$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3130332e3233342e3231362e302f32342d3234203d3e203338373638.roa File: 3130332e3233342e3231362e302f32342d3234203d3e203338373638.roa (raw, json) Hash identifier: 0og6LqOvscL5bqMU9oqhXDxHc0Jz2wGU+NOJXu7gMUs= Subject key identifier: C4:79:CD:43:56:FF:1F:D9:6F:CD:A5:09:77:94:D2:59:83:FD:BA:FE Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 1AB6229655F97D3005BB89235D9CA063F77249E4 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3130332e3233342e3231362e302f32342d3234203d3e203338373638.roa Signing time: Fri 24 Nov 2023 09:00:01 +0000 ROA not before: Fri 24 Nov 2023 08:55:01 +0000 ROA not after: Fri 22 Nov 2024 09:00:01 +0000 asID: 38768 IP address blocks: 103.234.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 14:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b6:22:96:55:f9:7d:30:05:bb:89:23:5d:9c:a0:63:f7:72:49:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Nov 24 08:55:01 2023 GMT Not After : Nov 22 09:00:01 2024 GMT Subject: CN=C479CD4356FF1FD96FCDA5097794D25983FDBAFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:13:f1:09:26:3f:b3:9e:38:0d:0c:72:5d: 39:cc:6b:04:09:53:a9:5c:39:80:50:c0:a5:32:61: 75:a4:dd:22:d8:b3:ce:55:2f:b7:cb:f6:09:1b:20: 05:3d:23:68:b0:94:38:98:fc:12:e8:ae:06:27:63: 9e:2f:3d:23:ad:9c:64:6d:b4:8f:48:38:41:5e:3b: 5c:c8:72:ef:66:b7:8f:32:e1:55:08:75:ac:53:16: 39:26:41:b2:f8:23:be:47:03:ec:c9:e7:95:f7:75: 01:24:a9:17:86:96:f4:dc:4d:39:64:2f:fb:f6:91: 05:c6:18:8a:95:44:65:20:3c:bd:cf:a3:cd:ea:67: 38:c8:35:e6:34:0a:3d:c9:d7:37:86:6c:8c:09:b2: fb:cf:9d:2e:1a:e1:dc:f3:7a:66:9a:da:0d:d2:93: c3:3c:a9:9f:65:84:8c:c1:d6:22:92:4a:ef:23:bb: e3:2d:c3:cc:50:78:89:cb:7e:9e:74:c0:7a:bb:9c: ea:23:32:3f:2a:97:d9:e2:e0:35:1b:b1:47:03:56: 46:cd:fc:88:f4:d0:71:18:14:4a:fc:7e:bc:1a:c6: dd:25:e2:f3:af:87:64:5e:12:5e:15:8c:0b:b2:43: 36:45:88:c2:d9:89:81:ad:fe:d2:34:26:02:d8:67: d0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:79:CD:43:56:FF:1F:D9:6F:CD:A5:09:77:94:D2:59:83:FD:BA:FE X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3130332e3233342e3231362e302f32342d3234203d3e203338373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.216.0/24 Signature Algorithm: sha256WithRSAEncryption 68:71:d0:50:48:33:cc:94:36:8f:88:94:51:48:83:0f:c0:6f: c3:ab:9d:bf:42:e3:e3:f0:3c:80:ab:89:4e:4c:ee:90:a7:06: 2d:86:50:61:ca:d3:30:52:61:ec:f4:82:51:f2:f6:81:62:51: d1:63:d9:6c:c5:43:05:f0:55:a7:de:d9:cf:50:25:f0:3c:29: df:71:37:e8:34:36:af:e7:b8:67:71:f6:c1:f4:c2:4d:66:ee: 0b:3d:07:28:3d:7e:86:6a:67:07:a3:57:03:d5:ac:f0:85:6c: 3a:68:b1:8a:1d:d0:31:1f:08:1d:a7:68:cc:34:10:5d:a8:c8: 09:a7:3c:5f:c5:53:9f:96:53:ed:f7:0b:24:49:2a:c1:94:1c: b7:c5:92:2d:a2:3f:8b:15:ea:45:90:39:10:0e:97:4a:6f:48: 74:12:fc:ec:07:a7:a2:aa:42:6d:dd:37:e7:e1:b1:e1:79:ae: 3c:cf:b6:77:a7:a7:1b:3c:07:77:ac:84:1e:81:d4:05:79:71: d0:81:7c:ec:2e:db:d5:09:18:66:2d:a0:89:fc:4f:5d:f7:e3: 37:d6:b9:0d:65:47:0f:d9:2e:c0:66:8f:bf:1d:c6:1a:89:ec: 02:ed:5f:58:3c:54:f0:d3:3b:a0:7b:84:cd:a4:89:97:18:93: 6f:cf:5a:ee -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGrYillX5fTAFu4kjXZygY/dySeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yMzExMjQwODU1MDFaFw0yNDExMjIwOTAwMDFaMDMxMTAvBgNV BAMTKEM0NzlDRDQzNTZGRjFGRDk2RkNEQTUwOTc3OTREMjU5ODNGREJBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV3RPxCSY/s544DQxyXTnMawQJ U6lcOYBQwKUyYXWk3SLYs85VL7fL9gkbIAU9I2iwlDiY/BLorgYnY54vPSOtnGRt tI9IOEFeO1zIcu9mt48y4VUIdaxTFjkmQbL4I75HA+zJ55X3dQEkqReGlvTcTTlk L/v2kQXGGIqVRGUgPL3Po83qZzjINeY0Cj3J1zeGbIwJsvvPnS4a4dzzemaa2g3S k8M8qZ9lhIzB1iKSSu8ju+Mtw8xQeInLfp50wHq7nOojMj8ql9ni4DUbsUcDVkbN /Ij00HEYFEr8frwaxt0l4vOvh2ReEl4VjAuyQzZFiMLZiYGt/tI0JgLYZ9BPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUxHnNQ1b/H9lvzaUJd5TSWYP9uv4wHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzAzMzJlMzIzMzM0MmUzMjMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+rYMA0GCSqG SIb3DQEBCwUAA4IBAQBocdBQSDPMlDaPiJRRSIMPwG/Dq52/QuPj8DyAq4lOTO6Q pwYthlBhytMwUmHs9IJR8vaBYlHRY9lsxUMF8FWn3tnPUCXwPCnfcTfoNDav57hn cfbB9MJNZu4LPQcoPX6GamcHo1cD1azwhWw6aLGKHdAxHwgdp2jMNBBdqMgJpzxf xVOfllPt9wskSSrBlBy3xZItoj+LFepFkDkQDpdKb0h0EvzsB6eiqkJt3Tfn4bHh ea48z7Z3p6cbPAd3rIQegdQFeXHQgXzsLtvVCRhmLaCJ/E9d9+M31rkNZUcP2S7A Zo+/HcYaiewC7V9YPFTw0zuge4TNpImXGJNvz1ru -----END CERTIFICATE-----Generated at Thu May 2 14:39:53 2024 by rpki-client on console-ams.rpki-client.org