$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32342d3234203d3e203436303236.roa File: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (raw, json) Hash identifier: oLk31qSVIaqUXwyUv9ztwnPUw1UJvmxOdWyfOMuIxhM= Subject key identifier: F4:DF:98:9B:47:D5:EA:32:35:9F:61:6A:57:C7:16:F6:67:AE:76:49 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 10550814F1C1F5DEEF8F6473D32167ACECE695FA Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32342d3234203d3e203436303236.roa Signing time: Mon 31 Jul 2023 00:02:35 +0000 ROA not before: Sun 30 Jul 2023 23:57:35 +0000 ROA not after: Mon 29 Jul 2024 00:02:35 +0000 asID: 46026 IP address blocks: 103.135.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Apr 2024 21:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:55:08:14:f1:c1:f5:de:ef:8f:64:73:d3:21:67:ac:ec:e6:95:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Jul 30 23:57:35 2023 GMT Not After : Jul 29 00:02:35 2024 GMT Subject: CN=F4DF989B47D5EA32359F616A57C716F667AE7649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:1d:dc:33:9a:40:9a:50:35:1d:65:67:a2: fc:d2:56:bf:18:92:e4:ea:50:ea:34:72:90:5f:9f: e4:c6:45:34:86:5f:4e:59:63:a4:f5:15:fd:0e:70: ac:8c:fa:cd:46:96:e8:eb:15:61:65:79:a6:f7:df: d0:08:8e:81:57:40:ed:07:fa:d8:e0:d6:f0:20:18: 03:2d:a5:c3:22:f5:03:12:a3:6e:07:e8:dd:fe:59: 54:17:93:0f:51:e8:8a:a7:bb:21:60:ce:6f:a4:2b: fe:54:bb:28:2e:31:8f:46:7a:c5:c3:bf:c6:d2:9f: 91:70:cb:28:58:57:d5:68:1d:70:5f:e6:66:ef:73: 1f:61:56:b1:e6:0c:eb:6b:54:60:c1:0f:62:5c:76: 11:f4:23:99:66:88:4a:94:c6:f0:4d:9f:40:35:37: 86:32:dd:c7:77:cb:6e:8b:36:76:18:25:5c:e1:6c: e2:de:f6:aa:51:2b:51:e1:58:63:34:61:1f:e8:55: 26:34:5d:20:d2:88:b6:be:fd:40:65:d4:85:f5:52: 4b:11:62:62:38:e6:d0:9e:80:55:72:4c:7e:38:1f: 4c:0e:90:88:b0:9c:4c:9b:06:44:19:22:11:62:a5: 70:22:26:03:37:ec:0e:95:90:bb:56:bf:7b:49:7b: 5b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DF:98:9B:47:D5:EA:32:35:9F:61:6A:57:C7:16:F6:67:AE:76:49 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32342d3234203d3e203436303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.72.0/24 Signature Algorithm: sha256WithRSAEncryption bc:ec:72:5f:4e:ec:b4:02:7d:3a:f6:78:96:85:9a:75:4b:c3: ef:7d:04:72:b8:4c:83:df:f1:0e:b2:14:ec:ee:c9:33:66:bb: 90:ad:c2:0c:3d:8f:ff:38:dd:ca:5b:4e:c6:54:b1:ce:82:dc: af:21:5b:1b:af:3e:b2:c1:7d:c1:f4:32:f3:b9:b0:eb:0f:03: 26:d0:36:dc:c8:0c:85:c7:79:81:82:01:ec:98:ab:2e:4c:d5: 3f:76:33:e3:0f:ba:36:20:43:f6:35:ae:85:9e:be:ee:1e:26: ea:dc:5e:5a:d4:2f:83:32:6c:46:c2:f8:59:21:c6:91:da:91: ed:9a:85:10:51:58:8c:11:66:e3:c9:48:37:dd:fd:64:0d:5e: 76:ae:ac:c5:c4:d2:7a:39:58:b3:bf:8c:5d:4d:4f:e2:24:5c: 5f:62:b2:26:af:1a:2d:23:2d:9b:c8:55:28:87:a9:4a:da:89: 1e:60:6f:e5:ae:83:40:7e:2e:69:69:0f:56:e6:d2:b8:63:62: 1b:be:24:5a:c0:51:00:0f:da:78:c8:ee:58:96:9c:f0:a5:e4: 8e:4f:08:86:49:bd:f9:05:ec:a0:c5:e6:9f:46:fa:69:17:6e: 6f:ac:d7:1e:fe:c7:16:b2:a9:22:17:ff:5f:80:6e:e2:e2:d5: a4:d2:22:9e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUEFUIFPHB9d7vj2Rz0yFnrOzmlfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yMzA3MzAyMzU3MzVaFw0yNDA3MjkwMDAyMzVaMDMxMTAvBgNV BAMTKEY0REY5ODlCNDdENUVBMzIzNTlGNjE2QTU3QzcxNkY2NjdBRTc2NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrh3cM5pAmlA1HWVnovzSVr8Y kuTqUOo0cpBfn+TGRTSGX05ZY6T1Ff0OcKyM+s1GlujrFWFleab339AIjoFXQO0H +tjg1vAgGAMtpcMi9QMSo24H6N3+WVQXkw9R6IqnuyFgzm+kK/5UuyguMY9GesXD v8bSn5FwyyhYV9VoHXBf5mbvcx9hVrHmDOtrVGDBD2JcdhH0I5lmiEqUxvBNn0A1 N4Yy3cd3y26LNnYYJVzhbOLe9qpRK1HhWGM0YR/oVSY0XSDSiLa+/UBl1IX1UksR YmI45tCegFVyTH44H0wOkIiwnEybBkQZIhFipXAiJgM37A6VkLtWv3tJe1uBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9N+Ym0fV6jI1n2FqV8cW9meudkkwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzAzMzJlMzEzMzM1MmUzNzMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeHSDANBgkqhkiG 9w0BAQsFAAOCAQEAvOxyX07stAJ9OvZ4loWadUvD730EcrhMg9/xDrIU7O7JM2a7 kK3CDD2P/zjdyltOxlSxzoLcryFbG68+ssF9wfQy87mw6w8DJtA23MgMhcd5gYIB 7JirLkzVP3Yz4w+6NiBD9jWuhZ6+7h4m6txeWtQvgzJsRsL4WSHGkdqR7ZqFEFFY jBFm48lIN939ZA1edq6sxcTSejlYs7+MXU1P4iRcX2KyJq8aLSMtm8hVKIepStqJ HmBv5a6DQH4uaWkPVubSuGNiG74kWsBRAA/aeMjuWJac8KXkjk8Ihkm9+QXsoMXm n0b6aRdub6zXHv7HFrKpIhf/X4Bu4uLVpNIing== -----END CERTIFICATE-----Generated at Wed Apr 17 01:24:59 2024 by rpki-client on console-ams.rpki-client.org