$ rpki-client -vvf rpki.co/repo/Simple/2/3130332e3234342e3136332e302f32342d3234203d3e203230343733.roa File: 3130332e3234342e3136332e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: RNVtr2Jpi0iHmHUSHVZhIlWtWNqxs4e6x2j+q2I9/P8= Subject key identifier: 08:02:B3:83:2C:F9:17:9D:97:8B:7A:1F:EF:98:57:3C:C0:97:37:EC Certificate issuer: /CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9 Certificate serial: 32A1A5C643AD6E795E143955F3EC2C20309C437B Authority key identifier: 70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer Subject info access: rsync://rpki.co/repo/Simple/2/3130332e3234342e3136332e302f32342d3234203d3e203230343733.roa Signing time: Fri 19 Jul 2024 12:53:53 +0000 ROA not before: Fri 19 Jul 2024 12:48:53 +0000 ROA not after: Fri 18 Jul 2025 12:53:53 +0000 asID: 20473 IP address blocks: 103.244.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Sep 2024 08:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a1:a5:c6:43:ad:6e:79:5e:14:39:55:f3:ec:2c:20:30:9c:43:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9 Validity Not Before: Jul 19 12:48:53 2024 GMT Not After : Jul 18 12:53:53 2025 GMT Subject: CN=0802B3832CF9179D978B7A1FEF98573CC09737EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:54:8c:fa:2b:75:4c:d5:7d:2f:38:7f:8b:4a: b2:29:86:b4:43:aa:39:90:25:4f:5b:10:93:f8:eb: 01:70:9a:d4:ab:e9:65:59:62:f9:19:ce:1f:91:ac: 71:df:e0:96:f1:be:3d:4d:6b:e7:ce:7a:02:1c:f4: a6:6d:a3:b5:92:9d:68:75:c0:4a:f7:dc:13:69:b0: e6:cd:f1:4f:b9:7f:29:45:5b:c7:84:bc:eb:0e:0f: b2:bc:06:09:0e:8c:07:5f:1c:8e:be:64:fb:03:da: 0b:0a:6f:c8:34:9a:2a:43:9c:86:82:91:26:42:90: 47:1b:95:28:f1:f1:d6:c0:29:df:73:7c:c8:ed:2e: 26:5a:16:ef:f9:84:13:6a:85:ca:4a:61:ec:6f:8a: b7:e5:d4:ac:39:67:6d:26:90:62:19:6c:c0:b2:2f: 60:15:d9:fa:ec:16:da:37:5c:60:7a:92:5d:96:3d: c5:53:50:b4:a7:de:51:9e:9d:76:79:1d:5e:22:25: ca:49:13:b8:64:a0:ea:cb:53:38:d2:fb:d1:35:5c: 27:fd:9d:63:69:39:a4:f7:fb:23:5f:ba:02:8c:db: 66:c6:db:0f:11:cc:9a:91:08:4d:59:77:5b:59:85: 9c:80:6a:8d:9a:09:5e:dd:66:62:35:3a:3c:01:5c: fe:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:02:B3:83:2C:F9:17:9D:97:8B:7A:1F:EF:98:57:3C:C0:97:37:EC X509v3 Authority Key Identifier: keyid:70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.co/repo/Simple/2/3130332e3234342e3136332e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.163.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:d4:f1:3b:9d:9f:28:77:61:0d:ac:70:77:de:bd:13:7d:84: a2:5b:b0:a3:b3:2a:23:aa:fd:bb:7a:c7:84:c0:65:df:9e:59: c3:e7:ca:24:2f:38:7d:5e:c4:78:90:00:a5:23:ff:fc:82:0c: 7d:36:48:f3:78:6d:d5:9b:ea:ce:77:bc:d1:6a:cc:67:9b:f0: 24:41:9a:01:d6:df:25:18:31:32:a0:17:a9:d7:39:a0:82:9c: df:c3:7a:d9:d5:c1:06:0b:d2:7f:b0:bb:b3:9b:da:a4:82:0c: c4:84:5c:88:01:13:9a:b1:cb:67:73:d9:1e:a2:73:57:a5:49: c5:de:39:eb:f6:d2:78:61:b9:fe:b4:89:ea:a5:45:dd:33:4d: 08:74:d8:ed:a8:a2:97:7b:98:1c:61:3f:87:86:e7:5e:4f:4e: cc:4e:c5:ba:d8:16:aa:84:ba:83:40:77:15:42:e3:04:7a:59: e1:8e:d5:67:f3:9e:53:e2:a1:14:72:74:0f:4b:f5:d4:83:34: 97:59:be:ba:f6:e0:30:73:ad:21:aa:1d:53:81:ab:29:3e:ad: cc:ed:12:d2:b4:49:92:e3:a8:f5:65:f4:ca:c4:88:33:bd:ba: 41:13:1e:c8:19:2a:15:75:62:ad:77:f7:64:99:7a:33:d2:5b: 20:41:b6:1e -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUMqGlxkOtbnleFDlV8+wsIDCcQ3swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRThERjUwMDAwMTEwLwYDVQQFEyg3MDYxMDAyNkM3 RjJBMDRFMTYzRDRGRTU1MzFEN0JDNDZFNzU0N0M5MB4XDTI0MDcxOTEyNDg1M1oX DTI1MDcxODEyNTM1M1owMzExMC8GA1UEAxMoMDgwMkIzODMyQ0Y5MTc5RDk3OEI3 QTFGRUY5ODU3M0NDMDk3MzdFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9UjPordUzVfS84f4tKsimGtEOqOZAlT1sQk/jrAXCa1KvpZVli+RnOH5Gs cd/glvG+PU1r5856Ahz0pm2jtZKdaHXASvfcE2mw5s3xT7l/KUVbx4S86w4PsrwG CQ6MB18cjr5k+wPaCwpvyDSaKkOchoKRJkKQRxuVKPHx1sAp33N8yO0uJloW7/mE E2qFykph7G+Kt+XUrDlnbSaQYhlswLIvYBXZ+uwW2jdcYHqSXZY9xVNQtKfeUZ6d dnkdXiIlykkTuGSg6stTONL70TVcJ/2dY2k5pPf7I1+6AozbZsbbDxHMmpEITVl3 W1mFnIBqjZoJXt1mYjU6PAFc/n8CAwEAAaOCAeQwggHgMB0GA1UdDgQWBBQIArOD LPkXnZeLeh/vmFc8wJc37DAfBgNVHSMEGDAWgBRwYQAmx/KgThY9T+VTHXvEbnVH yTAOBgNVHQ8BAf8EBAMCB4AwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6Ly9ycGtp LmNvL3JlcG8vU2ltcGxlLzIvNzA2MTAwMjZDN0YyQTA0RTE2M0Q0RkU1NTMxRDdC QzQ2RTc1NDdDOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJC NDY4RjdDNzJGRDFGRjIvY0dFQUpzZnlvRTRXUFVfbFV4MTd4RzUxUjhrLmNlcjB2 BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5jOi8vcnBraS5jby9yZXBv L1NpbXBsZS8yLzMxMzAzMzJlMzIzNDM0MmUzMTM2MzMyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/SjMA0GCSqGSIb3DQEBCwUA A4IBAQCP1PE7nZ8od2ENrHB33r0TfYSiW7Cjsyojqv27eseEwGXfnlnD58okLzh9 XsR4kAClI//8ggx9NkjzeG3Vm+rOd7zRasxnm/AkQZoB1t8lGDEyoBep1zmggpzf w3rZ1cEGC9J/sLuzm9qkggzEhFyIAROasctnc9keonNXpUnF3jnr9tJ4Ybn+tInq pUXdM00IdNjtqKKXe5gcYT+HhudeT07MTsW62BaqhLqDQHcVQuMEelnhjtVn855T 4qEUcnQPS/XUgzSXWb669uAwc60hqh1TgaspPq3M7RLStEmS46j1ZfTKxIgzvbpB Ex7IGSoVdWKtd/dkmXoz0lsgQbYe -----END CERTIFICATE-----Generated at Sat Sep 7 06:40:03 2024 by rpki-client on console-fra.rpki-client.org