$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa File: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (raw, json) Hash identifier: D8ObKRWQ9BdEyL1zxuNzj+kUGDT7G1T4YR+4I9q25uw= Subject key identifier: 60:48:06:DB:E1:62:56:61:D4:5B:A8:A7:45:BC:85:D8:7C:A0:58:3A Certificate issuer: /CN=232967D03C1169374A898D1C8991F1ABE7744870 Certificate serial: 7AA5DB3F4AEC3D4EF1CCED1CE83CB890FE7660C9 Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa Signing time: Sat 04 Nov 2023 12:00:00 +0000 ROA not before: Sat 04 Nov 2023 11:55:00 +0000 ROA not after: Sat 02 Nov 2024 12:00:00 +0000 asID: 141098 IP address blocks: 103.156.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 23:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a5:db:3f:4a:ec:3d:4e:f1:cc:ed:1c:e8:3c:b8:90:fe:76:60:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870 Validity Not Before: Nov 4 11:55:00 2023 GMT Not After : Nov 2 12:00:00 2024 GMT Subject: CN=604806DBE1625661D45BA8A745BC85D87CA0583A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:50:2d:45:4f:4b:81:12:3e:db:7e:3b:38:fd: 1c:d0:ce:14:55:d0:bf:b9:62:78:74:31:53:d5:09: be:8a:a0:ba:ed:a9:ee:9f:46:31:ab:15:63:2d:95: f4:b5:1f:8e:63:e7:9d:60:6f:be:51:ec:97:5c:a8: f9:c6:32:54:97:0d:ec:72:ce:dc:d6:0a:5c:ce:e1: b4:0b:b4:f1:b9:36:f3:43:90:61:af:e0:64:64:c0: 71:bf:cb:2d:87:1d:82:c1:09:91:61:eb:52:7f:6f: d0:8f:12:b3:b2:06:73:b8:4f:9e:f5:a4:61:02:62: 39:76:c3:74:a1:74:71:e9:b3:81:38:29:d1:c0:36: 4e:f7:60:d9:5a:1e:ef:1b:99:2c:7d:88:a2:b4:38: 43:8c:e7:41:3f:48:83:e9:ed:04:a3:6d:05:3d:7f: 17:1e:95:ee:3f:6c:9f:57:2b:71:d7:9c:2b:c7:bc: 78:36:eb:8a:f6:48:ad:67:d6:f1:36:04:74:66:41: 72:e1:fa:7f:14:d9:f1:a9:25:4f:76:4f:31:a3:68: 7e:77:28:88:16:5f:eb:d4:33:e5:8e:60:db:42:39: fd:bf:53:8f:cd:51:e3:00:53:3b:18:5f:6e:c4:42: e9:1f:74:56:36:1b:2e:42:49:d2:27:58:1e:fa:3b: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:48:06:DB:E1:62:56:61:D4:5B:A8:A7:45:BC:85:D8:7C:A0:58:3A X509v3 Authority Key Identifier: keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.232.0/23 Signature Algorithm: sha256WithRSAEncryption 69:1d:29:91:a3:ae:46:13:c3:35:ec:68:0d:a1:bd:34:f5:9c: 63:5c:f4:1b:47:0d:31:98:85:72:4b:79:71:71:14:c3:1c:e5: fc:47:71:0b:32:d1:8a:f8:2e:e5:49:4e:11:4e:04:95:ad:00: 57:24:5f:a3:4f:a6:b3:bc:25:ea:e7:7e:31:a9:5c:bb:46:19: 9b:4f:56:dc:53:32:7e:08:16:da:0f:3e:9b:7f:20:d6:6d:15: 63:b3:9c:18:37:da:bf:f6:62:b6:a9:61:db:ed:51:da:16:6d: 45:b0:76:87:26:c4:3e:a0:ac:15:84:f8:35:1c:71:f4:c4:41: 0b:ae:9c:4f:fa:a4:d4:fb:1c:59:fd:03:e1:1e:db:9a:3b:10: 65:db:94:6e:05:6a:af:a1:20:9a:ed:7c:2d:79:09:c5:fd:3a: 4f:b4:61:38:cc:d3:a1:e1:50:56:8e:0c:6d:47:dc:3a:0c:04: a8:f9:0a:d9:c7:6c:da:f1:dc:1f:c8:cc:aa:7f:e3:72:ae:90: 2f:fa:a3:fc:7a:81:26:21:7c:74:69:d0:74:a7:08:ae:12:8a: b2:1f:98:ed:f7:ea:f7:98:87:57:dc:e5:ad:da:9b:03:59:63: de:e7:1a:0e:89:bf:81:d8:47:fc:03:ed:b8:30:c1:72:e9:4e: ee:df:8a:10 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUeqXbP0rsPU7xzO0c6Dy4kP52YMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJF Nzc0NDg3MDAeFw0yMzExMDQxMTU1MDBaFw0yNDExMDIxMjAwMDBaMDMxMTAvBgNV BAMTKDYwNDgwNkRCRTE2MjU2NjFENDVCQThBNzQ1QkM4NUQ4N0NBMDU4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxUC1FT0uBEj7bfjs4/RzQzhRV 0L+5Ynh0MVPVCb6KoLrtqe6fRjGrFWMtlfS1H45j551gb75R7JdcqPnGMlSXDexy ztzWClzO4bQLtPG5NvNDkGGv4GRkwHG/yy2HHYLBCZFh61J/b9CPErOyBnO4T571 pGECYjl2w3ShdHHps4E4KdHANk73YNlaHu8bmSx9iKK0OEOM50E/SIPp7QSjbQU9 fxcele4/bJ9XK3HXnCvHvHg264r2SK1n1vE2BHRmQXLh+n8U2fGpJU92TzGjaH53 KIgWX+vUM+WOYNtCOf2/U4/NUeMAUzsYX27EQukfdFY2Gy5CSdInWB76O5bbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUYEgG2+FiVmHUW6inRbyF2HygWDowHwYDVR0j BBgwFoAUIyln0DwRaTdKiY0ciZHxq+d0SHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUzZTk4MS1iZjM5LTQyZTAtYTJmNi1jZjg3Yzc1N2Y4MjcvMC8yMzI5NjdEMDND MTE2OTM3NEE4OThEMUM4OTkxRjFBQkU3NzQ0ODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJFNzc0 NDg3MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyZTNlOTgxLWJmMzktNDJlMC1h MmY2LWNmODdjNzU3ZjgyNy8wLzMxMzAzMzJlMzEzNTM2MmUzMjMzMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnOgwDQYJ KoZIhvcNAQELBQADggEBAGkdKZGjrkYTwzXsaA2hvTT1nGNc9BtHDTGYhXJLeXFx FMMc5fxHcQsy0Yr4LuVJThFOBJWtAFckX6NPprO8JernfjGpXLtGGZtPVtxTMn4I FtoPPpt/INZtFWOznBg32r/2YrapYdvtUdoWbUWwdocmxD6grBWE+DUccfTEQQuu nE/6pNT7HFn9A+Ee25o7EGXblG4Faq+hIJrtfC15CcX9Ok+0YTjM06HhUFaODG1H 3DoMBKj5CtnHbNrx3B/IzKp/43KukC/6o/x6gSYhfHRp0HSnCK4SirIfmO336veY h1fc5a3amwNZY97nGg6Jv4HYR/wD7bgwwXLpTu7fihA= -----END CERTIFICATE-----Generated at Fri Jun 21 00:18:59 2024 by rpki-client on console-ams.rpki-client.org