$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138372e302f32342d3234203d3e203538353533.roa File: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (raw, json) Hash identifier: hhhMabECIf6b6KedCfSDtqrQOqdzxljt0BiPGpjJpuQ= Subject key identifier: 41:DD:1C:22:8C:C7:19:6A:F4:43:F1:6C:77:AF:49:34:89:44:77:F1 Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 5CBAD539515CF1BD7C66ED30E51C2E03EF14CE22 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138372e302f32342d3234203d3e203538353533.roa Signing time: Mon 16 Oct 2023 15:25:52 +0000 ROA not before: Mon 16 Oct 2023 15:20:52 +0000 ROA not after: Mon 14 Oct 2024 15:25:52 +0000 asID: 58553 IP address blocks: 103.20.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ba:d5:39:51:5c:f1:bd:7c:66:ed:30:e5:1c:2e:03:ef:14:ce:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Oct 16 15:20:52 2023 GMT Not After : Oct 14 15:25:52 2024 GMT Subject: CN=41DD1C228CC7196AF443F16C77AF4934894477F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:84:81:81:9f:ef:82:be:74:15:94:91:c7: be:c2:7c:56:8b:ef:b5:62:88:67:5c:49:3f:f3:92: 09:f0:bb:6e:33:58:cc:e5:d4:e7:16:ca:6a:41:00: 2c:6e:08:35:0a:f2:f7:b6:fa:e8:0d:d9:96:c1:90: 74:ba:ba:9b:3a:b5:bf:45:f2:0b:97:81:d6:be:b9: a6:49:ed:2e:cc:2c:81:32:87:ea:60:b0:48:42:7b: 4d:90:14:03:1b:a9:7d:54:75:6c:38:b1:40:a5:35: 31:c6:65:eb:0a:68:6d:6d:ae:76:c0:ff:f7:c7:06: 78:7e:15:ae:7f:cc:4d:07:31:a7:65:ee:36:05:f6: 4c:15:c0:ba:ad:74:09:cb:81:af:82:96:3f:4c:7f: 2c:38:5b:fc:83:19:85:91:3c:f6:bd:92:d3:e7:04: ca:de:0e:ca:95:db:d3:84:73:8a:e3:6c:e7:49:2b: 65:12:88:e9:0e:0c:3b:51:7d:26:39:61:21:75:ac: 75:83:b4:50:15:4b:9f:a9:ba:e9:df:57:77:08:69: 77:1c:de:2c:c3:be:1a:36:8b:95:43:77:d6:71:45: 45:72:56:90:6d:16:7e:a0:a0:d2:b2:91:23:a8:49: 49:f4:47:7a:a9:4e:d8:0f:cf:cc:fe:70:80:14:5d: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DD:1C:22:8C:C7:19:6A:F4:43:F1:6C:77:AF:49:34:89:44:77:F1 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138372e302f32342d3234203d3e203538353533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.187.0/24 Signature Algorithm: sha256WithRSAEncryption b7:fc:9f:95:8b:bd:d8:a1:37:a5:fe:d2:2b:ac:31:0b:03:a4: 0a:b4:23:60:05:dc:19:37:9a:40:18:31:3f:cc:ae:f3:b2:ab: c6:c5:6a:55:3d:da:b9:5d:a7:ca:cc:95:cb:45:ee:5e:37:ea: ef:f6:f5:a4:48:ca:72:05:26:bf:84:5d:14:ed:49:16:05:e2: 0a:2d:ef:a4:e5:9d:68:dc:99:44:46:b3:06:2c:54:0d:78:3c: 2d:84:6f:a8:18:dc:01:78:c9:a2:f3:61:ba:f8:b5:99:e1:f4: 5b:68:bf:3b:3e:4f:17:64:da:a3:0c:df:a1:cf:5f:4a:6e:ef: 13:3c:8a:32:0a:6a:af:62:cb:00:39:95:ba:d1:46:d3:69:38: 6f:d3:77:a2:ab:6f:0e:75:77:f1:80:71:74:33:13:c3:85:d4: 1f:08:ff:f6:7b:0f:d0:ee:8b:ff:51:47:7d:59:e0:0c:dc:38: 66:61:9a:0c:0d:78:84:f7:89:9b:79:f2:8c:b7:2e:c6:ab:0f: e7:19:2c:3f:69:c2:5e:3a:6a:b1:bc:bb:33:06:ce:74:f7:20: 88:aa:ca:f4:72:f5:44:3e:91:04:92:c5:cc:09:e4:e2:87:7e: bd:28:72:a0:0d:19:38:61:fc:35:95:b9:fa:46:46:78:e1:e8: a3:6b:7c:f1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXLrVOVFc8b18Zu0w5RwuA+8UziIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yMzEwMTYxNTIwNTJaFw0yNDEwMTQxNTI1NTJaMDMxMTAvBgNV BAMTKDQxREQxQzIyOENDNzE5NkFGNDQzRjE2Qzc3QUY0OTM0ODk0NDc3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/YSBgZ/vgr50FZSRx77CfFaL 77ViiGdcST/zkgnwu24zWMzl1OcWympBACxuCDUK8ve2+ugN2ZbBkHS6ups6tb9F 8guXgda+uaZJ7S7MLIEyh+pgsEhCe02QFAMbqX1UdWw4sUClNTHGZesKaG1trnbA //fHBnh+Fa5/zE0HMadl7jYF9kwVwLqtdAnLga+Clj9Mfyw4W/yDGYWRPPa9ktPn BMreDsqV29OEc4rjbOdJK2USiOkODDtRfSY5YSF1rHWDtFAVS5+puunfV3cIaXcc 3izDvho2i5VDd9ZxRUVyVpBtFn6goNKykSOoSUn0R3qpTtgPz8z+cIAUXZ4dAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUQd0cIozHGWr0Q/Fsd69JNIlEd/EwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwOTczYmViLTY2YmEtNDhiYy05 Mzc0LTcyZDdmYjg5YzVhMy8wLzMxMzAzMzJlMzIzMDJlMzEzODM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcUuzANBgkqhkiG 9w0BAQsFAAOCAQEAt/yflYu92KE3pf7SK6wxCwOkCrQjYAXcGTeaQBgxP8yu87Kr xsVqVT3auV2nysyVy0XuXjfq7/b1pEjKcgUmv4RdFO1JFgXiCi3vpOWdaNyZREaz BixUDXg8LYRvqBjcAXjJovNhuvi1meH0W2i/Oz5PF2Taowzfoc9fSm7vEzyKMgpq r2LLADmVutFG02k4b9N3oqtvDnV38YBxdDMTw4XUHwj/9nsP0O6L/1FHfVngDNw4 ZmGaDA14hPeJm3nyjLcuxqsP5xksP2nCXjpqsby7MwbOdPcgiKrK9HL1RD6RBJLF zAnk4od+vShyoA0ZOGH8NZW5+kZGeOHoo2t88Q== -----END CERTIFICATE-----Generated at Fri Jun 21 15:51:02 2024 by rpki-client on console-ams.rpki-client.org