$ rpki-client -vvf repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa File: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (raw, json) Hash identifier: Q6MnV96R6K+fMqSImX7zYoRl2vhkwqWOpA747VPATLY= Subject key identifier: 86:35:E7:F1:29:A9:50:FD:31:42:DF:26:9D:94:5A:08:4D:6A:2E:F2 Certificate issuer: /CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Certificate serial: 31DFB3E099E56160A2E7172684ACB3E40BF4D16A Authority key identifier: 58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa Signing time: Sat 30 Sep 2023 18:00:01 +0000 ROA not before: Sat 30 Sep 2023 17:55:01 +0000 ROA not after: Sat 28 Sep 2024 18:00:01 +0000 asID: 147087 IP address blocks: 103.173.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 23:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:df:b3:e0:99:e5:61:60:a2:e7:17:26:84:ac:b3:e4:0b:f4:d1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Validity Not Before: Sep 30 17:55:01 2023 GMT Not After : Sep 28 18:00:01 2024 GMT Subject: CN=8635E7F129A950FD3142DF269D945A084D6A2EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:17:87:1e:7d:af:14:85:1c:e9:c0:eb:99: 81:75:e7:e9:36:73:f2:c6:4e:11:b0:ed:ef:5c:fd: ce:2e:fb:07:e1:c5:8a:c5:89:dd:9e:d9:72:08:1f: 7e:1c:a4:99:6a:14:04:e4:46:4b:d6:9a:f8:dc:81: 22:1e:0f:e7:3b:2e:29:fc:44:e6:9c:d6:0e:c8:dd: f5:7f:7b:c0:ce:93:3a:a7:fa:90:8b:22:0a:94:b8: c0:9b:03:bc:4a:26:57:3c:7d:b8:2b:4d:f1:98:c5: 75:93:d4:af:df:34:38:21:d7:af:c5:8e:b6:d9:12: b3:44:b3:ee:41:2c:a5:c9:35:f9:2b:ee:5b:c3:7b: 07:fe:6b:e0:45:0a:bd:b2:6c:39:d2:3c:b2:4f:ac: b7:2e:80:ca:a3:2d:a9:13:43:d3:74:3a:9c:c1:53: 64:af:dc:9c:9d:eb:22:4c:75:19:a9:e3:79:7b:32: 60:2f:eb:ee:c9:4d:5a:9c:61:ce:a0:d2:ed:e2:9e: a6:3d:7f:2c:42:43:06:d3:5e:e4:01:3d:0c:fc:39: 62:fa:48:64:7f:df:77:0e:96:f8:4f:b4:fd:17:72: 03:b2:e0:50:5f:1d:a0:5b:26:b0:6c:8b:cf:e9:38: 9d:a3:63:fa:9f:93:27:e9:95:62:35:2e:16:0c:8b: 2a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:35:E7:F1:29:A9:50:FD:31:42:DF:26:9D:94:5A:08:4D:6A:2E:F2 X509v3 Authority Key Identifier: keyid:58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.230.0/23 Signature Algorithm: sha256WithRSAEncryption 02:45:cb:47:df:b7:e1:1c:fb:60:79:bf:9a:d6:8f:4c:c0:fe: b9:18:60:7b:74:8a:79:cb:4d:23:ce:0b:46:54:15:9d:fe:6a: 0b:b6:9d:17:83:ad:40:ce:64:b3:25:89:59:b4:0b:b4:95:c6: d6:7c:66:50:97:1d:c8:eb:bb:a7:af:82:c1:40:49:27:25:02: 0e:6d:a9:3f:af:79:4d:21:bd:28:fe:aa:36:a9:ec:df:25:95: c5:a2:17:5f:56:56:93:2b:21:5c:fd:d1:a9:52:06:0b:9a:5e: 05:21:67:77:b5:c3:ef:ec:53:85:b6:cc:78:be:c5:a0:a9:eb: 1e:0b:99:64:b6:90:90:5e:b6:2c:9a:9d:5a:bc:78:47:4f:aa: 6d:59:6c:60:45:17:49:6d:ee:72:70:bb:98:70:da:3b:55:98: 06:b6:04:1c:93:10:a4:11:f8:f3:fe:6c:f0:3e:fc:5f:29:3e: f5:d0:64:ff:fd:80:2f:39:7d:5b:02:5d:6e:b0:1a:95:03:1c: a1:50:08:11:e4:af:92:5f:46:6e:1a:a6:d9:86:fd:d4:09:b9: 7a:3f:f9:a6:77:30:52:88:7f:f9:e3:46:77:ea:07:cd:7d:e4: 25:f3:9c:d1:f5:11:e3:e3:0a:66:0c:9c:45:5c:e7:3d:13:e0: 5d:57:37:b9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMd+z4JnlYWCi5xcmhKyz5Av00WowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJG ODZEQTZFODAeFw0yMzA5MzAxNzU1MDFaFw0yNDA5MjgxODAwMDFaMDMxMTAvBgNV BAMTKDg2MzVFN0YxMjlBOTUwRkQzMTQyREYyNjlEOTQ1QTA4NEQ2QTJFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWheHHn2vFIUc6cDrmYF15+k2 c/LGThGw7e9c/c4u+wfhxYrFid2e2XIIH34cpJlqFATkRkvWmvjcgSIeD+c7Lin8 ROac1g7I3fV/e8DOkzqn+pCLIgqUuMCbA7xKJlc8fbgrTfGYxXWT1K/fNDgh16/F jrbZErNEs+5BLKXJNfkr7lvDewf+a+BFCr2ybDnSPLJPrLcugMqjLakTQ9N0OpzB U2Sv3Jyd6yJMdRmp43l7MmAv6+7JTVqcYc6g0u3inqY9fyxCQwbTXuQBPQz8OWL6 SGR/33cOlvhPtP0XcgOy4FBfHaBbJrBsi8/pOJ2jY/qfkyfplWI1LhYMiyoDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhjXn8SmpUP0xQt8mnZRaCE1qLvIwHwYDVR0j BBgwFoAUWA9hwjpIV74jCV4GD+NmQvhtpugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDBmOWNjNy00YTY5LTRjOWUtYmJhNi00ZDlhYmI1NmVmZjYvMC81ODBGNjFDMjNB NDg1N0JFMjMwOTVFMDYwRkUzNjY0MkY4NkRBNkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJGODZE QTZFOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwMGY5Y2M3LTRhNjktNGM5ZS1i YmE2LTRkOWFiYjU2ZWZmNi8wLzMxMzAzMzJlMzEzNzMzMmUzMjMzMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzczMDM4Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnreYwDQYJ KoZIhvcNAQELBQADggEBAAJFy0fft+Ec+2B5v5rWj0zA/rkYYHt0innLTSPOC0ZU FZ3+agu2nReDrUDOZLMliVm0C7SVxtZ8ZlCXHcjru6evgsFASSclAg5tqT+veU0h vSj+qjap7N8llcWiF19WVpMrIVz90alSBguaXgUhZ3e1w+/sU4W2zHi+xaCp6x4L mWS2kJBetiyanVq8eEdPqm1ZbGBFF0lt7nJwu5hw2jtVmAa2BByTEKQR+PP+bPA+ /F8pPvXQZP/9gC85fVsCXW6wGpUDHKFQCBHkr5JfRm4aptmG/dQJuXo/+aZ3MFKI f/njRnfqB8195CXznNH1EePjCmYMnEVc5z0T4F1XN7k= -----END CERTIFICATE-----Generated at Fri May 31 23:52:40 2024 by rpki-client on console-fra.rpki-client.org