$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa File: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (raw, json) Hash identifier: YmtNYjZWPEwBKNywJk5Oe21zKkO7Wbt9cbTiaDOc5Qg= Subject key identifier: 88:1A:74:F3:5D:96:6A:21:EB:AE:CB:F4:F8:CC:6E:7C:BD:6F:B7:68 Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 445422B4788EA9DB7B40AC714039000C7CA089C4 Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa Signing time: Sat 19 Aug 2023 07:00:00 +0000 ROA not before: Sat 19 Aug 2023 06:55:00 +0000 ROA not after: Sat 17 Aug 2024 07:00:00 +0000 asID: 137331 IP address blocks: 103.157.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:54:22:b4:78:8e:a9:db:7b:40:ac:71:40:39:00:0c:7c:a0:89:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Aug 19 06:55:00 2023 GMT Not After : Aug 17 07:00:00 2024 GMT Subject: CN=881A74F35D966A21EBAECBF4F8CC6E7CBD6FB768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:89:3f:d5:ad:9a:1d:27:d5:81:c7:b4:26:2b: 03:fa:5b:d1:68:64:18:cf:08:2a:b6:1d:71:72:1c: 8e:a3:02:69:a6:22:db:dc:63:95:3b:05:b0:ad:aa: bd:09:9a:0e:51:8c:e4:48:62:9c:8c:b7:71:f7:05: d8:db:33:4b:ef:b0:db:64:e6:fe:5d:64:b3:f8:1b: d4:fc:e7:97:59:ad:52:8d:8e:85:80:da:34:4f:8f: 0f:84:89:69:ea:1a:05:fe:fc:a2:0a:f6:fb:cf:98: e4:e3:0d:fb:9c:a4:92:6e:59:ab:7e:1c:c6:09:3c: 8e:da:9f:34:b8:37:36:9e:b9:02:2e:8e:f7:7f:be: 4f:f7:26:f0:8c:9a:cf:fb:b8:bd:ff:f1:4f:9f:13: 20:a6:2d:6e:ec:7b:33:f8:ae:c9:9b:31:b9:75:0a: f1:da:c4:78:67:49:31:55:e0:1b:09:c0:c3:28:17: 97:fc:fb:32:75:1c:55:5b:4f:76:b6:20:d2:9a:ca: 37:8f:5b:5b:b9:cc:b7:a9:b2:83:f3:4a:c1:ba:35: 4f:20:0c:d5:2a:62:28:3c:3c:9a:fb:e5:d3:b6:18: e1:d8:67:81:6f:cb:2b:d0:a0:fd:a8:54:9b:08:51: b7:03:31:20:5f:4d:3d:1b:77:47:09:51:6b:07:77: 7c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1A:74:F3:5D:96:6A:21:EB:AE:CB:F4:F8:CC:6E:7C:BD:6F:B7:68 X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.116.0/23 Signature Algorithm: sha256WithRSAEncryption 41:79:02:2e:7c:72:bd:9b:d7:72:e3:9d:4c:13:e1:22:f5:fa: 68:c5:ee:2f:c4:a0:bd:3b:b9:53:b0:30:59:f2:fb:00:bf:c1: a4:f7:dd:50:87:d8:c0:fa:41:bf:06:d3:0a:1a:3c:ff:6a:fe: 0f:40:e3:a2:d0:13:25:7f:93:a3:06:13:09:49:33:a5:31:e2: 53:b3:78:15:4c:2f:dd:e7:56:1f:0b:9d:8b:3b:fe:d7:62:d7: 97:02:68:30:bd:84:c8:98:9e:eb:b8:38:70:2f:ac:7a:9f:54: fe:8f:c4:9e:e7:d8:db:68:de:6c:6e:87:d2:36:5a:89:b4:b3: a2:39:c2:c7:52:b3:53:80:95:9a:7e:fe:07:a2:00:42:12:c9: 77:37:cd:aa:90:70:97:19:4e:da:c4:90:3d:8a:94:d1:38:82: fe:69:34:38:27:97:c4:1d:d5:3a:b6:b2:32:5b:f0:69:db:f2: 9e:c7:28:b6:33:91:5e:8c:ae:89:89:d5:8f:76:57:a7:39:4d: 9f:f4:99:14:4d:85:9e:57:0e:2b:7b:d7:3c:74:16:c8:68:a4: d2:71:c8:b3:de:db:09:08:10:fe:25:3e:3f:11:49:ad:87:c3: ae:33:df:10:63:77:5e:50:83:e2:51:a8:79:59:94:2d:2a:b1: 95:01:66:2b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIURFQitHiOqdt7QKxxQDkADHygicQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yMzA4MTkwNjU1MDBaFw0yNDA4MTcwNzAwMDBaMDMxMTAvBgNV BAMTKDg4MUE3NEYzNUQ5NjZBMjFFQkFFQ0JGNEY4Q0M2RTdDQkQ2RkI3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjiT/VrZodJ9WBx7QmKwP6W9Fo ZBjPCCq2HXFyHI6jAmmmItvcY5U7BbCtqr0Jmg5RjORIYpyMt3H3BdjbM0vvsNtk 5v5dZLP4G9T855dZrVKNjoWA2jRPjw+EiWnqGgX+/KIK9vvPmOTjDfucpJJuWat+ HMYJPI7anzS4NzaeuQIujvd/vk/3JvCMms/7uL3/8U+fEyCmLW7sezP4rsmbMbl1 CvHaxHhnSTFV4BsJwMMoF5f8+zJ1HFVbT3a2INKayjePW1u5zLepsoPzSsG6NU8g DNUqYig8PJr75dO2GOHYZ4FvyyvQoP2oVJsIUbcDMSBfTT0bd0cJUWsHd3wJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUiBp0812WaiHrrsv0+MxufL1vt2gwHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkMDdlM2Q4LTliZmMtNDQ4My1h MmRkLWFmYTQ1OTM4MTFlNS8wLzMxMzAzMzJlMzEzNTM3MmUzMTMxMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnXQwDQYJ KoZIhvcNAQELBQADggEBAEF5Ai58cr2b13LjnUwT4SL1+mjF7i/EoL07uVOwMFny +wC/waT33VCH2MD6Qb8G0woaPP9q/g9A46LQEyV/k6MGEwlJM6Ux4lOzeBVML93n Vh8LnYs7/tdi15cCaDC9hMiYnuu4OHAvrHqfVP6PxJ7n2Nto3mxuh9I2Wom0s6I5 wsdSs1OAlZp+/geiAEISyXc3zaqQcJcZTtrEkD2KlNE4gv5pNDgnl8Qd1Tq2sjJb 8Gnb8p7HKLYzkV6MromJ1Y92V6c5TZ/0mRRNhZ5XDit71zx0FshopNJxyLPe2wkI EP4lPj8RSa2Hw64z3xBjd15Qg+JRqHlZlC0qsZUBZis= -----END CERTIFICATE-----Generated at Wed Apr 24 12:29:09 2024 by rpki-client on console-fra.rpki-client.org