$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa File: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (raw, json) Hash identifier: KwtUaoClH3kiNpvEIWalSEf5bxo2cymUbkAJRaf/ygM= Subject key identifier: 70:DB:C8:B3:F4:A1:10:0B:9A:14:A9:DA:2E:5A:04:FE:59:5F:78:02 Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Certificate serial: 7CB1368DFD29B87005FB525E4C09B4F8F0B4ACFF Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa Signing time: Thu 30 May 2024 05:00:01 +0000 ROA not before: Thu 30 May 2024 04:55:01 +0000 ROA not after: Thu 29 May 2025 05:00:01 +0000 asID: 142375 IP address blocks: 103.171.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jul 2024 00:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b1:36:8d:fd:29:b8:70:05:fb:52:5e:4c:09:b4:f8:f0:b4:ac:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Validity Not Before: May 30 04:55:01 2024 GMT Not After : May 29 05:00:01 2025 GMT Subject: CN=70DBC8B3F4A1100B9A14A9DA2E5A04FE595F7802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:bb:cc:e6:72:13:86:0c:f4:4b:21:8e:d2: 84:c7:94:5b:94:72:0f:94:ad:fd:8a:29:74:de:a4: 56:52:f5:16:57:ef:05:96:97:83:7c:16:d5:f7:9d: 50:e4:21:33:ed:91:08:26:57:6a:6e:20:de:95:65: 2b:c5:38:ed:82:6f:53:7f:52:9b:1c:0c:1a:c2:a5: 4a:21:d9:d9:bf:2c:da:59:c5:71:fc:8b:a6:98:7e: fe:82:85:aa:98:38:f5:73:37:ce:72:80:b7:2e:55: 60:db:78:4b:38:f7:23:8f:89:3e:b3:d6:11:2d:51: fb:7c:18:55:3e:5d:fc:06:8a:cf:69:3f:f7:2f:67: d3:4c:d0:79:7c:dc:8a:b5:a0:20:ee:4f:15:f9:9b: 78:db:c7:1a:d3:78:bf:81:49:ac:8b:33:59:95:41: e2:66:89:7b:03:76:c7:05:3e:ed:5f:b5:ad:f3:1a: a9:50:0c:dd:60:cd:45:30:35:bb:85:e2:df:cd:b0: 22:be:47:31:a3:79:6d:0c:20:4d:5c:46:11:8b:f3: 69:e9:fb:05:0e:84:4e:c8:bf:5e:ce:a4:9b:e5:90: fc:f1:6b:dc:49:c9:9b:0a:7e:c4:5e:f2:99:e9:3f: dc:4b:84:23:b2:88:b2:89:75:95:72:ab:2c:55:c0: 6e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DB:C8:B3:F4:A1:10:0B:9A:14:A9:DA:2E:5A:04:FE:59:5F:78:02 X509v3 Authority Key Identifier: keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.183.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:bd:70:84:da:23:ea:af:50:1a:2e:d5:b2:69:85:f9:18:ef: 12:b7:8e:c1:d8:f9:4c:03:e7:e4:78:6c:b6:00:c0:e4:37:f0: 0d:c2:2f:16:06:24:1a:ed:21:e9:53:f2:6c:5c:c7:13:b6:a2: 9f:8f:00:8f:1a:5b:3c:53:19:07:e5:25:90:f3:5e:a9:b9:9f: ed:19:35:d3:d1:ce:55:cf:ca:4f:b4:a1:69:3b:50:10:95:4c: ef:86:47:72:3e:98:bf:a3:bc:55:b6:ee:98:6e:a4:e5:0e:d1: af:26:86:de:fe:cf:ef:3d:53:51:ed:45:f0:78:90:1b:8e:54: 64:3e:19:36:09:77:d8:2b:8f:6c:00:e1:c2:b1:bb:1a:13:7f: c0:fa:cb:33:37:fe:38:57:19:ad:df:57:48:58:3a:c4:40:56: 2d:d9:76:0c:2b:60:18:43:14:70:02:d6:48:f2:59:02:ea:be: 52:05:23:18:4d:95:14:93:c5:fe:a9:95:c0:a9:58:df:ed:fb: b5:63:10:f4:0b:73:fe:14:49:a1:25:ef:65:35:61:23:bc:a8: 56:a0:a0:28:78:ab:04:21:37:01:1f:e0:ca:66:60:54:a4:a2: 0a:f2:9c:52:60:a4:1c:e6:aa:23:0d:0c:d0:e6:4d:45:57:b5: a0:60:62:70 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUfLE2jf0puHAF+1JeTAm0+PC0rP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVG NjUxQkFBQTAeFw0yNDA1MzAwNDU1MDFaFw0yNTA1MjkwNTAwMDFaMDMxMTAvBgNV BAMTKDcwREJDOEIzRjRBMTEwMEI5QTE0QTlEQTJFNUEwNEZFNTk1Rjc4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCitLvM5nIThgz0SyGO0oTHlFuU cg+Urf2KKXTepFZS9RZX7wWWl4N8FtX3nVDkITPtkQgmV2puIN6VZSvFOO2Cb1N/ UpscDBrCpUoh2dm/LNpZxXH8i6aYfv6ChaqYOPVzN85ygLcuVWDbeEs49yOPiT6z 1hEtUft8GFU+XfwGis9pP/cvZ9NM0Hl83Iq1oCDuTxX5m3jbxxrTeL+BSayLM1mV QeJmiXsDdscFPu1fta3zGqlQDN1gzUUwNbuF4t/NsCK+RzGjeW0MIE1cRhGL82np +wUOhE7Iv17OpJvlkPzxa9xJyZsKfsRe8pnpP9xLhCOyiLKJdZVyqyxVwG5FAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUcNvIs/ShEAuaFKnaLloE/llfeAIwHwYDVR0j BBgwFoAUPs59Lpwv89XTDSlNdJLD/vZRuqowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzUwNWNiMy1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8zRUNFN0QyRTlD MkZGM0Q1RDMwRDI5NEQ3NDkyQzNGRUY2NTFCQUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVGNjUx QkFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UzNTA1Y2IzLWI1NWUtNDBlNC1h Yzc5LTYzNjU2MDZmNGVmOS8wLzMxMzAzMzJlMzEzNzMxMmUzMTM4MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnq7cwDQYJ KoZIhvcNAQELBQADggEBAF69cITaI+qvUBou1bJphfkY7xK3jsHY+UwD5+R4bLYA wOQ38A3CLxYGJBrtIelT8mxcxxO2op+PAI8aWzxTGQflJZDzXqm5n+0ZNdPRzlXP yk+0oWk7UBCVTO+GR3I+mL+jvFW27phupOUO0a8mht7+z+89U1HtRfB4kBuOVGQ+ GTYJd9grj2wA4cKxuxoTf8D6yzM3/jhXGa3fV0hYOsRAVi3ZdgwrYBhDFHAC1kjy WQLqvlIFIxhNlRSTxf6plcCpWN/t+7VjEPQLc/4USaEl72U1YSO8qFagoCh4qwQh NwEf4MpmYFSkogrynFJgpBzmqiMNDNDmTUVXtaBgYnA= -----END CERTIFICATE-----Generated at Fri Jun 28 17:08:01 2024 by rpki-client on console-ams.rpki-client.org