$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32332d3234203d3e203436303236.roa File: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (raw, json) Hash identifier: 0bRi0DX23u9GJ2/3fGwbPmcOfD3OT+Gmtarrrv+ll28= Subject key identifier: 8A:DD:4A:86:C0:23:99:58:44:81:37:59:C2:5F:08:0F:49:FD:D5:D1 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 2CFB943F40E39A910B1B82319FEC93BD878E973F Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32332d3234203d3e203436303236.roa Signing time: Mon 15 Jan 2024 02:00:00 +0000 ROA not before: Mon 15 Jan 2024 01:55:00 +0000 ROA not after: Mon 13 Jan 2025 02:00:00 +0000 asID: 46026 IP address blocks: 103.135.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fb:94:3f:40:e3:9a:91:0b:1b:82:31:9f:ec:93:bd:87:8e:97:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Jan 15 01:55:00 2024 GMT Not After : Jan 13 02:00:00 2025 GMT Subject: CN=8ADD4A86C023995844813759C25F080F49FDD5D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:1d:37:6f:b5:5f:bb:00:84:22:4d:ff:b8: db:c4:09:78:fa:ed:7b:89:45:83:c6:60:58:57:27: 41:af:99:e9:d1:c7:e6:c5:0e:2a:e3:77:c8:4a:8f: 2d:34:a6:8f:a3:08:1e:e0:2f:0d:0c:21:c8:2c:f6: 55:32:f3:15:42:0c:8e:6a:d8:d5:4c:50:91:bf:22: 39:58:a2:de:f4:4c:c1:ab:ce:f5:db:32:ae:10:14: 11:36:80:c0:46:b7:d6:f4:e0:9d:1c:2c:17:e5:cd: 51:33:ad:4c:e2:a8:db:c8:5a:30:0a:7d:11:27:95: 52:df:4c:f1:03:11:13:b1:76:4d:e2:59:6b:94:eb: 70:ca:b1:83:eb:9a:91:9e:2b:1e:50:6d:ce:cf:3e: ed:11:81:01:73:11:53:ee:e1:7d:93:95:53:02:39: 38:4e:6a:01:a1:80:db:f7:1b:25:b9:51:30:60:4e: e4:85:2d:e4:f9:a5:4c:a2:95:8e:cc:34:21:42:8a: a5:b9:54:6a:d8:69:3a:68:63:c7:5c:57:dc:7b:29: 4b:0a:22:9c:84:3f:8d:50:06:5d:39:f4:2d:40:05: 99:d6:03:ac:af:85:0d:8c:9f:87:fc:ee:40:be:fc: 9e:89:3d:a3:bb:a3:f0:05:72:95:87:9c:e9:1b:90: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DD:4A:86:C0:23:99:58:44:81:37:59:C2:5F:08:0F:49:FD:D5:D1 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37342e302f32332d3234203d3e203436303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.74.0/23 Signature Algorithm: sha256WithRSAEncryption 16:52:7e:74:0a:2f:c5:7b:68:23:7a:99:1e:5d:14:cf:d7:09: d4:a4:e4:50:8f:39:b6:21:26:81:28:3b:b9:b3:47:51:66:41: 1e:04:df:c4:c9:62:10:5d:d4:61:7d:63:08:ee:b9:1e:9a:15: 98:bc:ee:61:ac:74:8c:70:ad:c8:0a:25:40:63:e9:24:b9:36: aa:ba:a8:77:58:df:df:fa:4a:aa:b4:fc:39:5b:b0:4b:62:41: 50:32:e3:5e:1c:1f:b1:a7:08:c3:6f:c5:7d:c7:e0:83:18:2d: 54:7a:b5:0c:d4:a7:ef:53:c9:09:21:26:30:e7:21:66:3d:f9: 9c:27:02:af:4d:68:41:16:70:48:19:7f:0e:ae:00:4d:56:4a: 90:fb:63:3f:1f:57:ac:2f:d4:b1:0f:97:e6:f8:ef:31:c6:7b: da:85:da:f0:58:65:39:ea:69:49:63:90:a6:2c:cc:17:71:3f: 5d:fb:4c:9e:00:d2:93:d5:4b:63:77:20:48:86:9f:81:04:10: 34:8d:84:75:2e:5d:4e:01:f9:9e:b4:b8:c2:35:9e:aa:b6:f7: 5a:5e:cb:c6:87:51:3c:75:d3:10:52:de:bf:47:f7:e9:52:15: d7:07:b5:05:ff:96:7e:96:f3:5d:44:cd:d1:55:5a:25:42:68: 2e:51:c6:5c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULPuUP0DjmpELG4Ixn+yTvYeOlz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNDAxMTUwMTU1MDBaFw0yNTAxMTMwMjAwMDBaMDMxMTAvBgNV BAMTKDhBREQ0QTg2QzAyMzk5NTg0NDgxMzc1OUMyNUYwODBGNDlGREQ1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eh03b7VfuwCEIk3/uNvECXj6 7XuJRYPGYFhXJ0GvmenRx+bFDirjd8hKjy00po+jCB7gLw0MIcgs9lUy8xVCDI5q 2NVMUJG/IjlYot70TMGrzvXbMq4QFBE2gMBGt9b04J0cLBflzVEzrUziqNvIWjAK fREnlVLfTPEDEROxdk3iWWuU63DKsYPrmpGeKx5Qbc7PPu0RgQFzEVPu4X2TlVMC OThOagGhgNv3GyW5UTBgTuSFLeT5pUyilY7MNCFCiqW5VGrYaTpoY8dcV9x7KUsK IpyEP41QBl059C1ABZnWA6yvhQ2Mn4f87kC+/J6JPaO7o/AFcpWHnOkbkPe/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUit1KhsAjmVhEgTdZwl8ID0n91dEwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzAzMzJlMzEzMzM1MmUzNzM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeHSjANBgkqhkiG 9w0BAQsFAAOCAQEAFlJ+dAovxXtoI3qZHl0Uz9cJ1KTkUI85tiEmgSg7ubNHUWZB HgTfxMliEF3UYX1jCO65HpoVmLzuYax0jHCtyAolQGPpJLk2qrqod1jf3/pKqrT8 OVuwS2JBUDLjXhwfsacIw2/FfcfggxgtVHq1DNSn71PJCSEmMOchZj35nCcCr01o QRZwSBl/Dq4ATVZKkPtjPx9XrC/UsQ+X5vjvMcZ72oXa8FhlOeppSWOQpizMF3E/ XftMngDSk9VLY3cgSIafgQQQNI2EdS5dTgH5nrS4wjWeqrb3Wl7LxodRPHXTEFLe v0f36VIV1we1Bf+WfpbzXUTN0VVaJUJoLlHGXA== -----END CERTIFICATE-----Generated at Fri May 3 04:42:12 2024 by rpki-client on console-fra.rpki-client.org