$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa File: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (raw, json) Hash identifier: hXHnAXHMuuBqDBbewBSMHgjId2ACLhqVS5XUqqovuKg= Subject key identifier: 92:0C:C2:CA:24:3B:45:73:DD:CD:D0:EB:8F:CB:73:8C:31:4B:15:EC Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Certificate serial: 4AFD4295AA014EF84BA3F8A121272A23882B8385 Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa Signing time: Fri 31 May 2024 01:00:02 +0000 ROA not before: Fri 31 May 2024 00:55:02 +0000 ROA not after: Fri 30 May 2025 01:00:02 +0000 asID: 45305 IP address blocks: 103.190.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fd:42:95:aa:01:4e:f8:4b:a3:f8:a1:21:27:2a:23:88:2b:83:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Validity Not Before: May 31 00:55:02 2024 GMT Not After : May 30 01:00:02 2025 GMT Subject: CN=920CC2CA243B4573DDCDD0EB8FCB738C314B15EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:b8:31:8a:82:26:f4:86:a4:6a:30:ff:a4: af:89:31:5e:4a:aa:04:72:c6:49:8c:98:3f:02:a8: 16:df:cd:c4:4d:be:17:99:65:23:ba:ad:22:25:a3: 44:52:28:87:24:db:16:38:e5:58:50:65:bf:cc:11: 1d:eb:00:22:1a:14:41:3e:92:51:0f:be:4b:a1:e0: e9:9b:ca:a4:56:62:ee:ae:19:be:61:8e:70:6c:1f: da:bc:d2:b3:9a:e2:b5:a3:a7:a0:df:43:21:70:41: 45:e7:35:22:31:0c:86:d0:6f:7f:06:66:b8:2e:e6: c6:41:02:d2:d8:42:3c:b7:72:8b:f7:8b:f1:2e:85: 15:6a:95:9e:8d:f5:1a:d4:07:24:2e:ba:e6:37:70: 17:02:be:21:8e:61:4a:ea:15:39:31:84:6a:3f:04: e7:96:a2:a7:1f:7c:d3:db:cc:70:85:7b:d4:e6:d6: 76:c3:a2:db:67:1c:52:57:25:a4:16:6a:f0:9b:89: 99:df:ef:3f:54:f5:b2:21:ff:79:95:16:33:11:f1: ef:f2:ca:f8:7d:f9:0f:43:26:22:fa:e1:83:64:59: 6f:ac:51:74:98:57:77:1e:a0:32:03:de:cf:dd:92: e2:00:c6:f1:79:93:f4:d7:97:54:98:b2:ed:c0:52: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0C:C2:CA:24:3B:45:73:DD:CD:D0:EB:8F:CB:73:8C:31:4B:15:EC X509v3 Authority Key Identifier: keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.114.0/23 Signature Algorithm: sha256WithRSAEncryption 77:1b:d8:84:a1:cc:d5:2d:bf:79:0b:51:aa:fb:f1:9f:ac:eb: de:e5:79:40:d4:5d:fd:94:94:b2:76:7c:74:b2:5c:40:fc:a4: b3:11:a4:f2:c2:da:34:7c:3d:3d:d6:4d:75:d7:70:3b:94:7b: 9f:ca:72:94:58:10:fb:e0:d8:b8:1e:56:9c:82:d3:e2:45:fb: ed:56:73:56:64:1c:c8:c8:8a:57:53:fe:34:35:b8:34:b8:05: 9d:30:80:65:94:c5:fa:b0:fe:5d:f3:d9:06:0a:5a:79:61:8c: 23:dd:d8:e0:82:96:8e:22:f6:ed:b8:15:96:e0:17:fe:17:7b: a2:89:1b:5d:5b:28:39:95:26:12:d8:81:7a:2d:cc:00:e8:0d: 40:b1:14:b3:ce:53:8c:da:c3:9e:d5:ee:fd:d7:8e:5a:2d:30: 34:9e:d2:27:08:8e:ab:67:d5:04:ca:63:d6:5e:2e:33:64:e3: 34:96:2c:49:78:ba:f3:4c:5e:69:5d:d9:ae:82:3d:1e:d9:38: 39:07:b8:ed:5c:98:7d:a4:a9:c3:6b:82:cc:01:1b:2f:a4:33: 4a:ff:12:be:db:9e:18:c4:ad:bd:e9:7c:39:53:b0:2d:f4:d2: 1f:1f:ac:92:85:e4:0e:ff:99:c0:6a:bc:cd:95:12:41:31:06: b8:37:54:2b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSv1ClaoBTvhLo/ihIScqI4grg4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0 MDhCQTkzRDAeFw0yNDA1MzEwMDU1MDJaFw0yNTA1MzAwMTAwMDJaMDMxMTAvBgNV BAMTKDkyMENDMkNBMjQzQjQ1NzNERENERDBFQjhGQ0I3MzhDMzE0QjE1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3bgxioIm9IakajD/pK+JMV5K qgRyxkmMmD8CqBbfzcRNvheZZSO6rSIlo0RSKIck2xY45VhQZb/MER3rACIaFEE+ klEPvkuh4OmbyqRWYu6uGb5hjnBsH9q80rOa4rWjp6DfQyFwQUXnNSIxDIbQb38G Zrgu5sZBAtLYQjy3cov3i/EuhRVqlZ6N9RrUByQuuuY3cBcCviGOYUrqFTkxhGo/ BOeWoqcffNPbzHCFe9Tm1nbDottnHFJXJaQWavCbiZnf7z9U9bIh/3mVFjMR8e/y yvh9+Q9DJiL64YNkWW+sUXSYV3ceoDID3s/dkuIAxvF5k/TXl1SYsu3AUo7XAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUkgzCyiQ7RXPdzdDrj8tzjDFLFewwHwYDVR0j BBgwFoAUiyN7K8BYG1Vt1bSwhH+cg0CLqT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmIwYmRkNS02ZTMwLTRhMTAtYjk5My03N2Q0ODI1MWYzYTEvMC84QjIzN0IyQkMw NTgxQjU1NkRENUI0QjA4NDdGOUM4MzQwOEJBOTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0MDhC QTkzRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyYjBiZGQ1LTZlMzAtNGExMC1i OTkzLTc3ZDQ4MjUxZjNhMS8wLzMxMzAzMzJlMzEzOTMwMmUzMTMxMzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ75yMA0GCSqG SIb3DQEBCwUAA4IBAQB3G9iEoczVLb95C1Gq+/GfrOve5XlA1F39lJSydnx0slxA /KSzEaTywto0fD091k1113A7lHufynKUWBD74Ni4HlacgtPiRfvtVnNWZBzIyIpX U/40Nbg0uAWdMIBllMX6sP5d89kGClp5YYwj3djggpaOIvbtuBWW4Bf+F3uiiRtd Wyg5lSYS2IF6LcwA6A1AsRSzzlOM2sOe1e79145aLTA0ntInCI6rZ9UEymPWXi4z ZOM0lixJeLrzTF5pXdmugj0e2Tg5B7jtXJh9pKnDa4LMARsvpDNK/xK+254YxK29 6Xw5U7At9NIfH6ySheQO/5nAarzNlRJBMQa4N1Qr -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org