$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32332e33322e302f32322d3232203d3e203535363939.roa File: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (raw, json) Hash identifier: EN9NkN+hXNKvnXRUS5mLF//exzUT+MMy6d8Vqihptu8= Subject key identifier: 6A:34:2F:0C:B2:A1:41:09:89:D5:E1:4B:49:26:7B:5A:2D:6D:C4:BE Certificate issuer: /CN=1976DD7D4FBDFBEB355F0B96690613959E106872 Certificate serial: 42A1462C0DF23B5CD6CE16D44956EC9B32A9449D Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32332e33322e302f32322d3232203d3e203535363939.roa Signing time: Mon 31 Jul 2023 00:06:17 +0000 ROA not before: Mon 31 Jul 2023 00:01:17 +0000 ROA not after: Mon 29 Jul 2024 00:06:17 +0000 asID: 55699 IP address blocks: 103.23.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a1:46:2c:0d:f2:3b:5c:d6:ce:16:d4:49:56:ec:9b:32:a9:44:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872 Validity Not Before: Jul 31 00:01:17 2023 GMT Not After : Jul 29 00:06:17 2024 GMT Subject: CN=6A342F0CB2A1410989D5E14B49267B5A2D6DC4BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:a3:ba:84:86:98:71:8f:4f:5c:d6:c5:bf: 94:ed:91:89:4b:a9:3e:ac:ca:29:44:be:6d:bc:7d: de:7c:21:fd:91:ab:1d:bd:12:56:bc:29:99:cf:7e: 6f:46:45:a1:8b:f1:05:dc:8e:29:eb:d2:33:2d:09: 7f:0b:56:b1:c2:1e:52:af:5e:38:8f:12:a9:62:84: 2d:1a:2e:ee:21:f6:d6:e5:ce:e0:8a:3f:90:f2:1c: cb:fa:46:bd:81:db:dd:ab:b9:2f:0c:dc:5b:41:e1: e4:d5:e5:90:19:2a:b7:9a:54:3f:ec:e8:64:6b:d0: 52:f3:fb:e5:a5:88:d6:95:fb:f0:a5:d5:19:b5:1f: 1b:b5:f7:5b:32:df:2c:9c:3a:f2:61:6b:5d:31:17: 28:4e:7e:b1:2d:58:64:9f:5d:c9:fe:6c:1d:0a:5c: ed:30:14:fd:dd:ae:5e:d2:fb:9f:d2:7a:f0:49:2b: 66:84:d0:b4:fc:56:a0:ba:35:2f:1b:c7:d2:6e:a3: c2:84:2b:f9:07:ae:a2:92:56:df:d7:50:15:f0:5b: 10:ce:e1:43:6a:65:4b:45:37:b9:88:53:a2:37:87: 0d:3e:77:fa:26:50:8a:1e:b9:ad:d4:98:a9:b7:2c: a6:5b:1b:43:5f:f3:98:84:72:38:4d:3a:85:c3:23: be:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:34:2F:0C:B2:A1:41:09:89:D5:E1:4B:49:26:7B:5A:2D:6D:C4:BE X509v3 Authority Key Identifier: keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32332e33322e302f32322d3232203d3e203535363939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.32.0/22 Signature Algorithm: sha256WithRSAEncryption e6:e1:e2:4d:d2:48:ea:86:d1:65:b5:bd:1e:9f:d4:d7:5c:f1: 2e:8f:6d:06:c4:7b:74:a0:77:d1:b4:12:58:bc:06:9f:f7:df: 81:8a:22:5d:8b:2a:1a:42:d6:f9:8a:7b:5d:cf:03:70:b4:88: dc:45:74:cc:39:26:3e:b4:38:5f:80:e2:bc:96:b6:80:9d:4b: b3:3e:39:ec:0d:40:63:32:f2:35:5c:e5:00:6b:1d:9f:6a:3a: 74:9c:0b:b7:69:9f:ce:81:64:66:12:ca:02:0d:16:5f:54:ab: 8a:94:ed:6e:84:03:90:aa:6a:ff:44:2c:ef:cf:f4:30:c8:b7: c5:3a:0b:c1:cf:99:2b:57:2e:0b:76:74:69:97:f8:f3:e1:26: 2c:f4:46:0c:1b:01:62:f1:a5:6f:9f:62:f9:bf:db:bb:91:fa: 4a:4d:cd:ae:34:f8:73:e8:99:38:30:38:1c:95:ef:b5:d9:d6: ce:75:f2:3a:f0:93:57:cf:8f:85:63:a8:e7:20:3a:9f:74:d5: f8:3a:8b:07:6c:1e:37:5c:02:01:e0:dd:f3:30:90:55:0c:3d: 3e:a5:ac:3c:53:14:d0:77:00:a5:6f:03:09:02:f5:46:89:be: 7c:2e:c6:47:2c:07:58:8e:a2:b4:8a:8e:ef:8b:fd:16:d8:58: b8:96:32:5b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUQqFGLA3yO1zWzhbUSVbsmzKpRJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5 RTEwNjg3MjAeFw0yMzA3MzEwMDAxMTdaFw0yNDA3MjkwMDA2MTdaMDMxMTAvBgNV BAMTKDZBMzQyRjBDQjJBMTQxMDk4OUQ1RTE0QjQ5MjY3QjVBMkQ2REM0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUoKO6hIaYcY9PXNbFv5TtkYlL qT6syilEvm28fd58If2Rqx29Ela8KZnPfm9GRaGL8QXcjinr0jMtCX8LVrHCHlKv XjiPEqlihC0aLu4h9tblzuCKP5DyHMv6Rr2B292ruS8M3FtB4eTV5ZAZKreaVD/s 6GRr0FLz++WliNaV+/Cl1Rm1Hxu191sy3yycOvJha10xFyhOfrEtWGSfXcn+bB0K XO0wFP3drl7S+5/SevBJK2aE0LT8VqC6NS8bx9Juo8KEK/kHrqKSVt/XUBXwWxDO 4UNqZUtFN7mIU6I3hw0+d/omUIoeua3UmKm3LKZbG0Nf85iEcjhNOoXDI77/AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUajQvDLKhQQmJ1eFLSSZ7Wi1txL4wHwYDVR0j BBgwFoAUGXbdfU+9++s1XwuWaQYTlZ4QaHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTk5ZWQ5Ni1kNDA4LTQ0MTgtYjgyYS01ZDVhOGU2NjU3ZjMvMC8xOTc2REQ3RDRG QkRGQkVCMzU1RjBCOTY2OTA2MTM5NTlFMTA2ODcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5RTEw Njg3Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1OTllZDk2LWQ0MDgtNDQxOC1i ODJhLTVkNWE4ZTY2NTdmMy8wLzMxMzAzMzJlMzIzMzJlMzMzMjJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDM1MzUzNjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnFyAwDQYJKoZIhvcN AQELBQADggEBAObh4k3SSOqG0WW1vR6f1Ndc8S6PbQbEe3Sgd9G0Eli8Bp/334GK Il2LKhpC1vmKe13PA3C0iNxFdMw5Jj60OF+A4ryWtoCdS7M+OewNQGMy8jVc5QBr HZ9qOnScC7dpn86BZGYSygINFl9Uq4qU7W6EA5Cqav9ELO/P9DDIt8U6C8HPmStX Lgt2dGmX+PPhJiz0RgwbAWLxpW+fYvm/27uR+kpNza40+HPomTgwOByV77XZ1s51 8jrwk1fPj4VjqOcgOp901fg6iwdsHjdcAgHg3fMwkFUMPT6lrDxTFNB3AKVvAwkC 9UaJvnwuxkcsB1iOorSKju+L/RbYWLiWMls= -----END CERTIFICATE-----Generated at Tue Apr 30 19:13:15 2024 by rpki-client on console-ams.rpki-client.org