$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32332d3234203d3e203436303236.roa File: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (raw, json) Hash identifier: H3vptWwq+aTUVwk0hgLdqCXAKjlD5Yez+oF045lTQW0= Subject key identifier: D1:31:3A:F4:32:F9:9A:49:1F:60:66:53:88:62:07:3F:ED:DB:51:D0 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 49D2810F746B54B14A1150E00E5A6E042F2EF6F2 Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32332d3234203d3e203436303236.roa Signing time: Mon 15 Jan 2024 02:00:00 +0000 ROA not before: Mon 15 Jan 2024 01:55:00 +0000 ROA not after: Mon 13 Jan 2025 02:00:00 +0000 asID: 46026 IP address blocks: 103.135.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d2:81:0f:74:6b:54:b1:4a:11:50:e0:0e:5a:6e:04:2f:2e:f6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Jan 15 01:55:00 2024 GMT Not After : Jan 13 02:00:00 2025 GMT Subject: CN=D1313AF432F99A491F6066538862073FEDDB51D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:fb:95:b0:b8:12:bb:f5:65:6c:ce:bd:4c: f3:2a:4b:c4:f0:8b:6c:30:6f:6f:eb:ba:65:23:6c: 1d:27:34:af:1e:e4:1c:a7:8f:c2:0a:1f:0c:0e:4e: c9:78:6e:b3:94:b1:e6:29:30:40:ca:a7:db:72:16: 8e:ce:c3:83:cc:c4:49:9d:13:e2:a1:0e:2d:87:83: c1:dc:5f:f3:32:08:d3:b1:a4:4c:81:09:01:b1:f6: 47:b4:a0:f9:6f:e1:2f:bc:6d:f1:d3:f2:c5:56:d7: ed:7d:b0:03:54:93:22:f3:d7:8d:df:7e:0a:3c:62: 3c:95:97:6c:73:31:48:cd:0b:a2:b4:1e:21:2a:9e: 3d:fc:10:8c:2f:8a:89:33:95:fe:e4:08:de:15:1c: e5:d0:61:2d:b9:e2:f3:8e:c2:d4:05:39:98:77:ab: 28:bc:6b:9c:a7:94:76:28:73:4e:04:35:32:6c:83: a7:0f:94:95:0a:a0:9a:a1:20:d6:d8:71:fb:65:d9: 17:d1:5f:63:e9:4a:88:29:f7:f5:6d:48:4b:67:21: ba:a2:1b:5f:40:70:41:13:f4:56:2b:0a:74:37:27: 36:42:c7:ac:64:e2:cd:71:47:60:47:9d:df:d4:42: e9:cc:75:e4:43:23:9a:ab:fc:40:50:31:4d:eb:b2: fb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:31:3A:F4:32:F9:9A:49:1F:60:66:53:88:62:07:3F:ED:DB:51:D0 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32332d3234203d3e203436303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.72.0/23 Signature Algorithm: sha256WithRSAEncryption d0:80:0b:1b:8e:cc:56:67:1d:59:db:0d:6f:68:57:2b:56:a6: dd:59:ef:af:cf:9f:34:41:05:45:b6:b8:38:71:1a:d5:a2:26: df:5e:8c:dc:b1:c7:b9:09:10:4f:a6:60:d7:8c:67:0a:d2:c9: 19:e2:7d:dc:a5:eb:3a:aa:b5:1f:a1:3a:18:e9:2b:7a:ff:3a: d0:40:e5:80:fa:c6:22:f5:e3:f7:80:68:e7:53:78:07:6a:66: 93:b6:d4:5c:91:50:08:e5:e0:78:21:49:be:28:20:07:a3:e1: b3:e1:1b:6d:c4:5a:50:81:8f:e5:25:6c:2b:b8:35:ea:49:0d: 00:0d:e0:9a:d0:4f:d5:1b:cd:d0:c6:5d:8f:9f:8d:64:f8:b8: 40:34:6d:b4:67:10:48:5c:48:ef:b5:2c:0d:08:2d:6c:ab:5f: 7e:ea:89:bb:41:cf:6f:4e:c3:d5:df:f7:c4:25:03:6e:46:59: 99:58:ae:ac:53:7b:9e:f1:32:f0:ef:08:71:b6:0b:99:d0:5d: db:9e:dc:1f:be:95:16:7f:f2:de:97:26:d3:49:04:ef:f3:f9: 8b:d0:97:4c:96:59:3a:25:ba:30:b1:48:c2:0b:c1:1f:0f:28: bf:7d:b2:ce:7e:26:41:17:01:90:1a:8c:fa:ea:7e:83:00:98: b5:8e:47:92 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSdKBD3RrVLFKEVDgDlpuBC8u9vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNDAxMTUwMTU1MDBaFw0yNTAxMTMwMjAwMDBaMDMxMTAvBgNV BAMTKEQxMzEzQUY0MzJGOTlBNDkxRjYwNjY1Mzg4NjIwNzNGRUREQjUxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxW/uVsLgSu/VlbM69TPMqS8Tw i2wwb2/rumUjbB0nNK8e5Bynj8IKHwwOTsl4brOUseYpMEDKp9tyFo7Ow4PMxEmd E+KhDi2Hg8HcX/MyCNOxpEyBCQGx9ke0oPlv4S+8bfHT8sVW1+19sANUkyLz143f fgo8YjyVl2xzMUjNC6K0HiEqnj38EIwviokzlf7kCN4VHOXQYS254vOOwtQFOZh3 qyi8a5ynlHYoc04ENTJsg6cPlJUKoJqhINbYcftl2RfRX2PpSogp9/VtSEtnIbqi G19AcEET9FYrCnQ3JzZCx6xk4s1xR2BHnd/UQunMdeRDI5qr/EBQMU3rsvvRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU0TE69DL5mkkfYGZTiGIHP+3bUdAwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzAzMzJlMzEzMzM1MmUzNzMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeHSDANBgkqhkiG 9w0BAQsFAAOCAQEA0IALG47MVmcdWdsNb2hXK1am3Vnvr8+fNEEFRba4OHEa1aIm 316M3LHHuQkQT6Zg14xnCtLJGeJ93KXrOqq1H6E6GOkrev860EDlgPrGIvXj94Bo 51N4B2pmk7bUXJFQCOXgeCFJviggB6Phs+EbbcRaUIGP5SVsK7g16kkNAA3gmtBP 1RvN0MZdj5+NZPi4QDRttGcQSFxI77UsDQgtbKtffuqJu0HPb07D1d/3xCUDbkZZ mViurFN7nvEy8O8IcbYLmdBd257cH76VFn/y3pcm00kE7/P5i9CXTJZZOiW6MLFI wgvBHw8ov32yzn4mQRcBkBqM+up+gwCYtY5Hkg== -----END CERTIFICATE-----Generated at Fri May 3 04:42:12 2024 by rpki-client on console-fra.rpki-client.org