$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa File: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (raw, json) Hash identifier: /K6iLFykLPXnn22ogreGBLdTLf5f8ZdcmAl9Mx2OBH4= Subject key identifier: C6:89:0A:C1:47:D6:06:6D:2E:02:6B:85:96:6D:21:D7:E7:96:79:66 Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Certificate serial: 78D938624841032D04781606C36922C901F5138C Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa Signing time: Wed 23 Aug 2023 10:00:01 +0000 ROA not before: Wed 23 Aug 2023 09:55:01 +0000 ROA not after: Wed 21 Aug 2024 10:00:01 +0000 asID: 138881 IP address blocks: 103.169.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d9:38:62:48:41:03:2d:04:78:16:06:c3:69:22:c9:01:f5:13:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Validity Not Before: Aug 23 09:55:01 2023 GMT Not After : Aug 21 10:00:01 2024 GMT Subject: CN=C6890AC147D6066D2E026B85966D21D7E7967966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:4d:1e:d4:79:42:6b:8e:d4:e6:35:da:00: a5:20:3c:80:10:2b:8e:02:99:24:82:df:84:b7:f3: 73:67:d0:a2:10:47:40:96:d8:20:eb:9c:f4:34:f0: cd:4f:48:7b:07:a5:03:af:c2:f6:10:73:f8:3f:0e: e4:4e:1a:33:e5:01:bd:af:9d:5a:9c:49:5d:39:d2: ee:dc:0e:fc:7f:dc:48:af:5d:35:bf:9a:a2:9d:78: ad:c1:dc:a7:d7:86:80:bf:56:80:6e:97:1d:f4:b8: 2c:6c:9d:fa:9a:cc:83:2a:41:02:29:33:15:10:05: 13:73:52:91:ff:15:35:47:91:a6:76:af:7a:d3:2f: ab:e0:6e:00:5c:a2:de:fa:d2:fe:54:83:a7:d8:70: 5b:1f:c2:30:9c:b6:97:b1:37:ff:85:fb:fc:88:19: e3:9a:fe:11:25:2c:ff:a8:fd:61:6d:00:11:47:21: c7:ae:73:73:f8:33:aa:98:69:1e:d6:21:ac:f9:9d: 7a:be:90:23:49:d2:79:87:6b:86:42:cd:90:87:96: 38:96:36:a5:0c:a2:c8:ed:54:fb:8d:5f:cf:6c:03: 0f:16:49:d8:0f:b9:65:1d:3a:77:25:98:46:ce:4b: 2f:fc:90:67:2b:c3:dc:4e:37:a6:fb:9d:05:6a:29: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:89:0A:C1:47:D6:06:6D:2E:02:6B:85:96:6D:21:D7:E7:96:79:66 X509v3 Authority Key Identifier: keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.238.0/23 Signature Algorithm: sha256WithRSAEncryption b8:4e:4a:a1:bd:28:86:10:0c:18:90:ae:29:c1:c3:a3:48:a6: 79:36:c8:07:6a:6c:55:47:0d:75:59:44:6b:27:74:24:a5:ca: 5d:10:8b:f1:1d:80:42:3a:74:46:78:58:5b:b9:d6:92:91:02: 83:56:9f:53:ba:ed:25:4b:cd:e5:1b:47:3d:da:38:8e:d3:d0: e5:45:5c:db:f5:70:55:12:0f:62:43:b6:fb:ea:79:55:74:f6: b3:dd:27:e0:a4:16:4f:2d:09:42:86:d5:78:91:b5:3e:e0:0e: a3:ce:ae:a6:79:a2:b5:66:1c:54:27:c5:20:e4:24:99:fc:a8: 85:20:96:11:b5:85:b9:7e:d2:23:bf:ce:a4:7d:67:f6:a7:a1: 5c:88:01:fc:83:66:a2:8d:fe:5a:80:84:3d:d6:03:a7:8d:1e: 69:82:b6:1f:78:72:bd:b9:66:e3:09:e8:0c:14:92:3c:45:ba: d3:11:ba:97:52:63:6f:bd:2b:7f:5e:07:c2:2b:09:be:51:c4: 75:f5:33:31:14:86:0d:a5:6f:15:a3:2c:99:75:c1:25:70:6d: cf:3b:95:13:8f:54:06:7f:9b:14:dd:b6:26:59:37:56:54:0f: 21:a7:b2:6a:23:89:26:e4:e9:72:19:6f:f4:72:29:b3:87:91: fc:ac:59:6a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUeNk4YkhBAy0EeBYGw2kiyQH1E4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2 RTNENzNCODAeFw0yMzA4MjMwOTU1MDFaFw0yNDA4MjExMDAwMDFaMDMxMTAvBgNV BAMTKEM2ODkwQUMxNDdENjA2NkQyRTAyNkI4NTk2NkQyMUQ3RTc5Njc5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5E0e1HlCa47U5jXaAKUgPIAQ K44CmSSC34S383Nn0KIQR0CW2CDrnPQ08M1PSHsHpQOvwvYQc/g/DuROGjPlAb2v nVqcSV050u7cDvx/3EivXTW/mqKdeK3B3KfXhoC/VoBulx30uCxsnfqazIMqQQIp MxUQBRNzUpH/FTVHkaZ2r3rTL6vgbgBcot760v5Ug6fYcFsfwjCctpexN/+F+/yI GeOa/hElLP+o/WFtABFHIceuc3P4M6qYaR7WIaz5nXq+kCNJ0nmHa4ZCzZCHljiW NqUMosjtVPuNX89sAw8WSdgPuWUdOnclmEbOSy/8kGcrw9xON6b7nQVqKb0lAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUxokKwUfWBm0uAmuFlm0h1+eWeWYwHwYDVR0j BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE NzNCOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxMWNhNjIwLWRhY2UtNGE5Zi1i OGU4LWEzYTJlNTgxNTAwZS8wLzMxMzAzMzJlMzEzNjM5MmUzMjMzMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqe4wDQYJ KoZIhvcNAQELBQADggEBALhOSqG9KIYQDBiQrinBw6NIpnk2yAdqbFVHDXVZRGsn dCSlyl0Qi/EdgEI6dEZ4WFu51pKRAoNWn1O67SVLzeUbRz3aOI7T0OVFXNv1cFUS D2JDtvvqeVV09rPdJ+CkFk8tCUKG1XiRtT7gDqPOrqZ5orVmHFQnxSDkJJn8qIUg lhG1hbl+0iO/zqR9Z/anoVyIAfyDZqKN/lqAhD3WA6eNHmmCth94cr25ZuMJ6AwU kjxFutMRupdSY2+9K39eB8IrCb5RxHX1MzEUhg2lbxWjLJl1wSVwbc87lROPVAZ/ mxTdtiZZN1ZUDyGnsmojiSbk6XIZb/RyKbOHkfysWWo= -----END CERTIFICATE-----Generated at Mon May 6 09:06:29 2024 by rpki-client on console-fra.rpki-client.org