$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3130332e3233342e3231372e302f32342d3234203d3e203338373638.roa File: 3130332e3233342e3231372e302f32342d3234203d3e203338373638.roa (raw, json) Hash identifier: 0CBbvxQW+1fnwNH6fYK30CCv+tT5bCD4Fx8dfN6LxcU= Subject key identifier: 62:A0:D9:9A:FE:6A:E7:1C:9F:0A:19:D9:53:A8:3E:7D:01:36:68:B0 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 5DB727EBCDEC377B8F093C8A5B998F3DF0DCB53C Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3130332e3233342e3231372e302f32342d3234203d3e203338373638.roa Signing time: Wed 18 Oct 2023 03:01:49 +0000 ROA not before: Wed 18 Oct 2023 02:56:49 +0000 ROA not after: Wed 16 Oct 2024 03:01:49 +0000 asID: 38768 IP address blocks: 103.234.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 14:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b7:27:eb:cd:ec:37:7b:8f:09:3c:8a:5b:99:8f:3d:f0:dc:b5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Oct 18 02:56:49 2023 GMT Not After : Oct 16 03:01:49 2024 GMT Subject: CN=62A0D99AFE6AE71C9F0A19D953A83E7D013668B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:8b:72:6f:b8:9b:ba:63:1c:e4:45:3a:c7: 5a:e6:a6:aa:ce:4d:9e:2a:82:60:53:86:fb:d6:71: fd:e8:60:04:25:58:6a:86:c7:65:9a:7f:ff:a4:8e: b6:f3:69:d7:6f:16:24:a3:77:5e:01:f4:03:dc:c4: 97:f9:fc:63:83:61:9f:77:df:35:a8:d9:fb:87:6c: 0b:8b:d2:3b:1e:06:20:63:2e:7f:60:e2:3f:8a:0e: 18:b2:6c:41:18:17:be:cc:73:47:10:ab:df:3d:f8: 5b:da:e1:69:f9:89:35:cd:e2:b0:a1:af:6a:16:05: 3f:a5:ea:56:2d:de:6c:3a:ae:f4:3a:1e:73:ac:28: 9e:6c:66:b1:99:40:4f:cf:66:61:34:7c:58:d5:00: 28:70:93:e1:e2:0b:2e:83:0a:de:e3:de:98:7e:cd: 1f:72:11:2d:3d:e3:d7:f5:40:ab:cb:c1:96:59:ca: 90:b5:d5:81:7e:9b:fe:d9:ea:34:cf:5b:98:5c:36: e1:ce:43:72:cc:82:e7:b0:b0:e2:72:10:7e:4e:23: 66:c8:bb:3b:33:95:b0:a9:d4:6c:68:98:42:1c:29: 90:e8:8b:74:17:1d:85:2a:7c:26:7a:b9:60:9a:76: 97:ac:6f:79:a9:3d:4c:e0:fd:f9:25:06:d2:c2:e2: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A0:D9:9A:FE:6A:E7:1C:9F:0A:19:D9:53:A8:3E:7D:01:36:68:B0 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3130332e3233342e3231372e302f32342d3234203d3e203338373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.217.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:75:78:c9:d7:1b:8e:ad:7a:fc:76:a7:84:8c:20:7d:d3:6d: 84:99:39:b2:2b:41:66:21:78:4a:1f:10:d2:51:41:90:af:77: 97:49:3a:fc:fd:47:b8:da:ce:9f:10:3d:a5:ba:da:fe:d7:17: ae:1c:47:a8:d8:48:1c:a5:42:76:0c:1c:cb:42:bf:15:32:fd: 6a:a4:2e:42:4c:b4:5a:8d:1f:e4:a8:21:ff:11:63:3c:35:f5: 94:96:f1:6a:4e:02:64:09:af:18:7f:fc:48:44:c1:73:05:56: fb:17:6d:d9:40:31:61:3a:9c:2e:4e:31:4b:4d:52:7b:a1:13: d4:8b:4a:74:32:e4:cf:7e:ec:7e:fd:84:2f:e7:9d:f2:9c:94: 34:9f:75:d0:d6:c7:55:a8:23:b5:bc:0d:1a:01:97:34:1d:25: 75:a5:7f:2b:c4:c3:f7:42:f5:04:a2:e2:9c:93:b6:9d:87:fd: 19:af:9b:75:f4:26:7d:19:60:54:3e:ab:9d:f7:fd:74:19:c1: 11:8b:c1:32:e9:f1:9d:40:df:78:d2:98:be:56:c9:a0:8c:9a: 97:5f:66:8a:f0:00:a8:4b:ac:e6:f9:96:83:6b:22:ac:50:9d: c7:6f:26:d0:82:86:41:9b:62:4a:b2:08:14:8a:5f:01:0c:eb: 14:ac:40:35 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXbcn683sN3uPCTyKW5mPPfDctTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yMzEwMTgwMjU2NDlaFw0yNDEwMTYwMzAxNDlaMDMxMTAvBgNV BAMTKDYyQTBEOTlBRkU2QUU3MUM5RjBBMTlEOTUzQTgzRTdEMDEzNjY4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4Ityb7ibumMc5EU6x1rmpqrO TZ4qgmBThvvWcf3oYAQlWGqGx2Waf/+kjrbzaddvFiSjd14B9APcxJf5/GODYZ93 3zWo2fuHbAuL0jseBiBjLn9g4j+KDhiybEEYF77Mc0cQq989+Fva4Wn5iTXN4rCh r2oWBT+l6lYt3mw6rvQ6HnOsKJ5sZrGZQE/PZmE0fFjVAChwk+HiCy6DCt7j3ph+ zR9yES0949f1QKvLwZZZypC11YF+m/7Z6jTPW5hcNuHOQ3LMguewsOJyEH5OI2bI uzszlbCp1GxomEIcKZDoi3QXHYUqfCZ6uWCadpesb3mpPUzg/fklBtLC4qiNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYqDZmv5q5xyfChnZU6g+fQE2aLAwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzAzMzJlMzIzMzM0MmUzMjMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+rZMA0GCSqG SIb3DQEBCwUAA4IBAQAcdXjJ1xuOrXr8dqeEjCB9022EmTmyK0FmIXhKHxDSUUGQ r3eXSTr8/Ue42s6fED2lutr+1xeuHEeo2EgcpUJ2DBzLQr8VMv1qpC5CTLRajR/k qCH/EWM8NfWUlvFqTgJkCa8Yf/xIRMFzBVb7F23ZQDFhOpwuTjFLTVJ7oRPUi0p0 MuTPfux+/YQv553ynJQ0n3XQ1sdVqCO1vA0aAZc0HSV1pX8rxMP3QvUEouKck7ad h/0Zr5t19CZ9GWBUPqud9/10GcERi8Ey6fGdQN940pi+VsmgjJqXX2aK8ACoS6zm +ZaDayKsUJ3HbybQgoZBm2JKsggUil8BDOsUrEA1 -----END CERTIFICATE-----Generated at Thu May 2 14:31:46 2024 by rpki-client on console-fra.rpki-client.org