$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa File: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (raw, json) Hash identifier: a7bbLvivN5h778OSusowuH24mo9x9m39VMDSk/dwR+U= Subject key identifier: 4B:AE:F1:AE:58:53:B1:8F:4E:E3:76:C5:66:1F:BD:6C:E6:94:33:3E Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 4B37FD955E68046C954D836848016D638C6B6FB5 Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa Signing time: Thu 16 May 2024 07:00:00 +0000 ROA not before: Thu 16 May 2024 06:55:00 +0000 ROA not after: Thu 15 May 2025 07:00:00 +0000 asID: 139460 IP address blocks: 103.166.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:37:fd:95:5e:68:04:6c:95:4d:83:68:48:01:6d:63:8c:6b:6f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: May 16 06:55:00 2024 GMT Not After : May 15 07:00:00 2025 GMT Subject: CN=4BAEF1AE5853B18F4EE376C5661FBD6CE694333E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:a9:dd:14:58:9d:61:67:34:21:2a:97:38: 19:f4:fb:e0:7c:98:49:90:b8:dc:08:bd:54:b1:52: fb:a1:d0:84:95:5f:0c:ed:2a:b9:da:2d:1b:27:84: fb:3a:f9:ce:0e:23:3b:32:69:f6:44:fb:c9:cd:6d: 79:e2:a6:f2:f2:7a:1b:c6:d5:33:db:7f:19:8d:62: 5b:f4:e4:00:86:c9:54:21:88:6e:25:28:3b:04:1f: 78:6e:ac:a0:98:11:d4:32:0f:45:07:b7:ec:a0:a1: f7:b5:0f:29:08:73:58:a7:26:f3:c9:90:3b:0e:28: 42:de:5e:0a:e5:b3:e1:a6:22:69:f0:a7:c9:b5:af: 1d:12:94:98:ed:75:f8:16:04:e5:1a:fa:a0:a7:8b: 58:f8:99:69:86:99:8c:fd:7f:39:2b:ec:14:da:5b: fc:ae:38:09:05:1e:0b:2d:eb:8f:56:a5:1d:08:f0: f1:7f:79:88:82:a7:a4:83:b3:97:18:0f:45:0c:e9: cb:ee:97:d2:aa:91:da:27:9f:4c:42:af:f5:ab:36: 4a:83:de:59:e7:c5:74:14:b4:d3:7b:96:f5:da:4c: 51:d9:8d:d9:fc:aa:d4:6e:c8:91:03:e6:f2:39:b7: 46:86:9a:c1:95:cb:cd:b1:b0:02:3f:ea:92:e5:85: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AE:F1:AE:58:53:B1:8F:4E:E3:76:C5:66:1F:BD:6C:E6:94:33:3E X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.48.0/23 Signature Algorithm: sha256WithRSAEncryption 26:3d:6f:59:f5:09:87:0b:d1:20:41:fb:13:cb:d2:87:b5:99: 89:01:61:7b:bc:9a:d5:9f:a6:7a:45:c6:de:4f:7c:98:63:4f: 3f:f8:76:28:09:18:ca:41:d0:58:8d:89:76:ef:ed:84:db:bd: f4:f6:90:cb:30:53:d7:ed:c8:4f:27:58:a5:6e:0c:b0:8f:c4: 91:c8:a9:94:3d:cd:77:45:03:95:00:03:03:dc:fc:1f:d1:2d: a3:c8:3c:ad:f7:60:24:9f:37:49:19:52:86:c1:e7:f3:95:7d: 5f:62:39:a1:13:e8:e4:58:6d:42:93:3a:ac:ac:f8:71:3b:59: fd:58:06:47:b4:46:f5:5a:ff:08:69:f7:06:9f:e2:96:ce:c2: 3b:b7:81:ed:e4:eb:95:39:b3:c2:94:30:bf:55:6f:41:7e:a3: ac:c6:32:51:f8:e4:95:22:f2:ff:de:1c:73:99:ed:da:cc:d8: f0:73:6f:c2:7b:ca:38:c1:68:29:dd:43:7b:62:2d:59:d6:93: 7a:f8:33:1a:38:6f:ad:45:c1:be:68:0d:73:3a:d3:77:b9:f2: 29:01:c9:9a:fd:47:6e:8e:30:3e:63:e6:81:41:43:07:3c:e3: e4:60:ea:0d:e7:03:19:db:aa:85:70:2e:16:fd:c9:44:b6:72: 12:ef:02:2e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSzf9lV5oBGyVTYNoSAFtY4xrb7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNDA1MTYwNjU1MDBaFw0yNTA1MTUwNzAwMDBaMDMxMTAvBgNV BAMTKDRCQUVGMUFFNTg1M0IxOEY0RUUzNzZDNTY2MUZCRDZDRTY5NDMzM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QandFFidYWc0ISqXOBn0++B8 mEmQuNwIvVSxUvuh0ISVXwztKrnaLRsnhPs6+c4OIzsyafZE+8nNbXnipvLyehvG 1TPbfxmNYlv05ACGyVQhiG4lKDsEH3hurKCYEdQyD0UHt+ygofe1DykIc1inJvPJ kDsOKELeXgrls+GmImnwp8m1rx0SlJjtdfgWBOUa+qCni1j4mWmGmYz9fzkr7BTa W/yuOAkFHgst649WpR0I8PF/eYiCp6SDs5cYD0UM6cvul9Kqkdonn0xCr/WrNkqD 3lnnxXQUtNN7lvXaTFHZjdn8qtRuyJED5vI5t0aGmsGVy82xsAI/6pLlhallAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUS67xrlhTsY9O43bFZh+9bOaUMz4wHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4YjYzZTdkLWE2MTctNGU4Yy1h ODIxLTYyMzk1NmQ0ZDRhZS8wLzMxMzAzMzJlMzEzNjM2MmUzNDM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6YwMA0GCSqG SIb3DQEBCwUAA4IBAQAmPW9Z9QmHC9EgQfsTy9KHtZmJAWF7vJrVn6Z6RcbeT3yY Y08/+HYoCRjKQdBYjYl27+2E27309pDLMFPX7chPJ1ilbgywj8SRyKmUPc13RQOV AAMD3Pwf0S2jyDyt92AknzdJGVKGwefzlX1fYjmhE+jkWG1CkzqsrPhxO1n9WAZH tEb1Wv8IafcGn+KWzsI7t4Ht5OuVObPClDC/VW9BfqOsxjJR+OSVIvL/3hxzme3a zNjwc2/Ce8o4wWgp3UN7Yi1Z1pN6+DMaOG+tRcG+aA1zOtN3ufIpAcma/UdujjA+ Y+aBQUMHPOPkYOoN5wMZ26qFcC4W/clEtnIS7wIu -----END CERTIFICATE-----Generated at Fri May 31 23:52:40 2024 by rpki-client on console-fra.rpki-client.org