7: 61:38:93:4d:5b:12:f4:ea:6a:a3:31:ff:46:cf:46: 28:01:a9:b7:89:df:cc:3c:67:c3:53:97:ef:78:ce: 78:32:bf:d2:7c:29:47:ab:42:d6:4d:3e:57:65:1b: b7:a9:c1:70:92:44:68:fd:51:c0:96:00:31:5d:e6: 9d:8b:ad:e8:b6:97:aa:59:96:e5:2a:e7:c2:30:2d: fa:8c:6f:9a:fd:b9:af:5f:4c:07:3e:1d:80:75:f0: bd:72:d5:3a:ff:7a:34:43:1b:d0:6c:e5:ca:2b:e6: 04:f5:99:61:e3:89:86:a1:74:cc:fe:9a:48:12:54: 2a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:33:85:43:0B:99:D7:42:33:3D:D5:BD:FE:B1:02:09:46:65:BA:F7 X509v3 Authority Key Identifier: keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e35382e3136302e302f32322d3234203d3e203539323738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.58.160.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:aa:44:f2:16:32:d3:87:27:f3:36:e6:dd:b8:3c:de:83:7f: 90:e8:c5:cb:04:37:d6:1f:47:42:4a:65:bb:2e:84:ad:69:09: 6f:15:d4:5c:d9:c0:62:c1:e4:e5:47:c1:7a:44:46:1e:90:a7: cd:97:62:11:4b:00:91:ff:89:18:9d:f8:d0:6e:20:b1:2f:8c: 0c:f2:65:77:fe:ab:e8:79:a1:a4:e7:28:f3:e8:4d:0a:75:66: e8:f9:80:f9:79:22:43:07:7a:ef:57:d8:63:22:dc:b0:7c:4a: 69:a1:8a:c5:a0:e1:51:96:03:26:e8:72:e4:31:d9:f0:19:2c: 5d:0a:a1:43:f0:a2:c3:55:ca:cd:28:9b:93:4e:40:9a:ab:81: cb:61:94:98:98:8b:6e:49:7a:44:04:e5:51:26:87:ae:3c:fb: c7:f7:67:ff:4a:94:cd:fe:1f:11:90:9e:97:14:5f:01:37:8f: 94:9c:c2:4f:1d:0b:2c:ed:fa:45:e2:05:a6:cc:6b:5c:a3:55: 04:3e:06:76:5b:be:67:43:58:0b:21:c4:fa:d0:1b:9e:f1:a4: 73:2e:0e:28:0a:21:02:12:28:06:18:e1:ec:40:c7:9a:4d:8b: cb:66:1f:f8:fe:9c:15:3f:94:e0:a0:93:b2:dc:c2:8e:b9:55: a0:3b:d6:df -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTHp7NINLfpJdhwK7o6G4gDE2xwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVE RDc4QzVCRDAeFw0yMzA5MDYwNDU1MzBaFw0yNDA5MDQwNTAwMzBaMDMxMTAvBgNV BAMTKDBFMzM4NTQzMEI5OUQ3NDIzMzNERDVCREZFQjEwMjA5NDY2NUJBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrtfUjlDx6KLi7mwgv2I0zrAdD mDGMUDp7GHFdE0jqtKvYOV3yd/eT/N6jQz3YH+4u3ESYFDbE4XRcS3RSzmoWrCB2 az1Qkm/gNCXyMnah5joRy7b0Y+JbObJBpm1LAknStuLhRLDhmjry6bMOLryfZs5c Vie2JR4SqsUfAZRckQQlGC44t2E4k01bEvTqaqMx/0bPRigBqbeJ38w8Z8NTl+94 zngyv9J8KUerQtZNPldlG7epwXCSRGj9UcCWADFd5p2Lrei2l6pZluUq58IwLfqM b5r9ua9fTAc+HYB18L1y1Tr/ejRDG9Bs5cor5gT1mWHjiYahdMz+mkgSVCqFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUDjOFQwuZ10IzPdW9/rECCUZluvcwHwYDVR0j BBgwFoAULSMR9WPfCvjr79ohhxYmtd14xb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjFjNzlmMS0yNjRlLTQyM2YtOWUwOC0wYjI5MDBkYTY5NDkvMC8yRDIzMTFGNTYz REYwQUY4RUJFRkRBMjE4NzE2MjZCNURENzhDNUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVERDc4 QzVCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmMWM3OWYxLTI2NGUtNDIzZi05 ZTA4LTBiMjkwMGRhNjk0OS8wLzMxMzAzMzJlMzUzODJlMzEzNjMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzOTMyMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmc6oDANBgkqhkiG 9w0BAQsFAAOCAQEATapE8hYy04cn8zbm3bg83oN/kOjFywQ31h9HQkpluy6ErWkJ bxXUXNnAYsHk5UfBekRGHpCnzZdiEUsAkf+JGJ340G4gsS+MDPJld/6r6HmhpOco 8+hNCnVm6PmA+XkiQwd671fYYyLcsHxKaaGKxaDhUZYDJuhy5DHZ8BksXQqhQ/Ci w1XKzSibk05AmquBy2GUmJiLbkl6RATlUSaHrjz7x/dn/0qUzf4fEZCelxRfATeP lJzCTx0LLO36ReIFpsxrXKNVBD4Gdlu+Z0NYCyHE+tAbnvGkcy4OKAohAhIoBhjh 7EDHmk2Ly2Yf+P6cFT+U4KCTstzCjrlVoDvW3w== -----END CERTIFICATE-----Generated at Fri May 31 17:43:04 2024 by rpki-client on console-fra.rpki-client.org