$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3233352e36362e302f32332d3234203d3e203633343930.roa File: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (raw, json) Hash identifier: IiBDjguiz0QfHwEmciKV91MMzri0AWL7mVdEYRmvrGw= Subject key identifier: 97:8A:3C:2A:28:06:55:98:4F:E1:92:53:4B:2B:44:C1:F3:40:16:BD Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 70E984AC0E145ABE15AA1FC83546E8660643394E Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3233352e36362e302f32332d3234203d3e203633343930.roa Signing time: Sun 20 Aug 2023 20:00:00 +0000 ROA not before: Sun 20 Aug 2023 19:55:00 +0000 ROA not after: Sun 18 Aug 2024 20:00:00 +0000 asID: 63490 IP address blocks: 103.235.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e9:84:ac:0e:14:5a:be:15:aa:1f:c8:35:46:e8:66:06:43:39:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Aug 20 19:55:00 2023 GMT Not After : Aug 18 20:00:00 2024 GMT Subject: CN=978A3C2A280655984FE192534B2B44C1F34016BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:34:aa:ab:b3:18:ad:b7:e6:a6:0f:46:b9: 37:eb:04:7e:09:f4:b2:c5:27:d7:88:5f:08:35:40: e0:e0:93:38:18:2b:ee:ed:63:a1:89:94:3d:47:91: c6:50:76:38:cc:79:54:17:2a:4b:95:dc:15:1c:7c: d0:85:e5:51:98:20:5b:df:31:fe:a0:bb:dc:2c:8c: 11:4c:79:c6:78:17:5a:82:3d:a4:e9:26:32:d1:a0: 67:03:4a:9f:74:3c:47:e7:b2:ca:1a:ee:c7:95:d6: f5:81:ae:be:4a:88:d5:70:f7:3d:f4:0e:e2:02:12: 46:b0:96:2b:46:ed:8d:8f:76:a7:4f:45:79:05:c3: f9:33:8e:61:0a:4d:63:5c:27:1a:29:87:68:90:9c: 1f:0e:8a:90:88:28:38:25:5a:32:fa:c8:93:99:d3: c7:9d:a9:6c:e3:6f:5f:b1:dc:cb:f5:18:e2:b9:c5: f6:cb:44:13:bf:ca:c5:1f:98:b2:09:90:1e:04:07: 6c:94:54:10:be:42:1e:9c:33:a2:36:61:40:4c:2e: f1:b7:9d:47:e9:f0:98:ce:81:81:dc:bd:87:65:1e: 16:34:22:ba:0f:2c:39:ee:70:92:d2:2a:a9:83:e5: 3d:34:28:38:f9:e9:14:a7:90:1a:f9:48:8a:b0:b1: 2d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8A:3C:2A:28:06:55:98:4F:E1:92:53:4B:2B:44:C1:F3:40:16:BD X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3233352e36362e302f32332d3234203d3e203633343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.66.0/23 Signature Algorithm: sha256WithRSAEncryption 04:80:d2:e6:57:b4:bd:65:21:67:5c:a4:8d:9c:cc:e4:cc:4e: 2a:dd:c2:1e:e5:d9:70:c2:80:f4:a9:17:2a:56:f2:d7:2b:7d: c9:e4:ca:08:62:5e:6d:63:4f:93:29:2d:b6:f3:ce:c2:22:6f: c9:f2:47:1f:73:8b:8d:d7:99:ea:fe:87:4f:10:fb:1b:86:ef: a3:81:48:ba:24:13:dd:35:fc:04:53:c3:78:9c:a6:fc:d3:87: ef:de:7c:8a:75:b9:71:9b:4c:0e:ca:23:be:5e:0b:14:04:4c: 51:c9:49:96:e3:d1:4d:f9:55:8d:00:ab:78:02:47:43:44:81: 1e:2b:44:90:2c:ea:2a:15:97:f2:f9:05:28:a8:cc:95:7b:50: 87:68:5a:a6:f7:e3:6f:80:6a:e8:b7:94:33:1a:5b:71:f7:b4: c9:66:11:1d:42:07:f2:56:ec:e3:4c:65:ff:8b:5e:cf:36:e2: 56:28:c2:3a:00:26:14:f2:49:8d:2f:9c:29:75:0f:40:47:45: 08:69:17:ff:51:84:2b:f4:f4:0e:cb:7c:ee:33:84:60:c0:70: f6:4e:72:85:b4:ad:d1:49:79:a6:d4:8a:47:e3:04:e1:38:69: 23:cd:1b:5f:34:68:d9:99:2d:13:31:dc:58:2b:7c:9d:1f:44: f2:81:a4:17 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcOmErA4UWr4Vqh/INUboZgZDOU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yMzA4MjAxOTU1MDBaFw0yNDA4MTgyMDAwMDBaMDMxMTAvBgNV BAMTKDk3OEEzQzJBMjgwNjU1OTg0RkUxOTI1MzRCMkI0NEMxRjM0MDE2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7DSqq7MYrbfmpg9GuTfrBH4J 9LLFJ9eIXwg1QODgkzgYK+7tY6GJlD1HkcZQdjjMeVQXKkuV3BUcfNCF5VGYIFvf Mf6gu9wsjBFMecZ4F1qCPaTpJjLRoGcDSp90PEfnssoa7seV1vWBrr5KiNVw9z30 DuICEkawlitG7Y2PdqdPRXkFw/kzjmEKTWNcJxoph2iQnB8OipCIKDglWjL6yJOZ 08edqWzjb1+x3Mv1GOK5xfbLRBO/ysUfmLIJkB4EB2yUVBC+Qh6cM6I2YUBMLvG3 nUfp8JjOgYHcvYdlHhY0IroPLDnucJLSKqmD5T00KDj56RSnkBr5SIqwsS03AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUl4o8KigGVZhP4ZJTSytEwfNAFr0wHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5ZTM2MDU2LWYwOTctNDlhNy1i ZDIzLTNkNzExZTg5ZjMwNS8wLzMxMzAzMzJlMzIzMzM1MmUzNjM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzYzMzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWfrQjANBgkqhkiG 9w0BAQsFAAOCAQEABIDS5le0vWUhZ1ykjZzM5MxOKt3CHuXZcMKA9KkXKlby1yt9 yeTKCGJebWNPkykttvPOwiJvyfJHH3OLjdeZ6v6HTxD7G4bvo4FIuiQT3TX8BFPD eJym/NOH7958inW5cZtMDsojvl4LFARMUclJluPRTflVjQCreAJHQ0SBHitEkCzq KhWX8vkFKKjMlXtQh2hapvfjb4Bq6LeUMxpbcfe0yWYRHUIH8lbs40xl/4tezzbi VijCOgAmFPJJjS+cKXUPQEdFCGkX/1GEK/T0Dst87jOEYMBw9k5yhbSt0Ul5ptSK R+ME4ThpI80bXzRo2ZktEzHcWCt8nR9E8oGkFw== -----END CERTIFICATE-----Generated at Sun May 5 17:20:20 2024 by rpki-client on console-fra.rpki-client.org