$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/3130332e3139312e35322e302f32332d3234203d3e2034383030.roa File: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (raw, json) Hash identifier: cATIwu8VwriPEc7AqpkA6csz1riaIXFPiZnldLh9hoI= Subject key identifier: A9:22:2B:78:52:61:33:B4:71:69:44:2F:5E:67:4B:EF:72:39:58:E5 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 7EE29F350DDB14DBFD02227F98BF84A6B624219E Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/3130332e3139312e35322e302f32332d3234203d3e2034383030.roa Signing time: Tue 28 May 2024 08:00:01 +0000 ROA not before: Tue 28 May 2024 07:55:01 +0000 ROA not after: Tue 27 May 2025 08:00:01 +0000 asID: 4800 IP address blocks: 103.191.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e2:9f:35:0d:db:14:db:fd:02:22:7f:98:bf:84:a6:b6:24:21:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: May 28 07:55:01 2024 GMT Not After : May 27 08:00:01 2025 GMT Subject: CN=A9222B78526133B47169442F5E674BEF723958E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:97:3a:a7:86:43:d9:df:b9:6a:78:c6:0f: d2:82:b8:1c:d7:e7:44:bd:4c:ae:c4:79:09:2c:ee: 88:fd:81:0e:b9:1a:72:1a:2b:ea:52:08:b3:ce:93: 57:c6:f7:a4:5c:cb:3d:11:86:1a:62:43:ac:8a:dc: ae:90:74:af:3a:27:b1:b6:57:dc:b7:4f:eb:aa:2f: 47:fb:52:12:24:78:25:cd:49:23:86:d2:bc:d6:d8: 51:8b:d6:4c:e5:18:b7:a4:d5:7f:bb:b4:1a:15:e5: 27:72:1f:d2:61:42:bc:b1:9f:47:c7:70:ec:95:19: 0c:01:77:19:b4:0b:ca:4e:6b:7e:84:8b:9d:47:8c: 4f:85:cb:96:ec:b2:22:0b:1d:61:a9:f2:3a:3d:18: 89:63:39:74:9f:8a:d8:5c:4c:70:70:3b:4e:2c:7b: 3e:76:66:97:a6:27:9a:83:58:b2:ef:eb:23:71:b7: 27:1f:90:cf:e1:73:ed:7f:ef:81:dc:22:27:3d:68: fa:bc:ce:d3:6e:30:86:5c:5e:d9:51:a9:27:c0:52: 02:61:98:1b:57:3e:17:0a:57:f7:a3:25:55:98:95: 05:52:ea:3d:50:fd:8c:5c:2b:63:b5:44:b0:f0:09: b2:d3:4b:69:17:8d:de:27:c2:d3:62:a6:49:53:ab: f0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:22:2B:78:52:61:33:B4:71:69:44:2F:5E:67:4B:EF:72:39:58:E5 X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/3130332e3139312e35322e302f32332d3234203d3e2034383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.52.0/23 Signature Algorithm: sha256WithRSAEncryption 99:37:01:af:c9:c9:b1:53:fe:61:47:3e:fd:8b:b7:2e:51:1b: ef:ff:b9:48:ef:c8:c9:be:0f:66:74:a0:99:16:a9:cf:a8:33: aa:bb:fe:de:8e:32:d7:ad:4e:39:77:82:76:e9:5a:f7:61:f2: be:68:7d:63:c7:77:0d:a8:d4:99:3e:3e:65:c6:cf:dd:cc:b4: 14:2c:c9:43:ef:85:19:16:ea:11:04:e9:b0:47:1c:d4:47:f6: 25:c9:f3:14:ae:64:a0:14:f5:01:d9:cf:0c:b2:c8:1c:ad:c6: 6d:d7:45:53:f5:60:34:0d:fb:06:4e:8e:0b:cf:e2:ed:35:67: 92:2f:e7:f6:98:71:f3:c2:3f:22:c3:60:65:30:29:08:9d:12: ed:0e:87:ad:ee:1b:08:05:f0:e3:6b:20:4b:66:89:30:25:3a: b7:9e:f9:f1:bb:e3:dc:47:6e:a7:e3:a3:e7:c9:c0:53:a6:ab: 0d:df:2b:f6:9c:43:f7:90:94:8e:b7:c1:30:8a:c8:e8:bd:a1: c8:fd:b9:57:3c:18:0b:86:bf:7e:99:df:96:52:c3:f4:66:b8: b6:74:05:53:4f:ac:d0:dd:e7:89:00:98:45:6e:bc:c1:1e:8b: 16:ab:1d:18:0c:0d:37:98:50:f4:7b:72:c6:ce:dd:1b:09:85: f4:77:54:ce -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUfuKfNQ3bFNv9AiJ/mL+EprYkIZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNDA1MjgwNzU1MDFaFw0yNTA1MjcwODAwMDFaMDMxMTAvBgNV BAMTKEE5MjIyQjc4NTI2MTMzQjQ3MTY5NDQyRjVFNjc0QkVGNzIzOTU4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCokZc6p4ZD2d+5anjGD9KCuBzX 50S9TK7EeQks7oj9gQ65GnIaK+pSCLPOk1fG96Rcyz0RhhpiQ6yK3K6QdK86J7G2 V9y3T+uqL0f7UhIkeCXNSSOG0rzW2FGL1kzlGLek1X+7tBoV5SdyH9JhQryxn0fH cOyVGQwBdxm0C8pOa36Ei51HjE+Fy5bssiILHWGp8jo9GIljOXSfithcTHBwO04s ez52ZpemJ5qDWLLv6yNxtycfkM/hc+1/74HcIic9aPq8ztNuMIZcXtlRqSfAUgJh mBtXPhcKV/ejJVWYlQVS6j1Q/YxcK2O1RLDwCbLTS2kXjd4nwtNipklTq/BVAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUqSIreFJhM7RxaUQvXmdL73I5WOUwHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5YWZkMzE1LWY0N2YtNGY2YS1i OGI1LTQ1YTIyODBiYmM4NS8wLzMxMzAzMzJlMzEzOTMxMmUzNTMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzODMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvzQwDQYJKoZIhvcN AQELBQADggEBAJk3Aa/JybFT/mFHPv2Lty5RG+//uUjvyMm+D2Z0oJkWqc+oM6q7 /t6OMtetTjl3gnbpWvdh8r5ofWPHdw2o1Jk+PmXGz93MtBQsyUPvhRkW6hEE6bBH HNRH9iXJ8xSuZKAU9QHZzwyyyBytxm3XRVP1YDQN+wZOjgvP4u01Z5Iv5/aYcfPC PyLDYGUwKQidEu0Oh63uGwgF8ONrIEtmiTAlOree+fG749xHbqfjo+fJwFOmqw3f K/acQ/eQlI63wTCKyOi9ocj9uVc8GAuGv36Z35ZSw/RmuLZ0BVNPrNDd54kAmEVu vMEeixarHRgMDTeYUPR7csbO3RsJhfR3VM4= -----END CERTIFICATE-----Generated at Sat Jun 1 17:05:10 2024 by rpki-client on console-fra.rpki-client.org