$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa File: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (raw, json) Hash identifier: sSUnRHcfEKhbCtUq7QacseV204H0/lr6GvDERaP4OHA= Subject key identifier: 12:A7:1D:6D:5A:D9:7F:AF:90:B1:E8:D4:DE:32:2E:9E:0F:94:9B:0E Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 2F2D2D5BB9D5D4B2B866003E623CD8F3FA6227DE Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa Signing time: Mon 31 Jul 2023 00:08:12 +0000 ROA not before: Mon 31 Jul 2023 00:03:12 +0000 ROA not after: Mon 29 Jul 2024 00:08:12 +0000 asID: 136869 IP address blocks: 103.104.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2d:2d:5b:b9:d5:d4:b2:b8:66:00:3e:62:3c:d8:f3:fa:62:27:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Jul 31 00:03:12 2023 GMT Not After : Jul 29 00:08:12 2024 GMT Subject: CN=12A71D6D5AD97FAF90B1E8D4DE322E9E0F949B0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:f5:ef:af:6d:0e:42:fb:00:db:47:42:17: 28:70:b4:2c:f5:c3:80:cd:1f:bf:e2:1c:3e:f0:ce: 1d:35:fd:a7:66:a8:74:ba:9f:a2:31:c0:76:ac:3a: a7:1e:0c:6b:73:7b:2f:68:5a:c9:db:3a:04:e5:cc: 0c:7d:4a:66:65:3e:12:d3:e7:4e:48:9e:fe:48:76: 74:9f:54:66:20:44:d4:de:3e:79:13:a8:17:ff:78: b1:64:a0:54:35:f2:f2:5d:4e:3c:d2:f5:a7:d8:53: 75:cd:d7:64:7f:69:b6:86:2d:d8:3c:55:da:90:f4: 77:a8:76:04:f0:74:26:7c:35:15:f4:05:17:78:4e: 3b:b6:da:50:7b:82:31:38:f8:02:93:78:40:fe:8f: a8:2c:75:2f:23:93:95:bc:3c:00:63:47:5e:ac:19: 00:e7:1e:78:b6:79:a8:92:86:26:97:5e:a8:c6:08: c3:44:a3:45:5d:95:3f:19:9c:6c:b9:9b:95:66:fc: 8b:83:93:6b:0a:7b:ce:c4:f1:a9:96:54:d5:a1:f1: 36:52:b4:de:ea:80:f1:a0:69:71:71:b2:21:df:a5: 4e:e7:1e:6a:db:1e:d6:e0:ce:13:4c:25:82:2b:9e: 4a:eb:7c:f9:ba:21:cc:15:31:ec:16:09:dc:ed:d3: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A7:1D:6D:5A:D9:7F:AF:90:B1:E8:D4:DE:32:2E:9E:0F:94:9B:0E X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.206.0/24 Signature Algorithm: sha256WithRSAEncryption 55:97:e0:3c:7e:8e:74:b9:56:0a:85:cd:ad:df:e4:eb:60:ad: 48:21:e2:92:3c:91:9c:d7:86:95:da:48:84:13:91:39:2d:e3: 16:40:7c:6e:0e:9e:99:23:d6:83:07:29:23:77:5d:c6:5a:dd: 40:c7:c1:2d:30:70:4e:6e:b6:59:08:f1:5d:98:cf:c2:46:4d: 72:99:9f:c5:02:6f:b4:d3:bd:fc:01:88:3c:b8:87:d8:a6:6f: e7:85:d8:da:1c:11:7b:70:97:41:6b:c7:b7:04:11:c9:a8:83: 62:64:57:78:2d:4e:27:2d:9f:bd:4d:7f:57:3d:c3:10:07:15: fc:0e:ee:d1:e7:32:68:3a:7e:b9:05:8f:53:09:aa:61:a8:86: be:8a:2e:83:4e:7d:57:cf:c4:88:57:e2:d0:46:27:5e:41:43: c4:f6:28:35:77:fb:45:44:33:f8:17:ef:aa:79:ca:f0:c7:49: 28:fa:63:ed:bb:24:50:6d:b9:57:30:a1:b0:4c:78:f7:3a:e9: 6e:70:fb:8c:06:25:73:7a:a7:42:3c:45:d6:54:03:fc:45:88: 20:cb:2c:b2:38:db:e6:b1:69:4f:7d:61:53:d9:b2:a0:76:f1: c6:fa:28:03:0f:d7:9a:16:29:06:eb:18:69:04:de:4b:23:00: f7:20:89:ac -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULy0tW7nV1LK4ZgA+YjzY8/piJ94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yMzA3MzEwMDAzMTJaFw0yNDA3MjkwMDA4MTJaMDMxMTAvBgNV BAMTKDEyQTcxRDZENUFEOTdGQUY5MEIxRThENERFMzIyRTlFMEY5NDlCMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsE/Xvr20OQvsA20dCFyhwtCz1 w4DNH7/iHD7wzh01/admqHS6n6IxwHasOqceDGtzey9oWsnbOgTlzAx9SmZlPhLT 505Inv5IdnSfVGYgRNTePnkTqBf/eLFkoFQ18vJdTjzS9afYU3XN12R/abaGLdg8 VdqQ9HeodgTwdCZ8NRX0BRd4Tju22lB7gjE4+AKTeED+j6gsdS8jk5W8PABjR16s GQDnHni2eaiShiaXXqjGCMNEo0VdlT8ZnGy5m5Vm/IuDk2sKe87E8amWVNWh8TZS tN7qgPGgaXFxsiHfpU7nHmrbHtbgzhNMJYIrnkrrfPm6IcwVMewWCdzt06LFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUEqcdbVrZf6+QsejU3jIung+Umw4wHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyMzFlNmIxLTE4NDEtNDc2ZC1i NDZiLWI0NGI5Y2I5NjhiMC8wLzMxMzAzMzJlMzEzMDM0MmUzMjMwMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM2Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnaM4wDQYJ KoZIhvcNAQELBQADggEBAFWX4Dx+jnS5VgqFza3f5OtgrUgh4pI8kZzXhpXaSIQT kTkt4xZAfG4Onpkj1oMHKSN3XcZa3UDHwS0wcE5utlkI8V2Yz8JGTXKZn8UCb7TT vfwBiDy4h9imb+eF2NocEXtwl0Frx7cEEcmog2JkV3gtTictn71Nf1c9wxAHFfwO 7tHnMmg6frkFj1MJqmGohr6KLoNOfVfPxIhX4tBGJ15BQ8T2KDV3+0VEM/gX76p5 yvDHSSj6Y+27JFBtuVcwobBMePc66W5w+4wGJXN6p0I8RdZUA/xFiCDLLLI42+ax aU99YVPZsqB28cb6KAMP15oWKQbrGGkE3ksjAPcgiaw= -----END CERTIFICATE-----Generated at Sat Jun 1 09:09:44 2024 by rpki-client on console-fra.rpki-client.org