$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35362e302f32342d3234203d3e20313530353530.roa File: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (raw, json) Hash identifier: ht/mlkk/r3FvrkR41j/MseqDfAWaT4XeHeyN7/uVK9I= Subject key identifier: 20:69:39:FF:6D:7A:38:EE:D7:68:08:60:37:16:CB:4B:02:BC:07:51 Certificate issuer: /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Certificate serial: 401C46DA7F959C2525C1924D040259B61D31AC08 Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35362e302f32342d3234203d3e20313530353530.roa Signing time: Sun 18 Feb 2024 04:00:03 +0000 ROA not before: Sun 18 Feb 2024 03:55:03 +0000 ROA not after: Sun 16 Feb 2025 04:00:03 +0000 asID: 150550 IP address blocks: 103.85.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1c:46:da:7f:95:9c:25:25:c1:92:4d:04:02:59:b6:1d:31:ac:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Validity Not Before: Feb 18 03:55:03 2024 GMT Not After : Feb 16 04:00:03 2025 GMT Subject: CN=206939FF6D7A38EED76808603716CB4B02BC0751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:a0:a4:f6:61:db:10:89:f8:24:62:3a:f1: 08:be:04:e8:18:cc:a3:d5:8c:f8:5e:37:c3:bd:9c: 5b:a3:59:8c:f5:1e:95:06:52:e1:60:56:95:53:dc: 4c:ae:7e:b5:af:7f:72:38:e7:77:0c:64:68:94:ee: 2b:07:92:b3:99:58:1e:9c:d1:e1:da:72:f1:f5:a4: 3e:cb:50:db:a5:3c:94:b5:9c:2d:f9:3f:55:a3:0b: a4:70:1d:1f:86:a9:f9:c3:49:d3:5c:dc:0c:af:d9: 2d:05:ae:39:54:06:2f:37:e7:fb:4b:26:11:9a:8d: 65:e3:93:d9:a9:99:d3:6b:c4:81:84:36:7e:ba:d7: 48:9a:ce:e8:55:bc:12:8b:5d:20:93:df:57:5e:5e: a3:56:f5:bf:7e:f0:71:ba:6d:52:98:e7:1d:8c:09: 31:44:23:aa:4a:77:46:50:5c:15:13:5c:50:40:b2: 32:86:ee:06:7f:74:7a:e0:e0:05:12:0f:af:29:13: 36:0b:c3:7d:54:9d:98:7f:bf:f5:0c:d6:82:d9:89: 83:d3:2d:a6:17:57:f7:66:67:54:bc:06:d1:3d:36: e6:3e:96:68:0c:ab:38:19:4e:bc:c5:0e:d5:89:b6: 24:52:4c:d5:b6:28:a3:f4:07:0e:96:e6:45:25:1f: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:69:39:FF:6D:7A:38:EE:D7:68:08:60:37:16:CB:4B:02:BC:07:51 X509v3 Authority Key Identifier: keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35362e302f32342d3234203d3e20313530353530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.85.56.0/24 Signature Algorithm: sha256WithRSAEncryption 50:71:b3:cb:c7:8b:8f:2c:c2:5b:5a:b6:42:a9:c9:ca:44:1c: 42:ad:d3:77:28:23:dc:f1:06:85:1c:69:34:76:b0:ab:e9:38: f3:48:b6:84:c6:6c:dd:62:87:91:a0:02:13:60:a3:e9:b7:ff: 22:88:55:95:90:45:7e:99:fc:64:af:a7:03:f6:ca:b6:f0:74: 7e:82:70:eb:13:66:09:b9:cd:61:b9:bd:c6:15:9d:03:65:b7: ea:00:19:91:fb:5d:d6:3a:84:53:c1:96:16:d9:f3:e7:6f:cd: 6c:62:59:42:da:fc:92:f8:28:57:de:aa:26:1f:f7:c6:74:38: 25:6b:72:06:b3:39:56:2c:e6:ba:05:c8:6c:dd:45:77:c0:73: c0:c2:ae:17:8f:a1:46:6e:1e:66:c9:06:31:8d:6b:f9:50:bf: 50:de:2f:17:c5:c9:ec:25:51:a6:48:2c:9a:a3:70:34:fc:56: 83:92:16:49:e4:10:38:f6:da:f7:e2:d1:ff:4c:e6:14:2b:52: dc:0a:40:8b:eb:de:9f:36:13:86:3d:f7:32:12:84:55:ec:44: 5a:82:7c:e2:ca:d2:a0:b1:dd:9f:1d:5c:33:86:7e:01:3c:a6: b8:38:47:00:cf:9d:e2:ac:95:0b:46:64:be:de:28:ec:2a:43: bd:8d:36:d2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQBxG2n+VnCUlwZJNBAJZth0xrAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4 RUIxMTk2QTAeFw0yNDAyMTgwMzU1MDNaFw0yNTAyMTYwNDAwMDNaMDMxMTAvBgNV BAMTKDIwNjkzOUZGNkQ3QTM4RUVENzY4MDg2MDM3MTZDQjRCMDJCQzA3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIxKCk9mHbEIn4JGI68Qi+BOgY zKPVjPheN8O9nFujWYz1HpUGUuFgVpVT3EyufrWvf3I453cMZGiU7isHkrOZWB6c 0eHacvH1pD7LUNulPJS1nC35P1WjC6RwHR+GqfnDSdNc3Ayv2S0FrjlUBi835/tL JhGajWXjk9mpmdNrxIGENn6610iazuhVvBKLXSCT31deXqNW9b9+8HG6bVKY5x2M CTFEI6pKd0ZQXBUTXFBAsjKG7gZ/dHrg4AUSD68pEzYLw31UnZh/v/UM1oLZiYPT LaYXV/dmZ1S8BtE9NuY+lmgMqzgZTrzFDtWJtiRSTNW2KKP0Bw6W5kUlH+ZFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUIGk5/216OO7XaAhgNxbLSwK8B1EwHwYDVR0j BBgwFoAUYL1Uz9Z7L/+xO1R9nwbO346xGWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTU3NjEzYi04YjA0LTRjNDUtYmVkZi00YWIwNjFkNGRjZjkvMC82MEJENTRDRkQ2 N0IyRkZGQjEzQjU0N0Q5RjA2Q0VERjhFQjExOTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4RUIx MTk2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNTc2MTNiLThiMDQtNGM0NS1i ZWRmLTRhYjA2MWQ0ZGNmOS8wLzMxMzAzMzJlMzgzNTJlMzUzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdVODANBgkqhkiG 9w0BAQsFAAOCAQEAUHGzy8eLjyzCW1q2QqnJykQcQq3Tdygj3PEGhRxpNHawq+k4 80i2hMZs3WKHkaACE2Cj6bf/IohVlZBFfpn8ZK+nA/bKtvB0foJw6xNmCbnNYbm9 xhWdA2W36gAZkftd1jqEU8GWFtnz52/NbGJZQtr8kvgoV96qJh/3xnQ4JWtyBrM5 VizmugXIbN1Fd8BzwMKuF4+hRm4eZskGMY1r+VC/UN4vF8XJ7CVRpkgsmqNwNPxW g5IWSeQQOPba9+LR/0zmFCtS3ApAi+venzYThj33MhKEVexEWoJ84srSoLHdnx1c M4Z+ATymuDhHAM+d4qyVC0Zkvt4o7CpDvY020g== -----END CERTIFICATE-----Generated at Sat Jun 1 18:06:23 2024 by rpki-client on console-ams.rpki-client.org