$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa File: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (raw, json) Hash identifier: j8AfGsExf9Z1d3r0akft+56xnsz2WsBFBLfSdrsxdS8= Subject key identifier: C8:D3:EC:24:5C:52:4E:F9:5E:2C:48:10:53:F9:F5:40:07:4C:66:90 Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 6366DDBBAA8550520A27E32521E21E4FB490F9F4 Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa Signing time: Mon 01 Jul 2024 01:05:38 +0000 ROA not before: Mon 01 Jul 2024 01:00:38 +0000 ROA not after: Mon 30 Jun 2025 01:05:38 +0000 asID: 63497 IP address blocks: 103.134.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 17:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:66:dd:bb:aa:85:50:52:0a:27:e3:25:21:e2:1e:4f:b4:90:f9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Jul 1 01:00:38 2024 GMT Not After : Jun 30 01:05:38 2025 GMT Subject: CN=C8D3EC245C524EF95E2C481053F9F540074C6690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c0:ed:0f:46:70:d4:04:d4:e0:38:aa:1b:9e: 0a:ca:98:8e:cf:d8:97:48:ee:b9:f0:f3:47:64:cf: a0:46:6a:1f:84:7d:92:8d:54:13:d4:da:14:55:09: 55:1b:87:a6:52:d9:f6:f9:94:83:83:ec:ab:d2:65: e6:01:fc:d0:a4:f8:66:88:50:1d:9e:82:59:23:28: 8f:c1:f8:64:fc:b0:bc:80:c6:40:70:fc:e9:52:1f: 0c:68:0a:f3:b5:35:17:c6:1b:78:18:35:89:5c:59: 8d:da:55:7b:ee:8c:b2:a8:f3:05:44:0f:70:f3:b4: aa:08:76:a6:0a:f5:76:1f:af:b8:ca:6f:be:6f:5a: e6:31:a1:33:3c:bb:bc:c5:14:08:0b:f1:26:c5:4d: d7:85:60:6d:a7:2b:6f:da:64:b8:34:5a:f2:2a:1e: 22:ae:ef:1f:b6:de:3c:67:57:1c:4e:49:74:d0:c7: c0:54:67:6f:79:a5:d4:1d:fa:cc:8a:37:6d:0c:31: f3:26:b4:be:67:cd:fe:21:e8:26:a0:8b:cc:f4:ab: 92:3d:c8:43:4a:42:3d:5e:be:cf:74:af:d4:8d:e1: da:73:11:1a:d8:72:e6:08:10:b5:d3:99:a6:93:c6: 11:67:1e:d7:7a:42:05:a5:a4:af:38:26:69:3f:bb: 50:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D3:EC:24:5C:52:4E:F9:5E:2C:48:10:53:F9:F5:40:07:4C:66:90 X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.104.0/23 Signature Algorithm: sha256WithRSAEncryption 51:77:d1:d4:fa:f7:52:39:c3:2a:78:18:11:69:48:22:d8:fe: cb:36:f7:1e:30:d9:7d:95:f1:b6:dc:0f:17:e1:51:a9:95:ee: 88:67:c1:7a:52:5f:db:0e:18:80:73:30:47:8e:7c:55:33:ce: c3:34:0c:20:08:79:03:11:84:8e:dc:27:8b:a8:6e:bb:47:b9: 04:8c:dd:df:2d:e1:10:5e:ca:52:79:9e:fb:b9:ba:51:8e:6b: d4:b9:13:10:6f:4f:28:31:75:2c:4f:f7:f9:03:5c:de:02:2c: fa:b0:39:55:76:af:d3:03:28:99:7e:aa:46:0f:0e:9e:3f:02: 4d:6a:45:54:a4:1d:97:f7:f0:2b:d9:74:09:9b:71:33:2a:71: 86:48:21:c3:64:a7:82:9e:73:ac:09:af:d2:f1:f4:a5:d0:db: 16:0a:d0:00:ab:af:60:8d:7e:71:79:d8:7e:9e:21:72:fb:61: cc:be:56:0b:2b:c9:2a:51:67:c8:56:f9:d1:30:2b:0b:6d:c6: db:a6:44:c5:b4:f0:42:61:a8:6b:67:6c:9c:1f:ca:9b:d5:6d: 65:b2:bf:0b:86:34:81:69:83:06:f3:72:26:b8:33:8d:93:f2: 85:01:02:9a:0a:de:be:e2:e8:b2:2d:f8:27:0e:81:c7:ec:6a: 55:46:86:bb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUY2bdu6qFUFIKJ+MlIeIeT7SQ+fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNDA3MDEwMTAwMzhaFw0yNTA2MzAwMTA1MzhaMDMxMTAvBgNV BAMTKEM4RDNFQzI0NUM1MjRFRjk1RTJDNDgxMDUzRjlGNTQwMDc0QzY2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlwO0PRnDUBNTgOKobngrKmI7P 2JdI7rnw80dkz6BGah+EfZKNVBPU2hRVCVUbh6ZS2fb5lIOD7KvSZeYB/NCk+GaI UB2eglkjKI/B+GT8sLyAxkBw/OlSHwxoCvO1NRfGG3gYNYlcWY3aVXvujLKo8wVE D3DztKoIdqYK9XYfr7jKb75vWuYxoTM8u7zFFAgL8SbFTdeFYG2nK2/aZLg0WvIq HiKu7x+23jxnVxxOSXTQx8BUZ295pdQd+syKN20MMfMmtL5nzf4h6Cagi8z0q5I9 yENKQj1evs90r9SN4dpzERrYcuYIELXTmaaTxhFnHtd6QgWlpK84Jmk/u1BFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyNPsJFxSTvleLEgQU/n1QAdMZpAwHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y2YjVhZTFlLWJlNjYtNGEzMC1h OTQ4LTdkNDc4YzIyZWEyYi8wLzMxMzAzMzJlMzEzMzM0MmUzMTMwMzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNjMzMzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4ZoMA0GCSqG SIb3DQEBCwUAA4IBAQBRd9HU+vdSOcMqeBgRaUgi2P7LNvceMNl9lfG23A8X4VGp le6IZ8F6Ul/bDhiAczBHjnxVM87DNAwgCHkDEYSO3CeLqG67R7kEjN3fLeEQXspS eZ77ubpRjmvUuRMQb08oMXUsT/f5A1zeAiz6sDlVdq/TAyiZfqpGDw6ePwJNakVU pB2X9/Ar2XQJm3EzKnGGSCHDZKeCnnOsCa/S8fSl0NsWCtAAq69gjX5xedh+niFy +2HMvlYLK8kqUWfIVvnRMCsLbcbbpkTFtPBCYahrZ2ycH8qb1W1lsr8LhjSBaYMG 83ImuDONk/KFAQKaCt6+4uiyLfgnDoHH7GpVRoa7 -----END CERTIFICATE-----Generated at Fri Nov 22 09:30:03 2024 by rpki-client on console-fra.rpki-client.org