$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa File: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (raw, json) Hash identifier: sRkOxbp4vvd/17qMIh0ahjZ6ROJZxyt7BVseSxXIQzA= Subject key identifier: 12:B0:69:75:A5:A0:82:35:A7:80:A3:2E:C7:88:AE:47:CE:06:30:9B Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 58F3D23D4E734976A643D9FB5E5406228EE4D3FC Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa Signing time: Mon 31 Jul 2023 00:08:12 +0000 ROA not before: Mon 31 Jul 2023 00:03:12 +0000 ROA not after: Mon 29 Jul 2024 00:08:12 +0000 asID: 136869 IP address blocks: 103.104.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f3:d2:3d:4e:73:49:76:a6:43:d9:fb:5e:54:06:22:8e:e4:d3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Jul 31 00:03:12 2023 GMT Not After : Jul 29 00:08:12 2024 GMT Subject: CN=12B06975A5A08235A780A32EC788AE47CE06309B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:11:22:54:1a:92:0c:c9:13:e7:1c:71:df: e8:6e:fa:82:eb:06:82:ee:7a:65:00:f0:09:9f:05: 35:a9:2e:3b:2b:b2:12:a0:0e:16:c2:9f:2c:8b:30: 70:4f:e6:9c:d6:49:38:b3:5a:8b:66:c0:b1:d9:16: c7:be:92:a5:68:20:10:f2:cc:b5:a1:8d:44:fd:9d: b0:4d:7b:67:98:58:43:fc:f1:83:c6:e2:30:22:70: 69:d0:1a:43:b7:a6:08:76:aa:c3:34:77:ff:be:23: 96:5a:c0:1c:01:65:d1:20:ad:82:59:37:4f:fa:72: 0a:00:be:4d:03:87:2c:f1:12:f6:46:ec:09:3b:86: a2:31:69:c8:c2:f8:df:1d:41:6c:53:a0:0b:ee:95: c2:7a:5b:81:27:f3:6f:db:ba:2b:5d:1f:3b:30:29: 97:49:b7:0c:a9:e7:29:9a:d1:11:d0:1b:65:b8:d7: 3c:1b:6c:94:64:f2:33:99:97:55:da:3c:a3:e5:14: 99:81:c3:e1:0a:87:ac:b1:f4:1c:c5:20:cb:c9:67: 7d:6a:61:c5:13:97:72:82:ab:8b:8e:a3:68:c7:db: 8b:c1:21:bb:7a:6e:d5:9e:76:2b:47:c2:34:ad:c5: 46:db:f9:a8:80:71:b9:79:27:59:26:c6:f0:8f:40: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B0:69:75:A5:A0:82:35:A7:80:A3:2E:C7:88:AE:47:CE:06:30:9B X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.207.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:a2:be:36:a6:3c:9c:a4:d7:a6:6f:95:dd:ae:d4:9c:40:2e: 76:41:68:40:36:4d:a0:75:ab:85:9e:78:82:78:ed:0c:0a:38: a0:db:07:96:77:49:63:09:e6:48:3a:d6:cb:9d:b6:a3:c2:b5: 7a:50:b1:da:f3:92:cc:ac:09:33:c6:61:77:f8:9d:1a:65:47: d8:79:90:ba:18:1c:0c:03:9c:09:88:07:78:b1:15:0d:4d:a3: 9e:10:c0:37:de:38:ae:04:df:b0:43:cb:8d:a5:62:9d:f6:e1: de:ea:85:f9:09:e6:a2:56:7f:6e:af:da:52:89:76:f9:5a:61: 48:b4:31:bc:3f:95:b2:dc:c7:f1:c0:d7:86:25:e2:1b:2a:eb: 9b:e5:53:cc:0b:fd:50:c9:94:a1:8e:18:67:39:e9:ba:b0:20: 3a:ba:42:04:ae:7d:0c:f4:6b:da:e6:ed:8f:2d:af:8f:c8:43: ef:84:79:5f:59:6c:2d:e2:c8:bd:92:fd:e6:3e:00:fc:f4:eb: 15:39:1a:4b:2a:9d:5a:64:55:5d:a9:53:47:16:3d:6a:45:db: e0:ad:ca:35:d4:6b:92:b8:80:be:34:e3:36:ff:98:d9:de:ac: a3:3b:55:69:f8:b3:e9:33:0a:d6:27:9a:ed:5c:c9:7a:5e:23: 64:9a:7b:fe -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWPPSPU5zSXamQ9n7XlQGIo7k0/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yMzA3MzEwMDAzMTJaFw0yNDA3MjkwMDA4MTJaMDMxMTAvBgNV BAMTKDEyQjA2OTc1QTVBMDgyMzVBNzgwQTMyRUM3ODhBRTQ3Q0UwNjMwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98hEiVBqSDMkT5xxx3+hu+oLr BoLuemUA8AmfBTWpLjsrshKgDhbCnyyLMHBP5pzWSTizWotmwLHZFse+kqVoIBDy zLWhjUT9nbBNe2eYWEP88YPG4jAicGnQGkO3pgh2qsM0d/++I5ZawBwBZdEgrYJZ N0/6cgoAvk0DhyzxEvZG7Ak7hqIxacjC+N8dQWxToAvulcJ6W4En82/buitdHzsw KZdJtwyp5yma0RHQG2W41zwbbJRk8jOZl1XaPKPlFJmBw+EKh6yx9BzFIMvJZ31q YcUTl3KCq4uOo2jH24vBIbt6btWeditHwjStxUbb+aiAcbl5J1kmxvCPQDSvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUErBpdaWggjWngKMux4iuR84GMJswHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyMzFlNmIxLTE4NDEtNDc2ZC1i NDZiLWI0NGI5Y2I5NjhiMC8wLzMxMzAzMzJlMzEzMDM0MmUzMjMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM2Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnaM8wDQYJ KoZIhvcNAQELBQADggEBACqivjamPJyk16Zvld2u1JxALnZBaEA2TaB1q4WeeIJ4 7QwKOKDbB5Z3SWMJ5kg61sudtqPCtXpQsdrzksysCTPGYXf4nRplR9h5kLoYHAwD nAmIB3ixFQ1No54QwDfeOK4E37BDy42lYp324d7qhfkJ5qJWf26v2lKJdvlaYUi0 Mbw/lbLcx/HA14Yl4hsq65vlU8wL/VDJlKGOGGc56bqwIDq6QgSufQz0a9rm7Y8t r4/IQ++EeV9ZbC3iyL2S/eY+APz06xU5GksqnVpkVV2pU0cWPWpF2+CtyjXUa5K4 gL404zb/mNnerKM7VWn4s+kzCtYnmu1cyXpeI2Sae/4= -----END CERTIFICATE-----Generated at Sat Jun 1 11:46:17 2024 by rpki-client on console-ams.rpki-client.org