$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa File: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (raw, json) Hash identifier: tjdYt0lcYryCBYsYLiHg79fFH+OX5gjH/Bt4NYN924g= Subject key identifier: 23:74:B3:4D:B9:DD:2E:C3:72:BF:2C:F2:3D:6D:2B:DB:6F:4F:34:98 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 738AFC295EAECB83689B422BC8AC1BB556D18839 Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa Signing time: Wed 07 Feb 2024 09:00:01 +0000 ROA not before: Wed 07 Feb 2024 08:55:01 +0000 ROA not after: Wed 05 Feb 2025 09:00:01 +0000 asID: 139986 IP address blocks: 103.148.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 22:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8a:fc:29:5e:ae:cb:83:68:9b:42:2b:c8:ac:1b:b5:56:d1:88:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Feb 7 08:55:01 2024 GMT Not After : Feb 5 09:00:01 2025 GMT Subject: CN=2374B34DB9DD2EC372BF2CF23D6D2BDB6F4F3498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:de:df:9a:a6:99:8c:4b:dd:b5:92:70:c6:94: dc:2d:ce:50:7b:7b:09:52:34:23:b6:51:6e:5c:e0: 9f:f0:fc:02:5a:fc:bf:ae:21:d3:1d:c5:54:3a:e5: ce:97:fa:a3:63:07:71:67:03:ec:85:c6:a6:36:5a: 1f:a3:6f:bc:9a:0e:19:8c:29:96:e6:f9:5f:5f:65: 3a:18:37:02:2b:8d:3b:91:e9:63:b4:b1:fb:55:59: 7f:7b:ce:0a:76:38:c7:c6:77:f3:76:6e:55:bf:c5: da:b7:05:99:f9:67:95:31:2b:56:84:c9:6f:c9:aa: d8:10:f4:65:45:09:98:bd:ac:c0:f2:63:b8:ff:30: 24:4c:24:86:f5:a8:57:76:cf:b4:f0:7d:99:0f:87: b4:1d:e8:e3:ef:86:0e:31:fe:81:db:ed:82:38:71: 22:30:61:c5:3a:11:55:e7:04:7b:88:0f:2c:e3:57: 23:68:91:7f:77:de:34:a1:a5:02:a9:d5:fb:e7:da: b9:c3:b0:2d:d4:f2:46:49:03:43:0b:6b:11:6e:ce: 00:5a:1e:23:97:32:27:d7:94:dc:f6:c1:ed:6f:cf: 33:ee:8f:8d:ac:37:fe:2c:c5:d5:1b:c4:93:db:cb: 22:94:41:1e:12:15:77:55:8a:bb:49:81:9b:a4:80: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:74:B3:4D:B9:DD:2E:C3:72:BF:2C:F2:3D:6D:2B:DB:6F:4F:34:98 X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.84.0/23 Signature Algorithm: sha256WithRSAEncryption 70:16:03:09:ec:67:fd:9b:87:bc:4d:2a:34:19:5b:af:7a:6a: 5c:05:75:9d:94:b3:1f:44:85:c7:7c:78:d9:1c:39:46:81:57: 08:98:ce:4a:b1:b0:79:6d:86:cb:2d:20:54:85:5f:8e:76:55: 60:35:72:4e:b7:fe:44:05:dc:9b:d2:a9:f1:fd:5d:b0:96:9c: db:74:1f:f8:ed:5f:ee:b9:76:b8:c2:9b:b8:c2:8d:54:97:a5: f7:d2:57:5d:39:33:fd:7a:ca:0f:60:24:89:0f:5d:9d:22:74: 39:dd:5c:99:ba:88:83:d2:56:7f:88:71:19:24:58:ef:a6:38: 34:b5:7d:c0:61:f8:2c:67:e6:88:76:29:21:bf:b1:f2:2a:67: ed:fb:bb:90:64:cd:26:1e:f3:a1:d1:ea:b1:4b:9b:1e:84:9f: 55:54:a9:af:50:2d:be:44:4e:92:05:9c:e5:4f:c2:2f:7c:4b: 6b:87:18:7f:df:93:90:e1:4d:a0:08:84:04:80:d8:9e:e5:f0: 21:67:9d:cd:f1:3a:73:6e:6d:20:5f:d2:83:d6:b8:0a:0e:2b: b9:dd:95:8b:31:ad:07:07:1f:a5:ed:6e:85:65:46:07:ca:2f: 23:b6:d3:23:fb:8b:db:c5:c0:67:d0:05:d8:2b:c9:14:b1:23: ea:ed:bb:dc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUc4r8KV6uy4Nom0IryKwbtVbRiDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNDAyMDcwODU1MDFaFw0yNTAyMDUwOTAwMDFaMDMxMTAvBgNV BAMTKDIzNzRCMzREQjlERDJFQzM3MkJGMkNGMjNENkQyQkRCNkY0RjM0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs3t+appmMS921knDGlNwtzlB7 ewlSNCO2UW5c4J/w/AJa/L+uIdMdxVQ65c6X+qNjB3FnA+yFxqY2Wh+jb7yaDhmM KZbm+V9fZToYNwIrjTuR6WO0sftVWX97zgp2OMfGd/N2blW/xdq3BZn5Z5UxK1aE yW/JqtgQ9GVFCZi9rMDyY7j/MCRMJIb1qFd2z7TwfZkPh7Qd6OPvhg4x/oHb7YI4 cSIwYcU6EVXnBHuIDyzjVyNokX933jShpQKp1fvn2rnDsC3U8kZJA0MLaxFuzgBa HiOXMifXlNz2we1vzzPuj42sN/4sxdUbxJPbyyKUQR4SFXdVirtJgZukgEmlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUI3SzTbndLsNyvyzyPW0r229PNJgwHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0MGU5YzlmLWQ2MDctNDQ5Ny1h ZjI4LTRkMmI5MDkyZDVhNi8wLzMxMzAzMzJlMzEzNDM4MmUzODM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM5MzkzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5RUMA0GCSqG SIb3DQEBCwUAA4IBAQBwFgMJ7Gf9m4e8TSo0GVuvempcBXWdlLMfRIXHfHjZHDlG gVcImM5KsbB5bYbLLSBUhV+OdlVgNXJOt/5EBdyb0qnx/V2wlpzbdB/47V/uuXa4 wpu4wo1Ul6X30lddOTP9esoPYCSJD12dInQ53VyZuoiD0lZ/iHEZJFjvpjg0tX3A YfgsZ+aIdikhv7HyKmft+7uQZM0mHvOh0eqxS5sehJ9VVKmvUC2+RE6SBZzlT8Iv fEtrhxh/35OQ4U2gCIQEgNie5fAhZ53N8Tpzbm0gX9KD1rgKDiu53ZWLMa0HBx+l 7W6FZUYHyi8jttMj+4vbxcBn0AXYK8kUsSPq7bvc -----END CERTIFICATE-----Generated at Thu May 2 17:16:22 2024 by rpki-client on console-ams.rpki-client.org