$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa File: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (raw, json) Hash identifier: ffDvzrwQh2vVlQSgkmqe8LXaCp/bn8RuxKiHhiMXeRY= Subject key identifier: 63:0A:DD:F3:B3:5A:F5:66:DC:FC:20:33:6B:85:2A:FB:14:F6:1E:E2 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 71C0864F271D684941091EA58F54E0321EAD3935 Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa Signing time: Wed 19 Jul 2023 06:00:01 +0000 ROA not before: Wed 19 Jul 2023 05:55:01 +0000 ROA not after: Wed 17 Jul 2024 06:00:01 +0000 asID: 131111 IP address blocks: 103.160.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Apr 2024 07:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c0:86:4f:27:1d:68:49:41:09:1e:a5:8f:54:e0:32:1e:ad:39:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Jul 19 05:55:01 2023 GMT Not After : Jul 17 06:00:01 2024 GMT Subject: CN=630ADDF3B35AF566DCFC20336B852AFB14F61EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ea:60:56:36:cf:ba:02:81:da:6b:04:0c:a0: 87:8e:5e:8e:15:1f:8f:17:d1:77:87:a6:81:47:de: 38:5a:b2:ac:54:f8:ce:b5:40:cf:5f:cb:29:dc:cf: 4d:14:50:e2:b2:d6:fb:1a:98:b6:e2:92:4b:6d:fc: b5:ff:e1:40:57:b0:22:ff:fb:b3:6f:1b:b9:22:13: 85:46:30:91:2b:96:0e:77:ab:bf:c9:3e:f2:8a:25: fd:1e:c5:7c:51:ed:e8:e0:41:1f:de:b4:9f:c0:51: 87:63:e2:e1:29:48:45:11:f8:e4:9c:92:b0:b7:e2: 2a:3b:0f:4c:45:8d:e4:64:42:85:7a:13:fb:fc:04: 74:ec:61:f5:66:d6:0f:d0:96:ab:46:d9:e4:db:2e: e6:0d:58:4e:c7:78:37:82:c7:4d:0a:df:48:5d:f1: 8d:9b:d7:75:21:ac:6a:4d:89:82:4c:43:9c:ff:6c: af:07:b0:dd:ab:4f:e5:50:77:85:22:57:c7:87:4d: e8:61:8f:87:13:4a:56:4a:7c:3c:99:27:25:b3:7c: 13:59:a6:28:89:2f:f2:57:e5:32:48:a1:79:d7:68: d2:20:a2:77:8e:01:05:ae:41:35:72:97:63:96:de: 8a:f4:da:a6:55:da:17:d1:fa:c7:a0:e8:8c:19:ba: f2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0A:DD:F3:B3:5A:F5:66:DC:FC:20:33:6B:85:2A:FB:14:F6:1E:E2 X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.12.0/23 Signature Algorithm: sha256WithRSAEncryption 73:95:4b:45:2d:60:bf:e2:58:3f:40:34:19:dc:0f:2c:60:e8: 69:79:da:77:54:2d:b8:27:fe:bc:ec:17:b7:9d:56:8f:cd:78: 7e:78:55:9f:97:7e:5c:64:d3:35:d7:77:a2:85:ac:06:1d:f5: f8:85:bd:a7:04:66:b1:dc:ab:9b:7e:04:86:b4:27:62:f0:ce: 04:7e:34:18:21:c8:be:64:78:cb:e3:a8:30:3d:0d:01:8e:a3: 9a:e0:bb:be:2e:12:10:f9:24:2a:ed:a2:f3:59:82:62:fa:51: ff:25:d7:e6:5c:48:7f:e5:8b:9a:c5:66:09:70:4c:f1:d2:71: bb:8c:0f:46:75:fb:fc:82:13:6b:3a:18:3f:ab:91:20:b1:43: 7e:a9:1b:3c:de:c4:58:70:69:35:c5:cb:61:57:43:ef:82:19: 3c:47:83:ab:04:75:3f:4d:ba:c6:92:ec:a7:7f:5b:64:bf:da: aa:af:3b:89:7f:92:4f:c8:19:86:07:b2:26:ae:7a:03:48:54: b2:21:db:ff:88:fc:70:71:f8:b3:c2:45:7e:bd:a8:3f:0d:9d: fc:07:ec:b9:a3:c3:34:62:b9:74:f2:f5:b0:5e:01:af:e5:d8: 95:1c:0b:0a:c6:87:58:58:b4:92:82:92:7b:39:56:98:45:e6: 63:31:32:14 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUccCGTycdaElBCR6lj1TgMh6tOTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yMzA3MTkwNTU1MDFaFw0yNDA3MTcwNjAwMDFaMDMxMTAvBgNV BAMTKDYzMEFEREYzQjM1QUY1NjZEQ0ZDMjAzMzZCODUyQUZCMTRGNjFFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU6mBWNs+6AoHaawQMoIeOXo4V H48X0XeHpoFH3jhasqxU+M61QM9fyyncz00UUOKy1vsamLbikktt/LX/4UBXsCL/ +7NvG7kiE4VGMJErlg53q7/JPvKKJf0exXxR7ejgQR/etJ/AUYdj4uEpSEUR+OSc krC34io7D0xFjeRkQoV6E/v8BHTsYfVm1g/QlqtG2eTbLuYNWE7HeDeCx00K30hd 8Y2b13UhrGpNiYJMQ5z/bK8HsN2rT+VQd4UiV8eHTehhj4cTSlZKfDyZJyWzfBNZ piiJL/JX5TJIoXnXaNIgoneOAQWuQTVyl2OW3or02qZV2hfR+seg6IwZuvL5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYwrd87Na9Wbc/CAza4Uq+xT2HuIwHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0YzZmNzcwLTY4NmEtNDVlZi04 ZGZiLTBjM2E4N2QzZDhkYS8wLzMxMzAzMzJlMzEzNjMwMmUzMTMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6AMMA0GCSqG SIb3DQEBCwUAA4IBAQBzlUtFLWC/4lg/QDQZ3A8sYOhpedp3VC24J/687Be3nVaP zXh+eFWfl35cZNM113eihawGHfX4hb2nBGax3KubfgSGtCdi8M4EfjQYIci+ZHjL 46gwPQ0BjqOa4Lu+LhIQ+SQq7aLzWYJi+lH/JdfmXEh/5YuaxWYJcEzx0nG7jA9G dfv8ghNrOhg/q5EgsUN+qRs83sRYcGk1xcthV0Pvghk8R4OrBHU/TbrGkuynf1tk v9qqrzuJf5JPyBmGB7ImrnoDSFSyIdv/iPxwcfizwkV+vag/DZ38B+y5o8M0Yrl0 8vWwXgGv5diVHAsKxodYWLSSgpJ7OVaYReZjMTIU -----END CERTIFICATE-----Generated at Thu Apr 18 22:43:12 2024 by rpki-client on console-fra.rpki-client.org