$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230362e302f32342d3234203d3e203538333937.roa File: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (raw, json) Hash identifier: 3UrV2joe91GVv5UrXaKyEVRXWlR7DvUIxt1TBGwvMGw= Subject key identifier: F3:60:F4:BE:DA:F5:79:AB:8D:88:52:8F:34:A6:05:35:ED:70:D2:63 Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 36349A18362FDFD72E9E4C4E8E6F639B96390A1B Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230362e302f32342d3234203d3e203538333937.roa Signing time: Fri 08 Dec 2023 21:00:01 +0000 ROA not before: Fri 08 Dec 2023 20:55:01 +0000 ROA not after: Fri 06 Dec 2024 21:00:01 +0000 asID: 58397 IP address blocks: 103.41.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 23:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:34:9a:18:36:2f:df:d7:2e:9e:4c:4e:8e:6f:63:9b:96:39:0a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Dec 8 20:55:01 2023 GMT Not After : Dec 6 21:00:01 2024 GMT Subject: CN=F360F4BEDAF579AB8D88528F34A60535ED70D263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:d5:3c:0a:f7:b0:f5:bc:9b:13:fe:72:a6: 9c:b0:9b:14:27:5f:f1:13:da:b6:79:90:41:9f:b6: e6:80:93:1a:f8:c2:83:26:d8:1d:5f:08:df:e5:19: 3d:5e:14:f1:5f:30:43:9a:73:fb:96:b8:09:0d:fe: 69:3c:a0:13:63:ab:95:60:2a:6e:cf:21:03:ce:d7: 0d:bb:ff:e8:e6:3f:3b:c9:aa:05:e5:eb:d8:7c:32: b6:a7:45:f2:25:ad:42:84:bf:51:4f:c8:da:c6:14: fb:1c:76:c0:77:65:c9:bd:21:64:b1:04:fa:42:91: 03:ac:0f:45:28:91:74:99:1e:37:90:67:aa:72:7b: 25:29:ef:4b:d0:37:f6:f7:85:24:81:76:b8:f8:65: 52:88:9b:a7:14:f2:7f:ef:6d:bf:ef:28:39:75:a4: 19:7a:ee:dd:4b:80:68:8c:db:ff:96:8a:59:d2:42: 96:34:e1:2e:65:0b:dd:08:32:30:97:87:36:e6:0d: 19:e5:ab:76:0c:af:0d:90:9e:ff:6c:ff:5e:36:96: 7e:c7:64:92:d2:69:90:29:3d:e5:25:02:7a:c0:8f: 2d:a4:6c:d5:20:7a:35:57:5b:e1:3e:31:a0:bc:33: de:ef:5e:8a:df:dd:69:6a:4a:be:78:52:16:e8:f8: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:60:F4:BE:DA:F5:79:AB:8D:88:52:8F:34:A6:05:35:ED:70:D2:63 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230362e302f32342d3234203d3e203538333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.206.0/24 Signature Algorithm: sha256WithRSAEncryption 69:2f:71:5d:18:49:ac:28:bb:0c:7a:d1:e1:41:27:10:7f:b1: 10:14:44:7e:21:ce:78:3d:41:33:c7:7c:be:c9:6b:6e:6f:cd: a0:1a:35:5b:4c:a2:ea:7c:8c:25:77:78:3f:ff:68:e8:3f:1c: 21:93:81:e7:f8:6f:4b:15:94:40:de:f6:95:b2:5a:b7:ea:c4: f5:13:6e:a5:3c:9e:3a:1b:1e:eb:f8:d5:db:0b:27:02:c3:9a: e3:3e:6e:cd:cb:8f:50:db:a5:c2:93:33:3d:65:a2:b1:e9:d3: c5:a8:d6:a4:5f:5f:72:ed:38:29:23:8a:5b:67:d3:a7:2f:98: 20:60:e7:40:9b:3c:3d:0f:b9:6b:05:f4:6c:a5:21:85:20:82: 3a:18:5c:0d:0a:4e:ab:74:72:aa:56:1c:f4:d3:67:a0:17:6a: d1:36:44:d8:e3:c9:4e:b4:c7:25:46:01:72:c5:41:c8:c8:5e: 1a:9d:1a:8d:3e:e4:58:0f:09:6e:9b:a3:3c:6a:4a:0b:ec:11: a9:91:32:b4:d2:84:fe:e9:52:8b:4f:3a:f9:2c:aa:c5:ef:6f: 88:4b:14:59:51:e6:a0:85:ef:80:e1:a2:ba:52:9b:f7:df:80: 62:d6:35:e1:f9:f3:5d:0f:5a:4d:a0:15:74:c2:6e:e3:82:ee: 1c:93:47:94 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNjSaGDYv39cunkxOjm9jm5Y5ChswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yMzEyMDgyMDU1MDFaFw0yNDEyMDYyMTAwMDFaMDMxMTAvBgNV BAMTKEYzNjBGNEJFREFGNTc5QUI4RDg4NTI4RjM0QTYwNTM1RUQ3MEQyNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLntU8Cvew9bybE/5yppywmxQn X/ET2rZ5kEGftuaAkxr4woMm2B1fCN/lGT1eFPFfMEOac/uWuAkN/mk8oBNjq5Vg Km7PIQPO1w27/+jmPzvJqgXl69h8MranRfIlrUKEv1FPyNrGFPscdsB3Zcm9IWSx BPpCkQOsD0UokXSZHjeQZ6pyeyUp70vQN/b3hSSBdrj4ZVKIm6cU8n/vbb/vKDl1 pBl67t1LgGiM2/+WilnSQpY04S5lC90IMjCXhzbmDRnlq3YMrw2Qnv9s/142ln7H ZJLSaZApPeUlAnrAjy2kbNUgejVXW+E+MaC8M97vXorf3WlqSr54Uhbo+JMFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU82D0vtr1eauNiFKPNKYFNe1w0mMwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJhNDVlLWY1ZGEtNDU4MS1i ZmU1LWMxNjE2YzMwZWZhYi8wLzMxMzAzMzJlMzQzMTJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcpzjANBgkqhkiG 9w0BAQsFAAOCAQEAaS9xXRhJrCi7DHrR4UEnEH+xEBREfiHOeD1BM8d8vslrbm/N oBo1W0yi6nyMJXd4P/9o6D8cIZOB5/hvSxWUQN72lbJat+rE9RNupTyeOhse6/jV 2wsnAsOa4z5uzcuPUNulwpMzPWWisenTxajWpF9fcu04KSOKW2fTpy+YIGDnQJs8 PQ+5awX0bKUhhSCCOhhcDQpOq3RyqlYc9NNnoBdq0TZE2OPJTrTHJUYBcsVByMhe Gp0ajT7kWA8JbpujPGpKC+wRqZEytNKE/ulSi086+Syqxe9viEsUWVHmoIXvgOGi ulKb99+AYtY14fnzXQ9aTaAVdMJu44LuHJNHlA== -----END CERTIFICATE-----Generated at Thu May 2 17:40:14 2024 by rpki-client on console-fra.rpki-client.org