$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa File: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (raw, json) Hash identifier: hmbofighT+Ro/Met01Dk6M1BGgJbv3f8eOGQ1A3WW84= Subject key identifier: 80:0B:1A:19:71:40:63:02:38:C7:03:4B:60:87:CF:EA:BE:5F:5D:85 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 2A1065DA448EDF39E6F683D3629EA5ADA49BB09D Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa Signing time: Mon 31 Jul 2023 00:03:05 +0000 ROA not before: Sun 30 Jul 2023 23:58:05 +0000 ROA not after: Mon 29 Jul 2024 00:03:05 +0000 asID: 139967 IP address blocks: 103.146.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:10:65:da:44:8e:df:39:e6:f6:83:d3:62:9e:a5:ad:a4:9b:b0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Jul 30 23:58:05 2023 GMT Not After : Jul 29 00:03:05 2024 GMT Subject: CN=800B1A197140630238C7034B6087CFEABE5F5D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cc:0c:89:35:2e:74:ac:3f:ea:22:ce:6f:c9: d2:5f:a4:f1:42:29:e8:a6:1e:a6:37:2f:80:16:f5: ef:b0:1c:93:ff:37:67:d1:f7:75:77:58:3e:22:73: 38:24:25:17:4d:c1:7b:9f:a1:82:3b:17:95:cc:0a: e0:14:54:9b:c9:9f:83:b3:44:11:15:6f:a5:b5:1e: fc:87:e4:b7:91:96:ad:f9:94:ec:96:5e:05:52:d7: 49:ee:56:19:8a:8a:66:9e:3b:5f:2e:d5:d4:c1:0a: 7a:5c:16:f5:46:e9:f7:d8:4d:ba:4e:10:ae:1f:a0: a4:c3:61:74:29:f1:48:df:dc:2f:2e:79:9d:9e:21: 74:cb:2b:07:cf:f1:91:3a:e8:1e:12:42:80:73:c1: 77:2e:34:15:0b:8d:1b:4c:5d:72:ac:6e:56:89:22: 10:9b:65:b8:c7:fb:f1:03:40:0b:cb:ed:22:1a:48: d3:3a:35:67:13:f1:c0:86:f2:eb:0e:a6:f8:49:90: 98:c1:28:9a:d9:f8:c5:ba:a4:8f:f8:55:e4:79:e9: 87:e7:ba:c7:f2:4a:9a:f4:c2:b5:85:b7:82:1c:b7: b4:cc:8d:db:55:1b:b7:ad:51:4d:58:7f:31:07:b3: 90:b5:9a:d7:78:16:e1:69:c0:11:57:c7:bd:c2:7e: b1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0B:1A:19:71:40:63:02:38:C7:03:4B:60:87:CF:EA:BE:5F:5D:85 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.184.0/23 Signature Algorithm: sha256WithRSAEncryption 97:4c:e6:4a:06:b3:87:06:cb:db:77:2e:ec:f5:bb:85:3a:3d: 20:d6:01:fc:d6:f8:d0:fa:29:1f:cd:7d:44:c1:4d:b8:c5:7c: f9:3d:52:8a:9e:56:d2:20:fe:91:f4:1f:2b:ed:14:08:49:aa: 5e:a8:22:0d:ec:83:5e:6c:50:51:14:e5:8f:10:ee:a5:4d:ca: a4:10:f8:3a:f6:95:9b:77:86:e0:09:38:e0:57:f3:90:55:86: 99:a7:74:22:71:05:68:3f:2a:2b:8d:c7:df:9e:84:93:0c:af: fd:76:e2:75:a0:c2:cd:3e:50:ec:b2:94:32:ba:bc:6c:87:d9: 75:22:3c:07:63:19:6a:f2:ae:3b:fe:70:9f:98:81:08:10:9e: 06:56:68:7f:68:fc:f9:de:47:c4:39:47:6e:85:78:6a:c9:f1: 74:40:47:8b:c7:53:70:7a:33:b0:80:30:ab:df:04:59:86:64: e4:e4:9a:ef:69:30:dd:3c:a7:da:6e:0a:b4:32:a3:31:a8:a7: b5:ca:18:90:60:62:74:4f:3d:de:e4:9f:a3:b9:c9:b7:c1:01: 83:a0:1f:02:86:fa:96:3d:1a:99:af:8f:f2:ed:08:f7:66:9d: 59:92:29:b3:03:3c:fc:60:9d:27:e3:2c:e3:60:32:cb:f1:e4: 50:fe:e5:b9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKhBl2kSO3znm9oPTYp6lraSbsJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yMzA3MzAyMzU4MDVaFw0yNDA3MjkwMDAzMDVaMDMxMTAvBgNV BAMTKDgwMEIxQTE5NzE0MDYzMDIzOEM3MDM0QjYwODdDRkVBQkU1RjVEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmzAyJNS50rD/qIs5vydJfpPFC KeimHqY3L4AW9e+wHJP/N2fR93V3WD4iczgkJRdNwXufoYI7F5XMCuAUVJvJn4Oz RBEVb6W1HvyH5LeRlq35lOyWXgVS10nuVhmKimaeO18u1dTBCnpcFvVG6ffYTbpO EK4foKTDYXQp8Ujf3C8ueZ2eIXTLKwfP8ZE66B4SQoBzwXcuNBULjRtMXXKsblaJ IhCbZbjH+/EDQAvL7SIaSNM6NWcT8cCG8usOpvhJkJjBKJrZ+MW6pI/4VeR56Yfn usfySpr0wrWFt4Ict7TMjdtVG7etUU1YfzEHs5C1mtd4FuFpwBFXx73CfrEBAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUgAsaGXFAYwI4xwNLYIfP6r5fXYUwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YzUzMjdmLTEwZmQtNGNmMC04 NTFjLTBjZmNkM2MzYzY5Ny8wLzMxMzAzMzJlMzEzNDM2MmUzMTM4MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM2Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkrgwDQYJ KoZIhvcNAQELBQADggEBAJdM5koGs4cGy9t3Luz1u4U6PSDWAfzW+ND6KR/NfUTB TbjFfPk9UoqeVtIg/pH0HyvtFAhJql6oIg3sg15sUFEU5Y8Q7qVNyqQQ+Dr2lZt3 huAJOOBX85BVhpmndCJxBWg/KiuNx9+ehJMMr/124nWgws0+UOyylDK6vGyH2XUi PAdjGWryrjv+cJ+YgQgQngZWaH9o/PneR8Q5R26FeGrJ8XRAR4vHU3B6M7CAMKvf BFmGZOTkmu9pMN08p9puCrQyozGop7XKGJBgYnRPPd7kn6O5ybfBAYOgHwKG+pY9 Gpmvj/LtCPdmnVmSKbMDPPxgnSfjLONgMsvx5FD+5bk= -----END CERTIFICATE-----Generated at Thu Apr 25 00:30:06 2024 by rpki-client on console-fra.rpki-client.org