$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa File: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: 2PTof7HgDvQH3uMSjoYHvBJnE/tgljHy1CUnxbc2tLE= Subject key identifier: 59:E1:F8:9A:EA:7C:B7:04:C8:0A:81:09:D7:6D:5C:19:D9:7E:21:40 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 3933892E701E4044F4BBC05CDCEB4C81C8282E14 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa Signing time: Mon 01 Jul 2024 01:06:10 +0000 ROA not before: Mon 01 Jul 2024 01:01:10 +0000 ROA not after: Mon 30 Jun 2025 01:06:10 +0000 asID: 58477 IP address blocks: 103.56.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:33:89:2e:70:1e:40:44:f4:bb:c0:5c:dc:eb:4c:81:c8:28:2e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Jul 1 01:01:10 2024 GMT Not After : Jun 30 01:06:10 2025 GMT Subject: CN=59E1F89AEA7CB704C80A8109D76D5C19D97E2140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:35:ca:ae:4a:dc:0c:a3:c5:67:57:82:6b: f1:0e:8c:db:c4:5b:c0:ba:dc:cc:b4:48:6d:64:c7: 83:81:5d:40:61:39:55:c3:e6:83:0f:38:3b:55:cc: 8b:98:47:31:82:6c:27:dd:58:e2:3e:0f:b2:3f:ec: f3:b5:59:ed:c0:33:b9:5c:8a:68:75:92:5a:ac:4c: a7:0f:e4:59:cb:4f:00:ae:5e:74:d3:3a:26:9d:53: c3:59:d6:76:f5:20:3a:1a:2f:d1:02:2d:e7:58:1e: 35:95:38:8b:da:bb:49:a6:18:74:28:0d:5d:3b:35: e1:62:1f:ec:ab:0a:d0:9d:0e:ed:0e:91:67:10:a3: 92:9c:7c:de:08:e4:87:9e:e3:47:3d:e4:6c:c1:cb: db:5c:af:3a:a1:24:72:8e:52:03:1c:85:c7:d5:37: 36:f0:34:d9:a9:d6:53:c0:6f:6f:c8:1f:4a:84:3c: 81:b3:62:f2:2c:e7:57:d6:4d:94:db:31:18:d6:4e: 01:f6:8a:89:92:3e:68:15:71:b7:28:55:b6:53:d5: d7:09:52:66:bd:19:89:e7:70:bf:2b:3f:11:5a:c5: 85:72:6b:88:a8:4f:ad:3b:98:0f:d2:b4:a7:8d:5b: dc:c5:9a:cc:07:c0:68:91:4a:de:34:af:3e:16:bb: fb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E1:F8:9A:EA:7C:B7:04:C8:0A:81:09:D7:6D:5C:19:D9:7E:21:40 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.205.0/24 Signature Algorithm: sha256WithRSAEncryption 71:0d:5b:61:c8:9e:26:cb:71:1f:3c:bb:58:1b:ef:70:ad:85: 4a:fb:1f:ef:a0:4f:aa:7b:ac:74:30:3c:87:6a:9f:83:c1:ec: a4:94:50:ba:9c:0c:1f:89:e4:5e:6e:b4:a8:49:11:37:67:28: cf:76:9b:7b:81:75:07:b9:49:f9:2c:17:32:06:ac:bf:e4:dd: 4c:6d:57:a8:e6:2a:df:a5:06:e6:90:17:53:32:15:1f:71:19: cd:f5:2d:20:80:a4:9e:0c:e4:0f:39:d6:4f:52:9d:c4:08:d6: 02:e8:f3:cb:ee:12:3c:92:a5:1b:d8:7a:b7:e7:e5:f8:a4:07: 83:ed:b7:76:dd:60:51:b9:f4:69:31:63:5a:d7:59:d9:fd:23: 0b:89:c1:53:59:69:64:96:aa:03:36:62:17:14:cc:93:43:38: bf:96:34:0e:78:06:26:3e:25:9c:01:c4:59:5e:a5:76:12:ac: f8:81:92:6f:f6:33:33:35:80:d6:20:2c:6a:ef:60:20:84:4f: 61:c8:b3:62:03:43:a8:a1:47:02:d1:e4:94:e7:e8:93:2e:a6: b8:48:46:ea:d6:ea:b0:bf:80:fe:f0:67:62:ce:a4:e5:09:ab: a4:77:94:b3:ff:69:45:b6:cf:8c:2c:51:9a:75:e2:f5:15:94: ac:6c:e0:75 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOTOJLnAeQET0u8Bc3OtMgcgoLhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNDA3MDEwMTAxMTBaFw0yNTA2MzAwMTA2MTBaMDMxMTAvBgNV BAMTKDU5RTFGODlBRUE3Q0I3MDRDODBBODEwOUQ3NkQ1QzE5RDk3RTIxNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaCDXKrkrcDKPFZ1eCa/EOjNvE W8C63My0SG1kx4OBXUBhOVXD5oMPODtVzIuYRzGCbCfdWOI+D7I/7PO1We3AM7lc imh1klqsTKcP5FnLTwCuXnTTOiadU8NZ1nb1IDoaL9ECLedYHjWVOIvau0mmGHQo DV07NeFiH+yrCtCdDu0OkWcQo5KcfN4I5Iee40c95GzBy9tcrzqhJHKOUgMchcfV NzbwNNmp1lPAb2/IH0qEPIGzYvIs51fWTZTbMRjWTgH2iomSPmgVcbcoVbZT1dcJ Uma9GYnncL8rPxFaxYVya4ioT607mA/StKeNW9zFmswHwGiRSt40rz4Wu/ubAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWeH4mup8twTICoEJ121cGdl+IUAwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4zTANBgkqhkiG 9w0BAQsFAAOCAQEAcQ1bYcieJstxHzy7WBvvcK2FSvsf76BPqnusdDA8h2qfg8Hs pJRQupwMH4nkXm60qEkRN2coz3abe4F1B7lJ+SwXMgasv+TdTG1XqOYq36UG5pAX UzIVH3EZzfUtIICkngzkDznWT1KdxAjWAujzy+4SPJKlG9h6t+fl+KQHg+23dt1g Ubn0aTFjWtdZ2f0jC4nBU1lpZJaqAzZiFxTMk0M4v5Y0DngGJj4lnAHEWV6ldhKs +IGSb/YzMzWA1iAsau9gIIRPYcizYgNDqKFHAtHklOfoky6muEhG6tbqsL+A/vBn Ys6k5QmrpHeUs/9pRbbPjCxRmnXi9RWUrGzgdQ== -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org